1. Introduction

We are happy that you have chosen to use our services and would like to thank you for taking the time to read through this Privacy Policy thoroughly. We would like to begin with a summary explaining why we have created this policy. Our fundamental objectives are to

• Give a brief introduction to personal data and Amiqa Tech and its users’ responsibilities to create a well-functioning and safe Solution and experience.
• Explain why we handle certain kinds of personal information
• Ensure that you understand what information we gather and what we do with this information
• Show you how we work to protect your rights and your integrity.

Our goal with this policy is that you, after having read it, will feel secure that your integrity is respected and that your personal data is treated correctly. Therefore we also work continuously to ensure that our treatment of personal data complies in its entirety with current legislation, especially the General Data Protection Regulation (GDPR).

Unless otherwise defined herein, all terms beginning with a capital letter that are defined in the General Terms and Conditions (GTC) shall have the same meanings herein as therein unless expressly stated otherwise.

We recognize the importance of your privacy and the need for transparency in how we process your personal data. This Privacy Policy (the “Privacy Notice”) outlines the personal data we collect and process in connection with the services accessible at https://www.amiqa.io (the “Solution”) and the services provided through the Solution (collectively referred to as “Services”).

At Amiqa Tech AB (referred to as “we,” “our,” or “Amiqa Tech”), we are committed to safeguarding your privacy. By accessing and using our Services, you acknowledge that we collect and process your personal data in accordance with this Privacy Notice. This Privacy Notice is incorporated into and forms an integral part of our Terms of Use for the Solution. All capitalized terms not defined in this document have the meaning assigned to them in the Terms of Use.

2. Summary of Key Points

This section provides a summary of key points from our full Privacy Notice but is not a replacement for the complete information.

– Who We Are: Amiqa Tech AB, based in Stockholm, Sweden, is the controller responsible for processing your personal data.
– Third Parties: This Privacy Notice applies only to our activities, not those of third-party providers, even if we link to their services.
– Data We Collect: We collect personal data from you, your organization, third parties, or automatically through your interaction with our Services.
– Legal Basis: We process your data to provide our Services, comply with legal obligations, and for legitimate business purposes.
– Data Sharing: We share your data with trusted third parties for service provision or when legally required.
– Retention: Personal data is kept only for as long as necessary for the purposes outlined in this policy.
– Your Rights: You can access, correct, delete, or object to the processing of your data. Contact us at hello@amiqa.io to exercise your rights.
We will only process personal data if we have a lawful basis for doing so, which may include:
– Contractual Necessity: Processing data to fulfill our contract with you (Article 6(1)(b) GDPR).
– Legitimate Interests: Processing for purposes such as improving services and ensuring security, where such interests are not overridden by your rights (Article 6(1)(f) GDPR).
– Legal Obligation: Processing data to comply with legal obligations (Article 6(1)(c) GDPR).
– Consent: If you provide explicit consent (Article 6(1)(a) GDPR).

Amiqa Tech (the “Company”) protects its customers’ personal integrity through its’ high value of confidence originating from each Customer, whilst processing your data. Therefore, Amiqa Tech believes transparency is an important factor when working with matters related to personal integrity. Accordingly, Amiqa Tech has adopted this Privacy Policy to ensure that the Customer has complete access to the insight needed to establish such confidence. Furthermore, Amiqa Tech’s way of processing your data, is described in detail below.

This Privacy Policy shall in the first instance apply to individuals who are users of our Platform and from whom we collect and process personal data (also referred to as our “Users” or  “Data Subjects”). Herein, we are specifically referring to our Customers in terms of companies or Authorized Users at said companies which may consist of hotels, resorts and similar venues. Different parts of this Privacy Policy may also be relevant to you depending on your relationship with AMIQA TECH. All in all, this policy is relevant for persons who 

• are users of our products and services
• visit our website or our social media channels
• otherwise communicate with us, for example through our customer service

3. Who is Responsible for Processing Your Data?

Amiqa Tech AB, located in Stockholm, Sweden, is the data controller responsible for processing your personal data. If we provide links to third-party websites, content, or services, please note that their privacy policies govern how your personal data is collected and processed. We encourage you to review those policies.

A Data Controller is a legal person or other entity that determines the purpose and means for the processing of personal data. A corporation is a Data Controller regarding personal data it has for its benefit concerning its employees, customers, partners, users, and others. 

We, Amiqa Tech, are the Data Controller and therefore accountable by applicable legislation, for the processing that occurs with your data, within the scope of our services. 

Contact Information:

Amiqa Tech AB

Stockholm, Sweden

Email: hello@amiqa.io

4. What Personal Data Do We Collect?

Personal Data You Provide:
– Account Information: Name, email, phone number, job title, organization details, and any information provided when you create or manage an account or communicate with us.
– Payment Information: In cases of paid services, billing information, payment details, addresses, and transaction records.

Data from Other Users:
– Information provided by other users affiliated with your organization.

Automatically Collected Data:
– Device Information: IP address, browser type, device identifiers.
– Usage Data: Pages viewed, access times, and navigation paths.
– Cookies: Data collected through cookies (see Section 11 for details).

