Privacy Policy
Information about how we handle personal data in our business
Our commitment
scaly cares about your personal privacy. This privacy policy explains how we collect, use, and protect personal data within the scope of our B2B operations as an implementation partner and consultant.
We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. As a business primarily targeting companies, we process personal data as part of our business relationship with our corporate clients.
What data we collect
In our business, we collect the following types of information:
Contact details
Names of contact persons, corporate email addresses, workplace phone numbers, job title, and role.
Company details
Organization number, billing address, delivery address, and company contact information.
Contract details
Contract information, services and products, order history, and user information for implemented systems.
Website data
IP address, information from cookies, and data from contact forms on the website.
Legal basis for processing
We process personal data based on the following legal grounds:
Performance of a contract
When we need to process personal data to fulfill our contractual obligations to our clients, for example to deliver consulting services, implement systems, or provide support.
Legitimate interest
When we have a legitimate interest in processing personal data, for example to communicate relevant information to our corporate clients, develop our services, or to prevent fraud and ensure network security.
Consent
In some cases, we process personal data based on consent, for example for marketing communications via email. Consent can be withdrawn at any time.
How we use data
We use collected information to:
- Deliver and improve our consulting services
- Implement and support third-party solutions for our clients
- Manage client relationships and communicate with our clients
- Send relevant information about products and services (to corporate clients)
- Handle invoicing and financial administration
- Fulfill our legal obligations
- Improve and develop our services based on feedback and usage
Third-party services
As an implementation partner, we help clients use solutions from leading vendors.
As an implementation partner, we help our clients use third-party solutions from leading vendors in ITSM, ESM, and business systems. These services have their own privacy policies governing how they handle personal data.
We encourage users to review the privacy policy for each third-party service we implement. When a client engages us for implementation, personal data may be transferred to these third-party services in accordance with the agreements we and the client have with the respective service provider.
scaly often acts as a data processor on behalf of clients when implementing third-party solutions, and we follow specific data processing agreements established with our clients.
How long we store data
We store personal data only as long as necessary for the purposes for which it was collected.
Client relationship data
Data linked to client relationships is stored for the duration of the business relationship and thereafter for up to 7 years to fulfill legal requirements, particularly accounting legislation.
Marketing data
Data used for marketing is stored until consent is withdrawn or when a person is no longer relevant for our B2B marketing (e.g., when changing employer).
Sharing of information
We only share information with the following categories of recipients:
Vendors of third-party solutions that we implement in ITSM, ESM, and business systems
Subcontractors and partners who help us deliver our services
Service providers needed for our operations (e.g., CRM systems, invoicing systems)
Authorities when we are required to by law
We never sell personal data to third parties and only share information when necessary to deliver our services or fulfill our legal obligations.
Rights for company representatives
As a representative of a company whose contact details we process, you have the following rights under GDPR:
Right of access
Access all personal data we hold about you
Right to rectification
Correct inaccurate data about you
Right to erasure
Have your data deleted under certain circumstances
Right to object
Object to certain processing of your data
Data portability
Receive your data in a structured format
Right to complain
File a complaint with the Swedish Authority for Privacy Protection
Contact us
If you have questions about our privacy policy or wish to exercise your rights, contact us at:
Email: privacy@scaly.se
Phone: +46 73-670 81 98
Address: Strandvägen 5A, 114 51 Stockholm
Do you have questions about our data protection policy?
Contact us if you have questions about how we handle personal data or if you wish to exercise your rights.