Privacy Notice

1 Introduction

Terra Labs provides a Platform which allows you, by using multiple data sources (i.a. satellite data) and artificial intelligence (AI) technology, to obtain insights to facilitate management and monitor your areas (lands and forests) (the “Terra Labs Platform” and the “Services”).

The Services are provided online via Terra Lab’s interfaces; API and applications for desktop and mobile.

In this privacy notice, we describe what personal data about you that we use and why when providing our Services and the Terra Labs Platform, when you are visiting or using our websites (available on terralabs.com and terralabs.ai) and other digital channels, and when you otherwise interact with us, including your rights under the General Data Protection Regulation (GDPR).

2 About satellite data

Users are able to access satellite data of their areas in the Terra Labs Platform. The satellite data is evaluated, compared and analyzed by us to provide relevant estimations and insights for the users.

The satellite data provides a high-level view of the relevant areas, meaning that it will not be possible, as a main rule, to identify any individuals through the images or the data generated from the images. In other words, the satellite data will normally not constitute personal data as defined under the GDPR.

However, where satellite data, alone or combined with other information relating to an identifiable individual, qualifies as personal data, we rely on our legitimate interest under Article 6.1 (f) of the GDPR for the processing of the satellite data to provide our Services, which we consider outweighs the privacy interest of the individuals concerned, especially given that the potential impact on the potential individuals concerned that the processing may imply would be very limited, if any impact at all. The satellite data is stored in the Services for as long as the Services are provided by us to allow users to analyze changes to their areas over time to obtain insights.

3 Who is covered by this information

This privacy notice covers you who:

  • Represents or are a contact person of a customer that subscribes to a Terra Labs subscription.
  • Subscribes to a Terra Labs subscription as a consumer.
  • Uses the Terra Labs Platform.
  • Visits our website and our digital channels, for example our feeds on social media platforms.
  • Represents or are a contact person of a supplier or a partner to us.
  • Otherwise interact with us, for example if you contact us or if you sign up for communication such as our newsletter.

4 Responsibility for the use of your personal data

Data controller

Terra Labs AB, company reg. no. 559426-6123, (“Terra Labs”, “we”, “us” or “our”) is responsible (controller) for the collection and processing of your personal data as described in this privacy notice.

For contact details to Terra Labs, please see section “If you have any” below.

5 From which sources we collect personal data

The personal data that we collect about you is mainly collected directly from yourself when you provide your personal data to us, for example when you sign up for a Terra Labs subscription, register a user account in the Terra Labs Platform or when you contact or otherwise communicate with us.

We also collect, where necessary, personal data from other sources:

  • Payment service provider that we use to manage your payment when you order and subscribe to a Terra Labs subscription in the Terra Labs Platform.
  • External persons that we communicate with for the purposes described in this privacy notice.
  • Public records, for example where we obtain publicly available information on properties and buildings that may be linked to you as an individual (such as ownership), to supplement satellite data and insights in our Services.

6 For which purposes we use your personal data

We collect and use personal data for various purposes. The purposes for which we in practice process your personal data may, however, vary, depending on your relationship with us or how you interact with us.

To read more about which personal data, which legal basis that we rely on for the processing of your personal data for each purpose and for how long your personal data is stored in relation to the relevant categories of individuals, please see our detailed information on our use of personal data.

7 How WE SHARE your personal data

7.1 Transfer of personal data to other external recipients (controllers)

We share your personal data with various external recipients, where necessary, for the purposes for which we process your personal data as described in this privacy notice. These recipients are responsible (controllers) for their own processing of your personal data, unless we have stated otherwise.

To read more about for which purposes that we share your personal data and the legal bases for such sharing, please see our detailed information on our use of personal data, where we have outlined in relation to each purpose for processing of personal data the external recipients that we share your personal data with.

7.2 Transfer of personal data to service providers (processors)

We also transfer personal data to service providers that we have engaged when necessary for the purposes for which we process personal data as described in this privacy notice.

These service providers provide, for example, IT services, development services and communication services to us. The services providers which process personal data on our behalf and in accordance with our instructions act as data processors in relation to us. These service providers may not process your personal data for their own purposes and are legally and contractually obligated to protect your personal data.

7.3 Where we process your personal data

We store your personal data within the EU/EEA. The Terra Labs Platform is hosted on servers within the EU. We transfer, in certain cases, your personal data to recipients located in third countries outside the EU/EEA, for example to service providers which we engage in such a third country.

