1. General information
2. Data processed
2.1. We will process the following personal data:
(a) contact information, consisting of your name, email address and telephone number;
(b) payment information;
(c) information about your use of the Services;
(d) content posted, uploaded and/or contributed to the Services;
(e) technical data, which may include the URL you are accessing the Website from, your IP address, unique device ID, network and computer performance, browser type, language and identifying information and operating system; and
(f) location data.
2.2. We are unable to provide you with the Services in whole unless you provide us with the personal data above. The processing of the personal data above is necessary to enter into the agreement with us and is necessary to maintain the contractual relationship between you and us.
3. Purposes of processing
3.1. We will process your contact information:
(a) to administer your account and to enable the Services and integration with third-party services;
3.2. Provided that we have received your consent, we will also process your personal data above:
(a) to send you alerts or messages by email or otherwise, including to provide you with the marketing of our services;
3.3. We will process location data, content that you post, upload and/or contribute to the Services, information about your use of the Services and technical data:
(b) to improve and develop the Services or new services and to analyse your use of the Services;
3.4. We will also process your payment information:
4. Legal ground
4.3. When we deem it necessary, we process your personal data based on consent. If we consider that consent is required to process your personal data, we will ask for your consent by filling out the checkboxes when you sign up for the Services, such as for the processing of personal data described in section 3.2 (a).
4.4. We are also processing your personal data, such as your payment information described in section 3.4, to fulfil our legal requirement to store such personal data in accordance with the Swedish Bookkeeping Act.
5. Disclosure of personal data
5.1. We will share the content you upload and/or contribute to the Services to our customers as a part of providing the Services as described above. We may also share and disclose your personal data to payment service providers, service providers hosting the Website and providers helping us to collect, analyse and stitch the content uploaded to the Services to be able to provide the Services to you and to others.
5.2. When content is uploaded to the Services by a pilot, such will be shared and disclosed to third parties located outside the EU/EEA, for example, the recipients set forth in the table below. However, please note that the pilot has ensured that such content does not include any personal data. You can acquire further information regarding the transfer by contacting us at email@example.com.
DroneDeploy, Inc. USA
SZ DJI Technology Co., Ltd China
6. Responding to legal requests and preventing harm
We may access, preserve, process and share personal data regarding you in response to a legal request (like a search warrant, court order or a subpoena or the like, or a request for the exercise rights concerning personal data), or when necessary to detect, prevent and address fraud and other illegal activity, to protect ourselves, you and other users. Such processing of personal data will be based on the necessity to comply with applicable laws, and the personal data will be stored for as long as required by the legal obligation in question. We may also use any personal data we process for the purposes of establishing, defending and exercising legal claims (based on our legitimate interest) if this becomes necessary. If so happens, we will store the personal data for the duration of the matter, and for ten years thereafter.
7. Cookies, pixels, and other system technologies
We do not store your personal data longer than for what we have a legal ground to do. However, the retention period is based on a number of different factors, such as the length of a mission. Personal data related to a client is stored until the mission requested by a client is delivered. Content uploaded by a pilot is stored as long as the pilot has a registered account in connection to the Services.
The Services are not directed to children. However, if you are a parent or guardian of a person under the age of 13 (which is the age when a person, according to the Swedish act containing supplementary provisions to the GDPR, is considered able to provide its consent to the processing of its personal data) and you become aware of that your children’s personal data has been provided to us without your consent, please contact firstname.lastname@example.org to exercise your access, rectification, erasure, limiting of processing and objection rights.
10. Your rights
10.1. You have an absolute right to object to the processing of your personal data for direct marketing as described in section 3.2 (a) above. You also have the right to withdraw your prior given consent. The withdrawal of your consent does not affect the lawfulness of the processing based on the consent before its withdrawal, and we may continue processing your personal data based on other legal grounds, except for direct marketing.
10.2. You have the right to request access and further information concerning the processing of your personal data or request that we correct, rectify, complete, erase or restrict the processing of your personal data. You have the right to obtain a copy of the personal data that we process relating to you free of charge once (1) every calendar year. For any additional copies requested by you, we may charge a reasonable fee based on administrative costs.
10.3. If the processing is based on the legal grounds of consent or fulfilment of contract you have the right to data portability. Data portability means that you can receive the personal data that you have provided to us, in a structured, commonly used and machine-readable format, and have the right to transfer such data to another data controller, provided that this is technically possible.
11. Contact information
11.1. To exercise your rights, or if you have any questions regarding our processing of your personal data, please contact us at the following address: email@example.com or GLOBHE DRONES AB, Askrikegatan 11, 115 57 Stockholm. In your letter/email please state your full name and the information about your request. Note that you should sign the request to receive information on the processing of your personal data yourself.
11.2. If you have any complaints regarding our processing of your personal data, you may file a complaint to the competent data protection authority. You can find out more about the local data protection authorities under the following link: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
12. Change of control