In this part of the privacy policy, we want to inform you about the purposes for which we collect and process personal data when you visit and use our website, register for webinars/seminars, and/or receive communications from us for marketing or informational purposes.
Data Controller
Origo Group AB (“Origo Group”, 559067-2027, Repslagargatan 17B, 118 46 Stockholm), also referred to as “the Company” below, is the data controller according to the Data Protection Regulation (General Data Protection Regulation (GDPR) (EU) 2016/679) for the processing of personal data that occurs due to visits to the Company’s website and for personal data processing that the Company does for marketing and information dissemination purposes.
Origo Group is responsible for ensuring that the personal data collected by the Company is only used for intended purposes and protected against unauthorized access and use.
Your personal data will never be sold or transferred to another party for purposes other than those specified in this policy. However, personal data may be transferred to companies within the Origo Group. Here is information about these.
Personal data may also be disclosed to subcontractors or suppliers that the Company engages to perform a service related to the purposes specified in this policy. Information about Origo Group’s subcontractors and suppliers is provided below under “Our data processors and suppliers.”
Purposes
Origo Group processes personal data for marketing and information dissemination, which specifically includes the following purposes:
- Send information that you request from our knowledge base/expertise/inspiration.
- Inform you of news, offers, and webinars/seminars that you may be interested in.
- Analysis of traffic and conversions on our website and in newsletters to tailor the message to the recipient.
- Profiling based on activity on Origo Group’s website and social media to expose our marketing to a suitable profile.
Legal Basis
The right to process your personal data for the above purposes is based on the legal basis of legitimate interest. For the use of cookies, Origo Group relies on consent unless they are strictly necessary.
In our legitimate interest assessment, we have assumed that we only communicate with you in your professional role and keep you informed about activities and research services that may be relevant and of interest to you or the organization you work for.
Collection of Personal Data When Visiting Website
Personal data is collected on Origo Group’s website if you choose to provide information in contact forms and/or in the chat function on the website. In these cases, you are asked to provide personal data such as name, title, organization name, email address, and/or phone number. These types of personal data are processed by us so that we can respond to a question or request from you about services or information we have. They may also be used by us to send information that we believe may be relevant to you in your professional role or for the organization you work for.
We also collect personal data and other data that is automatically recorded during your visit to our website. However, this occurs only after an interaction (see the “Cookies and log files” section below).
Personal data collected via the website is stored in our CRM system Upsales.
Additional Collection of Personal Data
Participating in webinars/seminars offered by Origo Group may involve the collection of personal data to invite you to future webinars/seminars and communicate with you for marketing or informational purposes. We may also communicate with you in your professional role without you having provided your personal data to us. For example, we may have received a tip from one of your colleagues, who has accessed our reports or research services, that you may be interested in receiving information from us. We then store your contact information (personal data) in our CRM system Upsales. These processing activities also take place based on the legal basis of legitimate interest.
What Personal Data Does Origo Group Process?
- Name
- Title
- Company
- Organization number
- Email address
- Phone number
- Image, video, and username/initials in Microsoft Teams if you agree to participate in one of our recorded webinars as non-anonymous
- Cookies, log files & device identifiers
How Long Are Personal Data Stored?
We store your personal data for as long as the provision of our services requires it, considering the purpose of the processing. The right to process your personal data for our specified purposes (see “Purposes” section) is based on the legal basis of legitimate interest.
What Rights Do I Have?
According to the Data Protection Regulation GDPR, you, as a data subject, have a number of rights as outlined below.
Right to Information and Record Extract
You, as a data subject, have the right to receive information on how your personal data is processed by the data controller, both when it is collected and when you request it.
You also have the right to receive a record extract, which includes a copy of the personal data being processed, as well as the information about the processing that should be provided when personal data is collected. Record extracts must be provided within 30 days of receiving the request. If record extracts cannot be provided, this information must be given within 30 days.
Right to Erasure, Correction, and Completion
You have the right to contact Origo Group and request that your personal data be deleted, corrected, or completed for the purposes stated in this policy. You also have the right to receive confirmation when these actions have been taken.
