“Hypertype use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.”
PRIVACY NOTICE
Last updated: 2023-01-31
GENERAL
Your privacy is very important to Hypertype AB, reg. no. 559368-6750 ("Hypertype", “we”, “our” or “us”). Our mission is that you feel comfortable with us processing your personal data. The purpose of this Privacy Notice (“Privacy Notice”) is to explain how we ensure that your personal data is processed in compliance with applicable legislation.This Privacy Notice applies to you who use our services as a business customer (user) or are the recipient/sender of emails from/to our users and other individuals included in e-mails. This Privacy Notice also applies to our newsletter subscribers, if you are communicating with us such as inquiring about our services by email or otherwise, and/or if you navigate, or, interact with our website https://hypertype.co/ (“Website”).
DATA CONTROLLER
Hypertype is the data controller for the processing of your personal data and is thus responsible for ensuring that the processing of personal data complies with applicable legislation. You can find our contact details in the end of this Privacy Notice.
FROM WHERE DO WE COLLECT YOUR PERSONAL DATA
Users:We receive the personal data we process directly from you as part of the process of authenticating Hypertype and giving us access to your data in your Gmail business account.Your personal data will also be collected from Google through the integration with your business Gmail account and when you provide personal data as part of an email message when you use our service.We may also process your personal data from your employer/the legal entity that you represent or your colleagues if they are using our services and you have sent emails to them (provided that this function is enabled by you). We do not collect personal data from any other sources.Recipients of communications and others:We receive the personal data we process about you from our users:If they receive emails from you to their Gmail business account and are using our service;if they send a response to you and are using our service; orif your personal data is included in the correspondence between the user and a recipient/sender of an e-mail message.Website visitors:We receive your personal automatically from you as a Website visitor when you navigate through and/or interact with our Website.We receive your personal data directly from you when you sign up to receive newsletters on our Website.Contacting us (Users, recipients of communications and others, Website visitors and/ or others)We receive your personal data directly from you if you provide your personal data through our Website, e-mail, telephone, chat, our social media business accounts or by other means.
OUR PROCESSING OF PERSONAL DATA
Information about our processing of personal data is provided in the tables below, including information about why we process your personal data, what personal data we process to achieve those purposes and for how long we retain your personal data for each specified purpose.To provide our service to users (users, recipients of communications and others)
4.2.1 Facilitate user log-in to our service and to set up the service for our users
Purpose of the processing:We need to process certain personal data about you as a user and your communications in order to give you access to our service and to set up the service for you as a user.In order to provide the service to the user, personal data belonging to recipients of communications and other individuals included in e-mail messages may be processed.
Categories of personal data:
Only users:User’s permission to read email messages.
Users, recipients of communications and others:Contact details and work related data such as your name, job title and position, name of organization and business e-mail address.Other personal data included in communications sent and received by the user through the user’s Gmail account, such as content (body) and subject line, message size, date and time the communication was sent and received.
Legal basis:Legitimate interest as we assess that our interest in providing our services to our users outweighs your interests or fundamental rights and freedoms requiring protection or personal data.
Retention period:The personal data is retained for the duration of the contractual relationship assuming that you have not uninstalled our service or deleted your e-mails manually.
4.2.2 Provide our service Copy-cat
Purpose of the processing:We need to process certain personal data about you as a user and your communications to automatically calculate, match and present suggested answers that match the question based on historical emails.This information may be shared with your colleagues if you both work for the same employer and both have enabled this function to improve the proposed copy-cat responses.In order to provide the service to the user, personal data belonging to recipients of communications and other individuals included in e-mail messages may be processed.
Categories of personal data:Only users:User’s permission to read email messages.
Users, recipients of communications and others:Contact details and work related data such as your name, job title and position, name of organization and business e-mail address.Other personal data included in communications sent and received by the user through the user’s Gmail account, such as content (body) and subject line, message size, date and time the communication was sent and received.
Legal basis:Legitimate interest as we assess that our interest in providing our services to our users outweighs your interests or fundamental rights and freedoms requiring protection or personal data.
