1. Terms

Embassy House is an entity located in Stockholm, Sweden (Embassy For Entrepreneurs AB, organization number: 559081-6418, Östgötagatan 12, 116 25 Stockholm, Sweden) .

‘Sensitive personal data’ means personal data, revealing opinions, beliefs, and other data shared with Embassy representatives.

‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

‘Data subject’ means the natural person whose personal data is processed by a controller or processor.

‘Data controller’ means the natural or legal person, public authority, agency or other bodies which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by European Union or Member State law, the controller or the specific criteria for its nomination may be provided for by European Union or Member State law.

‘Data processor’ means a natural or legal person, public authority, agency or other bodies that process personal data on behalf of the controller.

‘Embassy representative’ means an employee or founder of Embassy House or a person who stands in a contractual relationship to Embassy House that is comparable to an employee.

‘Member’ means a tenant or customer of Embassy House.

2. Which personal data we process

Depending on your use of our website and services, we process different information.

1) We may process contact data (“contact data“). Contact data may include your name, email address, phone number, mailing address and other information that enables us to contact you.

Purpose: We may process your contact data to enable the implementation of services and to fulfill contractual obligations towards you; to contact you; and to contact you via email to inform you about our services, disruptions to services, updates, changes, and so forth.

The legal bases for the processing are:
- Services: The performance of a contract or legitimate interest or consent.
- Communication: Consent or performance of a contract.
- Marketing: Legitimate interest, namely where requirements of the GDPR and the E-privacy directive are met or consent;

2) We may process data that relates to your work (“work-related data“). Work-related data may include your company, company details and place of work.

Purpose: We process your work-related data to enable participation in social media marketing and location-based communication and to fulfill contractual obligations towards you.

The legal bases for the processing is the performance of a contract and legitimate interest where consent is provided.

3) We may process data that relates to your use of the websites (“usage data“). Usage data may include information about the website from which you have come (referrer), information about which sub-pages were visited, or how often, information about the duration a sub-page was viewed and other information that shows the activities on our websites. 

Purpose: We process your contact data to optimize our websites.

The legal basis for the processing is a legitimate interest.

4) We may process data that relates to your location at Embassy House (“location data”). Location data may include information about the time and location of persons and objects within the workspace and Embassy House premises. Common areas at Embassy House premises are recorded to provide an extra level of security for members through CCTV (Closed-Circuit Television) systems. 

Purpose: We process your location data for crime prevention and safety monitoring in the case that incidents are reported.

The legal basis for the processing is a legitimate interest.

3. How we use your personal data

We will only use your personal data within the limits provided by the described purposes. We will keep your data for as long as they are needed for their purpose. We may keep personal data for archiving, historical research purposes, and statistical purposes.

4. Access to your data

We use the following third-party processors:

Website:
Our website is built using Squarespace. Any information it may collect is stored locally and isn’t shared with anyone. https://www.squarespace.com/privacy

Email:
G suite for email communication with our customers and visitors to our site. You can find out more about Google’s GDPR compliance at https://cloud.google.com/privacy/gdpr

Booking Platform:
Our booking platform and app are built with Spacebring to automate conference room bookings, track coworking memberships and receive support requests. It collects your name and contact details and stores it to make it accessible for Embassy representatives to chat with members, access and review bookings and membership information. You can find more information about Spacebring’s privacy policy here: https://www.spacebring.com/privacy

5. Data Security

The security of all your Personal Information is important to us. To the best of our ability, we are taking appropriate technical or organizational measures to protect your Personal Information against unauthorized access or unlawful processing and accidental loss, destruction or damage. While we strive to protect your Personal Information, we cannot ensure or warrant the security of any information that you directly or indirectly transmit to us, and you do so at your own risk.

6. Your rights as a data subject

You have several rights as a data subject. If you as a data subject of Embassy House wish to exercise your rights or have questions concerning the company’s processing of your personal data, you can contact the company’s data protection officer, e-mail anders@embassy.house.

Right of access:

You can request information as to whether Embassy House processes personal data relating to you and if so receive a digital copy of such data – called a register extract – together with certain more detailed information.

Right to rectification:

If you consider that the personal data relating to you is inaccurate or incomplete, you can request to have the data rectified or completed.

Right of objection:

When Embassy House processes personal data to be able to perform tasks or fulfill contractual obligations, you can object to the processing at any time. If Embassy House cannot show that there are compelling, authorised reasons to continue processing the data, the company must terminate the processing.

Right to limitation of processing:

In certain cases, for example if you have objected to the processing, you have the possibility to demand that the processing of your personal data be limited. By requesting a limitation you have, at least for a certain period, the possibility to stop Embassy House from using the data other than to, for example, defend legal claims. 

Right to erasure ("right to be forgotten"):

You can in certain cases have your personal data erased. When your personal data is needed for Embassy House to be able to execute its legal or contractual duties, Embassy House cannot erase the data.

Right to data portability:

If Embassy House processes personal data relating to you to perform an agreement, you have the possibility in certain cases to be given the personal data relating to you to use it somewhere else, for example transfer the data to another data controller.

Right to complain:

You also have the right to contact the Swedish Authority for Privacy Protection to submit a complaint regarding the Processing of your Personal Data.

Name: Integritetsskyddsmyndigheten (IMY)
Phone: 08-657 61 00
Email: imy@imy.se
Postal address: Integritetsskyddsmyndigheten, Box 8114

7. Changes to this privacy policy

We reserve the right to change this privacy policy at any time. If we make material changes to this privacy policy we will notify you via email and will update the date above. Your continued relationship with us after having been notified of changes shall constitute your agreement to be bound by any such changes.

8. Governing law

As far as permitted by law, this privacy policy and its terms shall be governed by and construed in accordance with the data protection laws of Sweden and any legal dispute concerning this privacy policy, its interpretation, and our handling of your personal data shall be adjudicated in Swedish jurisdiction.

9. Feedback and how to contact us

If you want to exercise your rights, have any queries on this policy, wish to contact us or know further details on how we use personal data, please contact us by email at: anders@embassy.house.