Right to Restriction of Processing
You, as a data subject, have the right to request that the processing of your personal data be restricted, which means that they are marked and can only be processed for certain specific purposes. The right to restriction applies, among other things, when you, as a data subject, believe that the data is incorrect and have requested correction. In such cases, you can also request that the processing of the data be restricted while the accuracy of the data is being investigated. When a restriction is lifted, Origo Group is obliged to inform you of this.
Right to Object
As a data subject, you have the right to object to the use of your personal data for direct marketing purposes. If Origo Group receives such an objection from you, the Company will cease processing your personal data for this purpose.
Even when personal data is processed to perform a task of public interest or as part of official authority, a data subject has the right to object to the processing. The data may only continue to be processed if it can be shown that there are compelling legitimate reasons for the data to be processed that outweigh the interests of the data subject.
Data Portability
Data portability means that anyone who has provided their personal data in a structured, commonly used, and machine-readable format has the right to obtain the data to transfer it to another data controller. The recipient of the personal data is obliged to facilitate such a transfer of data. However, a prerequisite is that the data is processed based on consent from the data subject or an agreement with the data subject, i.e., not for purposes where the legal basis is legitimate interest. The right to transfer data also applies only to data that the data subject has provided to the data controller, not data collected from other sources.
Automated Decision Making and Profiling
Individuals have the right not to be subject to automated decision-making, i.e., decisions made entirely without human intervention, if the decision can have legal consequences or similarly significantly affect them.
Automated decisions can be made with or without profiling. Conversely, profiling can be used without leading to an automated decision. Profiling refers to any form of automatic processing of personal data to assess certain personal characteristics, especially to analyze or predict a physical person’s job performance, financial situation, health, personal preferences, interests, reliability, behavior, location, or movements.
Automated decisions, made with or without profiling, are not allowed if they could have legal consequences or similarly significantly affect the data subject. Exceptions are if it is necessary for a contractual relationship between the data subject and the data controller, the data subject has consented to automated decision-making, or if it is prescribed in EU law or national law that automated decision-making is permitted. Origo Group uses profiling for marketing purposes, but it is done without automated decision-making.
Right to Lodge a Complaint with the Supervisory Authority
You also have the right to lodge a complaint with Sweden’s national supervisory authority for the processing of personal data, the Swedish Authority for Privacy Protection (IMY) (www.imy.se), if you believe that your personal data is being processed incorrectly by Origo Group.
Contact
You can always contact us for help or information about your rights by sending an email to data-privacy@origogroup.com.
Our Collection and Communication Channels
This is a list of communication channels and partners where your personal data may be processed.
Forms and Email Campaigns
When you fill out a form on our website or if you receive emails from us, they are primarily created and sent from our CRM system Upsales from Upsales Nordic AB. If we contact you with offers or information for the first time, it is usually done through our supplier Qualifier’s search algorithm and lead generation service.
Chat Function
When you chat with us on our website, it is done through the provider Leadoo Marketing Technologies. The personal data you choose to provide when interacting with our chat function is integrated with our CRM system Upsales.
Digital Advertising
When you are exposed to digital ads from us on platforms such as Google or social media like LinkedIn, it is done through our digital partner Nokoby, Nordiska Kommunikationsbyrån AB, who has access to our accounts.
Press Room
We use the supplier Notified for media monitoring and press room on the external domain (press.origogroup.com), as well as sending out press releases. If you are a journalist who has received a press release from us, it comes from Notified’s database.
Links and External Websites
On Origo Group’s website www.origogroup.com, there are links to other websites and social media platforms that we use and may share your personal data with. We care about the personal integrity of visitors to the website and the social media platforms we use:
- LinkedIn
- Facebook
- Instagram
- YouTube (Google Inc)
Origo Group’s webinars and cases that are recorded or filmed are posted on our YouTube channel to be embedded on our website. If you are a customer of ours or a webinar participant and participate in a recording, you also agree that we have the right to publish it on YouTube.
This privacy policy does not apply to other websites or social media accounts, so you should review the privacy policy of these websites before providing your personal data. Origo Group ensures that the content we post on our account in these media is in accordance with GDPR and what is stated in this policy.