Retention period:The personal data is retained for the duration of the contractual relationship assuming that you have not uninstalled our service or deleted your e-mails manually.
4.2.3 Provide our service Auto-generate
Purpose of the processing:We need to process certain personal data about you as a user and personal data that may appear in the body of your received and opened e-mail message in order to present a proposed response to you as a user.In order to provide the service to the user, personal data belonging to recipients of communications and other individuals included in e-mail messages may be processed.
Categories of personal data:
Only users:User’s permission to read email messages.If the user has selected a tone in their response, we will process such selection.
Users, recipients of communications and others:Contact details and work related data such as your name, job title and position, name of organization and business e-mail address.Personal data included in the body of an email that the user has received and opened in order to create a response by using our service auto-generate.
Legal basis:Legitimate interest as we assess that our interest in providing our services to our users outweighs your interests or fundamental rights and freedoms requiring protection or personal data.
Retention period:The personal data is retained for the duration of the contractual relationship assuming that you have not uninstalled our service or deleted your e-mails manually.
4.2.4 Direct marketing via e-mail and text messages including individually targeted direct marketing (only users)
Purpose of the processing:If you are a user, we process your personal data for marketing purposes, including for the purpose of marketing segmentation. Our marketing measures may consist of digital newsletters, information from us about our and other group companies’ products and services with which we have a collaboration, special offers and invitation to events.Individually targeted direct marketingIf you wish to receive individually targeted direct marketing in your professional role via your business e-mail and/or text messages to your business mobile number, which is personalised based on your preferences, you may consent to such targeted marketing. Targeted marketing may entail, for example, that we analyse your use of our services and products. Your personal data may be collected through the use of cookies and similar technologies for individually targeted marketing.
Categories of personal data:Contact details and work related data such as your name, job title and position, name of organization, business industry, business telephone number and business e-mail address.Demographic information such as business address.Browsing habits and visit history such as which pages you have visited on our Website, IP-address and the duration of the visit.
Legal basis:Legitimate interest as we assess that our interest in sending direct marketing concerning our and other group companies’ products and services, special offers and invitation to events, including segmented marketing to you in your professional role outweighs your interests or fundamental rights and freedoms requiring protection of personal data. We ensure that the regulatory requirements for marketing via automatic systems are fulfilled.Consent is the legal basis for processing of personal data for the purposes of individually targeted direct marketing.
Retention period:If the processing is based on legitimate interest, your personal data is stored and used throughout the the contractual relationship and up to two (2) years after the contractual relationship ends assuming that you have not objected to our direct marketing before that.If you have provided your consent, we will process your personal data for the purpose you consented to for up to two (2) years assuming that you have not objected and/or revoked your consent regarding our direct marketing before that.We may request to renew your consent within this period of two(2) years assuming that you have not objected and/or revoked your consent regarding our direct marketing before that.If you have renewed your consent, we will process your personal data for the consented purpose for a period of two (2) additional years.
Website functionality, analytics and subscription of our newsletter (Website visitors)
4.3.1 To ensure basic functionality and prevent misuse of our Website
Purpose of the processing:To be able to ensure the Website’s basic functionality and to prevent misuse or inappropriate use of our Website.
Categories of personal data:Device data such as IP-address, information about your computer, mobile device, time zone, operating system and browser type including settings.
Legal basis:Legitimate interest. When processing personal data in the form of cookies which is necessary for the functioning of the Website, we assess that our interest in being able to ensure our basic functionality and to prevent misuse of our Website outweighs your interests or fundamental rights and freedoms requiring protection of personal data.
Retention period:Please see our Cookie Policy for more information on retention period
4.3.2 To analyse the use of our Website
Purpose of the processing:We analyse and process your personal data inlcuding your behavior to gain an understanding of our visitors and how our visitors use our Website in order to further improve and develop our Website. For these purposes, we also use third party tracking services that employ to collect aggregated data about visitors to our Website. For more information about our use of cookies and similar technologies, please read our Cookie Policy.
Categories of personal data:Usage data and behaviour on web site such as browsing habits and visit history (e.g. which pages you have visited on our website and the duration of the visit).Device data such as IP-address, information about your computer, mobile device, time zone, operating system and browser type including settings.
