Your Data Privacy

2.1 Communication and Contact

We process personal data about those who contact us to answer and document the communication, as well as contact others not covered by the processing elsewhere in this Privacy Notice. This applies to all forms of communication, physical and digital, written and oral.

In such cases, we process the name, telephone number, email address and any personal data that may result from the communication, including history and logs about the inquiry.

The processing is based on our necessary legitimate interest in processing related to the above (see GDPR Article 6 (1) f). Our legitimate interest is to have contact with others as part of our business and in documenting our business, as well as replying to those who contact us and registering such contact. We have assessed that this is necessary for us to handle inquiries we receive, and that the data subjects' privacy does not override these interests.

It is voluntary to provide us with personal data, but it will be necessary to provide us with the information to answer inquiries.

We process the personal data until we expect that there will be no further follow-up of the contact, typically for two years.

2.2 Email and Other Business Solutions

We use email as a communication solution and other business solutions, such as document storage and cooperation solutions, that will contain personal data. The processing is based on our necessary legitimate interest in processing personal data via email (see GDPR Article 6 (1) f) in order to have a work tool and communication solution, and that the data subjects' privacy does not override these interests. Personal data processing depends on the purpose of the email and what is included in it. Emails and other information are deleted when they are no longer needed, and we have measures in place to ensure regular deletion.

2.3 Services

We collect and process personal data regarding the provision of our service, AlphaLens. AlphaLens is a competitive intelligence platform that provides semantic search across products and companies, enabling users to conduct market research, competitive analysis, and related activities.

Access to AlphaLens is provided through subscription agreements with our customers. In such processing, we collect and process the following personal data:

• Contact information on the users of our customers who are in contact with us and who are using the service, including name, work email address, company information, and account credentials.
• User activity and queries within the platform, including search queries, natural language research questions, product lookups, saved searches, and API usage logs.
• Technical logs, security logging on the website and in connection with services for security reasons, the development of the service, and statistics, including IP addresses, device information, browser type, and access times.

The above data is processed with the customer as controller and based on the controllers' purpose for processing and legal basis for processing, typically GDPR Article 6 (1) f if the customer has a legitimate interest in the processing and considers that its interest overrides the data subject's privacy, or GDPR Article 6 (1) b where the processing is necessary for the performance of a contract.

We will also process personal data related to technical logs and security logging in connection with services for security reasons, the development of the service, and statistics. As we decide the purpose of the processing (to provide and secure the service) and the means of the processing (the security measures to impose), we are the controller of such personal data. The processing is based on our duty to comply with the privacy regulations to secure personal data, see GDPR Article 6 (1) c, cf. Article 32, and our duty to secure your personal data according to the agreement with the customer.

2.4 Data Processor Services

In addition to our role as data controller, we also act as a data processor on behalf of our customers for certain services. When providing these data processor services, our customers are the data controllers and we process personal data according to their instructions and purposes.

Our data processor services include processing pitch decks and related documents that customers upload to our platform, where we may extract, analyse, store, and enrich information contained within such documents. We also process custom research questions and inquiries submitted by customers, which may contain personal data related to individuals at companies being researched.

We integrate with our customers' customer relationship management systems and other business tools, processing personal data as necessary to provide these integration services. Any personal data contained in decks, questions, or CRM data is processed solely on behalf of and according to the instructions of our customers.

For data processor services, we have entered into data processing agreements with our customers to regulate our processing of personal data on their behalf. If you wish to exercise your rights regarding personal data processed through these services, you should contact the relevant customer who is the data controller. See Section 4 below for more information.

2.5 Third-Party Data Enrichment

As part of our service, we collect data from other sources to be matched with data provided by customers or to provide enriched competitive intelligence. Such data includes information from the internet and publicly available sources, such as company websites, LinkedIn, product databases, and other public records. This data is connected to information in our platform, stored, and provided in output and reports to customers.

The processing is based on our necessary legitimate interest (GDPR Article 6 (1) f) in providing comprehensive competitive intelligence services, and we consider that this interest is not overridden by the data subjects' privacy, particularly as we process only publicly available business information.

2.6 Communications and Information on Services

We may send you information on the services you or your organisation have purchased or are using, such as technical conditions, upgrades, new functionality, and other service-related updates. This includes emails that may be automatically generated by our services. This information is part of the services we provide and may be important to you or your organisation.

The information will be provided regardless of whether you have consented, as it is our necessary and legitimate interest to inform our customers of the services they are purchasing (see GDPR Article 6 (1) f). The purpose of the processing is to keep you updated about the services. Consequently, you may not be able to unsubscribe from service-related information.

We only process personal data that allows us to send information, such as your email address and your telephone number. The email address and your telephone number are not used for anything other than sending out the information or contacting you, and we will not share, transfer or provide the information with anyone else except as described in this notice. The personal data is processed as long as you use our services.

2.7 Newsletter and Marketing

If you request information or sign up for our newsletters, we may send you information about our products and services, partner products, newsletters and other information and marketing. As a consequence, we will process your name and email address.

The processing of personal data is based on your consent (GDPR Article 6 (1) a) where the information is considered marketing. For information on service-related communications, please see above. You can withdraw your consent at any time by using the link in the newsletter or contacting us to stop receiving newsletters.

