This Privacy Policy (the “Policy”) describes how AEROF Holdings Sweden AB, reg. no. 559229-6676 (“AEROF”, “we”, “us” or “our”), at the address Box 5855, 102 540 Stockholm processes your personal data when you visit and use our website or come into contact with us because of our business and services. We process personal data in accordance with the General Data Protection Regulation 2016/679/EU ("GDPR") and supplementary national legislation such as the Swedish Act (2018:218) with supplementary provisions to the General Data Protection Regulation, as well as other data protection legislation applicable at any given time.

We are responsible for the processing of your personal data as described in the Policy in the capacity of data controller. If you would like to know more about our processing of your personal data, you are welcome to contact us. 

It is important to us that you feel comfortable with how we process your personal data, and we therefore ask you to read through this Policy, which we may update from time to time. If we make changes to the Policy, the new version will apply from the time it is published on our website. At the top of the page, you can see when the Policy was last changed.

The personal data we process relating to you is collected when you make reservations or otherwise use our services, e.g. when visiting our website, when you sign up and use your user account, or when we otherwise have contact with you via email, telephone, personal meeting and other similar occasions. We also process personal data that you provide to us when using our website.

We only process your personal data to the extent permitted in accordance with applicable data protection legislation. This means, inter alia, that we need to have a legal basis for the purposes for our processing your personal data, which in our context generally means one of the following bases.

Balancing of interests – the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, provided that they are not overridden by your interests or fundamental rights or freedoms (in which case the processing would not be allowed).

Performance of legal obligations – the processing is necessary in order to fulfil our legal obligations, e.g. to the extent we are subject to regulatory requirements or orders by authorities.

Performance of a contract – the processing is necessary in order for us to provide you with our services or otherwise perform a contract between us, or to take steps at your request prior to entering into a contract.

Consent – the processing is carried out with your prior consent, where we, inter alia, are responsible for clearly informing you of what processing you consent to and your right to withdraw your consent in relation to our continued processing.  

Below, we explain more about the categories of personal data we process, for what purposes we process them and what legal bases we rely on when processing your personal data, including for how long we store your personal data.

• Manage user accounts on our website

Purpose of the processing: Administration of your user account, so that you can register such an account with us, log in to it based on your user information, use the account to e.g. manage your bookings, and to be able to communicate with us for support regarding how to use the account.

Categories of personal data: The personal data we process regards, inter alia:

• User information in the form of email address and password
• First and last name
• Date of last login to your user account
• Contact details, such as your address, email address and telephone number
• Order information such as information regarding your booking and any additions
• Communication related to bookings made and support matters
• Payment information such as payment method and payment details.

Legal basis: Balancing of interests, where our legitimate interest is to be able to administer your user account and allow you to use the functions of the account.

Storage period: We process and save your user information, your name, your contact details, your specified payment information (if you have chosen to save such information with us through your user account) as well as the communication established between us through your user account, for the time you choose to keep your account, but for a maximum of two (2) years from the last time you logged in to it. Information about bookings and related communication is mainly saved for up to two (2) years after the last day to which the booking relates.

• Manage bookings

Purpose of the processing: Receive and process bookings, including communication with you regarding your bookings, as well as other customary activities such as sending booking confirmations and handling payment details for invoicing.

Categories of personal data: The personal data we process regards, inter alia:

• First and last name
• If applicable, the company you represent
• Contact details, such as your address, email address and telephone number
• Booking information such as information regarding your booking and any additions to the booking.
• Payment and billing details related to the booking to which the payment and billing relate.

Legal basis: the processing is necessary in order for us to be able to enter into and fulfil the contract with you, i.e. deliver the services in accordance with the booking. If you enter into a contract and receive contracted services on behalf of another person, e.g. as a representative of a company, our processing is done on the basis of a balancing of interests, where our legitimate interest is to be able to enter into or fulfil the agreement with the party you represent

Storage period: We process and save your personal data for as long as it is necessary for us to fulfil our obligations, but at most for two (2) years after the last day to which the booking relates.

However, we may need to store data a longer time for other purposes, e.g. if it turns out that we need to take steps to establish, enforce or defend legal claims (normally no longer than 10 years). We may also need to save data for a longer period in order to comply with legal obligations, e.g. regarding bookkeeping under the Swedish Accounting Act.

