Privacy policy

1. About This Policy

This Privacy Policy explains Greit AB (“Grepit” / “we” / “us” / “our”) collects, uses, and protects your personal information when you use our websites and other products and services (collectively, the “Services”).

Your privacy is important to us, and we are committed to being transparent with what Personal Data about you we process, why it is collected, and how we use it.

2. Information We Collect

When you use any Grepit’s Services, we collect Personal Data about you. This collection of Personal Data falls into three different categories.

1. Information you provide to us.
2. Information we collect automatically.
3. Information we receive from other sources.

2.1. Information You Provide to Us

To use some of our Services, there is certain information you may be required to provide to us.

• Other information you provide to us: When you contact customer support or otherwise communicate with us in any way, we will collect whatever information you choose to provide to us or that we need to resolve your question.

2.2. Information We Collect Automatically

Whenever you use our Services, we collect information about how you interact with them. This helps us provide, maintain, and improve our offerings. Depending on the Service you use, we may collect:

• Usage and Log Data: We collect data about your activity while using our Services. This includes how and when you interact with our Services. Log data may include information such as your device’s IP address, device name, operating system version, app configuration, the time and date of your use, and other diagnostic data.
• Cookies and Similar Technologies:
  We use cookies and similar technologies to enhance the functionality of our website and to understand how visitors interact with it. A cookie is a small data file that is stored on your device when you visit a website.

Cookies We Use

• Strictly Necessary Cookies
  These cookies are essential for the website to function properly. They allow us to save your preferences, such as cookie settings. If you disable these cookies, we will not be able to save your choices, which means you will have to reconfigure your preferences each time you visit the site.
• Third-Party Cookies (Google Analytics)
  We use Google Analytics to collect anonymous information about how visitors use our website, such as the number of visitors and which pages are most popular. This information helps us improve the website’s content and performance. These cookies do not collect any information that directly identifies you.

Your Choices

When you visit our website for the first time, you are given the option to consent to or decline the use of non-essential cookies. You can change your cookie preferences at any time through your browser settings or by visiting our cookie settings page.

For more information on how Google handles data in connection with Google Analytics, please refer to: https://policies.google.com/technologies/partner-sites

 

2.3. Information We Receive from Other Sources

Our Services use third-party services that may collect information identifying you. The use of third-party services helps us improve and understand how our Services are used, and in some cases, deliver targeted advertising. The information collected may be transferred and processed in countries and regions outside of your own.

Examples of third-party services we use include:

• Meta Pixel, which enables us to measure the effectiveness of our advertising and deliver relevant ads to you on Meta platforms (such as Facebook and Instagram). Meta Pixel may track your activity across different websites and link it to your Meta account.

3. How We Use Your Information

We use information about you to:

• Provide and maintain our Services,
• Gather analysis or information to improve our Services,
• Detect, prevent and address technical issues,
• Notify you about important notices.

4. How We Share Information

We keep your information confidential. However, we may share or provide access to collected information as necessary for the following purposes:

• Within our group: Information may be disclosed to any member of our group (subsidiaries, affiliates, sister companies, and our ultimate holding company). Members within our group follow practices consistent with this Privacy Policy.
• In the case of reorganisation: In the event of a reorganisation, sale, or merger, we may transfer your information to the relevant third party subject to applicable laws.
• With service providers: We may share your information with third parties to facilitate our Services, perform Services on our behalf, perform Service-related services, or assist us in analyzing how our Services are used. These parties are obligated not to disclose or use the information for any other purpose.
• When required by law: We may preserve, use, share, or disclose your information if required by law.

5. How Long We Keep Information

We keep different types of information for different periods of time. The retention periods are as follows:

• Payment Details: We retain payment and transaction information for a period of 7 years in accordance with applicable tax and financial regulations.
• Usage and Log Data: We retain usage and log data for a period of 12 months to analyse and improve our Services. After this period, we anonymize or delete this data.
• Cookies and Similar Technologies: Cookies and similar tracking technologies are retained for as long as necessary to provide the Services and for a period of 1 year. You can manage your cookie preferences through your browser settings.
• Legal and Compliance Information: We retain information as required by law or regulatory requirements. This includes information related to legal claims, compliance, and other legal matters, which is retained for the duration of the legal requirements.

6. How We Protect Your Information

Your privacy rights are of great importance to us, and we have implemented appropriate steps to safeguard your privacy. This includes employing various organisational, technical and administrative safeguards to protect your Personal Data from unauthorised access, destruction, loss, alteration or misuse. Unfortunately, it is impossible to guarantee absolute security for any data transmission or storage system, as no such system can provide a 100% guarantee.

7. Your Rights in Relation to Personal Data

You have choices regarding the collection, use and disclosure of your Personal Data. As a resident of the European Economic Area or the United Kingdom, you have the following rights in relation to your Personal Data:

• Right to information: You have the right to be informed about how your Personal Data is being collected, used, and processed.
• Right of access: You have the right to obtain information about the Personal Data we store about you, and to request a copy of that Personal Data.
• Right to rectification: You have the right to request the correction or update of any inaccurate or incomplete personal data we have about you.
• Right to erasure: You have the right to request the deletion of your personal data under certain circumstances, such as when it is no longer necessary for the purposes it was collected or if you withdraw your consent.
• Right to restriction of processing: You have the right to request the limitation of processing your personal data in specific situations, for example, if you believe the data is inaccurate or the processing is unlawful.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another organization if technically feasible.
• Right to object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to avoid automated decision-making: You have the right to avoid being subject to decisions based solely on automated processing, including profiling, which significantly affects you unless there is a lawful basis for such processing and appropriate safeguards are in place.

8. Children’s Privacy

The Services provided are not intended for individuals under the age of 18. We do not knowingly gather personally identifiable information from individuals under 18. If we become aware that a person under the age of 18 has provided us with Personal Data, we will promptly delete it from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take appropriate measures.

9. International Data Transfers

We may transfer and process your personal information in countries other than your own. These countries may have data protection laws that differ from those in your country of residence.

Whenever we transfer your Personal Data outside of the European Economic Area (EEA), we ensure that it receives an adequate level of protection by implementing appropriate safeguards as required by the General Data Protection Regulation (GDPR). These include:

• Adequacy Decisions: We may transfer your Personal Data to countries that have been deemed to provide an adequate level of data protection by the European Commission.
• Standard Contractual Clauses (SCCs): When we transfer Personal Data to countries without an adequacy decision, we use Standard Contractual Clauses approved by the European Commission, which provide safeguards for your Personal Data.
• Binding Corporate Rules (BCRs): For intra-group transfers, we may use Binding Corporate Rules, which ensure that all group companies provide an adequate level of protection for Personal Data.
• Additional Safeguards: We may implement additional contractual and technical safeguards to protect your Personal Data.

10. Contact Information

If you wish to make a request in relation to your rights, or if you have any questions or otherwise comments about this Privacy Policy, please contact us at: info@grepit.se.

If you are a resident in the European Economic Area, the “Data Controller” of your personal information is Grepit AB. You can contact us directly regarding the processing of your information by Grepit, by email at info@grepit.se, by visiting grepit.se, by phone at +46 920 46 80 00, or by post to:

Grepit AB

Aurorum 1C

977 75 Luleå

Sweden

 

11. Updates to this Privacy Policy

We may update our Privacy Policy from time to time. You will always find the up-to-date version of the Privacy Policy in the App or on our website, grepit.se. By continuing to use our Services after Privacy Policy changes go into effect, you agree to be bound by the revised policy.

 

This policy is effective as of 2025-04-29.