This document has been replaced by a newer version, and is available for archival purposes

Data

Updateded: February 7, 2023

This policy describes how Orbi collects, uses, and protects your personal data if you use a service provided by Orbi or if you contact Orbi without using our app/services.

When we mention “Orbi”, “we”, “us”, “ourselves” or “our” we are referring to Ornamental Tree AB, Reg.No 559032-9735, with the address Vallgatan 26, 411 16 Gothenburg, Sweden. When we mention “Company” or "Companies", we are referring to the companies and associations that have joined the app to get in touch with students and/or offer different services through our app.

Why should I read this policy?

This policy describes how Orbi collects, uses and protects your personal data.

About processing of personal data

Personal data is all information that can be linked to a living, physical person – either directly or indirectly. When processing personal data, such as collecting, creating, sharing, deleting, and analyzing personal data, different data protection laws and regulations apply. For Orbi’s processing of personal data, as described in this privacy policy, the EU Data Protection Regulation (2016/679) (“GDPR”) is particularly important.

Orbi acts as a so-called data controller, i.e. as an entity deciding relevant purposes and methods for processing personal data. Under GDPR and other applicable data protection laws and regulations, Orbi has an obligation to inform you about how and why we (eventually) process your personal data and your rights in relation thereto.

What information do you collect about me?

We collect information that helps us to provide the service to you. This includes:

email
name
contact details
food preferences
graduation year and study year

If Orbi Career is active at your university/section, we will also collect data about your:

Education
Employment type
Place(s) you are evaluating jobs and employers at

How will you use my information?

We need to know certain details about you in order to provide you with information send outs, our services, payment information and statistics in line with our overall policy. We will not collect more information than we need to provide our services or than we are required to by law.

On what legal basis do we rely on when processing personal data?

When creating a profile and using the Orbi app and our services, you agree that we process your personal data to be able to provide you with the requested services. We also have a legitimate interest in fulfilling contractual obligations with the Companies and to provide you with the services that we offer through our app.

When you use our additional service “Orbi Connect” and select to share your personal data with a Company, we rely on your consent to share the personal data in your profile (name, age, university/section, education and email). Such consent will be obtained prior to sharing your personal data in each and every case. The Company that we, upon your request, share your personal data with is then acting as a data controller for its own processing of your personal data and has its own privacy policy. Orbi has an agreement with each Company to ensure that the Company with which we share your personal data are shared with complies with applicable data protection laws and regulations.

When we process your personal data by a survey or otherwise for the purpose of creating aggregate analytics of how a service, our websites and customer support is performing and used, for statistical and product improvement purposes, we rely on having a legitimate interest in being able to develop and evaluate our services for our users (both Companies and students).

If we are required by law to process and share your personal data and/or if it is needed to protect our own or any third parties’ rights, we rely on a balancing of interests based on our legitimate interest in being able to access needed services from third parties, to protect ourselves and to comply with laws and regulations.

How long will you store my information?

We have accounting requirements that mean we need to keep some of your information for up to 7 years, after which it will be deleted. Information that we use to send out newsletters or for marketing will be processed until the time when you unsubscribe from such mailings. If we process your personal data upon the request of a public authority, we will keep your data for the period requested by the relevant authority.

Who do you share my information with?

Your personal data may be processed by our personnel in Sweden, and when you select to share your profile with a Company through “Orbi Connect”, we share personal data with the selected Company. No other third party has access to your personal data as long as the law does not require us to share it and/or if it is necessary for us to protect our own, our customers’ or third parties’ rights or property.

When we share the results of surveys and/or other collected statistical results with Companies, all personal data is anonymized and cannot be linked to a specific individual, i.e. no personal data is shared for this purpose.

We have procedures in place to ensure that your personal data is handled safely and securely in accordance with current legislation. You can get more information by contacting us by email.

Where do you store my information?

Your information will be stored at a data centre within the European Union. For technical reasons, our subcontractors may need to move information to other countries outside the EU. If this happens, appropriate protective measures and standardised data protection regulations approved by the European Commission are used.

WHAT ARE MY RIGHTS?

Right to information:

You can request to receive a copy of the personal data we have about you.

Right to rectification:

We want to ensure that your information is up to date and correct. You can request to have your information corrected or removed if you believe it is incorrect.

Right to deletion:

You can request that we delete your personal data. This does not apply to data that the law requires us to retain.

Data portability:

You can ask us to move your personal data from our IT environment to another, either another company or to you. This does not apply to data that the law requires us to retain.

Withdraw consent:

You can withdraw your consent to share your information or to receive marketing/mailings at any time. You can do this by either unsubscribing from the message or contacting us by email.

Complaints:

You can submit a complaint to the Swedish Authority for Privacy Protection if you believe that we are processing your personal data in violation of the General Data Protection Regulation.

Personal ID number

We never save your personal ID number. We only use it to identify your membership in the membership system your student association uses.

How can I use my rights?

If you want to use any of your rights, contact us at the email address that you will find at the bottom of this policy. If you want to submit a complaint to the Swedish Authority for Privacy Protection, you need to contact them.