Privacy policy
This Privacy Policy explains how Cloudlabel by Grafokett (“Cloudlabel”, “we”, “us”, “our”) collects, uses, discloses, and protects personal data when you access https://www.cloudlabel.com (the “Service”). It also describes your privacy rights under applicable privacy laws.
By using the Service, you consent to the collection and use of your personal data in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
What information we collect, purposes, and legal bases
Legal bases (definitions)
- Legitimate interest: Our interest or a third party’s interest, provided your interests or fundamental rights and freedoms do not override those interests.
- Contract performance: Processing necessary for a contract with you or to take steps at your request before entering into a contract.
- Legal obligations: Processing necessary to comply with laws or regulations applicable to us.
- Consent: A freely given, specific, informed and unambiguous indication of your wishes by which you signify agreement to the processing of personal data. We may request your consent where no other legal basis applies.
Usage Data
What we may collect: Interaction data (pages visited, time on page, click paths) and browser details.
Purpose: Analyze behavior, optimize performance, and enhance user experience.
Retention: 30 days
Legal basis: Consent
Online Identifiers & Device Information
What we may collect: IP address, device identifiers (e.g., MAC, IMEI), browser type/version, operating system.
Purpose: Secure the platform, optimize performance, understand technical usage.
Retention: 30 days
Legal basis: Consent
Location Data
What we may collect: Approximate or precise geolocation (e.g., GPS, IP-based location).
Purpose: Personalize experiences and services based on your location.
Retention: 30 days
Legal basis: Consent
How we obtain personal data
Directly from you when you:
- Fill in forms
- Speak with our client support team
- Contact us for any other reason
Requirement to provide personal data: In certain cases, provision of personal data is a legal or contractual requirement, or necessary to enter into a contract.
How we share your information
- With your consent: Cloudlabel by Grafokett may share your information for specific purposes with your explicit consent.
We do not transfer personal data to any third countries outside the European Economic Area (EEA).
Data subject rights
You have the following rights regarding your personal data:
- Right of access – request a copy of your personal data.
- Right to rectification – ask us to correct inaccurate or incomplete data.
- Right to erasure – request deletion in certain circumstances.
- Right to restrict processing – request limited processing in specific situations.
- Right to data portability – receive your data in a commonly used, machine-readable format and transmit it to another controller.
- Right to object – object to certain processing.
- Right to be informed – clear, transparent information about how we process your data.
Withdrawal of consent
In accordance with Article 13(2)(c) GDPR, you may withdraw your consent at any time. You can adjust or withdraw consent via the consent banner on the site, or by contacting us using the details below. Withdrawal does not affect the lawfulness of processing before withdrawal.
How to exercise your rights
Contact us at [email protected].
We will act on your request after receiving your written request and verifying your identity. Requests will be fulfilled—or refused with reasons—within one month of receipt, in line with our internal rules and the GDPR. This period may be extended by up to two months if the request is complex or we have received multiple requests; if extended, we will inform you within one month and explain why. We will respond in the format you prefer where feasible.
We may refuse a request where GDPR exceptions or limitations apply, or if a request is manifestly unfounded or disproportionate. If refused, we will provide reasons in writing.
Right to lodge a complaint
You may lodge a complaint with the competent supervisory authority if you believe your data is processed in violation of applicable law. In Sweden, this is the Integritetsskyddsmyndigheten (IMY).
Security
Although no technology system is completely secure, we implement appropriate technical and organizational measures to reduce the risks of unauthorized access to or improper use of personal information.
- We and any third-party processors engaged on our behalf are contractually obliged to maintain confidentiality.
- We apply reasonable physical, technical, and administrative safeguards, including limiting access to personnel with a need to know.
Changes to this policy
We regularly review this Privacy Policy and may modify it to reflect legal, technical, or business developments. Changes take effect upon publication on our website. Please review this page periodically.