Personal Data Policy
Nibela AB (hereinafter ”Nibela”) protects your personal privacy. It is important to us that you feel safe when you provide us with your personal data, which applies to everyone who uses Nibela in any way services or otherwise have contact with us, we explain, among other things, how and why we process your personal data and what rights you have according to the current data protection regulation.
It is important to us that you read and understand our privacy policy and feel safe with how we process your personal data. You are always welcome to contact us with questions regarding the policy or for other data protection issues. Contact details can be found at the end of the document.
Who is responsible for personal data?
Nibela AB (559418–9192) is the personal data controller for the processing of personal data in accordance with this policy and is responsible for complying with applicable data protection legislation.
From where do we collect personal data, and what data do we process?
Nibela collects personal data from you when you authorize us to review your existing electricity contracts. We also collect personal data that you provide to us via the app or that you share with us in connection with contacting us via email or phone. Which data we process depends on which of the app's functions you use and which data you choose to share with us. It is voluntary to share your personal data with us, but it is a prerequisite that we get access to name, social security number, address, facility ID, e-mail in order for us to fulfill our agreement and fulfill our obligations in relation to you.
Below are the categories of personal data that Nibela processes:
Contact Details: First name, last name, personal number, address, facility ID, email address (or Apple ID, Google ID), phone number.
Facilities Information: Information linked to the accommodation where your consumption takes place, for example type of accommodation (house, apartment, cottage, etc.), number of rooms, area (m2), number of residents in the household, extra facilities (pool, garage, stove etc., meters -ID and household appliances.
Usage Data: Data linked to your electricity consumption in the home. For example, historical and future electricity consumption, usage patterns, peak usage times, and energy consumption per unit.
Metrics and Consumption Data: Information about the devices connected to your account. This includes information about the devices themselves and their usage data. For example, make and model of devices (eg mobile device, electric vehicle, wall box charger, heating system, solar panels, smart appliances), device settings, energy usage data, and device control commands.
Usage Data: Data linked to settings and preferences configured by you as a user to control your connected devices. For example, scheduled charging times, charging/warming preferences, temperature settings, device location, user location.
Other Data: Other data that is collected and processed and that does not fall under any of the above categories. For example, invoice details, bank details, communication logs (eg customer support interactions) and feedback from users.
Why do we process your personal data?
Nibela only processes your personal data when there is a clear purpose for the processing and where the processing is supported by a legal basis in accordance with the data protection regulation.
We mainly process your personal data in order to be able to enter into and fulfill contracts with you, in the event that there is a legal obligation that requires the processing of personal data or based on legitimate interest. Legitimate interest includes Nibela's business interest in conducting our business and being able to offer you products and services. In other cases, we process personal data in accordance with your consent. You can withdraw your consent at any time.
Below is a summary of the purposes for which Nibela processes personal data and the legal basis on which the processing is supported:
1. Offer to Sign an Electricity Contract with Nibela
- Categories of Personal Data:
- contact details
- first name
- surname
- social security number
- address
- facility ID
- type of living
- number of rooms
- area (m2)
- number of residents in the household
- additional facilities
- household appliances
- Legal basis for the processing:
- Legitimate interest
- How Long the Data is Saved:
- 2 years
2. Enter into an electricity contract with you
- Categories of Personal Data:
- first name
- surname
- social security number
- address
- facility ID
- email (or Apple ID, Google ID)
- bank details
- type of living
- number of rooms
- surface
- make and model of device
- device settings
- energy usage data
- Legal basis for the processing:
- Fulfillment of agreements
- How Long the Data is Saved:
- 10 years
3. Power of attorney to review existing electricity contracts and obtain information about electricity consumption, etc.
- Categories of Personal Data:
- first name
- surname
- social security number
- address
- facility ID
- email (or Apple ID, Google ID)
- Legal basis for the processing:
- Fulfillment of agreements
- How Long the Data is Saved:
- 10 years
4. Carry out a credit check at the conclusion of the agreement
- – Categories of Personal Data:
- first name
- surname
- social security number
- address
- Legal basis for the processing:
- Fulfillment of agreements
- Legitimate interest
- How Long the Data is Saved:
- During the credit check and 1 year thereafter.
