Which Personal Data is Processed
For visitors to our websites:
Imba collects information when you visit our websites. We do this to understand how the websites are used and to improve their content and appearance. The information collected is primarily non-identifiable data, the type usually sent by browsers when a website is visited. In certain cases, your IP address may be considered personally identifiable information, which we process to monitor the use of our services.

Data processed includes:

• Type of browser
• Type of operating system
• IP address
• Language preference
• Referring website
• Time of visit

If you use a form on the websites to contact us:

• Name
• Email address
• Phone number

For our existing customers:

Imba processes information about you to fulfill our agreements, deliver services and products, and for communication purposes.

Data processed includes:

• Company name
• Company registration number
• Customer number
• Address
• Phone number
• Email address
• Which services, reports, agreements, and products the customer is connected to, and the billing of these.

If we have multiple contacts within your company, we also process personal data about them:

• Name
• Job title
• Phone number
• Email address
• Address
• Which services, reports, agreements, and products the contact person is connected to.

For those attending one of our events:

If an event is organized by Imba, we process information about you as a participant to send you information before, during, and after the event.

Data processed includes:

• Name
• Job title
• Phone number
• Email address
• Company or organization

Photography and video recording may occur at our events, and in such cases, personal data in the form of images and/or video are processed.

For those applying for a job with us:

Data processed includes:

• Name
• Phone number
• Email address
• Date of birth
• Job applied for
• CV & cover letter

Legal Grounds for Processing Your Personal Data
Imba bases the processing of your personal data on several legal grounds.

We process your personal data to enter into and fulfill our contractual obligations. For example, to send the correct reports to the right people, invoice, and communicate with the parties involved in a project. We also process your personal data to follow up on business transactions and agreements.

In some cases, we process your personal data based on a legitimate interest. For example, to contact you with offers, conduct sales activities, and follow up after a contract has ended.

In certain cases, Imba has a legal obligation to process your personal data. This includes, for example, complying with accounting laws.

In exceptional cases, Imba processes your personal data based on consent. Examples include when we publish photos and videos on our social media in connection with our events where you as a participant are identifiable, when you subscribe to our newsletter, or contact us via a contact form on our website.

Who Has Access to Your Personal Data
Your personal data will be processed by Imba. In addition, your personal data may be shared with trusted third parties that process personal data on our behalf. These companies act as data processors. For example, your personal data is processed by data processors managing our billing and auditing, as well as by IT and system providers delivering technical infrastructure or other technical services.

Imba and our suppliers and partners primarily process your personal data within the EU/EEA. If your personal data is processed outside the EU/EEA, Imba will ensure that such transfers and processing are carried out securely and in accordance with applicable law.

How We Protect Your Personal Data
Imba has ongoing security measures in place to protect your personal data. We secure databases and internal systems with firewalls, passwords, and, in some cases, two-factor authentication. Only a few users have direct access to databases, and we monitor internal systems for signs of intrusion attempts and similar activities.

How Long We Store Your Data
Imba never retains your personal data longer than necessary to fulfill the purposes stated in this privacy policy. The exception is if we need to retain the data longer to comply with other legal requirements or to protect our legal interests, such as in the case of ongoing legal proceedings.

Your Rights
As a registered individual, you have, under certain conditions, the right to request deletion or correction of your data. You also have the right to object to Imba’s processing and withdraw any given consent. To contact us regarding your rights, the easiest way is to use the contact form on our website or send an email to info@imbaseo.se.

Can a Data Processing Agreement Be Made with Imba?
Yes, we have a standardized data processing agreement as an annex to our General Terms and Conditions, which applies to all customers purchasing services from us. Contact us at info@imbaseo.se to access it.

Changes to the Privacy Policy
Imba may change the privacy policy at any time and will notify you with reasonable notice when a change is forthcoming.