Política de privacidad

At Leya we are committed to protecting and respecting your privacy. We want you to feel that we respect and take great care when we process your personal data. This Privacy Policy describes how Leya AB, reg. no. 559338-6872 (also referred to as “Leya”, “we” or “us”) will process your data when you interact with us, use our services on our platform (the “Leya Platform”), which includes our software, tools, developer services, data, documentation and our website (“Services''). It also describes your privacy rights. More information about your rights, and how to exercise them, is set out in Section 3.  Leya is the controller for the processing of your personal data when Leya determines the purpose and means of the processing. Leya also act as a processor or service provider on behalf of a Leya subscriber. 

‍

1 Personal Information We Collect

1.1 We collect information that alone or in combination with other information in our possession could be used to identify you (“Personal Information”) as follows:

‍

1.1.1 Personal Information You Provide: We may collect Personal Information if you create an account to use our Services or communicate with us.

‍

1.1.2 Communication Information: If you communicate with us, we may collect your name, contact information, and the contents of any messages you send (“Communication Information”).

‍

1.1.3 Payment information: When you purchase or subscribe to our Services, we may collect your billing information, such as your credit card number, expiration date, and billing address, or use a third-party payment processor to process your payments (“Payment Information”).

‍

1.1.4 Personal Information We Collect Through Our Social Media Pages: We have postings on social media sites like YouTube and LinkedIn (“Social Media Pages”). When you interact with our Social Media Pages, we will collect Personal Information that you elect to provide to us, such as your contact details (“Social Information”). In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.

‍

1.1.5 Personal Information We Receive Automatically From Your Use of our Services: When you visit, use, and interact with our Services, we may receive certain information about your visit, use, or interactions (“Technical Information”), including the following:

‍

1.1.5.1 Log data: Information that your browser automatically sends whenever you visit the Site (“Log Data”). Log Data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interacted with the Site.

‍

1.1.5.2 Usage data: We may automatically collect information about your use of our Services, such as the types of content that you view or engage with, the features you use, and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, computer connection, IP address, and the like. But will never collect or store any data directly related to your uploaded documents, queries, or other usage that could contain confidential or sensitive information in a way that doesn’t follow our Security Policy, which can be found on our website at https://www.leya.law/legal. 

‍

1.1.5.3 Device information: Includes name of the device, operating system, and browser you are using. Information collected may depend on the type of device you use and its settings.

‍

1.1.5.4 Cookies: A cookie is a small string of information that websites you visit transfer to your computer for identification purposes. Cookies can be used to follow your activity on the website and that information helps us to understand your preferences and improve your website experience. Cookies are also used for such activities as remembering your access credentials for our Services. In addition to the cookies used by Leya and our service providers, some cookies are placed by third parties such as Google (for analytics, described below). You may agree to the use of cookies in our Services for the following purposes:

• Essential Cookies: these are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. 
• Performance and Analytics Cookies: these include Google Analytics and they keep track of the pages that you visit and the content you access, so we can determine which content is most popular and improve the performance of our website. These cookies primarily record aggregate and anonymous statistical data, but do capture a minimal amount of identifiable information such as order IDs.
• ‍Functional Cookies: they remember the choices you make, such as language options or the region you are in. These cookies help to make your visit more personal and are deleted automatically when you close your browser or the session expires.

You can turn off all cookies, in case you prefer not to receive them. You can also have your computer warn you whenever cookies are being used. For both options, you have to adjust your browser settings (such as Chrome, Safari, Firefox, Edge, or other browser). There are also software products available that can manage cookies for you. Please be aware, however, that when you choose to reject cookies you may limit the features and functionality of our Services.

1.1.6 Customer support information: When you contact us for customer support, feedback, or inquiries, we may collect your name, email address, phone number, and any other information you provide us or that we request from you to assist you or resolve your issue (“Support Information”).

1.1.7 Analytics: We may use various online analytics products that use cookies to help us analyze how users use our Services and enhance your experience when you use them.

1.1.8 Online Tracking and Do Not Track Signals: Our website currently does not respond to “Do Not Track” (“DNT”) signals and operates as described in this Privacy Policy whether or not a DNT signal is received.

