N.B. The English text is an unofficial translation. In case of any discrepancies between the Swedish text and the English translation, the Swedish text shall prevail.
Dear User,
This Privacy Policy applies to services and products provided on www.dibz.se (the "Website"), (collectively referred to as the "Services"), which are provided by OptiQueue Nordics AB, registration number 559286-3251, with the address Drottninggatan 78, 111 36 Stockholm, Sweden ("we" or "us"). The definitions from our terms of use also apply to this Privacy Policy.
When you create a Main Account and use the Services, this means that you provide us with information (i) about yourself, and, where applicable, (ii) about children under 13 years of age for whom you create a Sub-Account and/or (iii) about individuals over 13 years of age whom you invite to create a Sub-Account.
When you create a Sub-Account upon the invitation of a Main Account holder and use the Services, you provide us with information about yourself.
We share the information you provide to us with third parties you have chosen for us to share with. This means that the personal data will be processed by these third parties as data controllers, in accordance with their current privacy policies.
Your privacy is important to us. Under the General Data Protection Regulation 2016/679 ("GDPR"), we are responsible for the processing of personal data when we determine the purposes and means of processing. By "personal data," we mean information that is directly or indirectly attributable to a living individual and that is processed within the framework of the Services.
This document contains information about our collection, use, and processing of personal data, the parties with whom we may share personal data, and your rights regarding your personal data. When you use the Services, we will process personal data for several purposes, as stated below.
1. PERSONAL DATA PROCESSED
We collect and use the following types of personal data to provide the Services and for the purposes listed below: (a) name; (b) email address; (c) telephone number; (d) billing address; (e) personal identification number; (f) password; (g) username; (h) school; (i) income; (j) type of income; (k) any employer and contact information for such an employer; (l) any membership in a tenant association/condominium association and contact information for such an association; (m) current and desired housing type; and (n) number of children in the household. (o) desired rent (p) number of desired rooms
Please note that we cannot provide the Services or part of the Services without processing the personal data listed above. When you use the Services, certain information will be automatically collected by us, including:
(a) information about your use of the Services; (b) information you provide when contacting our customer service; (c) content you publish, upload, and/or contribute to the Services; and (d) technical data, which may include the URL you were on when you navigated to the Website, your IP address, unique device ID, information about network and computer performance, browser type, language, and information about identification and operating system.
2. PURPOSE OF PROCESSING AND LEGAL BASIS
We will process the above information for the following purposes:
(a) Name, email address, telephone number, billing address, personal identification number, password, and username to manage your account, ensure the provision of the Services, integration with third-party services, and otherwise provide the Services in accordance with the terms of use.
To the extent that the personal data (a) above pertains to the Main Account holder or a Sub-Account holder over 18 years of age, we process the data to fulfill our contract with the Main Account holder or Sub-Account holder.
To the extent that the personal data in (a) above pertains to a child under 13 years old for whom the Main Account holder has created a Sub-Account or a child between 13 and 18 years old invited by the Main Account holder to create a Sub-Account, the processing of personal data is based on our legitimate interest in providing the Service to these individuals.
(b) Personal data in section (a) above, along with income, type of income, information to any employer and tenant association/condominium association, current and desired housing type, number of children in the household, desired rent, number of desired rooms, and the number of queue days belonging to each queue system to manage your registration with the desired queue provider and regularly log in and update your information.
To the extent that the personal data (b) above pertains to the Main Account holder or a Sub-Account holder over 18 years of age, we process the data to fulfill our contract with the Main Account holder or Sub-Account holder.
To the extent that the personal data in (b) above pertains to a child under 13 years old for whom the Main Account holder has created a Sub-Account or a child between 13 and 18 years old invited by the Main Account holder to create a Sub-Account, the processing of personal data is based on our legitimate interest in providing the Service to these individuals.
(c) Name, email address, and telephone number to send notifications and messages via email and SMS to you as a Main or Sub-Account holder over 16 years of age, including sending you marketing of our and related third-party products and services, based on your consent or on our legitimate interest to send marketing materials to you regarding products and services that may interest you, and to inform you of our updates to the Services and terms of use, based on our legitimate interest in keeping you updated on the development of the Services (such as new features) and the terms you have agreed to by using the Services.
(d) Information about your use of the Services, information provided during contact with customer service, and content you publish, upload, and/or contribute to the Services to personalize and improve your experience of the services, based on our legitimate interest to give you a customized experience tailored to your preferences.
(e) Information about your use of the Services and other technical data to ensure the technical functionality of the Services (to fulfill our agreement with you) or our legitimate interest in providing the Services and to prevent the misuse of the Services in violation of the terms of use, based on our legitimate interest in ensuring that our Services are not misused and to protect ourselves and our other users;
(f) Information about your use of the Services to enforce the terms of use, including protecting our rights, property, and safety, and if necessary, the rights, property, and safety of third parties, based on our legitimate interest in protecting our business, our Service users, and other third parties; and
(g) To comply with legal obligations, based on our obligation to comply with applicable laws and regulations.
For the processing of personal data based on our legitimate interest, we have assessed the importance of our legitimate interest against what the processing of personal data means for your interests and your right to privacy, and we have determined that our legitimate interest can be exercised without infringing on your right to privacy in a way that prevents the processing of personal data.