• Maintenance and improvement of our website

Purpose of the processing: Collect statistics and analyze visitor traffic on our website, in order to maintain and improve its features, user experience and our work to detect and neutralize any errors, intrusions and incidents. The statistics we compile and the analyses we perform are carried out using data in aggregated form and with the support of de-identified or anonymized data.

Categories of personal data: The personal data we process regards, inter alia:

• IP addresses
• Other technical information which is generated when visiting our website, such as the type of technical device you have used, browser, visited pages and the time of your visits (browser information, time zone from the place where you visited our website, other web traffic information).

Legal basis: Balancing of interests, where our legitimate interest is to create a basis for maintaining and improving the functionality, content and security of our website. The collection of information using cookies is based on your consent, with the exception of such use which is strictly necessary for you to be able to use our website efficiently. For more information about how we use cookies, see our cookie policy [add the link to the cookie policy here].

Storage period: Information about how visitors interact with our digital platform is stored for a maximum of six (6) months. In most cases, however, the collected personal data is converted into aggregated data (anonymized) at an earlier stage in connection with our production of statistics.

• Marketing mailings

Purpose of the processing: Administer and carry out marketing emails, in order to inform about our business and services.

Categories of personal data: The personal data we process regards, inter alia:

• First and last name
• Email address

Legal basis: If we already have a customer relationship with you (without you registering for our mailings and having agreed to receive them), we will only carry out electronic marketing mailings to you unless you object to this in connection with us collecting your contact information. In such case, the processing is carried out after a balancing of interests, where our legitimate interest is to be able to market our similar services and inform about our ongoing activities. You can unsubscribe from further mailings at any time by using the unsubscribe link included in our mailings.

If we do not already have a customer relationship with you, we will only provide our electronic marketing mailings to you if you have registered for such mailings and agreed to receive them. You can unsubscribe from further mailings at any time by using the unsubscribe link included in our mailings

Storage period: If we have a customer relationship with you (without you having registered for our mailings), we process and save your first and last name and email address for continued mailings for a maximum of one (1) year after the last day to which the booking relates.  If our mailings are based on your consent, we process and save your first and last name and email address for further mailings as long as you have not unsubscribed from receiving further mailings.

• To create, maintain and develop potential business relationships

Purpose of the processing: Contact and communication with you for the purposes of creating, maintaining and developing our business relationship with you or the company you represent. This includes, inter alia, communication via email regarding our business and services.

Categories of personal data: The personal data we process regards, inter alia:

• First and last name
• Contact details such as email address, telephone number

• Professional title and information regarding the company you represent

• Information that you otherwise provide us in our communications with you.

Legal basis: Balancing of interests, where our legitimate interest is to create and thereafter maintain and develop a business relationship with you or the company you represent.

Storage period: We process and save your personal data for a period of six (6) months after the data was collected. If a business relationship is established between us and you or the company you represent during the said time period, we process and save your personal data as long as we have a business relationship with you or the company you represent, but no longer than two (2) years from the last time we have been in contact with each other in relation to our business relationship.

• To fulfil legal obligations or to establish, exercise or defend legal claims

We may process your personal data in order for us to fulfil our legal obligations according to law or other statutes, or orders or decisions by courts or authorities. The legal basis for this processing of personal data is that it is necessary for us to fulfil our legal obligations.

We may also process your personal data so that you, or the company you represent, we ourselves, or a relevant third party can establish, exercise or defend its legal claims, e.g. in connection with a potential dispute between you and us or another party.

We have taken measures to ensure that your personal data is handled in a safe way. For example, access to systems where personal data is stored is limited to our employees and service providers who need access to such data to fulfil their duties. Such parties are informed of the importance of maintaining security and confidentiality in relation to the personal data we process. We maintain appropriate safeguards and security standards to protect your personal data against unauthorized access, disclosure or misuse. We also monitor our systems to discover vulnerabilities.