‍

2 How we use Personal Information

2.1 The following disclosures are intended to provide additional information about the categories of Personal Information we collect (as defined above), the type of data, how we use each category of Personal Information.These disclosures do not limit our ability to use or disclose information as described above.

‍

2.2 We do not sell your Personal Information.

‍

2.3 We may use Personal Information for the following purposes:

‍

2.3.1 To provide, administer, maintain, improve and/or analyze the Services;

‍

2.3.2 To provide you with support services; 

‍

2.3.3 To communicate with you including by discussing with you options to use the Leya Platform;

‍

2.3.4 To develop new features and services;

‍

2.3.5 To prevent fraud, criminal activity, or misuses of our services, and to ensure the security of our IT systems, architecture, and networks; and

‍

2.3.6 To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our Affiliates, you, or other third parties.

‍

2.4 Aggregated Information. We may aggregate Personal Information and use the aggregated information to analyze the effectiveness of our Services, to improve and add features to our Services. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with third parties, publish such aggregated information or make such aggregated information generally available. We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy.

‍

We will collect, use, and store your Registration Information, User Information and Settings and login Information to register and create an account on our Leya Platform, to connect the end user’s device and the respective Service, and provide you with services.

‍

3. Rights of the Data Subject 

3.1 Right to lodge a complaint. If you have objections or concerns about how we process your personal data, you have the right to contact, or lodge a complaint with, the Swedish Authority for Privacy Protection, which is the supervisory authority for our personal data processing.

‍

3.2 Right to information and access. You can request information regarding whether we are processing your personal data and ask to receive a copy of your personal data (known as a data subject access request or DSAR) together with certain additional information regarding how we process your personal data.

‍

3.3 Right to rectification. If you believe that your personal data is inaccurate or incomplete, you can ask for it to be corrected or completed.

‍

3.4 Right to object. You have the right to object to the processing of your personal data which is based on our legitimate interest. If we cannot demonstrate compelling and legitimate grounds to continue processing the personal data, we must cease the processing. You always have the right to object to our processing of your personal data for direct marketing purposes.

‍

3.5 Right to restriction. In some cases, you have the right to request a restriction of the processing of your personal data, which means that the data is marked so that, in the future, it can only be processed for certain limited purposes. This is possible, for example, if you have objected to the processing, if you have disputed the accuracy of your personal data, or if the processing is unlawful. By requesting a restriction of our processing, you have the right to stop us from processing your personal data for a certain period of time for other purposes than, for example, to defend legal claims.

‍

3.6 Right to erasure. In some cases, you may request that your personal data be erased. The right to erasure applies, for example, to personal data that is no longer necessary for the purpose for which it was collected, or to personal data that is processed on the basis of your consent if you choose to withdraw your consent. In certain circumstances, we may not be able to delete your personal data, for example, if your personal data is needed to comply with a legal obligation, if it is still needed for the purpose for which it was collected, or if our interest in continuing to process the data outweighs your interest in having it deleted.

‍

3.7 Right to transfer your personal data (data portability). If we process your personal data to fulfill a contract or on the basis of your consent, you may, in certain cases, be able to obtain the personal data for use elsewhere, e.g. by obtaining a copy of it in a machine-readable format and transmitting it to another data controller.

‍

3.8 Right to withdraw consent. In those cases where we process your personal data based on your consent, you have the right to withdraw your consent at any time. When you withdraw your consent, we will stop any processing of personal data which is based on your consent.

‍

4 Disclosure of Personal Information

4.1 In certain circumstances, we may share your Personal Information with third parties without further notice to you, unless required by the law, including without limitation in the situations below:

‍

4.1.1 Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Information with vendors and service providers, including providers of hosting services, cloud service providers, and other information technology services providers, event management services, email communication software and email newsletter services, advertising and marketing services, and web analytics services. Pursuant to our instructions, these parties will access, process, or store Personal Information in the course of performing their duties to us.

‍

4.1.2 Business Transfers: If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively a “Transaction”), your Personal Information and other information may be shared in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or Affiliate as part of that Transaction along with other assets.

‍

4.1.3 Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Services, or the public, or (v) protect against legal liability.

‍

4.1.4 Affiliates: We may share Personal Information with our “Affiliates,” meaning an entity that controls, is controlled by, or is under common control with Leya. Our Affiliates may use the Personal Information we share in a manner consistent with this Privacy Policy.