3. STORAGE OF PERSONAL DATA
As a general rule, we store your personal data only for as long as necessary to provide the Services unless there is a legal obligation to store the personal data for a longer period.
After you have terminated your account, the personal data linked to your account will be stored for a maximum of 1,095 days.
Contact details used for marketing and information mailings will be stored as long as your account is active, and deleted if you unsubscribe from our mailings, provided they are no longer needed to continue providing the Services to you.
Personal data used to improve the Services and develop new services is anonymized as soon as possible, but no longer than 36 months from the time they were created or collected.
Personal data that may be used to enforce the terms of use and/or protect our rights will be stored during ongoing matters and deleted in accordance with applicable statutes of limitations (three years in consumer relations and ten years in other cases).
Personal data processed based on a legal obligation will be stored for as long as the legal obligation dictates that the personal data must be stored. This includes when personal data is stored for accounting purposes, where accounting data is stored during the current year and up to and including the seventh year after the end of the calendar year in which the fiscal year ended.
4. TRANSFER OF PERSONAL DATA
We will share and transfer your personal data to the queues you specify. We will also share your personal data with our partners, suppliers, and related third parties for the purposes mentioned above. The housing queues included in the Service require personal data in connection with registration. Therefore, we will share the personal data you provide to us with these housing queues in accordance with the information they request. The housing queues we share personal data with use the data for housing applicants.
Our data may also be shared with third-party marketing platforms through a pixel if you register via these platforms. The social media platforms where data is shared include Google, Meta, TikTok, Twitter, Snapchat, and Bing.
We also share your personal data with providers of IT services and payment services inside and outside the EU/EEA, where you may have less protection for your personal data. You can obtain additional information about the transfer by contacting us at hello@dibz.se.
5. COOKIES, BEACONS, AND OTHER TECHNOLOGY
We collect information using technologies such as cookies, pixels, beacons, and local storage (e.g., on your browser or device). For information on how we use technologies and analysis tools and how you can prevent the use of cookies, please contact us at: hello@dibz.se.
6. LEGAL ORDERS AND PREVENTION OF HARM
We may use, store, and share your information as a result of legal orders (such as search warrants, court orders, subpoenas, or similar), or when it is necessary to detect, prevent, and address fraud and other criminal activity, to protect ourselves, you, and other users, including as part of an investigation if we, in good faith, believe it is required by applicable law.
This may include responding to legal requests from jurisdictions outside the EU/EEA, where we, in good faith, believe the response is required by the law in that jurisdiction, affects users in that jurisdiction, and is in line with internationally recognized standards.
Information we obtain about you, including financial information, through the Website when you use the Services, may be used and stored for an extended period when the information is subject to legal requests or obligations, government investigations, or investigations into potential violations of our terms of use or policies, or otherwise to prevent harm.
7. OTHER THINGS YOU NEED TO KNOW
Links to other websites
You should be aware that when you visit our Website, you may be referred to other websites operated by third parties, where their collection of personal data is outside our control. The privacy policy on their websites will govern the handling of information collected from you.
Changes in ownership
If the ownership of our business changes, we may transfer your information to the new owners so that they can continue to provide the Services. The new owners will continue to comply with the commitments we have made in this Privacy Policy.
Notification of changes
If we make changes to this Privacy Policy, we will notify you by uploading a new policy on the Website. If the changes are significant, we will also send you a separate notification or notify you in another appropriate manner, and, if required by applicable law, we will ask for your consent.
Your rights under EU law
You can object to the processing of your personal data for direct marketing purposes at any time. You can also withdraw your consent if you have given one. Withdrawal of your consent does not affect the legality of prior processing before the consent was withdrawn, and we may continue to process your personal data based on other legal grounds, except for direct marketing.
You have the right to request access to and further information about the processing of your personal data, or request that we correct, amend, supplement, delete, or limit the processing of your personal data. You have the right to receive a copy of the personal data we process about you. If your request is clearly unfounded or unreasonable, we may charge a reasonable fee based on the administrative costs. If the processing is based on the legal ground of legitimate interest or public interest, you have the right to object to the processing. If you do this, we will no longer be allowed to process the personal data unless we can demonstrate that our legitimate reasons for processing outweigh your interests, rights, and freedoms—provided that the processing is not for the establishment, exercise, or defense of legal claims.
If the processing is based on the legal ground of consent or performance of a contract, you have the right to data portability. Data portability means that you can receive the personal data you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transfer such personal data to another data controller.
To exercise the rights mentioned above or if you have questions about our processing, your rights under EU law, or if you wish your data to be deleted, please contact us at the following address: hello@dibz.se or OptiQueue Nordics AB, Drottninggatan 78, 111 36, Stockholm. You can also read more about your rights here. To ensure you receive a prompt response, please include your full name in your message and, if applicable, your address, username, and the email address used at registration. Please note that you must sign your message to receive information about the processing of your personal data. Please also note that you may need to verify your identity before your request can be processed. If you have any complaints regarding our processing of your personal data, you can submit a complaint to the relevant data protection authority. You can find more information about local data protection authorities by clicking on the following link: information about data protection authorities.