To ensure an essentially equivalent level of protection for your personal data when transferred (or otherwise made available) to service providers in third countries outside of the EU/EEA which do not provide an adequate level of protection, we normally use the EU Commission’s adopted standard contractual clauses for international transfers according to decision 2021/914 and implement – in light of the law and practices of the third country – necessary supplementary measures to bring the level of protection of the personal data transferred to an essentially equivalent level.

We also rely upon adequacy decisions by the EU Commission where personal data is transferred to countries and recipients covered by such decisions. Adequacy decisions are issued by the EU Commission when it has decided that such a country and/or recipient provides adequate protection for personal data.

For more information on the safeguards that we have taken to protect your personal data, please contact us on the contact details outlined in If you have any questions below.

8 Your rights

8.1 Rights in relation to the use of your personal data

You have the following rights in relation to your personal data under the GDPR:

  • Access to and receive a copy of your personal data.
  • Rectify or supplement your personal data.
  • Withdraw your consent to a processing of your personal data.
  • Delete your personal data.
  • Object to a processing of your personal data.
  • Restrict the processing of your personal data.
  • Obtain a copy of your personal data and have your personal data transferred to an external recipient (data portability).

8.2 Automated individual decision-making

We do not carry out any automated individual decision-making which has legal effects or similar significant effects on you.

8.3 Further information on your rights

Please note that each right above comes with certain caveats and exemptions. This means that these rights only may be successfully exercised in certain situations. For more information on your rights and when they apply, see the information provided by the Swedish Authority for Privacy Protection available on their website.

8.4 Exercise your rights

If you wish to exercise your rights at any time, please contact us on the contact details outlined in If you have any questions below.

8.5 Right to lodge a complaint

You have the right to lodge a complaint with your supervisory authority. In Sweden, Terra Labs is under the supervision of the Swedish Authority for Privacy Protection.

9 Use of cookies and similar technologies

In our cookie policy we describe how we use cookies and similar technologies, for which purposes and what options and settings you may choose for our cookies.

10 Updates to this information

If our use of personal data changes, we will update this privacy notice to reflect such changes. At the top of this page, you can see when this privacy notice was last updated. If we make material changes that are not only editorial to this privacy notice, we will inform you of any such changes and what they mean to you in advance.

10.1 Version history

Version Comment Access to version
1.1 The version of the privacy notice, which is the current version. Adjustments of language and introduction. You are currently reading the current version.
1.0 The first version of the privacy notice. Contact Terra Labs.

11 If you have any questions

Please contact us if you have any questions about this privacy notice, how we use your personal data or if you wish to exercise your rights.

Terra Labs AB
Company registration number: 559426-6123
Address: Malmskillnadsgatan 39, 111 38 Stockholm
Email: privacy@terralabs.com

12 Detailed information on our use of personal data

12.1 Introduction

In this detailed information on our use of personal data, we explain the purposes for which we use personal data, the categories of personal data processed for each purpose, our legal basis for the use, for how long we store personal data and with which external recipients (in their role as controllers) that we share your personal data for each purpose.

Further down, we describe which categories of personal data that we process and examples of the type of personal data that is included in each category.

12.2 Detailed information on our use of personal data

12.2.1 Consumers and business customers

12.2.1.1 Manage your registration of a Terra Labs subscription

What we do: We process your personal data to manage your registration of a Terra Labs subscription.

You need to provide the personal data requested by us in order for us to manage your registration of a Terra Labs subscription. If you do not provide the requested information, we unfortunately cannot manage your registration, which means that you cannot use our Services provided through the Terra Labs Platform.

Categories of personal data Legal basis External recipients
  • Communication
  • Contact details
  • Identity data
  • Order data
  • Organizational data
  • Subscription data
Legitimate interest (Article 6.1 (b) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest in managing your registration of a Terra Labs subscription and thereby fulfill our rights and obligations under the Terra Labs order form.

Our assessment is that this legitimate interest outweighs your interest of not having your personal data processed for this purpose, since we otherwise would not be able to manage your registration.

Performance of the agreement with you (Article 6.1 (b) of the GDPR). If you are a consumer or a sole trader, the processing of your personal data is necessary to fulfill the agreement with you according to the Terra Labs order form.

Storage period: Personal data is stored for this purpose until the registration process has been completed.

