Information on tracking technologies
Here you will find information about why we use tracking technologies, what it means for you and what choices you can make if you do not want us to use certain tracking technologies.
About tracking technologies
Kivra uses tracking technologies for two reasons: Either the tracking technologies are necessary to provide our services, or the technologies are an effective way for Kivra to analyze and improve the user experience of our services.
According to the Electronic Communications Act (2003: 389), you have the right to receive information about which tracking technologies are used on a website you visit or in an app you use. You also have the right to receive information about how and why tracking technologies are used. The provider of the website or app also needs to obtain your consent to use tracking technologies that are not necessary to provide a service you have requested to use.
If the use of a tracking technology means that personal data about you is collected, the General Data Protection Regulation (GDPR) applies to the collection and use of your personal data. This means that you also have the right to certain information, and have certain rights in relation to how your personal data is used.
Kivra fulfills its obligations under the Electronic Communications Act and the GDPR by:
- Informing you about the fact that tracking technologies are used when you visit our websites or use one of our apps.
- Letting you choose if you want to consent to the use of tracking technologies that are not necessary to provide you with the service you are going to use.
- Providing you with this information on tracking technologies.
If you want to know more about tracking technologies in general and what rights you have with regard to the use of such technologies, you can find out more on the Swedish Post and Telecom Authority's website and on the Swedish Authority for Privacy Protection's website.
Tracking technologies in Kivra's apps
When you use Kivra's app for iOS or Android, data is placed in the local storage space of your device, either by us or by a third party on our behalf. The data remains on your device until either you or we (ourselves or through the third party) delete it, or until you uninstall the app. The data is used to collect certain data points about your installation of the app and how it is used.
Necessary tracking technologies
We use the following tracking technologies in order to perform functions that are necessary to provide our services through the app:
- Google Firebase, and specifically:
- Firebase Crashlytics
- Firebase Remote Configuration
- Firebase Cloud Messaging
These tracking technologies are used to:
- Detect and analyze errors and crashes in the apps.
- Turn specific features on and off, such as allowing you to register as a user in the app and offering you the option to register a debit card in order to receive receipts in Kivra, based on your debit card.
- Be able to send notifications, such as reminders, notifications that new content is available or notifications that an update is available.
Examples of data points collected from or stored on your device are:
- Installation IDs, i.e. an ID that is used for a specific tracking technology and corresponds to your installation of the Kivra app. Examples of such installation IDs are Firebase Installation ID and Crashlytics Installation UUID.
- Information about your installation of the Kivra app, such as bundle identifier and full version number.
- Information about your device, such as model name, processor architecture, RAM and disk space.
- Information that the app has crashed or that a certain error has occurred and how your device was used in connection with the crash / error.
The legal basis for Kivra's collection and use of personal data via necessary tracking technologies is that the processing is necessary to fulfill your agreement with Kivra.
Some of the data collected is only stored temporarily on your device, while other data is stored as long as you have the Kivra app installed. Kivra uses data collected from your device via necessary tracking technologies for varying lengths of time depending on the exact purpose of the technology in question, but as a maximum for as long as you are a user of Kivra's services. If you cancel your use of Kivra's services, Kivra will either anonymise the collected data or ensure that collected data is deleted as soon as possible, and no later than within 180 days.
Tracking technologies for analytics purposes When using Kivra's app, you will be asked if you consent to Kivra’s collection of information about your use of the app, in order to improve your user experience.
If you choose to give such consent, we use the following tracking technologies:
These tracking technologies are used to analyze how Kivra's users interact with Kivra's apps.
The analysis consists partly of a high level of understanding of who our users are, for example which device models and operating systems most users have and in which countries most users are located. It also consists of examining how users generally interact with various functions in Kivra's apps, for example if/how users press a certain button or if/how users read a certain notification.
The analyses are used by Kivra's product development team in order to understand which functions need to be developed and improved, and thus to improve the user experience in our apps.
Examples of data points collected from or stored on your device are:
- Installation IDs, i.e. an ID that is used for a specific tracking technology and corresponds to your installation of the Kivra app. An example of such an installation ID is the Analytics App Instance ID.
- Information about events in the app, such as opening the app, updating the app, pressing a specific button or opening a specific notification.
- Information about your installation of the Kivra app, such as app version, language and approximate location (based on your IP address).
- Pseudonymized information that identifies you or an event in the app, such as a user key, content key, receipt ID, and campaign ID.
The legal basis for Kivra's collection and use of personal data via tracking technologies used for analytics purposes is your consent.
Part of the data collected is only temporarily stored on your device, while other data is stored as long as you have the Kivra app installed. Kivra uses data collected from your device via tracking technologies for analytics purposes for different lengths of time depending on the exact purpose of the technology in question, but for a maximum of up to 18 months from the time the data is collected. If you cancel your use of Kivra's services, the collected data will be deleted within 2 months.