Third-Party Sources:
– Data from payment processors, CRM platforms (e.g., HubSpot), or other software used for our services.

We collect the following personal data:

Information you provide to us. The type of personal data that the Customer provides to Amiqa Tech are typically generated through its entering into agreements, creation or update of account details, or through means of communication with Amiqa Tech, as well as, information that the Customer leaves in respect thereof, which exhaustingly represents the following: Name, Contact Details, IP–number, Session Cookies and other information that the Customer provides.

Information we collect through your use of the Solution. Amiqa Tech may collect data deriving from the use of the Solution if necessary to offer you full use of the Solution and our services in general.

Information collected from third parties. Amiqa Tech solely collects information about the Customer from third parties who have collected the data with your consent, or who may share the information with us on other legal grounds. If you detect any information we have that has been collected from third parties without your consent, please inform us immediately.

What is personal data?

Personal data consists of all information that, directly, or indirectly, together with other information, can be connected to a living (physical) person. A non-exhaustive list with examples of personal data consists of, among others:

• Name
• Personal ID number
• Email-address
• IP-address
• Phone number

The processing of personal data includes every action connected to the use of the personal data, regardless of whether such an action is performed automatically or not. This means that the following actions, among others, are included:

• Collection
• Registration
• Use
• Alteration
• Storage
• Disclosure by transmission
• Deletion

5. Legal Grounds for Processing Your Personal Data

We process your personal data only when we have a valid legal basis to do so, including:

– Contractual Necessity (Article 6(1)(b) GDPR): To fulfill our contract with you or your organization.

– Legitimate Interests (Article 6(1)(f) GDPR): To improve services, secure the platform, or for internal analytics, provided these interests are not overridden by your rights.

– Consent (Article 6(1)(a) GDPR): Where you have given explicit consent, particularly for marketing communications or tracking via cookies.

– Legal Obligation (Article 6(1)(c) GDPR): To comply with legal obligations such as financial record-keeping or responding to lawful requests.

6. Purposes for Processing Your Personal Data

We collect and process your personal data for the following purposes:

– Service Provision: To manage accounts, facilitate transactions, and enable interactions with the Services.
– Communication: Responding to queries, providing notifications, and customer support.
– Analytics: To understand how Services are used and improve user experience.
– Legal Compliance: To meet legal obligations and respond to lawful requests.
– Marketing: Sending newsletters and promotional content (with your consent).

The Customer is not obliged to provide Amiqa Tech with its personal data. However, where the processing is based on the fulfilment of agreements, Amiqa Tech may not be able to fulfil its obligations under a certain agreement in lack thereof. If the Customer chooses not to provide its personal data to Amiqa Tech, there is an ultimate risk that Amiqa Tech cannot deliver its contractual obligations. 

Amiqa Tech may ask for your consent to process some of your personal data. The Customer is not obliged to give such consent regardless of purpose thereto. The Customer also may withdraw its consent at any time by contacting Amiqa Tech in that respect. If the Customer chooses to withdraw its consent, the withdrawal is valid from the time of revocation, and does not affect processing that Amiqa Tech carried out during the time before the revocation occurred.

You have the right to: 

• request (register extract), i.e. information about what personal data we process about you by requesting a copy this data, 
• have the personal data you have provided to Amiqa Tech transferred to another data controller (right to data portability), 
• to have inaccurate personal data corrected, or during special circumstances, have them deleted,
• object to the processing of certain personal data about you and request the processing of your personal data to becomes restricted, 
• to withdraw consent for continued processing of the personal data that Amiqa Tech processes under relevant lawful grounds. 

For further information on exercising your rights, see contact information for invoking your rights under “Personal data responsibility and contact information”. Please note however, that such restriction or deletion of your personal data may give rise to Amiqa Tech’s inability to provide the services described above and may ultimately lead to the termination of any agreement entered into between us. If termination is necessary due to refusal to share data or the revocation of data, Amiqa Tech shall be entitled to any fees owed to it prior to said termination.

7. Data Sharing and Third-Party Disclosures

We may share your personal data with trusted third parties in the following cases:

– Service Providers: IT services, cloud hosting, payment processors (e.g., Stripe), CRM providers (e.g., HubSpot).
– Legal Obligations: To comply with legal obligations, such as responding to law enforcement or court orders.
– Business Transactions: In the event of a merger or acquisition, your data may be transferred as part of the transaction.
– Public Access: Some data may be publicly accessible if necessary for the operation of the Services.

We ensure that all third-party partners meet data protection standards and implement Standard Contractual Clauses for data transfers outside the EU.

We ensure that any sharing of your personal data is limited and carefully managed:
– Service Providers: We may share data with trusted service providers such as payment processors and IT service providers (e.g., HubSpot, Stripe, AWS).
– International Transfers: If we transfer data outside of the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
– Legal Obligations: If required by law, we may disclose data to comply with legal requests or to protect our rights.
– Business Transactions: In the event of a merger or acquisition, your data may be transferred as part of that process.