12.2.1.2 Manage the customer relationship and your Terra Labs subscription

What we do: We process your personal data to manage the customer relationship and your Terra Labs subscription, for example to store and update your subscription in our Services, manage the payment of your subscription together with our payment service provider, and to communicate with you as part of the customer relationship.

Categories of personal data Legal basis External recipients
  • Communication
  • Contact details
  • Identity data¹
  • Order data
  • Organizational data
  • Payment data
  • Subscription data¹
Categories of personal data marked with (1) is shared with relevant payment service provider.

Legitimate interest (Article 6.1 (b) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest in managing the business customer relationship and thereby fulfill our rights and obligations under the Terra Labs order form.

Our assessment is that this legitimate interest outweighs your interest of not having your personal data processed for this purpose, since we otherwise would not be able to manage the relationship.

Performance of the agreement with you (Article 6.1 (b) of the GDPR). If you are a consumer or a sole trader, the processing of your personal data is necessary to fulfill the agreement with you according to the Terra Labs order form. 		Payment service provider

Storage period: Personal data is stored for this purpose as long as there is an active customer relationship with you. The customer relationship is active for as long as you have an active Terra Labs subscription.

12.2.1.3 Carry out analysis for customer insights

What we do: We process your personal data to carry out analyses for customer insights on an aggregated level, for example to better understand what services and features that you use as part of your Terra Labs subscription. This in order for us to obtain a better understanding and insight in our customers’ behaviors and patterns, to allow us to develop and improve our business and Terra Labs for the benefit of our customers.

We do not carry out any profiling activities in relation to your personal data for this purpose, since analyses are made on an aggregated level. We are not interested in your specific behavior, but instead our customers’ behaviors on an aggregated level.

Categories of personal data Legal basis External recipients
  • Communication
  • Feedback data
  • Identity data
  • Organizational data
  • Subscription data
  • Technical data
Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of carrying out analyses for customer insights. This in order for us to develop and improve our business and Terra Labs for the benefit of our customers. Our assessment is that this legitimate interest outweighs your interest of not having your personal data processed for this purpose, since reports and statistics only is saved on an aggregated level and that the information therefore cannot be related to you.

Storage period: Personal data is stored for this purpose during 27 months from the date of collection.

Reports and results on an aggregated level which do not contain any personal data, including statistics, are stored until further notice.

12.2.1.4 Follow up on and evaluate sales and campaigns

What we do: We process your personal data follow up on and evaluate our sales and campaigns that we carry out, for example to compile statistics of the number of ordered Terra Labs subscriptions. We do not carry out any profiling activities in relation to your personal data for this purpose.

Categories of personal data Legal basis External recipients
  • Identity data
  • Organizational data
  • Payment data
  • Subscription data
Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of follow up on and evaluate our sales and campaigns that we carry out. Our assessment is that this legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since reports and statistics only are saved on an aggregated level and that the information therefore cannot be related to you.

Storage period: Personal data is stored for this purpose during 27 months from the date of collection.

Reports and results on an aggregated level which do not contain any personal data, including statistics, are stored until further notice.

12.2.1.5 Communicate about us and our Services

What we do: We process your personal data to communicate about us and our Services in different channels, for example via email and on social media. This for example to inform you of our business and the Terra Labs platform, for example about a new functionality or features of the Terra Labs platform.

We will only send you communication for marketing purposes if you have not objected to such communication.

Categories of personal data Legal basis External recipients
  • Contact details
  • Identity data
Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of communicating about us, our business and our Services. Our assessment is that this legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since you always may decline or unsubscribe to such communication for this purpose.

Storage period: Personal data is stored for this purpose as long as there is an active customer relationship and for a period of twelve (12) months thereafter. The customer relationship is active as long as you have a Terra Labs subscription.

You can always unsubscribe from the relevant communication by clicking on the unsubscribe link in the email or similar communication field or by contacting us.

12.2.1.6 Provide offers and marketing

What we do: We process your personal data to provide you offers and marketing in different channels, for example via email, regarding our products and Services.

No profiling will take place in connection with this processing. However, we may tailor which target groups that shall receive a certain offer or marketing communication, for example based on type of subscription to ensure that the communication is relevant for you.

We will only send you communication for marketing purposes if you have not objected (opted-out) to such communication.

Categories of personal data Legal basis External recipients
  • Contact details
  • Identity data
  • Organizational data
  • Subscription data
Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of providing your with relevant offers and marketing. Our assessment is that this legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since you always may decline or unsubscribe to such communication for this purpose.

