1. Introduction
Your privacy is important to us at Justr. This privacy policy therefore aims to describe to you how we gather, store, use and otherwise process your personal data when you use of our website, the Justr platform and our services. It also aims to inform you about your rights under the General Data Protection Regulation ("GDPR").
2. Data Controller
Humblebee AB, Reg. No 556909-7594, Kvarnsbergsgatan 2, 411 05 Gothenburg, through its business unit operating under the trademark Justr ("Justr", "we" or "us"), is the data controller for the processing of your personal data described in this privacy policy. As the data controller we are responsible for ensuring that your personal data is processed in a lawful manner in accordance with applicable legislation such as the GDPR.
3. What is personal data and processing
Personal data is any piece of information that can directly or indirectly be used to identify a natural person. Personal data includes name, phone numbers, e-mail addresses, postal addresses and much more. It also includes information that is encrypted or not directly associated with a natural person, such as IP-addresses or location data.
Processing of personal data means any operation which is performed on personal data, such as storage, collection, alteration or other forms of usage. All processing of personal data must be performed in accordance with the GDPR.
4. Our processing of personal data
Justr only processes your personal data for the purposes set out in this privacy policy. We base all of our processing on lawful grounds, ensuring that each purpose for our processing is supported by appropriate legal justification. This may include your consent, the performance of a contract with you, a legal obligation or our legitimate interest in processing your data when such interest outweighs your interest of protecting your personal data.
We gather your information for various purposes. You can find our full list of processing purposes, the types of personal data we process about you and other relevant details about our processing below.
4.1 To provide our services
| Purpose of the processing | Example of processing activities | Categories of personal data |
|---|---|---|
| The purpose of the processing is to provide you with our services and enable you to use our website / platform. | To provide machine buyers with a quotation, we use contact information to facilitate the quotation process between customer and provider. |
|
| Source | The information is gathered directly from you. | |
| Lawful ground | The lawful ground of our processing of your personal data is our legitimate interest of fulfilling the purpose of the processing (Article 6.1 (f) GDPR). | |
| Retention period | Retention time of personal data in Requests for Quotations sent by machine buyers is one year (365 days) after the data is submitted by the data subject. | |
| Recipients |
We share personal data with external service providers that we engage to support the delivery of our services. Examples of such providers include Auth0 for authentication and login services and Scrive for electronic signing of agreements. To provide website users with a cookie consent banner and ensure compliance with latest privacy laws, we’re using Cookie Script. They may also collect personal data, such as IP address. For more information, visit their Privacy Policy |
|
4.2 For statistics, analytics and improvement of our services
| Purpose of the processing | Example of processing activities | Categories of personal data |
|---|---|---|
| The purpose of the processing is to improve our services to provide you with a better user experience. |
|
|
| Source | Tools used to log usage of Justr.com | |
| Lawful ground | The lawful ground of our processing of your personal data is our legitimate interest of fulfilling the purpose of the processing (Article 6.1 (f) GDPR). | |
| Retention period | 30 days for all logs that contain personal data | |
| Recipients |
We use external services to store logs to analyze and debug potential technical exceptions. Those logs are stored might contain IP addresses from the visitor and are stored in a private network within Azure cloud services. For monitoring of services and reporting of anomalies, we use AppSignal. In some cases, logs sent here can contain IP addresses. For tracking of user behavoir on Justr websites, we are using Umami cloud service. A service that is “private by default” and is not collecting any personal information. |
|
4.3 For marketing purposes
| Purpose of the processing | Example of processing activities | Categories of personal data |
|---|---|---|
| The purpose of the processing is to provide you with tailored and exclusive offers based on how you use our services. |
|
|
| Source | Social media plattforms and occationally directly from you | |
| Lawful ground | The lawful ground of our processing of your personal data is our legitimate interest of fulfilling the purpose of the processing (Article 6.1 (f) GDPR). | |
| Retention period | As long as we have the your consent | |
| Recipients |
Our use of advertising platforms and lead generation campaigns is subject to the privacy policies and terms of service of those platforms. For more information on how these platforms process your data, please review their respective privacy policies: |
|
4.4 For contact with customer support
| Purpose of the processing | Example of processing activities | Categories of personal data |
|---|---|---|
| The purpose of the processing is to provide you with support and customer service. This can for example be done by answering questions regarding our services. |
|
|
| Source | The information is gathered directly from you. | |
| Lawful ground | The lawful ground of our processing of your personal data is our legitimate interest of fulfilling the purpose of the processing (Article 6.1 (f) GDPR). | |
| Retention period | As long as you are doing business with Justr | |
| Recipients | Customer support cases are mainly handled with email. And Justr is using Microsoft 365 suite for emailing with current and presumptive costumers and stakeholders. | |
4.5 For protection of website
| Purpose of the processing | Example of processing activities | Categories of personal data |
|---|---|---|
| The purpose of the processing is to protect our solution against non-human form posting |
|
|
| Source | The information is gathered directly from you and the browser you use when visiting our web site | |
| Lawful ground | The lawful ground of our processing of your personal data is our legitimate interest in protecting our website from abusive automated access (Article 6.1 (f) GDPR) and your consent when posting a form on the website (Article 6.1 (a) GDPR). | |
| Retention period | The data collected by Google reCAPTCHA is subject to Google's own data retention policies. For more information, see Google’s Privacy Policy | |
| Recipients |
We use reCAPTCHA (provided by Google LLC) to protect our website from spam and abuse by automated software (bots). reCAPTCHA analyzes user behavior (such as mouse movements, time spent on the page, and IP address) to determine whether the user is a human or a bot. The information collected is transmitted to Google and processed in accordance with Google’s Privacy Policy and Terms of Service |
|
5. Security Measures
We use several organizational and technical security measures to ensure that your data is being processed in accordance with the GDPR. Some examples of our security measures are encryption and pseudonymisation. We have also implemented routines that limit the access to your personal data strictly to authorized.
