Privacy Policy

This policy applies differently to different people, whose personal data we process. Read more about different forms of processing below.

Last updated on 3 July 2023

Introduction

Impact Academy (IA) thinks that your privacy is important and it is something we want to respect and protect. However, in order for us to carry out our activities, develop our programs, process grants and communicate our work, we need to process personal data. This privacy policy contains information about which categories of personal data about you that IA processes, for which purposes the data is processed, and which legal basis the processing is based on. It also contains information about who can have access to and process the personal data, how long the data is saved, and your rights to information, correction, deletion, etc.

We wish for you to feel safe with how we process your personal data and we therefore ask you to read through this privacy policy, which we may update from time to time. If we change the privacy policy, the new one applies from the time of publication on our website. You can see when we last made updates at the top of this privacy policy.

Personal data controller

Impact Academy (organization number 802482-2317; address Ringvägen 55 B, c/o Sverker & Jeanette Skoglund, zip: 181 51 Lidingö; contact info@impactacademy.org) is the Data Controller and is responsible for the processing of your personal data. If you have questions or concerns about how Impact Academy processes your personal data, please contact the organization's informal data protection officer (contact details at the end of this policy).

Our processing of personal data

Generally

Personal data is all information that can be directly or indirectly linked to you as a physical individual. IA does not process or store personal data more than necessary and never without informing you of this. The main processing takes place in connection with applications to and administration of our programs and grants. In addition, processing takes place when you apply for a position at Impact Academy, sign up for our newsletter subscription service, donate money to Impact Academy, visit our website, or contact us via our website, e-mail, or phone. The personal data consists of e.g. name, e-mail address, telephone number, application documents, invoice and residential address. IA processes these different categories of personal data for different purposes, in different ways, and with the support of different legal bases. Below, the varying forms of processing are described individually, so that you can easily read about the personal data processing that applies to you.

All processing of your personal data takes place in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR").

Grounds for processing your personal data

In order for us to process your data, there must be support in current legislation, a so-called legal basis. Such basis can, for example, consist of:

  • You providing consent to the processing.
  • That the processing is required for IA to be able to fulfill an agreement with you.
  • That the processing is required for IA to fulfill a legal obligation.
  • A weighing of interests where IA's interest in processing your personal data outweighs your interest in privacy protection and the processing is necessary for the purpose in question.

With whom we may share your personal data

In order for us to be able to carry out our activities and send out information and marketing, we may share your personal data with third parties. For this, the following applies.

a) Service providers; We share personal data with third-party providers primarily for IT operational services (such as data storage, data analysis and CRM systems), communication services, and marketing services.

b) IT security providers; We share personal data with IT security providers when this is necessary by law, to protect you or our customers and partners, or to protect our services.

c) Government authorities (such as the Police, the Tax Agency and other authorities); We share personal data with authorities if we are required to do so by law or if a crime is suspected.

The third parties with whom we may share your personal data as above, e.g. our IT suppliers, as a rule, constitute so-called personal data processors to us. These may only process the transmitted data on our behalf and in accordance with our express instructions. We only transfer your personal data to such data processors for purposes that are compatible with the purposes for which we have collected the data and we try to ensure that they undertake to comply with our security requirements and restrictions and, as applicable, international transfer requirements of personal data. In certain situations, the actors to which we transfer personal data can be independently responsible for personal data, which means that the company itself is obliged to inform you about its processing of your personal data and to ensure that the processing is legal.

More about different types of processing

We process your personal data

  1. When you sign up for a program
  2. When you register as a collaborator
  3. When you and your organization enter into cooperation with us
  4. When you apply for a position to work at Impact Academy
  5. When you contact us
  6. When you sign up for our newsletter
  7. When we send press releases and similar information
  8. When you are in a picture or film
  9. When you visit our website
  10. When you make a donation
  11. When you receive a grant

Read more about each type pf processing below.

1. When you have signed up for a program

Whose personal data do we process?

People who apply to and participants in our programs.

Why do we collect information?

In order to be able to successfully prepare for, carry out and follow up our programs and meet the wishes and needs of the participants.

What data can be processed?

  • Name
  • Email address
  • Phone number
  • Residential area
  • Age
  • Education
  • Profession
  • Other relevant experiences
  • Health and special needs
  • IP address

On what legal basis does the processing rest?

Legitimate overweighing interest in being able to run and develop our activities, to which you have signed up. With regard to sensitive and extensive personal data as well as photos and videos, consent is always obtained.

How long is the data saved?

We will delete or anonymize your personal data when it is no longer needed, generally 24 months after you end your participation (note that you might choose to enter into one of our alumni programs after completion of the initial program and if so you will be considered as a participant). Sensitive data is deleted as soon as possible, no later than the end of the year in which you have ended your participation.

2. When you sign up as a collaborator

Whose personal data do we process?

Collaborators in our programs, e.g. mentors, coaches, and advisors.

Why do we collect information?

In order to be able to successfully carry out the collaboration in question and satisfy the wishes and needs of your and our beneficiaries.

What data can be processed?