Storage period: Personal data is stored for this purpose as long as there is an active customer relationship and for a period of twelve (12) months thereafter. The customer relationship is active as long as you have an active Terra Labs subscription.

You can always unsubscribe from the relevant communication by clicking on the unsubscribe link in the email or similar communication field or by contacting us.

12.2.2 Users of the Terra Labs Platform

12.2.2.1 Manage invitations to use the Terra Labs Platform

What we do: We process your personal data to allow you to invite other users to use the Terra Labs Platform. Moreover, we process personal data about the individual invited to manage the invitation to use the Terra Labs Platform, including communicating with the individual prior to and in connection with the sign-up process.

Categories of personal data Legal basis External recipients
  • Identity data
  • Contact details
Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to manage the invitation to use the Terra Labs Platform. Our assessment is that this legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since you otherwise would not be able to use our Services.

Storage period: Personal data is stored for this purpose until the invitation to our Services has been managed.

12.2.2.2 Manage your user account

What we do: We process your personal data to register and manage your user account in the Terra Labs Platform.

You need to provide the personal data requested by us to register a user account for the Terra Labs Platform. If you do not provide the requested information, there is a risk that we cannot provide the Services to you.

Categories of personal data Legal basis External recipients
  • Audio and video material (profile picture)
  • Contact details
  • Identity data
  • Profile data
  • Subscription data
Performance of the agreement with you (Article 6.1 (b) of the GDPR). The processing of your personal data is necessary to fulfill the agreement with you according to the Terra Labs user terms and conditions.

Storage period: Personal data is stored for this purpose for as long as your user account is active. Your user account is active if you have used the account during the last twelve (12) months, for example logged in with your user account, or as long as your user account is connected to an active Terra Labs subscription.

12.2.2.3 Provide access to the Terra Labs Platform, including its features

What we do: We process your personal data to provide you access to the Terra Labs Platform and its features, for example to allow you to submit data into the platform, access satellite data of your areas and obtain insights relating to such areas.

If you consent to having our locations services enabled for our Services, we will process your location data shared by your device in order to allow you to see your location in the Services.

You can always withdraw your consent at any time by disabling location services for our Services on your device. Please note that you will not be able to use certain features in the platform, for example being able to see your location in the Services, which require your location data, if you withdraw such consent.

Categories of personal data Legal basis External recipients
  • Communication
  • Contact details
  • Digital data
  • Identity data
  • Location data
  • Order data
  • Profile data
  • Subscription data
  • Property data
Performance of the agreement with you (Article 6.1 (b) of the GDPR). The processing of your personal data is necessary to fulfill the agreement with you according to the Terra Labs terms and conditions.

Consent (Article 6.1 (a) of the GDPR). The processing of your location data is based on your provided consent when enabling location services for our Services.

Storage period: Personal data is stored for this purpose for as long as your user account is active. Your user account is active if you have used the account during the last twelve (12) months, for example logged in with your user account, or as long as your user account is connected to an active Terra Labs subscription.

Location data is only processed when using the Services to display your location in the Services if you have provided your consent. Location data is not stored in the Services.

12.2.2.4 Manage user feedback

What we do: We process your personal data to manage your user feedback that you can provide in the Terra Labs Platform, for example if you submit your input on the accuracy of your obtained satellite data or insights.

Your feedback is important to us and anonymised feedback helps us train our AI models and in general to improve and develop our Services.

Categories of personal data Legal basis External recipients
  • Communication
  • Feedback data
  • Identity data
  • Profile data
  • Property data
Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest in managing your user feedback. Our assessment is that this legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since it is voluntary to provide feedback and that reports and statistics (based on the feedback) only are saved on an aggregated level and therefore cannot be related to you.

Storage period: Personal data is stored for this purpose during 27 months from the collection.

Reports and results on an aggregated level which do not contain any personal data, including statistics, are stored until further notice.

12.2.2.5 Communicate notifications and updates

What we do: We process your personal data to provide you with notifications and updates, for example about new features or content, changed terms, updates or other important information regarding the Service, in our digital channels, such as via email or push notifications (if you have enabled such notifications on your device).

We will only send you communication for marketing purposes if you have not objected (opted-out) to such communication.

Categories of personal data Legal basis External recipients
  • Communication
  • Contact details
  • Identity data
  • Profile data
  • Property data
Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest in communicating notifications and updates. Our assessment is that this legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since we otherwise would not be able to notify you of important updates about the Services.