6. Recipients
We only share your personal data with recipients in accordance with this privacy policy and in ways that align with the GDPR. These recipients include companies who act as our data processors who only process personal data on our behalf and in line with our instructions. These processors help us with activities such as authentication and login services and electronic signing of agreements. We have entered data processing agreements with all of our processors to ensure that they only process data in accordance with our instructions and that they have implemented sufficient security measures to safeguard your personal data.
In some cases, we also share your personal data with recipients who are independent data controllers of the relevant data, such as advertising platforms. These recipients process your personal data for their own purposes.
For information regarding what recipients receive your data in relation to certain processing purposes, please see the relevant processing purpose under Section 4 of this privacy policy.
7. Internalional transfers
In some cases, we are obliged to transfer your data to countries outside of the EU/EEA. Such transfers are only made when we have sufficient guarantees that your personal data will be processed in a way which upholds the data protection levels provided in the EU/EEA. To ensure this protection, we only transfer your personal data to countries that the EU-commission has recognised as providing an adequate level of data protection or by using appropriate safeguards for the nature of the processing. These appropriate safeguards can be the EU Standard Contractual Clauses for international data transfers which are in some cases accompanied by additional security measures.
8. Your rights under the GDPR
According to the GDPR, you have certain rights regarding the processing of your personal data. These rights are described under this Section 8. If you would like further information regarding these rights, please visit www.imy.se/en.
8.1 Right to information
You have the right to be given information regarding your personal data which is being processed by us. You can exercise this right by requesting a copy of the personal data that we process about you. We will provide such a copy to you at your request.
8.2 Right to rectification
You have the right to contact us, the data controller, to request that any incorrect information that we store about you is corrected. This right also gives you the opportunity to supplement the information we store about you with additional information that you consider to be missing and that are relevant to our processing.
8.3 Right to erasure
You have the right to request that we delete personal data that we process about you. This right is, however, not absolute, as the conditions in Article 17 of the GDPR must be met for you to exercise this right. We will delete your data at your request when it is no longer needed for the purposes which it was collected, when our processing is based on your consent or if any of the other criteria in Article 17 of the GDPR are met.
8.4 Right to limitation of processing
In certain cases, you have the right to demand that our processing of your personal data is limited. This means that we will flag your personal data to ensure that it is only used for certain limited purposes.
8.5 Data portability
In certain cases, you have the right to be given and transfer your personal data to another data controller. When reasonable, we will assist you with this process.
8.6 Right to object
In certain cases, you have the right to object to our processing of your personal data. This right applies when we are processing your data based on our legitimate interest to do so. If you object to our processing, we may only continue with such processing if we can demonstrate that we have legitimate reasons to do so which overrides your interests and your rights.
You always have the right to object to your personal data being used for direct marketing. To do this, press the unsubscribe link in the mail and follow the instructions, or contact us at info@justr.com
8.7 Right to withdraw your consent
When we process your data on the lawful ground of your consent, you always have the right to withdraw such consent with effect for the future. If you withdraw your consent, we will no longer process your personal data for purposes which are based on your consent.
9. Cookies
On our website, we use cookies to enhance your user experience. For information regarding our use of cookies, please see our cookie declaration in the .
10. Updates to privacy policy
This privacy policy may be updated from time to time, and the latest version will always be found on our website. We recommend that you regularly visit our website to keep informed about any updates to this privacy policy.
11. Our contact information
E-mail address: info@justr.com
Visiting address:
Kvarnbergsgatan 2
411 05 Gothenburg
Postal address:
c/o Humblebee AB
Box 2220
403 14 Göteborg