  • Name
  • Email address
  • Phone number
  • Age
  • Education
  • Profession
  • Other relevant experiences
  • Health and special needs
  • IP address

On what legal basis does the processing rest?

Legitimate overweighing interest in being able to run and develop our activities, to which you have signed up. With regard to sensitive and extensive personal data as well as photos and videos, consent is always obtained.

How long is the data saved?

We will delete or anonymize your personal data when it is no longer needed, generally 24 months after the end of our collaboration. Sensitive data is deleted as soon as possible, no later than the end of the year in which you have ended your participation.

3. When you and your organization enter into cooperation with us

Whose personal data do we process?

Contact persons at partner organizations, contractors, suppliers, and potential contact persons at partner organizations, contractors, and suppliers.

Why do we collect information?

To be able to carry out our activities with the help of external partners and suppliers and complete the cooperation we enter into.

What data can be processed?

  • Name
  • Email address
  • Address
  • Phone number
  • Company/organization

On what legal basis does the processing rest?

​Fulfillment of agreements that may be entered into in connection with the cooperation, alternatively overweighing interest in being able to carry out and develop our activities. For some processing, legal obligations in terms of bookkeeping and accounting laws.

How long is the data saved?

​We will delete or anonymize your personal data when they are no longer needed, which is no longer than 24 months after the cooperation has ended. Furthermore, we save certain data for a further five years (seven years in total) for accounting purposes.

4. When you apply for a position to work at Impact Academy

Whose personal data do we process?

People who apply to work at Impact Academy.

Why do we collect information?

To be able to carry out recruitment activities and find co-workers.

What data can be processed?

  • Name
  • Email address
  • Phone number
  • Residential area
  • Age
  • Education
  • Profession
  • Other relevant experiences
  • Health and special needs
  • IP address

On what legal basis does the processing rest?

Legitimate overweighing interest in being able to recruit co-workers, when you have applied for a position. With regard to sensitive and extensive personal data as well as photos and videos, consent is always obtained.

How long is the data saved?

​We will delete or anonymize your personal data when they are no longer needed and delete them no later than the end of the year during which the recruitment process was finished (note that we might continue to process your data if you start working at Impact Academy, or if you explicitly agree that we keep you contact details).

5. When you contact us

Whose personal data do we process?

People who contact us.

Why do we collect information?

To respond to and follow up on your question/query. This applies regardless of the channel of communication.

What data can be processed?

  • Name
  • Email address
  • Phone number
  • Other personal data you share with us

On what legal basis does the processing rest?

Legitimate overweighing interest in being able to manage our contact. Depending on the personal data shared when in continued contact with us, the legal basis might change.

How long is the data saved?

We process your personal data as long as you are in contact with us. After that, information that is no longer necessary is deleted or anonymized, no later than 24 months after the last contact.

6. When you sign up for our newsletter

Whose personal data do we process?

Subscribers to our newsletter.

Why do we collect information?

To market our activities and provide information about the organization.

What data can be processed?

  • Email address
  • IP address

On what legal basis does the processing rest?

​To fulfill our agreement to send you the newsletter to which you registered as a subscriber.

How long is the data saved?

​We process your personal data during the time you are a subscriber to the newsletter. You can cancel your subscriptions at any time by either following the link in each newsletter or contacting ​info@impactacademy.org​. When you unsubscribe, your email address will be moved to a blacklist to prevent us from contacting you again.​The data is stored with our subcontractor.

7. When we send press releases and similar information

Whose personal data do we process?

Journalists, influencers, and contact persons.

Why do we collect information?

To market our activities and provide information about the organization.

What data can be processed?

  • Name
  • Email address
  • Phone number

On what legal basis does the processing rest?

Legitimate and overweighing interest in being able to spread information about our activities.

How long is the data saved?

We process your personal data during the time that you accept the mailing. You can at any time ask not to be contacted, after which your personal data will be deleted as soon as possible, no later than the end of the year in which you have ended your participation.

8. When you are in a picture or film

Whose personal data do we process?

Participants in our programs, collaborators, and visitors to our events.

Why do we collect information?

In order to, in an accessible way, communicate about our activities via Social Media, our website, presentations, reports, and other formats.

What data can be processed?

  • Picture
  • Film
  • Name

On what legal basis does the processing rest?

Consent from you or your guardian. In the case of images or videos of those over 15 years of age, we process the data with the support of your consent. In the case of images or videos of those under 15 years of age, we process your personal data with the consent of your guardians, who have been duly informed about the processing. You always have the right to withdraw your consent at any time, whereupon the image or video stops being used as soon as possible, no later than within one month. Note that revoked consent only has a prospective effect and thus does not affect the legality of treatments that have been carried out before the consent was revoked.

How long is the data saved?

We process your personal data only for the time required to fulfill the purposes for which the information was collected. The personal data will be deleted when they are no longer needed, e.g. after the activity to which the processing and consent relates has ended or as soon as possible after a revoked consent, no later than within one month.

