Privacy Policy
Thank you for choosing to use Gritify!

We want to give you the best possible experience when you use Gritify and make sure you enjoy our service. We process your personal data when you use Gritify. Gritify respects your privacy and want you to feel safe with our processing of your personal data. In this policy you find information about what personal data is collected how, for what purposes, and for how long the personal data is processed. All our processing of your personal data is done in accordance with EU regulation 2016/679 (GDPR) and other applicable personal data legislation.

Personal Data Controller
Gritify AB, reg. no. 559205-9199, is responsible for the processing of your personal data that takes place when you use Gritify. If you have questions regarding this policy, the processing of your personal data or want to exercise your rights in accordance with this policy you are welcome to contact us via e-mail at info@gritify.io or by mail at:

Rotebergsvägen 1A
192 78 Sollentuna
Sweden

Whose personal data we collect and why
We collect personal data about you who use Gritify, regardless of whether you do so as a candidate looking for your next job or as a representative of a recruiting company. When you use Gritify we process your personal data to be able to provide and adapt our service.

Where and for how long do we process your personal data
All our processing of your personal data is done within the EU/EEA. We will process your personal data for as long as you are a registered user of Gritify. If you terminate your user account at Gritify we will delete your personal data within 30 days, if we are not required to store them by law.

Please note that if you, as a candidate, has allowed your data to be shared with a recruiting company (see “Who can access your personal data” below) that company will process the data for recruitment purposes as the personal data controller. In such a situation, we take on the role of personal data assistant. Such data contained in Gritify and processed by us as a personal data assistant will not be deleted if you close your account, this is due to the fact that the recruiting company controls the processing. Please contact the recruiting company (or us if you wish to be referred to the recruiting company) if you want this data to be deleted as well.

What personal data do we collect from you
Gritify collects the personal data that you share with us, which for candidates includes:

  • Name, company name, email and other contact information that you provided when registering.
  • Previous experiences, skills and preferences that you have specified in your profile.
  • Information that you provide when sending, receiving or interacting through messages with other users of Gritify's service.
  • Information you have provided to us when contacting us.

Previous experience and skills that we may supplement your profile with through generally available sources.

If you use Gritify as a representative of a recruiting company, we only process your name, information about your company, e-mail address and other contact information that you provided when registering.

Legal basis for the processing of your personal data
The legal basis for the processing of your personal data when you use Gritify as a candidate is the fulfillment of agreements (i.e. the terms of use you accept when you register as a candidate at Gritify).

If you are a representative of a recruiting company, we have entered into an agreement with the company you represent, i.e. our customer. In that case, the legal basis is our legitimate interest in enabling our customer to use Gritify in accordance with the agreement.

We can only offer you our service if you share the information required to create a user account. Other information is optional, but without it, Gritify's functionality or your experience with Gritify may be degraded.

Who can access your personal data
Regardless of whether you use Gritify as a candidate or a representative of a recruiting company, your personal data will as a starting point only be processed by us. However, your personal data will also be processed by the suppliers and subcontractors we use to provide Gritify to you, for example for storing information. These suppliers and subcontractors are companies which, in their capacity as personal data assistants, only have the right to process the personal data they receive from us on our behalf and in accordance with our instructions. These suppliers and subcontractors only process your personal data within the EU/EEA as well.

By using Gritify as a candidate, your data may be shared with representatives of a recruiting company who finds your profile interesting. Before this happens, however, you as a candidate will always receive a request in Gritify and have the opportunity to approve or decline the recruiting company to access your personal data. If you decline the request, your personal data will not be shared with the recruiting company. If you approve the request, the personal data you provided in your candidate profile in Gritify will be shared with the recruiting company. When the representative of the recruiting company receives the data, the recruiting company will process your personal data in its capacity as personal data controller and is therefore responsible for ensuring that all processing carried out by the company is done in accordance with GDPR and other applicable personal data legislation. The recruiting company may retain the data in Gritify, export the data or take other measures with the data within the framework of its recruitment process. To the extent that the recruiting company continues to use Gritify for the recruitment, we will process this information in our capacity as personal data assistant. Any questions regarding the recruiting company's processing of your personal data are referred to the recruiting company. Gritify can provide reference to the recruiting company upon contact.

In the event that we are facing a potential investment, sale or transfer of all or part of our business or assets, or are to take other similar corporate law measures, we may need share our users’ personal data to the investor/acquirer. To the extent possible, we will anonymize the data or otherwise restrict its sharing. In the event of sharing our users’ personal data, the legal basis is our legitimate interest in taking such action.

Your data may be shared with companies within our group in order to provide Gritify to you. In addition to what is stated in this privacy policy, we will not share, transfer, sell or otherwise disclose your personal data except when we have first received your approval, are obliged to do so as a result of a legal obligation, or for some other reason has the right to do so in accordance with applicable laws and regulations.

Your rights
According to GDPR, you have a number of rights in relation to your personal data. To exercise your rights, please contact us at the above contact information. Please note that the rights are not absolute, which means that every request may not mean that we take action regarding your personal data.

Right of access your personal data (register transcript)
You have the right to receive confirmation from us whether we process personal data about you and in that case have access to a copy of the personal data we process about you via a free register extract, including information about our personal data processing.

Right to rectification
You have the right to have incorrect or incomplete personal data about you corrected or supplemented. You can also in some cases request that the processing of your data be restricted.

Right to be forgotten
In certain circumstances, you have the right to have all or some of your personal data deleted or anonymized so that they no longer identify you, provided that the processing of your personal data is not necessary for us to fulfill a legal obligation or to establish, assert or defend legal claims.

Right to data portability
In some cases, you have the right to obtain your personal data in a structured, generally used and machine-readable format or to have it transferred directly from us to another personal data controller.

Right to object
You have the right to object at any time to the processing of your personal data based on our legitimate interest.

Changes to our privacy policy
Gritify is constantly evolving and we may make changes to this policy. An updated version of this privacy policy will then be communicated via Gritify.

Supervisory authority
If you believe that we have failed in our handling of your personal data, you can report this to the Swedish Authority for Privacy Protection using the contact information below:

Phone: 08-657 61 00
E-mail: imy@imy.se
Website: www.imy.se
Fax: 08-652 86 52
Integritetsskyddsmyndigheten
Box 8114
104 20 Stockholm