SkillsAuth AB ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit or use the SkillsAuth website and services. We are compliant with the EU General Data Protection Regulation (GDPR) where it applies.
The data controller responsible for your personal data is SkillsAuth AB, a company registered in Sweden with its operations in Stockholm. For any privacy-related questions or to exercise your rights, you may contact us at [email protected] or via the contact options on our website.
We may collect the following types of information:
We use the collected information to operate and maintain the SkillsAuth service, manage your account and authentication, improve the platform and user experience, analyse usage in aggregate to improve our offering, comply with applicable law, and communicate with you about the service where necessary.
Where GDPR applies, we process your data on the following bases: performance of a contract (for account and service provision); legitimate interests (for analytics, security, and improving our service, where balanced against your rights); and, where we rely on consent (for example for non-essential cookies), you may withdraw that consent at any time.
Our core systems and data are hosted in a Stockholm datacenter. Some of our service providers (such as Clerk and Google) may process data in other regions. Where we use such providers, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) in accordance with applicable data protection law.
We use the following third-party processors who act on our instructions and under appropriate agreements:
We retain account-related data for as long as your account is active and for a reasonable period after you close it or request deletion, where needed for legal or operational purposes. Analytics data is retained according to our analytics provider's settings and our internal policies. Log and technical data are retained only as long as necessary for security and troubleshooting.
If GDPR applies to you, you have the right to: access your personal data (Art. 15); rectification of inaccurate data (Art. 16); erasure ("right to be forgotten") in certain cases (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); object to processing based on legitimate interests (Art. 21); and withdraw consent where processing is based on consent. You may exercise some of these rights through your account settings or the Clerk dashboard where applicable, or by contacting us. You also have the right to lodge a complaint with a supervisory authority. In Sweden, the relevant authority is Integritetsskyddsmyndigheten (the Swedish Authority for Privacy Protection); you can find more information at www.imy.se.
We implement appropriate technical and organisational measures to protect your personal data. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. The "Last updated" date at the top will be revised when we do. Material changes may be communicated via a notice on the website or by email where appropriate. We encourage you to review this policy periodically.
For any questions about this Privacy Policy or our data practices, please contact SkillsAuth AB at [email protected] or through the contact options on our website. We are based in Stockholm, Sweden.