Access to your personal data is limited to persons who require such access for the purposes described in Section 3 above. Your personal data may therefore be shared with the following categories of third party recipients:  

1. Companies within our group: We may share your personal data with other companies within our group. If we share your personal data with other companies within our group, we will ensure that the personal data continues to be processed in line with this Policy.
2. Third party providers: We use third party service providers to manage parts of our business operations. We may share personal data with such third parties in order for them to perform services on our behalf, such as providing our booking system, managing payments, sending out marketing communications and assisting us with IT services. When we use such service providers, we enter into data processing agreements and take other suitable measures to ensure that your personal data is processed in line with this Policy.
3. Our partners: We may from time to time cooperate with external parties in order to improve our services and business. Such parties either process your personal data as data controllers according to their own terms and policies for handling personal data, or as our data processors according to our instructions. In the latter case, we enter into data processing agreements and take other suitable measures to ensure that your personal data is processed in line with this Policy.
4. Sale or transfer of business: We may share your personal data with a buyer/investor or prospective buyer/investor in the event of a sale, assignment or other transfer of all or parts of our shares, assets or operations. Should such transfer occur, we will take actions in order to ensure that the receiving party processes your personal data in accordance with this Policy. The purpose of such sharing of your personal data is to let a (potential) buyer/investor to carry out an assessment of our operations and, where necessary, take actions and make preparations in the event of a sale, assignment or other transfer, where such sharing of your personal data is carried out with reference to the legitimate interests of allowing such assessment as well as potential actions and preparations.
5. Public authorities: We may share your personal data with public authorities such as the Swedish Police or the Swedish Tax Agency when we are required to do so according to law, other legal statutes or orders or decisions by courts or authorities.
6. Where we process your personal data

We store and process your personal data only within the EU/EEA and do not transfer it to any country outside the EU/EEA.

We store and process your personal data only within the EU/EEA and do not transfer it to any country outside the EU/EEA.

You have rights in relation to us and our processing of your personal data. Below, you will find information about your rights and how you can exercise them.

Please note that your rights apply to the extent that follows from applicable data protection legislation and that there may be exceptions to the rights where applicable. We also ask you to note that we may need more information from you in order to e.g. confirm your identity before proceeding with your request to exercise your rights. To exercise your rights or request information about them we ask that you contact us. 

• Right of access

You have the right to obtain a confirmation as to whether or not we process your personal data. If that is the case, you also have the right access the personal data through a register extract as well as additional information about the processing, such as for what purposes the processing occurs, relevant categories of personal data and the recipients of such personal data.

• Right to rectification

You have the right to, without undue delay, have incorrect personal data about you rectified. You also have the right to have incomplete personal data completed.

• Right to erasure

You have the right to require that we erase your personal data if:

• The personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• You withdraw your consent to the relevant processing (however, as a starting point, we do not process your personal data on the basis of consent);
• You object to processing that we carry out based on a legitimate interest, and your objection overrides our or another party’s legitimate interest of the processing;
• The personal data is unlawfully processed;
• The personal data has to be erased for compliance with a legal obligation.
  • Right to restriction

You have the right to request that we restrict the processing of your personal data in the following circumstances:

• You contest the accuracy of the personal data during a period enabling us to verify the accuracy of such data;
• The processing is unlawful and you oppose erasure of the personal data and request restriction instead;
• We no longer need to process the personal data for the purposes they were collected, but you need the personal data to establish, exercise or defend legal claims;
• You have objected to the processing which we carry out based on a balancing of interests, pending the verification whether your objection overrides our or another party’s legitimate interest to continue with the processing.

• Right to object

You have a right to object to our processing of your personal data when it is based on our or another party’s legitimate interest. If you object, we must demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms in order to be allowed to continue with our processing.

• Right to data portability

If our processing of your personal data is based on the performance of a contract with you or your consent, you have the right to receive the personal data you have provided us relating to you in a commonly used electronic format when technically feasible and it may be made in an automatic manner. You also have the right to have such personal data transferred from us directly to another data controller where applicable (so called data portability).

• Right to withdraw consent

If our processing of your personal data is based on your consent, you always have the right to withdraw your consent at any time. A withdrawal of your consent does not affect the lawfulness of the processing that took place based on the consent before your withdrawal. As a starting point, we do not process your personal data based on consent.

In Sweden, the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten) is the authority responsible for supervising the application of current data protection legislation. If you believe that we process your personal data in a wrongful manner, we encourage you to contact us so that we can review your concerns. You may, however, file a complaint with the Swedish Authority for Privacy Protection at any time.

Below, it is described how AEROF Holdings Sweden AB, company reg. no. 559229-6676, (“us”, “we” or “our”), use certain technologies that gather information regarding visits on and use of our website www.unity-living.com and its associated sites, (jointly referred to as the “Website”).