5. Enable you to install the app and create an account with Nibela
- Categories of Personal Data:
- first name
- surname
- social security number
- address
- facility ID
- email (or Apple ID, Google ID)
- type of living
- number of rooms
- surface
- bank details
- Legal basis for the processing:
- Fulfillment of agreements
- How Long the Data is Saved:
- 2 years
6. Customer support (due to your agreement, eg the app)
- Categories of Personal Data:
- first name
- surname
- social security number
- address
- facility ID
- telephone number
- bank details
- type of living
- number of rooms
- area (m2)
- number of residents in the household
- additional facilities
- meter ID
- household appliances
- make and model of device
- device settings
- energy usage data
- scheduled charging times
- charging/heating preferences
- temperature settings
- device location
- user location
- device control commands
- communication logs (eg customer support interactions)
- feedback from users
- Legal basis for the processing:
- Fulfillment of agreements
- Legitimate interest (eg to be able to improve customer support, etc.)
- How Long the Data is Saved:
- 2 years
7. Handle complaints and warranty matters
- Categories of Personal Data:
- first name
- surname
- social security number
- address
- facility ID
- telephone number
- bank details
- type of living
- number of rooms
- area (m2)
- number of residents in the household
- additional facilities
- meter ID
- household appliances
- make and model of device
- device settings
- energy usage data
- scheduled charging times
- charging/heating preferences
- temperature settings
- device location
- user location
- device control commands
- possible image or sound recording of the damage/defect.
- Legal basis for the processing:
- Fulfillment of agreement
- Fulfillment of legal obligations
- How Long the Data is Saved:
- For general claims 2 years from the time the case is received, and for legal disputes 3 years after the dispute is settled
8. Carry out analyzes of your electricity consumption and have the opportunity to optimize your electricity consumption
- Categories of Personal Data:
- scheduled charging times
- charging/heating preferences
- temperature settings
- device location
- the driver's seat
- brand and model of device
- device settings
- energy usage data
- device control commands
- type of living
- number of rooms
- area (m2)
- number of residents in the household
- additional facilities
- meter ID
- household appliances
- historical and future electricity consumption
- usage patterns
- peak usage times
- energy consumption per unit
- Legal basis for the processing:
- Fulfillment of agreements
- How Long the Data is Saved:
- 10 years
9. Your bill in accordance with the agreement
- Categories of Personal Data:
- first name
- surname
- social security number
- address
- facility ID
- telephone number
- bank details
- Legal basis for the processing:
- Fulfillment of agreements
- Fulfill legal obligation
- How Long the Data is Saved:
- 10 years
10. Fulfill our legal obligations; eg accounting obligation, consumer legislation
- Categories of Personal Data:
- first name
- surname
- social security number
- address
- facility ID
- email (or Apple ID, Google ID)
- bank details
- Legal basis for the processing:
- Fulfill legal obligation
- How Long the Data is Saved:
- Different depending on the legal obligation; accounting 7 years.
