Legal

Introduction

Thank you for visiting Planhat!

Please read our Privacy Policy, as you must agree to it in order to use our Site and Service. This Privacy Policy sets out how and why we collect, store, use, transfer and disclose your personal information and how you may access your personal information, correct it, or ask us to remove it.

This Privacy Policy applies when Planhat collects personal information about an individual who is not an employee or consultant of Planhat. This typically means it applies to users or prospective users of our Customer Success Platform (our “Service”), visitors to our website www.planhat.com (our “Site”) and those otherwise interacting with us, as examples in connection with events we host or when requesting demos.

Planhat AB (”Planhat”/”we”) is the controller of your personal information covered by this Privacy Policy for purposes of European data protection legislation. You can contact us and our Data Protection Officer at [email protected]. Planhat AB’s company number is 556991-6421 and the registered address is Malmskillnadsgatan 13, 111 57 Stockholm, Sweden. References to “personal information” in this Privacy Policy are equivalent to “personal data” governed by European data protection legislation.

Information Collected

We collect certain personal information from you when you sign up to our Service or otherwise interact with us (for example, when requesting demos or attending events). Such information can be used to identify you and typically includes name, work email address, job title, telephone number, product usage, and any other information that we deem necessary for the provision of our Service to you or which you provide to us voluntarily (ex. information about yourself that you tell us in our correspondence).

Whenever you visit our Site or Service, we collect non-identifying information from you, such as your IP address, referring URL, browser, operating system, cookie information, and Internet Service Provider. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, this information alone can generally not be used to identify you and is used by us only on a statistical level to improve our Site and Service.

Use of your information

We may use your information to:

• Provide, operate, and maintain our Service.
• Improve, personalize, and expand our Service.
• Understand and analyze how you use our Service.
• Develop new products, services, features, and functionality.
• Communicate with you via email, chat or text, either directly or through one of our partners, to provide you with customer service, updates and other information relating to the Service, and for marketing purposes (you can always opt-out or change settings for marketing communications).
• Perform any other function that we reasonably believe is necessary to protect the security or proper functioning of our Site or Service.
• Enforce our Terms of Service, or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency.

Legal basis for processing personal information

We have a legitimate interest in operating our Service and communicating with you to provide the Service as agreed. Our legal basis for collecting and using the personal information described above will depend on the information concerned and the specific context in which we collect it. However, we will generally only collect personal information from you (i) where the processing is in our legitimate interests and those interests are not overridden by your rights; (ii) where processing is necessary to fulfil our contractual obligations with the company you are representing; or (iii) where we have your explicit consent to do so.

When we share your personal information with others

We only share your personal information in the following circumstances:

• When you give us explicit consent to do so.
• When needed, with trusted organisations we work with to provide the Service to you such as web hosts, cloud storage providers, customer support providers, pre-sales customer relationships systems, payment processors, accountants, and insurers. You can find a list of our Processors here.
• Your e-mail address may be shared with suppliers in order to make our marketing more efficient, for example via search engines and online advertising such as Google Ads or on social media. The data is not shared to enable marketing of our services to you, but to improve our marketing in relation to other potential customers.
• On a need-to-know basis in connection with transactions involving our shares, business or assets.
• When we are obliged to share it with regulators and authorities for the purpose of legal or contractual compliance, reporting purposes, or when disclosure is reasonably necessary to protect our rights, or the rights of third parties or the public.

Your rights

You have the following rights in relation to your personal information:

• Right to access: a right to obtain confirmation and information about the processing of your personal information.
• Right to rectification: a right to have your personal information corrected.
• Right to erasure: a right to have your personal information erased. This right is limited to data that, by law, requires your consent to be processed, if you withdraw that consent and oppose the processing.
• Right to object: a right to object against our processing if the legal ground for the processing is based on a balancing of interests or if it is used for direct marketing.
• Right to restrict data processing: a right to demand that the processing of personal information is restricted, e.g. if you oppose the correctness of the data.
• Right to data portability: a right to request that personal information be sent from one data controller to another. This right is restricted to data which you have submitted to us.

If you want to exercise any of those rights, please email [email protected].

We aim to process all requests within a month for simple requests, however complex and/or voluminous requests may take up to three months to process. If we deny you access, we will provide our reason for doing so at the time of your request. We may request documentary proof for certain requests and we always need to verify your identity.

We generally don’t charge a fee for reasonable requests, but we may charge a fee for time and cost if an extended amount of time is required to collate and prepare material for you or if you wish to receive and we are able to provide hard copies or physical media.

California Privacy Rights

This section applies only to California residents. For purposes of this section "Personal Information" has the meaning given in the California Consumer Privacy Act (“CCPA”). It describes how we collect, use, and share California residents' Personal Information in our role as a business, and the rights applicable to such residents. The CCPA requires businesses to disclose whether they sell Personal Information. Planhat is a business, but does not sell Personal Information. We may share Personal Information with third parties if those third parties are authorized service providers or business partners who have agreed to our contractual limitations as to their retention, use, and disclosure of such Personal Information. Please see our List of Data Processors.

If you are unable to access this Privacy Policy due to a disability or any physical or mental impairment, please contact us and we will arrange to supply you with the information you need in an alternative format that you can access.

How We Collect, Use, and Share your Personal Information

We collect certain personal information from you when you sign up to our Service or otherwise interact with us (as examples, when requesting demos or attending events). Such information can be used to identify you and typically includes name, work email address, job title, telephone number, product usage, and any other information that we deem necessary for the provision of our Service to you or which you provide to us voluntarily (ex. information about yourself that you tell us in our correspondence).

Whenever you visit our Site or Service, we collect non-identifying information from you, such as your IP address, referring URL, browser, operating system, cookie information, and Internet Service Provider. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, this information alone can generally not be used to identify you and is used by us only on a statistical level to improve our Site and Service.

The business and commercial purposes for which we collect this information is described under “Legal basis for processing personal information”.

Your California Rights

You have certain rights regarding the Personal Information we collect or maintain about you. Please note these rights are not absolute, and there may be cases when we decline your request as permitted by law.

The right of access means that you have the right to request that we disclose what Personal Information we have collected, used and disclosed about you in the past 12 months.

The right of deletion means that you have the right to request that we delete Personal Information collected or maintained by us, subject to certain exceptions.

The right to correct means that the Employee has the right to correct any personal data held by the Company that the Employee believes is inaccurate.

The right to non-discrimination means that you will not receive any discriminatory treatment when you exercise one of your privacy rights.

Planhat does not sell Personal Information to third parties (pursuant to California Civil Code §§ 1798.100–1798.199, also known as the California Consumer Privacy Act of 2018).

How to Exercise your California Rights

You can exercise your rights yourself or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your Personal Information, we will verify your identity by a method appropriate to the type of request you are making. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent's identity to protect your Personal Information.

If you want to exercise any of your rights, access this policy in an alternative format, learn more about your rights or our privacy practices, or designate an authorized agent to make a request on your behalf, please email [email protected].