The processing of the personal data takes place until you have received the requested information, have withdrawn your consent, or if you object to receiving such information. Your personal data will then be deleted from our marketing lists.

2.8 Business Customers, Suppliers, Partners, and Prospects

We process personal data about contact persons of existing and potential business customers, suppliers, and other partners to manage our relationship with them, prepare, implement, and document services, and evaluate the use of services. In these cases, we will process names, contact information, company names, job titles, and information related to the contact with the company in which the person in question works.

The processing of personal data is based on our necessary legitimate interest (GDPR Article 6 (1) f) in managing the relationship with our customers, partners and suppliers, and we consider that our interest is not overridden by the data subject's privacy.

We also store and disclose information where we have a legal obligation to do so, for example, under accounting and tax legislation. We may store information for as long as we believe it may be necessary to document matters relating to services. In many cases, it will be necessary for us to obtain personal data to enter into agreements with customers and suppliers, among other things, to document that an agreement has been entered into. If we do not receive the information we need, we will not be able to enter into agreements.

It is voluntary for contact persons to provide us with personal data. If we collect personal data from others, it will mainly apply to contact information (including name, address, telephone number and email address), position, function, employer, and any competence and references where relevant. The source for such information will be the contact person, employer, publicly available sources, or other legitimate means.

We store the personal data until the relationship with the customer, supplier, or partner ceases or until the contact person is no longer the contact person, with the exceptions mentioned above.

2.9 Recruitment

When recruiting for new positions with us, we process CVs, applications, certificates and references. Processing of personal data takes place on the basis of consent that you have given if processing takes place through a recruitment solution, or on the basis that it is necessary and within our legitimate interest to recruit new employees.

The basis for processing personal data when recruiting is that the processing is necessary to make assessments of possible job seekers prior to entering into a possible employment agreement (GDPR Article 6 (1) b). If assessments are made in this regard, such as contacting persons who are not listed as a reference or examining backgrounds, personal data is processed on the basis of our necessary legitimate interest in ensuring that we find the correct candidate for the position (GDPR Article 6 (1) f).

For the latter, we have considered that the individual data subject's privacy does not override our legitimate interest in recruiting new employees. We recommend you not enter special categories of personal data, such as health, religion, political opinion, union membership, or similar information in your application.

Information in the recruitment process is deleted as soon as the recruitment is completed if you have not agreed to further storage.

2.10 Social Media

We have contact with stakeholders and others through social media. Among other things, we have established a LinkedIn page, where we are responsible for processing personal data in connection with LinkedIn. Personal data will be processed through our LinkedIn page if you publish posts on the page, comment on posts, or like or follow the page. Our purpose for processing personal data through LinkedIn is to have contact with you who wish to communicate with us or interact on our LinkedIn page in other ways.

In this context, your name and link to other information that you have posted on LinkedIn associated with your name or account on LinkedIn are processed. In addition, everything you share through posts and comments on our LinkedIn page and the fact that you have liked or followed our page is processed. What you share on our LinkedIn page is up to you and voluntary.

We ask you not to share personal information in posts or comments on our page, and especially not to share personal information about others, for example by tagging or mentioning people.

We process personal data on social media because we believe we have a legitimate interest in communicating with the outside world through social media and want to process personal data in this context (GDPR Article 6 (1) f). We have considered it so that this is necessary for us to communicate with the outside world and handle inquiries we receive and that the data subject's privacy does not come before these interests.

The data will be processed as long as postings and comments are available on social media, and you can delete this at any time.

2.11 Use of Websites, Cookies and Similar Technologies

We will use cookies or similar technology to collect information when you visit or interact with our website. We use the information collected to improve the customer experience on websites and services, to adapt and develop the website, and to offer functionality in the services. We also use the information to provide visitors with recommendations and service adjustments that are as relevant to you as possible. This will both be given on the basis of visitors' behaviour, such as services used, links clicked on, or information read, and on the basis of the behaviour of other users with similar usage patterns.

The information collected will be your IP address, the type of browser you use, your internet provider, operating system, date and time of website visits and services, and similar technical information. The information is stored in your browser's internal memory or related to a series of numbers or digits that can identify your browser or device that uses the website (referred to as cookies below for simplicity). The information will then be related to other information collected.

You have the ability to prevent us from placing cookies in your browser. Many browsers or devices are set to accept cookies automatically, but you can choose to change the settings yourself so that the cookies are not accepted. The disadvantage of disabling cookies in your browser is that the web pages will not work optimally. The reason is that the purpose of most cookies we use is to provide functionality on the services.

Personal data is also used to improve our websites, compile statistics and understand the use of the pages. As far as practicable, we try to do this with anonymous information without knowing that the information is specifically related to the individual visitor.

We will process the personal data mentioned above on the basis of your consent (GDPR Article 6 (1) a) for non-essential cookies. The information will be processed until you withdraw your consent, which may be done by adjusting your cookie preferences or contacting us at the contact information above.

We process the personal data mentioned above on the basis of our necessary legitimate interest (GDPR Article 6 (1) f) for essential cookies necessary to provide website functionality, and we consider that this interest is not overridden by the data subject's privacy. However, we safeguard the privacy of visitors to the website by only using the information for statistics where individuals are not identified. The information will be processed for as long as it is necessary for the purposes mentioned above.

The cookies and similar technologies we use are listed at the end of this Privacy Notice.