Storage period: Personal data is stored for this purpose for as long as your user account is active. Your user account is active if you have used the account during the last twelve (12) months, for example logged in with your user account, or as long as your user account is connected to an active Terra Labs subscription.

You can always unsubscribe from the relevant communication by clicking on the unsubscribe link in the email or similar communication field or by contacting us.

12.2.2.6 Follow up on and analyze the use of the Terra Labs platform and our Services

What we do: We process your personal data to collect and analyze how you interact with the Terra Labs platform and our Services. This is done using monitoring frameworks, cookies and similar technologies.

We do this to better understand how the Terra Labs Platform and our Services are used, which helps us to improve the platform, our Services and its features.

Categories of personal data Legal basis External recipients
  • Digital data
  • Profile data
  • Technical data
Consent (Article 6.1 (a) of the GDPR). The processing relies on the consent that you provide by accepting our collection of your personal data from your device.

Storage period: Personal data is stored for a period of twelve (12) months following the date of collection. Reports and results on an aggregated level which do not contain any personal data, including statistics, are stored until further notice.

12.2.2.7 Troubleshoot and manage errors or incidents in the Terra Labs Platform and our Services

What we do: We process your personal data to troubleshoot and manage errors in the Terra Labs Platform and our Services, for example to investigate an error or incident, identify the cause of the error or incident and take measures to remedy the error or incident, for example by deploying fixes. This helps us ensuring that the Services are reliable, error free, and stable in order to provide the best user experience possible when using our Services.

Categories of personal data Legal basis External recipients
  • Feedback data
  • Identity data
  • Profile data
  • Subscription data
  • Technical data
  • Property data
Legitimate interest (Article 6.1 f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of ensuring that the Services are reliable, error free and stable. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially given the purpose of the processing.

Storage period: Personal data is processed during the period measures are taken to troubleshoot and manage errors in the Terra Labs Platform and our Services, which in practice can vary depending on the nature of the error or incident. However, normally personal data is not stored for a longer period than three (3) months for this purpose.

Personal data in logs is retained in order to satisfy our legitimate interest of troubleshooting and incident management for a period of 13 months from the date and time of the log entry.

12.2.2.8 Test, develop and improve the Terra Labs Platform and our Services, including AI model training

What we do: We process your personal data where necessary to test, develop and improve the Terra Labs Platform and our Services, including training of AI models related to our Services. Our AI models rely on your interactions and feedback to improve analyses of satellite data in the Services. This allows us to provide you with even more relevant insights when using the Terra Labs Platform. It is important to us to continuously develop and improve the Terra Labs Platform and our Services to meet your and others’ expectations and needs.

Categories of personal data Legal basis External recipients
  • Digital data
  • Feedback data
  • Identity data
  • Profile data
  • Subscription data
  • Technical data
  • Location data
  • Property data
Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of testing, developing and improving the Terra Labs Platform and our Services, to meet your and others’ expectations and needs. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially given that it is in our and all users’ interest that the Terra Labs Platform and our Services are continuously developed and improved.

Storage period: Personal data is stored for test and development for the period necessary to anonymise personal data, test functionality, and carry out and verify corrections and bug fixes, which normally is a period of up to (3) months calculated from the date of the commencement of the measure.

We also continuously anonymise personal data collected for training and fine-tuning our AI models for development and improvement of our Services.

12.2.3 Prospective consumers and business customers

12.2.3.1 Communicate with you regarding the Terra Labs Platform and our Services

What we do: We process your personal data to communicate with you about the Terra Labs Platform and our Services, for example if you have shown an interest in our Services by interacting with us via email or if an existing user has invited you to use our Services.

We will only use your personal data for marketing purposes if you have not objected (opted-out) to such communication.

Categories of personal data Legal basis External recipients
  • Communication
  • Contact details
  • Identity data
  • Organizational data
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in communicating with you about the Terra Labs Platform and our Services. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since only limited personal data would be used for this purpose and that you can always opt-out from the processing.

Storage period: Personal data is stored for this purpose for a period of twelve (12) months from the collection, or until the last communication with you concerning our Services for this purpose.

You can always unsubscribe from the relevant communication by clicking on the unsubscribe link in the email or similar communication field or by contacting us.

12.2.3.2 Carry out sales meetings and demos

What we do: We process your personal data to carry out sales meetings and demos of our Service, including communicating with you about the activity.