8. International Transfers of Your Data

Your personal data is stored within the European Union (EU). If we transfer data outside the EU (e.g., to service providers like Google Analytics or HubSpot), we will ensure that appropriate safeguards, such as Standard Contractual Clauses, are in place.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Notice or to comply with legal obligations. Examples include:

– Account Information: Retained for the duration of your use of our Services and for up to 10 years after termination, if required by law.
– Transaction Data: Retained as needed for auditing or legal compliance.
– Marketing Data: Retained until you unsubscribe from our communications.

We implement a variety of security measures to protect personal data, including physical, technical, and administrative safeguards. Our security measures include encryption, access controls, and regular security audits to prevent unauthorized access or disclosure of data.

However, no system is 100% secure. In case of a data breach, we will promptly notify affected individuals and authorities as required by the GDPR.

10. Security of Your Personal Data

We implement physical, technical, and organizational safeguards to protect your personal data from unauthorized access, alteration, disclosure, or destruction. However, no IT infrastructure is entirely secure, and we cannot guarantee absolute protection.

In the event of a data breach, we will notify you and the relevant authorities in line with GDPR requirements.

Amiqa Tech takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated in our Privacy Policy and Terms of Use.

The Data concerning the user/Customer  is collected to allow Amiqa Tech to provide its products and services, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Customers or third parties), detect any malicious or fraudulent activity, as well as the following: Registration and authentication, Hosting and backend infrastructure, Managing data collection and online surveys, Infrastructure monitoring, User database management, Handling payments, Managing contacts and sending messages, Traffic optimization and distribution, Tag Management, Analytics and Displaying content from external platforms. 

When you access or use our products, we may make available services from one or more third parties (“Third-Party Platforms”). Our products may support Third-Party Platforms, including Facebook (Meta), Google, and similar services if necessary for creating user accounts. Any use of Third-Party Platforms to create and access your user account is subject to the terms and conditions and privacy policies of such third parties (“Third-Party Terms”). Please note that when using our products, you should not submit any sensitive or confidential information with the use of applications utilizing generative artificial intelligence (generative AI). As Amiqa Tech may utilize platforms such as those available through OpenAI, certain data may be submitted through servers based outside of the EU.

We reserve the right to make amendments to this Privacy Policy from time to time. The date for the latest amendment is stated at the end of this Privacy Policy. If we make any amendments to the Privacy Policy, we will publish these amendments on our website. You are therefore recommended to read this Privacy Policy regularly to view any potential amendments.

11. Cookies and Similar Technologies

We use cookies and similar technologies to collect data on how you interact with our Solution. These include:

– Essential Cookies: Necessary for the functioning of the platform.
– Analytics Cookies: Used to monitor performance and improve the Services (e.g., via Google Analytics).
– Advertising Cookies: Used to deliver personalized ads (e.g., Facebook Pixel, LinkedIn).

You can manage cookie preferences through your browser settings or via our Cookie Management tool (see our Cookie Policy for details).

In addition to the rights mentioned, you also have the right to:

– Restrict Processing: You can request a limitation on how your data is processed under certain conditions.

– Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.

– Object to Automated Processing: Where applicable, you have the right not to be subject to a decision based solely on automated processing.

12. Your Rights Regarding Your Personal Data

You have the following rights under data protection laws:

– Right of Access: Request access to your personal data.
– Right to Rectification: Correct inaccurate or incomplete data.
– Right to Erasure: Request the deletion of data in certain circumstances.
– Right to Object: Object to data processing, including for marketing purposes.
– Right to Restrict Processing: Limit processing in specific situations.
– Right to Data Portability: Request the transfer of your data in a machine-readable format.
– Right to Withdraw Consent: Withdraw consent for data processing at any time.

Why are we allowed to process personal data?

For it to be permissible for us to process personal data there must always be support for said treatment within the GDPR, a so-called lawful basis. Such lawful basis may include: 

• Consent from the Data Subject
• That the processing of personal data is necessary to fulfill the terms of an agreement with the Data Subject, for example about the use of the Platform (i.e., Terms of Use). 
• Fulfilling a legal obligation, for example storing certain information due to legislation regarding certain accounting standards and practices. This could also be the case when handling opt-out settings requests concerning your rights as a Data Subject by the GDPR.
• A weighing of interests when we have a legitimate interest in using your data, for example for statistical purposes and to market our services and prevent fraud.

The same personal data may be processed both when giving you support (fulfilling the terms of an agreement) as well as based on your consent or when fulfilling another legal obligation. This means, for example, that even though you may revoke your consent and the processing based on said consent ceases, that specific personal data may remain with us for separate reasons. All in all, as long as Amiqa Tech has a lawful basis for its processing of your data, Amiqa Tech reserves the right to proceed with said processing.

Personal data is stored for up to 12 months after the termination of your primary agreement with us.

To exercise any of these rights, please contact us at: hello@amiqa.io.

13. Updates to This Privacy Notice

This Privacy Notice may be updated periodically. Any significant changes will be communicated via email or on our platform. Continued use of the Services implies acceptance of any changes.

14. Contact Us

If you have any questions or concerns about this Privacy Notice or how we process your personal data, you can contact us at:

Email: hello@amiqa.io