Legal basis:Consent. When processing personal data in the form of non-necessary cookies in order to analyse and improve the use of our Website we base the processing on your consent.
Retention period:Please see our Cookie Policy for more information about for how long we process your information for this purpose.
4.3.3 Subscribers to our newsletters
Purpose of the processing:If you have signed up on our Website to receive newsletters from us, we will provide you with direct marketing to you via email and text messages about our services that we offer.
Categories of personal data:Contact details such as you name, telephone number and email address.Legal basis:Consent.
Retention period:If you have provided your consent, we will process your personal data for the purpose you consented to for up to two(2) years assuming that you have not objected and/or revoked your consent regarding our direct marketing before that.We may request to renew your consent within this period of two (2) years assuming that you have not objected and/or revoked your consent regarding our direct marketing before that.If you have renewed your consent, we will process your personal data for the consented purpose for a period of two(2) additional years.
When you contact us (Users, recipients of communications and others, Website visitors and subscribers)
When you contact us through our Website, email, telehone, chat or on social media, etc.
Purpose of the processing:
To communicate with you and administer the communications when you contact us with an inquiry regarding our service, other request or concerns, through our Website, e-mail, telephone, chat, our social media business accounts or by other means.
Categories of personal data:
Contact details such as your name, e-mail and mobile number.Additional personal data provided by you in your correspondence with us.
Legal basis:Legitimate interest as we assess that our interest in being able to communicate with you outweighs your interests or fundamental rights and freedoms requiring protection of personal data.
Retention period:Personal data is processed for as long as your matter is being handled and thereafter for up to [three (3) months].
RETENTION OF PERSONAL DATA
We will only retain your personal data for as long as it is needed for the purposes, we collected the personal data and as described in this Privacy Notice. When we no longer need your personal data we will remove the personal data from your systems and databases, including any back-ups. More specific retention periods are provided in the tables above under the heading “Retention period”.
WITH WHOM DO WE SHARE YOUR PERSONAL DATA?We may share your personal data with reliable external parties who process personal data on our behalf and according to our instructions. These external parties act as data processors and can, for example, be IT providers. We may also need to disclose personal data at the request of public authorities or to other parties in the context of court proceedings or similar. In the tables below, you will find information about which external parties we may disclose personal data to and which categories of personal data will be disclosed in such case.We may share your data with the following data processors:Categories of personal data that are shared:Google cloudContact details and work related data such as your name, job title and position, name of organization and business e-mail address.O t h e r p e r s o n a l d a t a i n c l u d e d i n communications sent and received by the user through the user’s Gmail account, such as content (body) and subject line, message size, date and time the communication was sent and received.FirebaseContact details and work related data such as your name, job title and position, name of organization and business e-mail address.Personal data included in the body of an email that the user has received and opened in order to create a response by using our service auto-generate.ElasticsearchContact details and work related data such as your name, job title and position, name of organization and business e-mail address.O t h e r p e r s o n a l d a t a i n c l u d e d i n communications sent and received by the user through the user’s Gmail account, such as content (body) and subject line, message size, date and time the communication was sent and received.
WHERE IS YOUR DATA PROCESSED?
We process your personal data in the EU/EEA. If we would need to transfer your personal data to a country outside of the EU/EEA, we will implement appropriate technical and organisational safety measures prior to the transfer to ensure that the transfer takes place in accordance with applicable data protection legislation.
YOUR RIGHTS
Your right to access, rectification, erasure and restriction
You have the right to request:Access to your personal data. This means that you have the right to request access to personal data that we hold about you. You also have the right to be provided, at no cost, with information about which personal data we are processing about you. We have the right to charge a reasonable administration fee if you request further copies. If you make a request by electronic means, e.g., via email, we will provide you with the information in commonly used electronic format.Rectification of your personal data. At your request or on our own initiative, we will correct, anonymise, delete or complete data that we know to be inaccurate, incomplete or misleading. Also, you have the right to complete any incomplete personal data if something relevant is missing.Erasure of your personal data. You have the right to request that we erase your personal data if there is no compelling reason for us to continue processing the data. Compelling reasons for use to continue processing may be:Processing is necessary for the right of freedom of expression and information,Processing is necessary to comply with a legal obligation,Processing is necessary for reasons of public interests in the area of public health,Processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes orProcessing is necessary for the establishment, exercise or defence of legal claims.
