Privacy policy for Unikum

Introduction

Welcome to Unikum – Net AB's (org. no. 556649-2350) ("Unikum", "we" or "our") policy on the processing of personal data - our Privacy Policy ("policy"). It is important to us at Unikum that you, as a user, know how your data is handled and what we do to ensure that it is safe and secure. User ("you" or "user") refers to the person who uses Unikum, e.g. a guardian or an educator who wants to use Unikum's range of services.

Unikum is there to facilitate collaboration around learning and quality in preschool and school for staff, children, students and guardians. Unikum's services contribute in connection with children's and pupils' education, as well as in the child or students transitions between different teachers, departments, preschools, schools and cities.

Unikum's e-services ("The School Tools") are used by municipalities, independent school chains as well as individual preschools, schools and teachers ("The School Customer"). The Personal Data Controller (“PDC”) for the processing of your data in Unikum is then the School Customer. In such cases, Unikum acts as the Personal Data Processor (“PDP”) on behalf of the School Customer for the processing of your personal data in the School Tools, and is responsible for the organizational and technical security measures that we have been instructed to implement by the School Customer.

There are also cases where Unikum is the Personal Data Controller for the processing of personal data. Unikum is the Personal Data Controller for processing of personal data in cases such as:

Additional services for users ("User Services") that the user has ordered from Unikum for their own use, e.g. newsletter, survey, portfolio, app or own account in Skolbanken, with the terms of use that apply to these services.
The administration of the user's account details for User Services and the School Tools to manage identification and access at login.
Cookies on Unikum's website, which are handled according to Unikum's separate Cookie Policy.

This Privacy Policy describes Unikum's processing of personal data only as specified in points 1-3, above. Information regarding other instances of personal data processing is provided by the relevant School Customer

The purposes of Unikum's processing in this policy

Your personal data is processed for the following purposes and based on the following legal basis:

Provide the User Services that you have ordered from Unikum. The personal data is thereby processed on the legal basis of fulfilling an agreement that the user entered into with Unikum.
Transfer of personal data to a new school upon your request. The personal data is processed on the legal basis of fulfilling an agreement that the user entered into with Unikum.
Administration of your account information. The processing of personal data is carried out on the basis of fulfilling an agreement that you have entered into with Unikum, and because Unikum has a legitimate interest in administering account information to meet security requirements according to the agreement with the School Customer, and in accordance with legislation.
Aggregation of data for statistics. The personal data is processed on the legal basis that Unikum has a legitimate interest in producing statistics on the use of the Service for Unikum and the School Customer.
Research purposes. Personal data may be processed for scientific research purposes to evaluate and improve learning methods. In such a case, Unikum cooperates with the School Customer and academic institutions. The processing of personal data for this purpose may require separate consent from the user.
Cookies. See Unikum's Cookie Policy.

Types of personal data processed

Data in User Services

Examples of information you as a user can choose to store for yourself and/or your children are contact information, settings, wishes, personal profile in text and image, learning logs, reflections, basis for development interviews, student work, special need programs, evaluations, assessments, grades, portfolios with content, courses, results, profiles, applications, schedules, attendance and learn logs.

Account details

Account information is personal data that is necessary to manage identification and access when logging in. Examples of account information include username, phone number, email addresses, password, and navigation information to prevent your login session from being hijacked by unauthorized parties.

How long is personal data saved?

Unikum has the right to delete personal data processed within the framework of User Services after ten (10) years. Unikum also has the right to delete data for a user who no longer has a subscription to User Services according to the Terms of Use. You, as a user, also have the option to terminate your subscription in accordance with the Terms of Use and may request Unikum to delete your data in this context.

In order to avoid misunderstandings: when deleting data in User Services, data processed in School Tools will not be deleted. The School Customer, being the Personal Data Controller for processing personal data in the School Tools, has the right to determine the duration of data storage in the School Tools.

Your rights

The exercise of your rights is free of charge. However, we reserve the right to charge a reasonable fee for the action in the event of an unreasonable or obviously baseless request or objection.

We will respond to your request within a reasonable time and within one (1) month. This period can be extended by up to two (2) months if your request is particularly complicated or due to the number of requests received.

Consent. If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time and free of charge for future processing of your personal data.
Register extract. You have the right to request free access to your personal data and obtain a copy of it (commonly known as a register extract). Requests for register extracts are typically fulfilled by making user data visible directly to the logged-in user within the User Services.
Correction and deletion. You have the right to request the correction of incorrect information free of charge and, under certain circumstances, to request that your personal data be deleted.
Limitation. You have the right to request, free of charge, the correction of inaccurate information and, under certain circumstances, the deletion of your personal data.
Data portability. In certain cases, you have the right to data portability. This means you can obtain the personal data you have provided in a structured, commonly used, and machine-readable format (typically a PDF that you can download from the User Service) and have the right to transfer these to another personal data controller. This only applies if we process the personal data with your consent or because it is necessary to fulfill an agreement with you.
Objection. You have the right to object to the processing of your personal data if it's based on Unikum's or a third party's legitimate interest. In such cases, we must cease the processing unless we can provide compelling legitimate reasons that override your interests in preventing the processing of the personal data.
The Swedish Data Protection Authority. You have the right to lodge a complaint with the Data Inspectorate, which is the authority in Sweden that supervises how we at Unikum comply with the legislation.

To exercise your rights, please contact dataskydd@unikum.net

Transfer of personal data outside the EU/EEA

Personal data processed in User Services is processed within the EU/EEA1. However, when you use your e-mail or other communication tool to contact Unikum, you should bear in mind that your e-mail or communication tool provider may be based outside the EU/EEA, e.g. in the U.S.

Recipient of personal data

Unikum transfers data to personal data assistants who take care of storage, support and operation of the underlying IT infrastructure as well as to provide systems for customer support.

Unikum can transfer personal data to a new school on your behalf. Unikum does not initiate this transfer; it's your choice whether the data that you have in the User Services should be transferred to the new school.

Updates to this privacy policy

Unikum reserves the right to make changes to this privacy policy at any time to the extent that the changes are necessary. All changes are published on Unikum's website. You should therefore review this policy periodically to ensure that you are happy with the changes. However, in the event of changes of material importance, we will notify you via notices in the Service that changes have taken place.

If the changes concern such personal data processing that we carry out based on your consent, we will give you the opportunity to give your consent again.

Contact details and data protection officer

If you have any questions related to this Privacy Policy, if you suspect a possible breach of this policy, or if you want to contact us regarding our processing of your personal data, please contact Unikum's Data Protection Officer (DPO) or our customer service by sending a letter or email to the addresses listed below.

Unikum:

Write to us at:

Att.: Data protection, Unikum - Net AB,
Hammarby Kaj 14 - 4 tr, 120 30 Stockholm
Email: dataskydd@unikum.net

Data Protection Officer:

Secure State Cyber AB
Email: dataskydd@unikum.net

_____________

1EEA stands for "European Economic Area" and includes, in addition to the EU member states, Norway, Iceland and Liechtenstein.

Last updated 2023-06-04

Market: ALL, Language: EN, Doc: PriPoALL-ENv20230604