Categories of personal data Legal basis External recipients
  • Audio and video material
  • Identity data
  • Communication
  • Contact details
  • Organizational data
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in carrying out sales meetings and demos. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, given the limited impact that the processing of personal data may have.

Storage period: Personal data is stored for this purpose during the period the meeting or activity is carried out.

12.2.4 Visitors of our website and digital channels

12.2.4.1 Follow up on and evaluate the use of our website and digital channels

What we do: We process your personal data to better understand how our website and digital channels are used. This is carried out by using cookies and similar technologies which allow us to analyze visitor and user statistics.

Categories of personal data Legal basis External recipients
  • Digital data
  • Technical data
Consent (Article 6.1 (a) of the GDPR). The processing relies on the consent that you provide by accepting the use of cookies and similar technologies for the same purpose.

Storage period: Personal data is stored during the period stated in our cookie policy. Reports and results on an aggregated level which do not contain any personal data, including statistics, are stored until further notice.

12.2.4.2 Provide marketing and tailored content on our website and in our digital channels

What we do: If you visit our website or digital channels, we collect your personal data by using cookies and similar technologies to provide you with marketing and other tailored content which we believe are of interest to you, for example based on your interactions with our digital channels, including our website.

Categories of personal data Legal basis External recipients
  • Digital data
  • Technical data
Consent (Article 6.1 (a) of the GDPR). The use of your personal data relies on the consent that you provide by accepting the use of cookies and similar technologies for the same purpose.

Storage period: Personal data is stored during the period stated in our cookie policy. Reports and results on an aggregated level which do not contain any personal data, including statistics, are stored until further notice.

12.2.4.3 Provide functionality on our website and in our digital channels

What we do: We process your personal data to ensure necessary technical functionality and security on our website and in our digital channels, for example by using strictly necessary cookies and other technologies on these platforms.

Since the cookies and similar technologies are necessary in order to provide our website as intended, your consent to our use of cookies and similar technologies is not needed.

Categories of personal data Legal basis External recipients
  • Technical data
Legitimate interest (Article 6.1 f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of ensuring technical functionality on our website and in our digital channels. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, given the purpose of the processing as such and that only simple personal data is processed for this purpose.

Storage period: Personal data is stored during the period stated in our cookie policy. Reports and results on an aggregated level which do not contain any personal data, including statistics, are stored until further notice.

Contact persons of suppliers and partners

12.2.4.4 Manage the relationship with suppliers and partners

What we do: We process your personal data to manage our business relationship with the company or organization that you work for or represent, for example to register you as a contact person, manage invoices and to communicate with you.

We also process your personal data where necessary to register orders for products and services, respond to requests for proposals (RFPs) and communicate with you for the same purpose.

Categories of personal data Legal basis External recipients
  • Communication
  • Contact details
  • Identity data
  • Organizational data
Legitimate interest (Article 6.1 f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest in managing the business relationship with our supplier and partners.

It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since we otherwise would not be able to manage the relationship with the company or organization that you represent.

Performance of the agreement with you (Article 6.1 (b) of the GDPR). If you are a sole trader, the processing of your personal data is necessary to fulfill the supplier or partner agreement with you.

Storage period: Personal data is stored for this purpose as long as there is an active business relationship with the company or organization that you work for or represent.

12.2.4.5 Follow up and evaluate the supplier and partner relationship

What we do: We process your personal data to evaluate the relationship with the company or organization that you work for or represent, for example by generating statistics on orders of products and services. This to better understand how the relationship is working between us and the relevant supplier or partner.

Categories of personal data Legal basis External recipients
  • Communication
  • Contact details
  • Identity data
  • Organizational data
Legitimate interest (Article 6.1 f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of following up and evaluating the supplier or partner relationship. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since reports and statistics only are saved on an aggregated level and that the information therefore cannot be related to you.

Storage period: Personal data is stored for this purpose during 27 months from the collection.

Reports and results on an aggregated level which do not contain any personal data, including statistics, are stored until further notice.

12.2.5 All individuals above and other external persons

12.2.5.1 Provide our newsletter

What we do: If you have signed up for our newsletter, we process your personal data to send you our newsletter, including registering you in our sending list.

We will only send you communication for marketing purposes if you have not objected to such communication.

Categories of personal data Legal basis External recipients
  • Identity data
  • Contact details
Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest in sending you newsletters and similar communication. Our assessment is that this legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since you voluntarily have signed up for the newsletter.