Your personal data will be erased if none of the circumstances above are applicable and if:
The personal data is no longer needed for the purpose for which we collected them,We process your personal data based on your consent and you withdraw your consent,You object to us processing your personal data which is based on a legitimate interest assessment, and we have no compelling interests that overrides your interests or rights and freedoms,We have processed the personal data unlawfully, orWe have a legal obligation to erase the personal data.Right to restrict processing. This means that we temporarily restrict the processing of your data. You have the right to request restriction when:you consider your data to be inaccurate and you have requested rectification as defined in paragraph 9.1.1 b), while we establish the accuracy of the personal data,the processing is unlawful, and you do not want the data to be erased,as the personal data controller, we no longer need to process the personal data for our processing purposes, but you need them to be able to establish, exercise or defend a legal claim, oryou have objected to processing as defined in paragraph 9.2.1, while waiting for our assessment of whether our legitimate interests override yours.We will take all reasonable measures possible to notify everyone who has received personal data as stated in Section 7 above if we have rectified, erased or restricted access to your personal data after you have requested us to do so. At your request, we will provide you with more information about the recipients of your personal data.Your right to object to processingYou have the right to object to the processing of your personal data if our processing is based upon legitimate interest or performance of a task carried out in the public interest (see Section 4 above). If you object to such processing, we will only continue to process your data if we have compelling reasons for doing so that override your interests or rights and freedoms or if the processing is necessary for the establishment, exercise or defence of legal claims.If you do not wish that we use your personal data for direct marketing purposes, you always have the right to object to such processing by contacting us. We will cease to use your personal data for that purpose when we have received your objection.
Your right to withdraw consent
If we process your personal data based on your consent as the legal basis, you always have the right to withdraw your consent. You can do this at any time by contacting us. Our contact details are found in the end of this Privacy Notice.Your right to data portabilityYou have right to data portability when we process your personal data by automated means and when the legal basis for the processing is your consent or performance of a contract.Right to data portability means that you have the right to receive the personal data we process about you in machine-readable format which allows you to transfer these personal data to another data controller. You may also request us to transfer the personal data directly to another data controller.Your right to complain to the supervisory authority
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten, IMY) if you are not satisfied with our processing of your personal data.
WE PROTECT YOUR PERSONAL DATA
We are committed to ensuring that you always feel comfortable when providing your personal data to us. We have therefore implemented both technical and organisational security measures, including access restrictions and regular internal controls, to best protect your personal data against, for example, unauthorised access, alteration or loss. Should a data breach that materially impacts you or your personal data, e.g., entailing risk of fraud or identity theft, occur, we will contact you to explain what has happened and to provide you with advice on how you can mitigate any potential adverse effects of such data breach relevant for you.
COOKIES
We use cookies and similar technologies ("cookies") on our website in order to, inter alia, improve, develop and maintain our website and to improve your experience with us including to simplify and adapt our website to your needs and preferences. In this Privacy Notice, we inform you about how we process your personal data when you visit our website. If you would like to know more about our use of cookies, please refer to our Cookie Policy https://www.cookiebot.com/en/privacy-policy/.
CHANGES TO THIS PRIVACY NOTICE
When we make changes that are not purely linguistic or editorial, you will be notified of the changes within a reasonable time prior to the changes taking effect. If you do not agree to the changes, you have the right to object to the processing before the changes take effect. We have the right to change this Privacy Notice at any time. The latest version of the notice will always be available on our website.
HOW TO CONTACT US
If you have any complaints or questions about how we use your personal data, please do not hesitate to contact us:
Hypertype AB, company registration number 559368-6750
Address: Malmskillnadsgatan 32, 111 51 Stockholm, Sweden.
E-mail: Info@hypertype.co
Telephone: +46707824368 Website: https://hypertype.co/