Your choices regarding our use of tracking technologies in the apps
You can not opt out of the use of necessary tracking technologies, because they are necessary for us to be able to provide the services in our apps.
If you do not want Kivra to use tracking technologies for analytics purposes, you can either refrain from providing your consent the first time you log in to the app or change your settings in the app at a later point. To change your settings:
If you use Kivra’s app for iOS:
Go to the app's settings. Go to More, select Settings and then Tracking Technologies.
If you use Kivra's app for Android:
Go to Menu, select App settings and then Tracking technologies.
If you have consented to Kivra’äs use of tracking technologies for analytics purposes, you can withdraw your consent at any time. Kivra will then stop collecting data for analytics purposes, and will delete data that we have collected for this purpose within 2 months. Withdrawal of your consent does not affect the legality of the processing carried out before you revoked your consent.
Tracking technologies at http://www.kivra.se
Kivra uses tracking technologies to make our websites work as well as possible, e.g. by remembering your settings and choices in the service and to be able to troubleshoot. If you have consented to it, tracking technologies also provide us with information on how you use the services, e.g. that you clicked on a certain button or visited a certain page, so that we can constantly improve the user experience for you.
This cookie saves a file for a longer period of time on your computer. It is used e.g. for the website to recognize you and the choices and settings you made during a previous visit.
When you visit kivra.se, the session cookie is temporarily stored in your computer's memory to e.g. keep track of which language you have selected. Session cookies are therefore not stored for a long time but disappear immediately when you close your browser.
Third Party Cookies
If you choose not to give your consent, Kivra only uses such cookies or tracking technologies that are necessary to provide Kivra's services to you, including remembering whether you have said yes or no to tracking technologies. You can clear and turn off cookies in your browser. You can also set the browser so that you receive an alert every time the website tries to place a cookie on your device. Previously stored cookies can also be deleted through the browser. In some browsers (for example Google's "Chrome") you can use a so-called incognito mode, in which the browser automatically deletes all cookies when you close it.
If you as an Internet user specifically want to avoid being analyzed through Google Analytics, Google provides the following service: Google Analytics opt-out browser add-on.
Please note that blocking cookies may result in you not having access to all pages and functions on Kivra's website and that it may impair your user experience.
Who is the data controller?
The data controller for the processing of your personal data described here is: Kivra Sverige AB (org. no. 556917-3544) Klara Norra kyrkogata 33, 111 22 Stockholm, Sweden E-mail: firstname.lastname@example.org
Who has access to your data?
The tracking technologies Kivra uses are provided by companies that process the personal data they receive from Kivra on behalf of Kivra, so-called data processors.
The legal basis for Kivra's use of data processorsis that Kivra needs to access services and functionality from other companies that Kivra cannot offer itself. Kivra then has a legitimate interest in being able to access these services and functionality. We ensure that the processing it entails is necessary to pursue that interest, and that our interest outweighs your right not to have your personal data processed for this purpose. You have the right to object to this processing due to circumstances in your individual case. More information about your rights can be found in the section "What are your rights?" below.
The data processors engaged by Kivra in the use of tracking technologies are established or have subcontractors established outside the EU/EEA. Your personal data can therefore be transferred to countries outside the EU/EEA. Other countries may have laws which have the effect that personal data may be subject to requests for access from public authorities for the purpose of combating crime or safeguarding national security. Regardless of whether we or any of our suppliers process your personal data, we will ensure that an adequate level of protection is provided and that appropriate safeguards have been taken in accordance with applicable data protection requirements. Such appropriate safeguards include ensuring that the European Commission's standard contractual clauses have been entered into with the recipient outside the EU/EEA. In such cases, we also assess whether there is legislation in the recipient country that affects the protection of your personal data. Where necessary, we implement supplementary l measures so that the protection of your data is upheld in the transfer of data to the relevant country outside the EU/EEA.
If you want more information about our supplementary measures, you can always contact us, see the section "Where do you turn if you want more information or have complaints?" below.
What are your rights?
For information about what rights you have in relation to Kivra's processing of your personal data in connection with Kivra's use of tracking technologies, please read the section "What are your rights?" in Kivras Information on the Processing of Personal Data.
Where do you turn if you want more information or have complaints?
You are always welcome to contact Kivra by email: email@example.com or telephone: 077-045 70 00 with questions about Kivra's use of your personal data.
Kivra has a data protection officer (DPO) who oversees Kivra’s compliance with the GDPR. Kivra's DPO is Anna Mirsch Peiris. If you want direct contact with DPO, please write "DPO" in the subject line when you email firstname.lastname@example.org .
If you believe that Kivra processes your personal data in violation of applicable data protection legislation, we of course want you to tell us about it by writing to email@example.com . You also have the right to submit a complaint to the Swedish Authority for Privacy Protection, which is the supervisory authority for Kivra's processing of your personal data. For more information, go to the Authority for Privacy Protection's website www.imy.se.