Privacy Notice

Last updated on September 5, 2023

This Privacy Notice applies to you if you use our Service, if you are a business partner or supplier, or if you use this website, and even if you communicate with us via email, or if you otherwise interact with us through other platforms.

If you are an existing customer, business partner or supplier of ours, further details about how we use your Personal Data will be set out in your contract with us.

Definitions:

• Personal Data means information relating to a living individual (a ”Data Subject”) who is, or can be, reasonably identified from information, either alone or in conjunction with other information.
• Customer is the business that holds a Qualtive account.
• Customer User is an individual that provides feedback via a Customer into the Qualtive service.
• Visitor: you are a visitor to our website (qualtive.io).
• Customer Service is the service offered by our customers to the Customer User. The Qualtive Service is embedded into their service offering.

Who we are, and your personal data

For the purpose of your interactions with Nightshift Habits AB, 559288-0479, Sweden, (Nightshift Habits, Qualtive, ‘we’, ‘us’, ‘our’), we are a Data Controller when we are using personal data collected to improve and secure the service, and to enable us to work together with our business partners, service providers (‘Third Parties) and consultants. We are a Data Processor when we are a supplier of the Qualtive Service to our Customers.

If you are a Customer User, Qualtive is a user-friendly feedback tool that our Customers embed in their Service (that you are visiting and/or using). Qualtive provides a direct feedback channel to the development team of our Customer. The Qualtive Service offers emoticons to symbolise how you are feeling about the Customer Service, and a free-text box to add contextual information in the feedback.

For each Customer User a unique ID is created in Qualtive, which enables feedback to be grouped by id. In this way the feedback data is pseudonymised for Qualtive. We cannot see who you are. However, if additional information provided in the free-text box includes specific personal data, e.g. your name, your social security number, it maybe possible for Qualtive to link back the visitor ID to a specific individual.

Why does Qualtive need your personal data?

Qualtive uses your personal data to manage and provide a quality Service, to ensure that the content is presented in the most effective manner for you and your device, and to allow you to participate in interactive features of our Service. Additionally, we use Personal Data to keep the Service safe and secure, administer our Service for internal operations, including troubleshooting, data analysis (including traffic data analysis) and testing.

Qualtive may access the User’s account and feedback data and undertakes to keep the collected data confidential and not to use it for other purposes than providing the Service.

How long will we store your personal data?

Qualtive will only store your Personal Data for as long as it is required for the performance of contractual obligations with their customers, to make its services available to you. Qualtive will also retain your Personal Data for additional periods if applicable laws require it.

Deletion of personal data used by AI

• It is our customer who decides how long personal data is stored in Qualtive for the use of AI is retained.
• The customer can select that Qualtive deletes all personal data used by AI as of immediate effect.
• Upon termination of a customer contract with us, we will delete all personal data used by AI after 3 months.
• If a customer defaults on subscription payments, Qualtive will delete all personal data used by AI after 6 months.

How do we protect your personal data?

We implement security measures commiserate to the risk assessed on processing of your Personal Data. We maintain appropriate organisational, technical and contractual safeguards to protect against loss, misuse or unauthorised access, disclosure, alteration or destruction of Personal Data. Access to your Personal Data is restricted using the ‘need-to-know’, ‘need-to- access’ principle. Our service providers adhere to internationally recognised security standards and your Personal Data is stored on secure servers.

To find more on how personal data is protected, check the links to the Privacy Notices of online services we use to deliver the Qualtive service in the following section.

With whom we may share your Personal Data?

We may in some situations share your Personal Data with third parties such as business partners, suppliers, vendors, consultants, agencies, customers, supply and service providers (‘Third Parties’). We only share Personal Data where it is relevant and necessary for us to perform the activities described in this Privacy Notice.

Below is a list of services we use to deliver the Qualtive Service.

We do use third-party service providers outside of the European Economic Area (the “EEA”) which means that we will transfer your Personal Data to countries outside the EEA. If these transfers are to a country for which the EU Commission has not issued an adequacy decision, Nightshift Habits uses the EU standard contractual clauses to contractually require that your Personal Data receives a level of data protection consistent with the EEA.

What are your rights as a data subject?

If we use your Personal Data for the activities mentioned in this Privacy Notice, you may request:

• further details about how we use your Personal Data, including receiving a copy of your Personal Data
• that we correct, update or erase your Personal Data
• that we restrict the use of your Personal Data
• object to us using it, or that we use it for direct marketing and/or automated decision making, including profiling
• that we transfer your Personal Data to you or a Third Party (data portability)

If we use your Personal Data specifically based on our legitimate interests, you may at any time object to us using your Personal Data based on this legal basis. Please note that these rights are subject to certain exemptions and may not all be available in the country in which you are based. This might be due to obligations imposed upon us, such as other legislation requiring us to retain the Personal Data, protection of the rights and freedoms of others, or the like. You will be informed if this is the case.

How to exercise your rights
If you wish to exercise your rights, you can contact us by sending an email to gdpr@qualtive.io. If you have any queries that cannot be clarified as a result of internal dialogue with us or you wish to file a complaint, you can contact the Swedish Authority for Privacy Protection at the Swedish Data Protection Authority.

Updates to this Privacy Notice

Any changes to this Privacy Notice will be made on this page and the date of the latest update is shown in the header section.