Storage period: Personal data is stored for this purpose until you unsubscribe to the newsletter.

You can always unsubscribe from the relevant communication by clicking on the unsubscribe link in the email or similar communication field or by contacting us.

12.2.5.2 Carry out surveys

What we do: We process your personal data to carry out surveys (such as customer, market and user surveys), for example to determine to which target group we shall send a survey, which questions to be asked in a survey, send out the survey and to collect and analyze the results from a survey.

Your opinions about our business and Services are important to us and help us to improve our business and Services.

You can always unsubscribe from our communication about surveys by clicking on the unsubscribe link in the email or similar communication field or by contacting us.

Categories of personal data Legal basis External recipients
  • Communication
  • Contact details
  • Feedback data
  • Identity data
  • Profile data
  • Subscription data
Profile data and feedback data is only processed for this purpose in relation to users.

Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of carrying out surveys in order to obtain your opinions of our business and Services.

Our assessment is that this legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since it is voluntary to participate in surveys.

Storage period: Personal data is stored for this purpose during the period the survey is carried out and for a period of three (3) months thereafter to compile the responses in a report. Thereafter your personal data is deleted or anonymised.

Reports and results on an aggregated level which do not contain any personal data, including statistics, are stored until further notice.

12.2.5.3 Carry out meetings, events and similar activities

What we do: We process your personal data to carry out meetings, events and similar activities, for example to register your participation, carry out the activity and to communicate with you about the activity.

Categories of personal data Legal basis External recipients
  • Audio and video material
  • Communication
  • Contact details
  • Identity data
  • Organizational data
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in carrying out meetings, events and similar activities. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially if you have voluntarily signed up for or participate in the activity.

Storage period: Personal data is stored for this purpose during the period the meeting, event or activity is carried out.

12.2.5.4 Follow up and evaluate activities carried out

What we do: If you have participated in an activity that we have carried out, for example a meeting, a demo, or an event, we process your personal data to follow up and evaluate the activity, for example to compile statistics of the number of participants and to plan for future activities.

Categories of personal data Legal basis External recipients
  • Audio and video material
  • Communication
  • Contact details
  • Identity data
  • Organizational data
Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest of following up and evaluating activities carried out. It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since it concerns harmless personal data.

Storage period: Personal data is stored for this purpose for a period of 13 months calculated from the date of relevant activity being carried out.

Reports and results on an aggregated level which do not contain any personal data, including statistics, are stored until further notice.

12.2.5.5 Respond to questions and provide customer service

What we do: We process your personal data to respond to questions when you contact us to provide customer service.

Categories of personal data Legal basis External recipients
  • Communication
  • Contact details
  • Identity data
  • Organizational data
  • Profile data
  • Subscription data
  • Property data
Profile data is only processed for this purpose in relation to users.

Legitimate interest (Article 6.1 (f) of the GDPR). The use of your personal data is necessary to satisfy our legitimate interest in responding to questions and to provide customer service.

It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially when you yourself has reached out to us.

Storage period: Personal data is stored for this purpose for a period of twelve (12) months calculated from the date the support matter was closed or the last communication in the same matter.

12.2.5.6 Communicate in the course of the business

What we do: We process your personal that you and other share with us in connection with internal and external communication in the course of the business, for example when our personnel communicate with each other and external persons via email to carry out their work duties.

Categories of personal data Legal basis External recipients
  • Audio and video material1
  • Identity data1
  • Communication1
  • Contact details1
  • Organizational data1
Personal data marked with (1) is shared, where applicable, with external persons.

Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of communicating internally and externally in the course of the business.

It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially since it concerns harmless data and data normally used for this purpose.

External persons that we interact with or who are included in the communication

Storage period: Personal data is stored for this purpose for a period of two (2) years calculated from the date of the last communication in the same conversation. If the communication takes place for another purpose under this privacy notice, for example to manage the customer relationship and your Terra Labs subscription, the communication is stored for the longer period that applies to fulfill such purposes.

12.2.5.7 Manage sales and restructuring of all or parts of the business

What we do: If all or parts of the business would be sold, or in any other way transferred or restructured, we process your personal data where necessary for this purpose. Should the business be transferred to a buyer, your personal data would also be transferred and disclosed to the buyer. The buying company would in such case be responsible (data controller) for your personal data and the processing that takes place for the same purposes as stated in this privacy notice, unless you receive any other information in connection with the sale.

