The purpose of this policy is to clearly and transparently inform you of which personal data Sleip AI processes, how we process them and how you can protect your rights to such data. This policy is subject to the EU General Data Protection Regulation (the GDPR) No. 2016/679 and our safe processing of your personal data is further ensured by our internal guidelines.
2. Which personal data does Sleip AI process, why and how long?
Gathering and processing personal data is not a core business of Sleip AI. However, as most companies do, we process personal data when we perform our internal administrative duties and fulfil our contracts with you.
We process personal data for the purpose of recruiting staff and representatives of our business. Typically, the information is submitted to us by the data subject him-/herself, in letters, CV:s and other documentation. If you apply for employment with us, we will keep your personal data for two years, before erasing it.
To comply with legal obligations
We process your personal data as needed to comply with legal obligations, such as tax information and obligation to keep financial records. Basic contact information including your name, address, telephone number and e-mail address, as well as VAT-information which may encompass your personal identification number, will be processed as long as such records shall be kept under Swedish law and regulation.
To enforce legal claims (legitimate interest)
If you are a client, subcontractor, collaboration partner or employee of Sleip AI, we process your personal data as needed to protect and enforce any legal claims of ours, rising out of our contractual relationship with you, your employer or other principal. Basic contact information including your name, address, telephone number and e-mail address, as well as VAT-information which may encompass your personal identification number if necessary, will be processed for as long as it is necessary to fulfil the purpose of the processing.
To manage and perform our agreements with others
If you are a client, subcontractor, collaboration partner or employee of Sleip AI, we process your personal data as needed to fulfil our contract and agreement with you, you employer or other principal. Basic contact information including your name, address, telephone number and e-mail address, as well as your Sleip AI account information, will be processed during the term of the agreement with you, your employer or other principal.
To improve our services (legitimate interest) and to manage and fulfil our agreements
We will process your personal data if you handle a horse which is the subject of video capture in our mobile software application. If you handle a horse which is captured in video for gathering data on the horse’s movements, it is very likely that you also will be present in he video material. To process and produce motion analysis the video recording is uploaded to Sleip AI’s internal computers and/or to the cloud servers we use. These servers are located within the EU. From request by the Sleip AI client (i.e. you) we can share the the video material, e.g. to a veterinarian you have appointed for assessment of the horse and/or to the person on whose behalf you are handling the horse. Sleip AI will also use the video recordings to improve the AI technology within our services, and the video data is therefore processed for as long as it is necessary to fulfil the purpose of the processing, i.e. to further improve the product and our service to customers.
To provide offers on our services (legitimate interest)
If you engage in contacts with us, we will process your personal data such as your name, address, telephone number and e-mail address, to communicate our services to you by creating, estimating and providing offers on our services to you until the offer is accepted or denied.
3. Your rights
The GDPR specifies your rights to legal control over your personal data. The following is a list of your rights under the GDPR.
Right of access and to information.
You have the right to obtain a confirmation from us as to whether or not personal data concerning you are being processed by us, and, where that is the case, you have the right to access that personal data.
Right to rectification.
You have the right to request that we rectify inaccurate personal data concerning you.
Right to erasure (”the right to be forgotten”).
You have the right to request that we erase personal data concerning you, and we have the obligation to erase your personal data in some situations. Please know that there might be reasons as to why we cannot immediately erase all your personal data. Our continuous processing of your personal data might for example be necessary in order for us to fulfil a legal obligation that requires processing of your personal data. If you request to delete your personal data in video material, then the video deleted by us together with its corresponding analysis data will no longer be available.
Right to restriction of processing.
You have the right, under certain conditions; to request that we restrict processing of your personal data. Restriction of processing means that your stored personal data will be marked with the aim of limiting their processing in the future to certain given purposes. The right to restriction applies for example when you have contested the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data, and when you have objected to our processing based on our legitimate interests, pending the verification whether our legitimate grounds override yours. If you request to delete your personal data in video material, then the video deleted by us together with its corresponding analysis data will no longer be available.
Right to data portability.
You have the right, under certain conditions, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from us. When exercising your right to data portability you have the right to have your personal data transmitted directly from us to another controller, where technically feasible.
Right to object.
You have the right to object, on grounds relating to your particular situation, to certain processing of your personal data. The right to object applies e.g. when we process your personal data on the basis of our legitimate interests.
Right to object to automated individual decision-making (including profiling).
You have the right, with certain exemptions, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Right to lodge a complaint.
If you think that our processing of your personal data infringes the GDPR you have the right to lodge a complaint with the Integritetsskyddsmyndigheten, which is the supervisory authority in Sweden.
Exercise your rights.
If you wish to exercise any of your rights you can easily do that by contacting us, using the contact information set out at the beginning of this policy. In order to protect your integrity and your personal data we might require that you identify yourself when you require our assistance.