11. Make comparisons with similar homes and give recommendations with the aim of lowering your energy consumption and energy costs
- Categories of Personal Data:
- type of living
- number of rooms
- area (m2)
- number of residents in the household
- additional facilities
- meter ID
- household appliances
- scheduled charging times
- charging/heating preferences
- temperature settings
- device location
- the driver's seat
- brand and model of device
- device settings
- power usage data device control commands
- measurement values and consumption data
- historical and future electricity consumption
- usage patterns
- peak usage times
- energy consumption per unit
- Legal basis for the processing:
- Fulfillment of agreements (to provide recommendations)
- Legitimate interest (to make comparisons with similar homes)
- How Long the Data is Saved:
- 2 years
12. Offer information about your electricity usage in different categories
- Categories of Personal Data:
- type of living
- number of rooms
- area (m2)
- number of residents in the household
- additional facilities
- meter ID
- household appliances
- scheduled charging times
- charging/heating preferences
- temperature settings
- device location
- the driver's seat
- brand and model of device
- device settings
- power usage data device control commands
- measurement values and consumption data
- historical and future electricity consumption
- usage patterns
- peak usage times
- energy consumption per unit
- Legal basis for the processing:
- Fulfillment of agreements
- Legitimate interest
- How Long the Data is Saved:
- 2 years
13. Carry out continuous information security work
- Categories of Personal Data:
- name
- surname
- social security number
- address
- facility ID
- telephone number
- type of living
- Number of rooms
- area (m2)
- number of residents in the household
- additional facilities
- meter ID
- Legal basis for the processing:
- Legitimate interest
- How Long the Data is Saved:
- 2 years
14. Detect and inform you about large deviations in your electricity consumption that may be due to faults in your electrical equipment
- Categories of Personal Data:
- type of living
- number of rooms
- area (m2)
- number of residents in the household
- additional facilities
- meter ID
- household appliances
- scheduled loading times
- charging/heating preferences
- temperature settings
- device location
- the driver's seat
- brand and model of device
- device settings, power usage data, device control commands
- historical and future electricity consumption
- usage patterns
- peak usage times
- energy consumption per unit
- Legal basis for the processing:
- Fulfillment of agreements
- Legitimate interest
- How Long the Data is Saved:
- 2 years
15. Manage app functionality
- Categories of Personal Data:
- brand and model of device
- device settings
- energy usage data
- device control commands
- Legal basis for the processing:
- Fulfillment of agreement
- How Long the Data is Saved:
- 2 years
16. Promote offers and promotions
- Categories of Personal Data:
- first name
- surname
- address
- email (or Apple ID, Google ID)
- type of living
- Number of rooms
- area (m2)
- number of residents in the household
- additional facilities
- meter ID
- household appliances
- Legal basis for the processing:
- Legitimate interest consent
- How Long the Data is Saved:
- 2 years or until consent is revoked
Who will we share your personal data with?
Depending on the purpose for which we collect and process your personal data, we may share this with others. When we enter into an agreement with you, we collect and process your personal data (see the diagram above), and in order to start delivering electricity to you, we need to share your personal data with your electricity grid company and possibly also with your existing electricity supplier, if you have given us authorization to obtain information about your electricity contract from them.
At the conclusion of the agreement, we also carry out a credit check in order to ensure that you have a good ability to pay. In order to carry out the credit report, we will share your personal data with the invoicing company we use. Only the personal data that is necessary to carry out the credit check will be shared.
The credit check can be done through automated decision-making. In cases where the decision has been made, Nibela will automatically inform you of this and you then have the right to have
your decision reviewed by a real person, as well as the opportunity to contest the decision. If you wish to exercise these rights, please contact Nibela via email: support@nibela.se.
Nibela uses an invoicing company and shares the necessary personal data with them in order to fulfill the agreement with you. Nibela is the personal data controller for the processing of the personal data shared with the invoicing company. The invoicing company is a personal data processor when they process data on Nibela's behalf.
Where do we process your personal data?
We process your personal data within the EU/EEA. Transfer of personal data to third countries may occur if Nibela uses suppliers who have servers outside the EU/EEA or are themselves stationed in countries outside the EU/EEA. Nibela, on the other hand, will only transfer your personal data to countries outside the EU/EEA if it is necessary, and in that case Nibela will ensure that the necessary security measures are taken to ensure that the transfer takes place in a legal way and that the personal data continues to be protected even outside the EU/EEA.
How do we protect your personal data?
We value your security highly and therefore have taken appropriate technical, organizational and administrative security measures to protect your personal data from unauthorized access and other unauthorized processing. We use IT systems to protect confidentiality, integrity and access to personal data. We have taken special security measures to protect your personal data against unlawful or unauthorized processing (such as unauthorized access, loss, destruction or damage). Only those individuals who need to process your personal data in order for us to fulfill our purposes have access to them.
