Privacy Policy - How we handle personal data

Data Controller

Fiive AB is the data controller responsible for the processing of your personal data according to this privacy policy. If you have questions about how we handle your personal data, you can contact us using the contact information below.

Fiive AB, 559457-1563, Address: Masthamnsgatan 3, 413 27 Göteborg, Email: info@fiive.se

Information we collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, company name, country, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

Forms on the website (contact, support, career, internship and thesis) are sent through a Netlify server function to our Slack workspace, where our team receives them. See the section Recipients and service providers below.

How we use your information

We use the information we collect in various ways, including to:

• Provide, operate, and maintain our website
• Improve, personalize, and expand our website
• Understand and analyze how you use our website
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
• Send you emails
• Find and prevent fraud

Legal basis

We process personal data on the following legal bases under the GDPR:

• Consent (Article 6(1)(a)): for analytics and marketing through cookies and similar technologies. You can withdraw your consent at any time via the cookie settings.
• Legitimate interests (Article 6(1)(f)): to respond to inquiries and messages you send us, to operate and protect the website, and to communicate with you in a business context.
• Contract (Article 6(1)(b)): when processing is necessary to prepare or perform a contract with you.

Google Analytics and Google Ads

We use Google Analytics to understand how visitors interact with our website and to improve our services. We also use Google Ads for advertising purposes. These services may collect information about your device type, browser, IP address, and how you navigate our website.

Google Analytics helps us analyze website traffic, user behavior, and improve our content. Google Ads allows us to show relevant advertisements and measure their effectiveness.

Google Analytics is only loaded if you have accepted analytics cookies, and Google Ads tracking is only activated if you have accepted marketing cookies. You can change or withdraw your choice through our cookie settings or by blocking cookies in your browser settings.

PostHog

We use PostHog for web analytics to understand how visitors interact with our website. PostHog may collect information about your device type, browser, approximate geographic location, and how you navigate the site, including page views, clicks, and session recordings where input fields are masked.

PostHog is only loaded after you accept analytics in our cookie banner. We use PostHog's EU region, and requests are routed through our own domain (fiive.se) via a reverse proxy before being forwarded to PostHog's servers in the EU. You can read more about PostHog's privacy policy at posthog.com/privacy.

You can opt out of PostHog tracking via our cookie settings (analytics).

Cookies and Similar Technologies

Like most websites, Fiive uses cookies and similar technologies, such as browser local storage, to make the website work and to enhance user experience. Cookies are small text files stored on your device when you visit a website. We use necessary storage for basic functionality, and analytics and marketing that are only activated after you consent.

You can manage your choices through the cookie banner that appears when you first visit the website, or change them at any time via the cookie settings in the footer. Your choice is saved in your browser's local storage. You can also block cookies in your browser settings.

Recipients and service providers

We only share personal data with the providers needed to operate the website and receive your messages. These are:

Netlify, our hosting and operations provider, which runs the function that receives forms. Slack, where the information in forms you submit (for example name, email address, phone number, company and message) is delivered to our team as a notification message. PostHog and Google (Google Analytics and Google Ads) for analytics and marketing as described above, and only after your consent. Google Maps, which may appear as an embedded map on some pages.

Some of these providers may process data outside the EU/EEA. In that case we ensure that the transfer relies on a valid transfer mechanism under the GDPR, such as the European Commission's standard contractual clauses.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to confirmation of whether we process personal data about you and to request a copy of it. The first copy is free of charge. For additional copies we may charge a reasonable fee based on our administrative costs.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we provide the data you have given us in a structured, commonly used and machine-readable format, or transfer it to another controller, under certain conditions.
• The right to withdraw consent – If you have given consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

If you would like to exercise any of these rights, please contact us at info@fiive.se. We respond without undue delay and at the latest within one month. Our responses and actions are free of charge. If a request is manifestly unfounded or excessive, in particular if it is repetitive, we may charge a reasonable fee or refuse the request. If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.