‍

4.1.5 Other Users: certain actions you take may be visible to other users of our services.

‍

5 Third-party Websites and Services

Our Services may contain links to other websites not operated or controlled by Leya, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.

‍

6 Requests

6.1 To exercise your rights, please contact us at privacy@leya.law. We reserve the right to limit our facilitating such requests to that which is required by applicable law.

‍

6.2 In order to protect your Personal Information from unauthorized access or deletion, we may require you to verify your identity before we will process any request to know or delete Personal Information. If we cannot verify your identity (and, where applicable, proof of residency) to our satisfaction, we will not provide or delete your Personal Information.

‍

6.3 You may submit a request to exercise your rights through an authorized agent. Such an agent must present signed written authority to act on your behalf and must be able to verify your identity (and, where applicable, proof of residency) to our satisfaction.

‍

6.4 Rest assured that we will not discriminate against you for making any such request. Your right to access and delete your Personal Information is important to us, and we will take reasonable steps to verify and process your request promptly. 

‍

6.5 Please be aware that even if we delete your Personal Information, certain residual data may still remain in our backups or archives for a limited period in accordance with our data retention policies and applicable laws.

‍

If you have any questions or concerns about this process or our data deletion practices, please feel free to contact us at privacy@leya.law.

‍

7 Security

7.1 We take significant and appropriate steps to protect your Personal Information in an effort to prevent loss, misuse, and unauthorized access, disclosure, alteration and destruction. We use appropriate technical and organizational measures to protect your personal information which may include: physical access controls, encryption, intrusion detection and network monitoring depending on the nature of the information and the scope of processing.

‍‍‍

For more information regarding our security measures, please view our Security Policy which can be found on our website at https://www.leya.law/legal. 

‍

8 Data Retention and Deletion

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, unless a longer retention period is required or permitted by law. We may also retain your personal information for legitimate business interests, such as to comply with our legal obligations, resolve disputes, and maintain our records. When we no longer need your Personal Information, we will delete it or anonymize it in accordance with our data retention policies and applicable laws, or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

‍

9 Information to be Provided where Personal Data are Collected from the Data Subject

9.1 When personal data is obtained directly from the data subject (e.g., when creating an account, communicating with us, or purchasing services), Leya AB should provide the following additional information:

• The identity and contact details of the data controller (Leya AB).
• The purposes of the processing for which the personal data are intended, as described in Section 2 of the Privacy Policy.
• The legal basis for the processing, including any legitimate interests pursued by the data controller.
• Any recipients or categories of recipients of the personal data (e.g., third-party service providers, affiliates).
• The retention period or criteria used to determine the retention period of the personal data.
• The existence of the data subject's rights to request access, rectification, erasure, restriction of processing, objection to processing, and data portability, as well as the right to lodge a complaint with a supervisory authority
• The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing.

9.2 When personal data is not obtained directly from the data subject (e.g., through social media pages, analytics tools), Leya AB should provide the following additional information:

• The categories of personal data concerned (as described in Section 1 of the Privacy Policy).
• The source from which the personal data originate and, if applicable, whether it came from publicly accessible sources.
• The purposes of the processing for which the personal data are intended, as described in Section 2 of the Privacy Policy.
• The legal basis for the processing, including any legitimate interests pursued by the data controller.
• Any recipients or categories of recipients of the personal data (e.g., affiliates).
• The retention period or criteria used to determine the retention period of the personal data.
• The existence of the data subject's rights to request access, rectification, erasure, restriction of processing, objection to processing, and data portability, as well as the right to lodge a complaint with a supervisory authority.
• The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing.

10 International Users

By using our services governed by this Privacy Policy, you understand and acknowledge that your Personal Information will be transferred from your location to our facilities and servers in the EU/EEA.

‍

11 Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do we will post an updated version on this page, unless another type of notice is required by applicable law or contractual agreement. By continuing to use our service or providing us with Personal Information after we have posted an updated Privacy Policy, or notified you by other means, you consent to the revised Privacy Policy.

‍

12 Contact Information

‍If you have any questions about our Privacy Policy or any other privacy-related issue, please contact us at privacy@leya.law.

‍