9. When you visit our website

Note that this section focuses on our use of cookies. We process data for other activities via our website, e.g. if you sign up for our newsletter or to a program. You can read more about this under separate heading.v Read more about Impact Academy’s use of cookies in our Cookie policy.

Whose personal data do we process?

Visitors to our website

Why do we collect information?

On our website, we use so-called cookies, which are small text files that are saved in your browser or on your device. Some cookies are necessary and enable basic functions on the website. Other cookies are used for marketing or analysis regarding how visitors use different websites.

What data can be processed?

  • What visitors have searched for on the website
  • Any personal data provided such as your name, email address, and phone number
  • IP address
  • Referral address
  • Navigation on the website

On what legal basis does the processing rest?

Use of different types of cookies rests on different legal grounds:

  • Legitimate overweighing interest in conducting market and user analysis.
  • Consent that you give by using our website after being informed about cookies, in accordance with the settings you have made in your browser.

How long is the data saved?

Different types of Cookies are saved for different lengths of time. The maximum storage period of our cookies is 26 months after a visit.

10. When you make a donation

Whose personal data do we process?

Donors

Why do we collect information?

To receive and register donations, enable professional communications, and carry out analyses with the aim of making our fundraising work more cost-effective.

What data can be processed?

  • Name
  • Address
  • Phone number
  • Email address
  • Clearing and account number

On what legal basis does the processing rest?

​Fulfillment of the agreement entered into when you leave a gift, as legal obligations in terms of bookkeeping and accounting laws.

How long is the data saved?

​We save all of the above information until the donation has been carried out and two years after your last donation, in order to be able to handle any follow-up. Furthermore, we save certain data for a further five years (seven years in total) for accounting purposes.

11. When you receive a grant

Whose personal data do we process?

Grantees

Why do we collect information?

To process grants, enable professional communications, and carry out analyses with the aim of making our grantmaking work more cost-effective.

What data can be processed?

  • Name
  • Email address
  • Phone number
  • Residential area
  • Age
  • Education
  • Profession
  • Other relevant experiences
  • Health and special needs
  • IP address

On what legal basis does the processing rest?

​Fulfillment of the agreement entered into when you receive a grant, as well as a legal basis in the form of obligations in terms of bookkeeping and accounting. For some grantees and processing, we will ask for your consent.

How long is the data saved?

​We save all of the above information until the grant has been processed and two years after the grant period for the grant in question has ended, in order to be able to handle any follow-up. Furthermore, we save certain data for a further five years (seven years in total) for accounting purposes.

What rights do you have?

Right of information and access

You have the right to receive confirmation of whether we are processing personal data concerning you. If this is the case, you also have the right to access this personal data and certain other information about our processing of it.

Right to rectification

You have the right to request that your personal data be corrected if it is incorrect. You can also request to complete incomplete information about you, taking into account the purpose of our processing.

Right to erasure

You can request that we delete your personal data if:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed
  • You withdraw your consent to the processing in question and consent is the legal basis for our processing
  • You object to processing that we carry out based on a weighing of interests and we have no legitimate reason to continue with the processing
  • The personal data has been processed in an illegal manner
  • The personal data must be deleted to fulfill a legal obligation

Right to limitation of our processing

You have the right to request that we limit the processing of your personal data in certain cases, e.g. if you dispute the accuracy of the personal data (in which case you can demand that we limit the processing of the affected personal data during the time it takes for us to check whether the data is correct or not).

Right to data portability

If and to the extent that our processing of your personal data is based on your consent or agreement with you, you can request to receive the personal data that you have provided to us and that concerns you, in an electronic format that is generally used. You have the right to transfer such data to another personal data controller.

Right to object to the processing

You have the right to object to our processing if it is based on our legitimate interest after weighing our interest in the processing and your interest in integrity and privacy. In such cases, we must cease the processing if we cannot demonstrate legitimate reasons for the one that outweighs your interests for the processing to cease, or if the processing takes place for the fulfillment of legal interests.

Right to withdraw your consent

In cases where our processing of your personal data is based on your consent, you always have the right to withdraw your consent at any time. Withdrawal of your consent does not affect the legality of the processing that took place based on your consent before this was withdrawn. Note that, as a starting point, we do not process your personal data based on consent.

Right to complain

You have the right to complain about the processing of your personal data by submitting a complaint to the supervisory authority, currently called “Data Inspektionen”. You can also contact IA if you have comments or concerns about the processing of your personal data.

Links and social media

On the IA website www.impactacademy.org, there are links to other websites. This privacy policy does not apply to these websites. You should read the privacy policy of these websites before providing your personal information. Furthermore, this privacy policy does not apply to digital platforms where IA is represented but which we cannot control, e.g. www.facebook.com and www.instagram.com.

Security

There is always risk involved when giving out personal data over the Internet. No technology or system is completely protected from intrusion. However, IA has taken reasonable technical security measures necessary to protect personal data against improper access, alteration, and destruction.

Contact

To update, correct or delete information that we have about you or if you have questions about our privacy policy or our processing of personal data, you are welcome to contact us at info@impactacademy.org or +46766293239.