Privacy Policy - Waiting List

1. Introduction

Welcome to SmakaHem.

This Privacy Policy explains how we collect and process personal data when you join our waiting list.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

2. Data Controller

SmakaHem

Country: Sweden

Email: privacy@smakahem.se

SmakaHem is the data controller for the personal data collected via the waiting list.

3. What Personal Data We Collect

When you join the waiting list, we collect:

• Email address
• Date and time of registration
• IP address (if logged for security purposes)

We do not collect sensitive personal data through the waiting list.

4. Purpose of Processing

We process your email address in order to:

• Notify you when SmakaHem launches
• Provide early access invitations
• Send important updates related to the waiting list
• Inform you about the launch of our services

We will not use your email for unrelated marketing without your consent.

5. Legal Basis for Processing

The legal basis for processing your email address is consent, in accordance with Article 6(1)(a) of the GDPR.

You provide consent by submitting your email to the waiting list and confirming your agreement to this Privacy Policy.

You may withdraw your consent at any time by:

• Clicking the unsubscribe link in our emails, or
• Contacting us using the email listed above

Withdrawal of consent does not affect processing carried out before withdrawal.

6. Data Retention

We retain your email address:

• Until the platform launches and waiting list communications are completed, or
• Until you withdraw your consent, or
• No longer than 12 months from the date of registration

After this period, your data will be securely deleted.

7. Sharing of Personal Data

We may share your data with trusted service providers who process data on our behalf, such as:

• Hosting providers (e.g., EU-based cloud providers)
• Email delivery services
• Technical service providers

These providers process data only under our instructions and in accordance with GDPR. We do not sell your personal data.

8. International Transfers

If any service provider processes data outside the EU/EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission

9. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify incorrect data
• Request deletion of your data
• Restrict processing
• Withdraw consent
• Lodge a complaint with a supervisory authority

To exercise your rights, contact us using the email listed above.

10. Security

We take appropriate technical and organizational measures to protect your personal data, including:

• Encrypted HTTPS connections
• Restricted access to systems
• Secure hosting environments