We regularly analyze and evaluate the measures we take, with the aim of ensuring that the protection of your personal data is as secure as possible.
How long do we store your personal data?
We never save your personal data longer than is necessary for the purposes for which they were collected. Information that we process for the purpose of fulfilling our agreement with you is treated as a starting point as long as it is required for us to be able to fulfill the obligations that we have with you due to the agreement. We may save the personal data longer if it is required by law or because we have the right to do so according to a balance of interests.
We save personal data that is processed based on the legal basis of consent until you withdraw your consent or until the processing is no longer necessary.
Personal data that is processed for the purpose of achieving our statutory accounting obligations is saved for seven (7) years in accordance with the Accounting Act.
What rights do you have as a registered user?
When we process personal data about you, you as a registered person have several rights. You have the right to contact us at any time regarding these, and if you want to exercise any of the rights described below, you can reach us most easily at; support@nibela.se.
The Data Protection Regulation gives you several rights regarding the processing of your personal data. It is our job to fulfill these rights and ensure that sufficient processes are in place to accommodate you. We reserve the right to take appropriate safeguards and security measures to ensure that you are who you say you are when contacting us.
Information
You have the right to be informed when the personal data is collected. This information must be provided in an easily accessible written form using clear and unambiguous language.
Registry extract
You have the right to receive confirmation as to whether personal data belonging to you is being processed, and in such cases receive a copy of the personal data. This right applies regardless of the place where the personal data is processed.
Correction and deletion
If the personal data processed about you is incorrect or incomplete, you can demand correction. If you demonstrate that the purpose for which the personal data is processed is no longer permitted, necessary or reasonable under the circumstances, the relevant personal data must be deleted unless there are legal provisions stating otherwise.
Right to data portability
You have the right to transfer personal data that you have provided to Nibela to another personal data controller if the processing is supported on the legal grounds of agreement or consent. If it is technically possible, you can request that the personal data be transferred directly to another personal data controller. In that case, the personal data must be provided to you in a structured and machine-readable format. The right to data portability only applies to such personal data that the data subject himself has provided.
Limitation of processing
In some cases, you have the right to demand that Nibela limit the processing of your personal data, ie limit the processing to certain limited purposes. The right to restriction applies, among other things, when you believe that the information is incorrect and have requested that the personal data be corrected. You can then request that the processing of the personal data be restricted while the accuracy of the data is investigated. When the restriction ends, you must be informed.
Objection to the processing
You have the right to object to the processing of personal data supported by the legal basis; legitimate interest. In the event of an objection, Nibela shall cease the processing if Nibela cannot demonstrate compelling legitimate grounds for the processing that consider your interests, rights and freedoms or if the processing of personal data is carried out for the establishment, exercise or defense of legal claims .
The right to be forgotten
If the legal basis for the processing is consent and you withdraw your consent or if you object to a balancing of interests, you as a registered person have the right to request the deletion of your personal data.
Direct marketing
When personal data is processed for direct marketing, you have the right to object at any time to the processing of personal data about you. If you object to the processing of personal data for direct marketing, processing for such purposes shall cease.
Complaint
Should you be dissatisfied with the way we process your personal data, we ask that you first contact us at support@nibela.se.
You also have the right to turn to the Swedish Privacy Authority to present your complaints. The Swedish Privacy Agency's website: www.imy.se
Contact details for the person in charge of personal data
Nibela AB (559418–9192) is the personal data controller for Nibela's processing of personal data.
Contact details for Nibela are:
- Contact person: Ariana Tanha
- Phone: 08-490 093 20
- Address: Stora Torget 3, 582 19 Linköping
- Email address: support@nibela.se
Changes to the privacy policy
We reserve the right to make changes to our privacy policy. You will always find the latest version of our policy on our website (www.nibela.se). In the event of updates that are of decisive importance for our processing of personal data, for example changes to stated purposes, this will be communicated directly to you.
_____________________
Nibela AB's privacy policy is adopted by Ariana Tanha on Aug 15, 2024