1. Cookies
   • The Website uses so-called cookies. Cookies are small text files that a website stores or gains access to on the visitors’ computers or mobile device. Cookies enable websites to remember a visitor when the visitor accesses the websites from the same device, and can be used for a number of functionalities on the websites, such as saving previous searches and adapting the content of the websites according to the visitor’s previous use of it. Our use of cookies on the Website is described in Section 3
   • There are two types of cookies: 1) persistent cookies that remain on the visitor’s computer for a fixed time; and 2) session cookies that are stored temporarily in the computer’s memory while the visitor is visiting the website. Session cookies disappear when you close your browser.
   • The cookies are either: 1) a first-party cookie set by the website or; 2) a third-party cookie set by someone else than the website. You can manage and turn off first-party cookies by using the Website’s cookie settings.
   • If you choose not to accept cookies, some of the functionalities of the Website may be limited.
   • The cookies serve different purposes and are divided in to different categories, 1) strictly necessary cookies; 2) performance and analytics cookies; and 3) advertising cookies.
   • Strictly necessary cookies are processed when you use our services and visit our Website. Performance-, analytics- and advertising cookies are optional and only processed if you have provided your consent to them. You may withdraw your consent at any time by changing your cookie settings.
   • Strictly necessary cookies let you use all the different parts of the Website. Without such cookies we will not be able to provide the service you asked for since they are crucial for the functions of the Website.
   • Performance and analytics cookies help us monitor the Website, to make sure that it is working properly and to fix errors that occur. These cookies collect information about how visitors use our Website.
   • Advertising cookies serve relevant advertisements regarding goods and services that may be of interest to you when you access and use the Website. Such advertisements are based on information about how you use the Website.
   • Cookies may gather personal data, such as IP-address. All such personal data is processed in accordance with the Website’s privacy policy.
2. Other Technologies
   • We use pixel tags, web beacons and similar technologies that enable, among other things, the tracking of your activities when you use the Website or receive e-mail messages from us, (jointly referred to as “other technologies”). Other technologies may be used in connection with our Website, our online advertising, or our e-mail messages, either by us or by our service providers, business partners or other third parties.
   • Other technologies are used to collect typically anonymous data to help identify certain information, to compile reports on tracking information regarding demographics, patterns and purchases on the Website, and other information to improve the user experience and our services. We may share these reports with for example our marketing partners. The tracking information in these reports cannot be traced back to individual users. We may co-ordinate the tracking information with other personal data provided by users of the Website for the purpose of analyzing the information. When such co-ordination is performed, all the coordinated information is processed as personal data in accordance with the Website’s privacy policy [mark “Website’s privacy policy” and insert link to privacy policy].
   • We may use other technologies in our HTML-based e-mails to let us know which e-mails that the recipients have opened. Other technologies may also be used to identify why you visit the Website, e.g. if any online advertisement or e-mail has brought you to the Website.
   • Other technologies may also be used by other companies to track visits to their websites, to identify whether such internet traffic came from our Website or to confirm your eligibility to receive services or benefits.
3. Cookies and other technologies on the Website
   • The Website uses the following strictly necessary cookies:

• The Website uses the following performance and analytic cookies and other technologies:

• The Website uses the following advertising cookies and other technologies:

4. Browser settings
   • If you do not accept our use of cookies or other technologies, you can set your browser not to accept cookies or other technologies. Through the browser, you can also delete previously stored cookies. Please refer to your browser’s help section for more information. Also, you can at any time delete cookies manually from your hard drive.
   • If you disable a cookie or a category of cookies, or other technologies, some of the functionalities of the websites you visit may not be able to function as you expect them to. Disabling cookies or other technologies does not delete existing cookies from your hard drive unless manually completed through your browser function.

____________________

Cookie banner and cookie management tool

Your cookie banner should include a text like the following suggestion (depending on the use of cookies and/or other technologies):

This website uses cookies that are necessary for the websites functionalities as well as cookies that helps us to remember users and understand ways to enhance their experience.

For more information on how we use, please visit our cookie policy.

The cookie banner should also include three buttons of the same size. One with text “Allow cookies /Accept cookies".  One with the text “Do not allow cookies, unless strictly necessary for me to use this website/Do not accept cookies, unless strictly necessary for me to use this website [Link button to turn off all cookies in cookie management tool], and one with text “Purposes and Features/Settings”, The “Purposes and Features/Settings” [button should be a link to a cookie management tool that allows the visitor to see which cookies that are activated and which are not. The cookie management tool should allow the visitor to manage the cookies by category and purpose.]