In short
- We only collect what we need – and we never sell your data.
- The website uses no tracking or marketing cookies.
- People data that our customers enter into AltitudeHR is processed by us as a data processor, under our data processing agreement.
- You can request access, rectification or erasure at any time.
Contents+
01
Data controller
This is an English translation. In case of any discrepancy, the Swedish version prevails.
AltitudeHR (reg. no. 9008242613), Storgatan 23A, 261 30 Landskrona, Sweden, is the data controller for the processing described in this policy. You can reach us at hello@altitudehr.se.
This policy applies to visitors to our website, people who contact us or book a demo, contact persons at customers and suppliers, and users who create an account in AltitudeHR.
02
Our two roles
As a data controller we process data about you when you visit the website, contact us or represent a customer. That processing is what this policy describes.
As a data processor we process the people data that our customers – the employers – enter into AltitudeHR, such as information about employees, absence and pay. The employer is then the controller and decides how the data may be used. That processing is governed by our data processing agreement. If you are employed by one of our customers and have questions about your data, please contact your employer first.
03
What data we process, why and on what legal basis
- Answer enquiries, book demos and start free trials
- DataName, work email, phone, company, company size, industry, role, message
- Legal basisLegitimate interest (answering your enquiry and helping you get started), your consent and – for free trials – performance of contract
- Retention12 months after the last contact
- Create and administer trial accounts
- DataName, work email, company, company size
- Legal basisSteps prior to entering into a contract
- RetentionDuring the trial and 12 months thereafter if no contract is signed
- Deliver the service to customers
- DataContact and login details for users
- Legal basisPerformance of contract
- RetentionThe contract term and thereafter as below
- Invoicing and accounting
- DataName, company, billing address, payment details
- Legal basisLegal obligation (Swedish Bookkeeping Act)
- Retention7 years after the end of the financial year
- Security and abuse prevention
- DataIP address, time and technical logs
- Legal basisLegitimate interest (protecting the service and our customers)
- RetentionUp to 12 months
- Newsletters and product news
- DataName and email
- Legal basisConsent – which you can withdraw at any time
- RetentionUntil you unsubscribe
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answer enquiries, book demos and start free trials | Name, work email, phone, company, company size, industry, role, message | Legitimate interest (answering your enquiry and helping you get started), your consent and – for free trials – performance of contract | 12 months after the last contact |
| Create and administer trial accounts | Name, work email, company, company size | Steps prior to entering into a contract | During the trial and 12 months thereafter if no contract is signed |
| Deliver the service to customers | Contact and login details for users | Performance of contract | The contract term and thereafter as below |
| Invoicing and accounting | Name, company, billing address, payment details | Legal obligation (Swedish Bookkeeping Act) | 7 years after the end of the financial year |
| Security and abuse prevention | IP address, time and technical logs | Legitimate interest (protecting the service and our customers) | Up to 12 months |
| Newsletters and product news | Name and email | Consent – which you can withdraw at any time | Until you unsubscribe |
We do not make decisions based solely on automated processing that have legal effects for you.
04
Who we share data with
We never sell personal data. We only share it with suppliers who help us run the business, and only to the extent necessary:
- Hosting and storage – providers of server operations and storage within the EU/EEA.
- Email and communication – to send confirmations, activation links and replies.
- Customer management and invoicing – systems for managing customer relationships and invoices.
All suppliers are bound by data processing agreements and may only process data according to our instructions. An up-to-date list is available on request. We may also disclose data where required by law or a decision of an authority.
05
Transfers outside the EU/EEA
We aim for all processing to take place within the EU/EEA. If a supplier processes data outside the EU/EEA, we ensure a lawful basis for the transfer, such as an adequacy decision or the European Commission's standard contractual clauses, together with any necessary supplementary measures.
06
How we protect data
We use technical and organisational measures adapted to the sensitivity of the data, including encryption in transit and at rest, least-privilege access control, access logging and recurring security reviews. Read more on our security page.
07
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- access the data we hold about you,
- have inaccurate data rectified,
- have data erased when it is no longer needed or the processing lacks a legal basis,
- restrict processing in certain cases,
- object to processing based on legitimate interest,
- receive your data in a machine-readable format (data portability),
- withdraw consent at any time – without affecting processing that has already taken place.
Contact us at hello@altitudehr.se and we will reply within one month. If you are unhappy with how we process your data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
09
Changes to this policy
We may update this policy, for example if we change our processing or the law changes. The date of the latest change is shown at the top. We notify customers and registered users of material changes by email.
Questions about data protection or terms?
We reply within one business day.