Privacy Policy

1. We, Sustainable mPact AB (“we” or “us”), a company incorporated in Sweden with company registration number 559071-9141 and with the address Östra Eriksbergsgatan 73, 417 62 Göteborg, Sweden, take the handling of Personal Data seriously.
   Therefore, we have created this Privacy Policy.
2. The purpose of this policy is to explain how and why we collect and process data about you as a user of our services and how we assure that your personal integrity will not be violated. Please read this Privacy Policy carefully.
3. Sustainable mPact AB is the Personal Data Controller (Controller) as regards your Personal Data. This policy shall apply for all websites, applications and other services that are operated or provided by Sustainable mPact AB (“the
   Services”)
4. By using the Services, you accept the terms of this Privacy Policy. Please do not use the Services if you do not accept the terms of this Privacy Policy.

1. Personal Data
   Any information that can be linked, directly or indirectly, to a physical living person.
2. Processing of Personal Data
   All processing measures of Personal Data, including the collection, registration, storage or deletion of Personal Data.
3. Personal Data Controller
   The person, company or other body that determines the purpose and means of personal data processing (this can be determined alone or jointly with another person/company/body) and who is ultimately responsible for the processing being in
   compliance with applicable laws and general data protection regulation.

We collect different kinds of Personal Data:

1. Data supplied by you
   You supply us with data about yourself when you log into our Services, create an account, use your account or use our Services. The data supplied by you, includes your user name, your email address, your photos and your communication with
   others when using our Services. Some of the data you supply us with, will also be shown to, or shared with, other users of our Services.
2. Data supplied by others
   Besides information supplied by you, we also receive information regarding you from other persons.
   This includes:
   1. Other users of our Services
      Other account holders and users can supply us with information regarding you when they use our Services. For example, we may collect data regarding you from other users if they contact us regarding you. If a user wants to access
      contacts in that user’s list of friends or other person using the Services, and you are one of them, we may also use your Personal Data to enable the other user to communicate with you.
   2. Social media
      It is possible to use your social media login information (for example Facebook login details or Google account number) to create an account for our Services or login in to our Services. By doing so, you do not have to memorize an
      additional user name and password and can also share some of the data from your account on social media with us.
3. Data obtained when you use our Services
   When you use our Services, we collect data as regard which functions of our Services you use, how you have used them and which units you use to access our Services.
   1. User data
      We obtain data regarding your activities when using our Services, for example how you use them (for example date and time of login, used functions, searches, web sites which have been shown to you and web addresses which you have
      accessed) and how you interact with other users (for example other users you connect to and interact with, time and date for your communication and number of messages you send and receive).
   2. Unit data
      We obtain data from and about the unit you use to access our Services, including information regarding hardware and software, for example IP addresses, type of browsers, versions and languages, OS, time zones, identifiers which are
      associated with cookies and other technology which can identify your units or browsers (for example MACC addresses).
4. Cookies
   We may use cookies in our Services. Cookies are small files which save data on your mobile phone, computer, television or other units which you are using and which recognizes you on websites, services, units and/or browser sessions.
   Cookies can also send information to us.

   Cookies have many important functions, such as:

   1. Remembering your login details – so you do not have to log in every time you use our Services.
   2. Helping us understand, which parts of our Services you visit, which functions you use and how long you use them. If we understand this, we can adapt our Services and give you a better user experience.

The main reason for using your Personal Data is to deliver and improve our Services.

The data is mainly used:

1. For creating and administering your account.
2. To enable us to supply our Services to you, to enable us to supply user-friendly Services and to enable you to find and communicate with other users.
3. To enable us to modify the appearance of our Services on the unit you are using, this in order to improve your user experience.
4. To communicate changes in our general terms and conditions, policies to you (or to communicate other information regarding our services to you).
5. To prevent, limit and investigate all kinds of misuse of our Services, including the creation of false profiles, harassments, attempt to access other users’ accounts, use which violates our general terms and conditions or other illegal
   activities.

1. If necessary for the purpose of this Privacy Policy, your Personal Data may be transferred to other companies within the Sustainable mPact group of companies, i.e. companies which are owned (wholly or partly) by Sustainable mPact AB.
2. In case our business, or parts thereof, is sold or otherwise transferred to a third party, Personal Data may be transferred to such third party as well.
3. We may disclose your Personal Data if we are obligated to do so by law, by a court order, a decree or the like, or in aiding in a criminal investigation or other legal investigation (in Sweden or abroad). We may also disclose to applicable
   authorities, at request, your Personal Data If you are suspected of a crime in connection with your use of your account and/or our Services.
4. We may transfer your Personal Data to a third country, i.e. a country outside the EU/EES. When doing so, we will enter into all necessary agreements and take all measures which are required by law.
5. We may request your consent as regards the sharing of data with third parties. In such case we will let you know, why we would look to share such data.
6. We will not share, sell or transfer, or otherwise disclose of your Personal Data, unless specified in this Privacy Policy.

We will store your Personal Data for as long this is necessary for the purpose of the processing thereof. This means that different data may be stored for different periods of time. Some data will need to be stored for a longer time, for
instance if we need to do this in order to be able to comply with statutory liabilities. We will only store your data for as long as this is necessary in order for us to comply with contractual and statutory liabilities. We may also store your
data for special purposes, for instance in connection with the defense of third party claims.

We will process your data, as described above, on the following legal grounds:

1. To provide you with our Services
   The main reason why we process your Personal Data is that we need to do so in order for us to be able to fulfill the agreement we have with you. When you use our Services, we use your data to maintain your account and profile and to make it
   visible to other users.
2. Justified interest
   We may use our Personal Data when we have a justified interest to do so. For instance, we analyze user behavior in our Services since this will enable us to improve our Services. We also process data for administrative and legal purposes.
3. Consent
   In certain situations we will ask for your consent as regards the use of your data for specific purposes. You may, at any time, revoke such consent by contacting us at the address stated in sub-clause 10 of this Privacy Policy.

You have the following rights as regards your Personal Data:

1. You have the right to gain access to the Personal Data we process regarding you (right to transparency).
2. You have a right to have your Personal Data rectified or deleted.
3. You may request that we limit the processing of your Personal Data is limited if you, for instance, consider the processing to be illegal.
4. You have the right to raise an objection to prevent us from the further processing of your Personal Data if there are no justified reasons for the processing of the data.
5. You have the right to obtain certain Personal Data in digital format or to have the data transferred to another company (data portability).
6. You may revoke your consent at any time.
7. You may contact us at any time, if you want to know whether we process your Personal Data, or not.
8. If we have not responded to your request within a month, you have the right to file a complaint to the supervisory authority in charge and seek legal remedy.

We secure your Personal Data by the communication of our guidelines on integrity and security to our employees. We maintain a high security level within the whole company. We will take all physical and technical measures to protect your
Personal Data. However, please note that no web site, internet transfer, computer system or wireless connection is completely secure.

If you have any questions or thoughts regarding our Privacy Policy or data processing, or if you would like to file a complaint regarding our processing of our Personal Data, please contact us at privacypolicy@sustainablempact.com or by sending a letter to us at the address:
Sustainable mPact AB
Östra Eriksbergsgatan 73
417 62 Göteborg
Sweden