Our Data Processors and Suppliers
Upsales Nordic AB
We store your personal data in our CRM system Upsales from Upsales Nordic AB, a data processor for Origo Group. Our use of Upsales means that personal data is processed within the EU/EEA. You can access Upsales’ privacy policy here: https://www.upsales.com/sv/privacy-policy/
Leadoo Marketing Technologies Ltd
The personal data you provide when filling in our chat is managed and stored by Leadoo Marketing Technologies. Leadoo is a data processor for Origo Group for this processing.
Origo Group uses Leadoo’s user tracking to follow how visitors navigate on Origo Group’s website. We combine this data with user information collected through interactions in the chat function provided by Leadoo. Leadoo uses etag tracking, which is technically different from cookie tracking but falls under the same legislation. In Leadoo Marketing Technologies Ltd’s privacy policy (https://leadoo.com/privacy-policy/), you can read more about what information is stored and what your rights are. You can end tracking by clearing your browser cache.
Leadoo and its subcontractors care about your security and GDPR. The personal data they collect on our behalf and with your consent (by filling in information in the chat function) is integrated with our CRM system Upsales and may be processed in a third country as long as they remain in Leadoo’s system.
Qualifier
Qualifier (QLFR Artificial intelligence AB) is a search service with a built-in email system. The search algorithm finds relevant contact information from open sources or third-party providers and integrates it with our CRM system Upsales. Qualifier does not store any data. The information that Origo Group is interested in (Name, title, company, email, and possibly phone number) is shared directly with Origo Group at our request. All processing at Qualifier is in compliance with GDPR. Access Qualifier’s privacy policy here: https://qualifier.ai/sv/privacy
Nokoby, Nordiska Kommunikationsbyrån AB
Origo Group has engaged the media agency Nokoby for advertising efforts and analysis of traffic and conversions in digital channels such as Google and social media. Nokoby Marketing Technologies AB acts as a data processor for Origo Group in this regard. As a data processor, Nokoby is responsible for processing personal data for the customer in accordance with GDPR. Nokoby and its subcontractors mainly process personal data within the EU/EEA. Processing outside the EU/EEA may occur with Origo Group’s approval and provided that legal requirements for processing personal data outside the EU/EEA are met. If Nokoby, with Origo Group’s approval, engages a subcontractor outside the EEA, the legal basis for the transfer to a third country must be ensured, for example, through standard clauses for the protection of the transfer of personal data to a third country with the subcontractor.
Pigment AB
Web agency hosting Origo Group’s website. Hosting the website involves transferring to third countries (USA).
Google Inc
We have an account on Google to allow our media agency Nokoby to place ads, analyze our website traffic, pay for keywords, and create tags for certain conversion activities that we want to measure.
Google acts as the data controller in this regard and relies on legitimate interest when using personal data for activities like displaying content-based ads and ad reporting. Even though they rely on legitimate interest for processing, consent according to GDPR is required to use cookies for these purposes from users in countries covered by the cookie provisions in the directive on privacy and electronic communications. To opt out of these ads, go to: https://myadcenter.google.com/. There, you can disable the function of personalized ads from Google.
Google transfers personal data to third countries as they are based in the USA. The same applies to the social media platforms we use. See the “Links and External Websites” section above.
Notified
To send out press releases or news to journalists, Origo Group uses the supplier Notified. Notified is part of the American company Intrado Digital Media LLC. Notified is the sole data controller for its processing. Access their privacy policy here: https://www.intrado.com/legal-privacy
Cookies
Cookies are used on the website www.origogroup.com, i.e., small text files stored on the visitor’s computer that can save personal settings and track visitor activity on the website.
When you visit our website, you will receive information about the various cookies the website uses. This way, you can decide whether to accept or reject cookies for any of the specified purposes.
Some cookies are necessary to display content on our website and cannot be turned off if you want to access all the functionality on our website. These cookies do not store information that can identify you as an individual. Some cookies are available to enhance your user experience when visiting our website.
We use “analytics cookies” to evaluate and provide statistics on the general behavior of our visitors on our website, e.g.:
- Which external pages visitors come from
- Which search terms are used
- Which subpages are most
