Privacy Policy

Thank you for using Short Break From Work.

This page contains our privacy policy that informs about how we collect and process Personal Data that we get access to when users use the Short Break From Work app or visit our website.

Last updated December 23, 2023

Introduction

The app “Short Break From Work” (the “App”) and the website shortbreakfromwork.com is operated by Barnslig Innovation Sverige AB with company registration no. 559131-9347 (“we”, “us”, “our”).

This Privacy Policy contains information about how we collect and process Personal Data that we get access to when users visit our Website or use the App. This Privacy Policy also contain information about the storage of Personal Data, deletion of Personal Data, legal basis for the Processing of Personal Data and Data Subject’s rights according to GDPR. We handle Personal Data in accordance with the GDPR and any subordinate legislation and regulation implementing the GDPR and/or SCC which may apply (the “Data Protection Requirements”) in accordance with the principle of accountability.

This Privacy Policy is reviewed annually and updated as needed. The latest version is always publicly available at shortbreakfromwork.com/privacy

Definitions

All references to ”Personal Data”, “Processing”, “Data Subject”, “Sub-processor”, “Personal Data Breach”, “Supervisory Authority” and any other capitalized terms not defined herein shall have the same meaning in this Privacy Policy as stated in article 4 of the GDPR.

App: Short Break From Work.
GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
SCC: Commission implementing decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council.
Website: shortbreakfromwork.com

How we collect personal data

We most usually receive Personal Data when we enter into an agreement; through the users use of the App or use of our Website; when the user contacts us by e-mail; or in connection with registration to any newsletter from us.

What personal data we collect

We try to work primarily through the principle of purpose limitation and data minimization regarding the storage of Personal Data, by only Processing Personal Data that is necessary, adequate and relevant for each individual purpose.

When a user grants the App access to its Slack workspace, the App gets access to the following Personal Data from Slack about the user: name, email, time zone, avatar and the name of the organization that owns the Slack workspace. If a person signs in using Slack on the Website, we will get information about that person (name and e-mail). This is usually done as part of the process to setup payment details with our payment provider Paddle. Name, e-mail and time zone are saved as long as the user keep the App authorized for its Slack account.

We have access to unidentified usage information about how users use the Website and the App. This is done in order to improve our services and the App through analysis of user behaviors. Our Website also uses Fathom Analytics (third party application) which analyzes the activity on the website. All data sent to Fathom Analytics is anonymized.

We don’t perform manual registrations of users. Almost all data shared by users on the Website and in the App are done by self-service, and users are clearly informed about what information they share with us before the data is shared.

The legal basis we mainly base the Processing of Personal Data on is “Contract”. This legal basis gives us the right to Process Personal Data in order to fulfill our obligations under a contract with the Data Subject.

If the Data Subject has consented to the Personal Data Processing, through voluntary active approval to the Processing, we may Process the Personal Data on the legal basis of “Consent”. A given consent can be revoked at any time and in such cases the Processing of the Personal Data shall cease, but this only applies if the Personal Data is no longer necessary for us to Process in order to fulfill our obligations under a contract or other legal obligations.

We have the right to Process Personal Data if we have a legal obligation to do so, for example according to the Swedish Bookkeeping Act (1999:1078). In such cases, only necessary Personal Data will be Processed. Personal Data that is part of any necessary accounting documentation is stored for as long as the law requires.

We have the right to Process Personal data, based on the legal basis “Legitimate interests”, in order to for example market the App, provide good support, improve our services, the Website or the App etc. However, sensitive Personal Data is never Processed on this legal basis. The Data Subjects always have the right to object in writing if the Data Subject do not want us to use their Personal Data for marketing. We have the right to Process Personal Data on this legal basis in order to comply with applicable law, demand payment for a past due claim, report a debt or protect our rights/property and to prevent crimes.

Storage of personal data

We store and Process Personal Data according to the principle of integrity and confidentiality. When Personal Data is stored in a country outside of the EU/EEA, the storage provider must comply with the provisions of the GDPR and we shall enter into a data processing agreement that is compliant with the regulations stated in the GDPR and SCC.

We store user details (name, time zone, email, Slack user id) of the users who use the App.

The Personal Data associated with a user account (like the user’s name and time zone) is needed to make the App work, this will be stored for the entire time you are a customer/user. The data for breaks taken, such as which challenges they join, which breaks have been taken and the Slack channel id are saved until the account is deleted by the user or as long you are a customer.

The App undergoes a daily backup of stored data. Backup storage is saved for up to thirty (30) days. The backup files are stored on the Heroku Platform.

We store Personal Data as long as it’s needed and necessary to fulfill the purposes for which the Personal Data was collected. If it is necessary for us to comply with applicable legislation, we may store Personal Data for a longer period for that purpose. Personal Data that is no longer needed, will be deleted according to the principle of storage limitation. When the App is removed from a Slack workspace, the associated stored data will get removed from the Apps database within thirty (30) days.

Sub-processor and transfer of personal data

We have the right to engage Sub-processors to fulfill the obligations under the agreement between us and the Data Subject. We engage Sub-processors as part of the delivery of the App and Website. This means that we may disclose Personal Data to Sub-processors, to fulfill our obligations under the Agreement, applicable legislation, legal obligations, to safeguard our legal interests or to detect and prevent technical or security issues with the App. The Data Subjects are entitled to request a complete overview on which Sub-processors that are involved in the Processing of the Data Subjects Personal Data.

The data subjects rights

The Data Subjects have certain rights according to GDPR regarding the Processing of their Personal Data. The Data Subjects have the right to:

You may contact us if you request any of the above-mentioned rights, regarding your Personal Data. However, some of the rights apply only in certain situations.

Deletion of stored personal data

To delete stored personal data about you from our systems, please send an email to support@shortbreakfromwork.com. After the authenticity of the request has been verified all data related to you will be deleted within 15 days.

Security measures

We certify that our activities and security measures are conducted in a manner that ensures compliance with the provisions and requirements of the GDPR regarding adequate protection of Personal Data Processing (according to the principle of integrity and confidentiality). All our internal registers and systems that contain Personal Data are password protected. We have also developed internal routines for employees with access to the databases containing Personal Data, in order to protect the data, and only authorized employees with a direct need for access to the Personal Data in order to perform their tasks have access to them. We also work according to the data protection principles (Article 5 GDPR) and ensure that our employees are aware of the principles.

Personal data breach

All Personal Data Breaches will be documented internally and reported to the Swedish Authority for Privacy Protection within 72 hours, when it is required according to the GDPR.

How to contact us

You are always welcomed to contact us, if you have any questions regarding this Privacy Policy or our Processing of Personal Data. You can send us a message at support@shortbreakfromwork.com, and we will try our best to resolve your concerns and answer your message without undue delay.