Categories of personal data Legal basis External recipients
Relevant categories of personal data as are necessary to manage the sale or restructuring of all or parts of the business in each case.

Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest in managing a sale or restructuring of all or parts of the business.

It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose if the buyer carries out the same or similar type of business that we do.
  • Buyers
  • Potential buyers
  • External advisors
  • Legal representatives

Storage period: Personal data is stored for this purpose for the period that is necessary to manage the sale or the restructuring.

What we do: We process your personal data where necessary to manage, defend and exercise legal claims in an individual case, for example in connection with a dispute or a court proceeding.

Categories of personal data Legal basis External recipients
Relevant categories of personal data needed for managing and defending a legal claim in the individual case.

Legitimate interest (Article 6.1 (f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of managing, defending and exercising legal claims.

It is our assessment that our legitimate interest clearly outweighs your interest of not having your personal data processed for this purpose.
  • Counterparty
  • Courts
  • Debt collecting companies
  • External advisors
  • External legal counsel
  • Insurance companies
  • Relevant authorities

Storage period: Personal data is stored for this purpose for the period as necessary to manage, defend and/or exercise the legal claims.

What we do: We process your personal data where necessary to fulfill our legal obligations, for example accounting obligations and obligations under the GDPR.

Categories of personal data Legal basis External recipients
Relevant categories of personal data that are necessary to fulfill the specific legal obligation. Fulfill legal obligation (Article 6.1 (c) of the GDPR). The use of your personal data is necessary to fulfill our legal obligations.
  • Relevant authorities

Storage period: Personal data is stored for such period that is necessary in order for us to fulfill the specific legal obligation. By way of example, personal data in accounting material is stored for seven (7) years calculated from the end of the calendar year when the relevant fiscal year ended according to the Swedish Accounting Act (1999:1048).

12.2.5.10 Ensure technical functionality and security in our IT systems, including in the Terra Labs platform and in our Services

What we do: We process your personal data to ensure necessary technical functionality and security in our IT system, for example in connection with backups, access controls and troubleshooting.

Categories of personal data Legal basis External recipients
All categories of personal data that are stated in relation to the purposes of processing your personal data.

Legitimate interest (Article 6.1 f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest in ensuring technical functionality and security of our IT systems.

It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose.

Storage period: Personal data is stored for the same period as stated in relation to each relevant purpose of the processing.

Personal data in backups are stored for a period of 13 months from the date of the backup.

12.2.5.11 Prevent, investigate and manage misuse of our Services

What we do: We process your personal data where necessary to prevent and investigate potential misuse of our Services, for example attempted fraud. We also process your personal data in order to prevent sending of junk mail, cyber-attacks and hacking, attempts to unauthorized access to user accounts or other prohibited actions under law or our terms and conditions.

Categories of personal data Legal basis External recipients
Relevant categories of personal data that are necessary in the individual case.

Legitimate interest (Article 6.1 f) of the GDPR). The processing of your personal data is necessary to satisfy our legitimate interest of preventing and investigating misuse of our Services or criminal actions against the company.

It is our assessment that our legitimate interest outweighs your interest of not having your personal data processed for this purpose, especially in light of the purpose.
  • Relevant authorities
  • Payment service providers

Storage period: Personal data is stored for this purpose as long as is necessary to investigate the event and to take necessary measures as a result of this.

What we do: We process your personal data to respond to legal requests from authorities, for example law enforcement, tax authorities or any other authorities.

Categories of personal data Legal basis External recipients
All categories of personal data as necessary to respond to and evaluate the request in each case.

Fulfill legal obligation (Article 6.1 (c) of the GDPR). The processing of your personal data is necessary to fulfill our legal obligations.

Legitimate interest (Article 6.1 f) of the GDPR). If there is no explicit legal obligation requiring that we respond to the legal request, but we consider that we and the public authority have a legitimate interest (which outweighs your privacy interest), we rely on this legitimate interest for the use of your personal data for this purpose.
  • Relevant authorities

Storage period: Personal data is stored for this purpose for the period that is necessary to respond to the specific legal request and for a period of ten (10) years thereafter to document the request and our response to the request.

12.3 Categories of personal data

In the below table we describe what categories of personal data that we process with examples of types of personal data covered by each category.

Categories of personal data Examples of types of personal data
Audio and video material Video, photos, audio recordings
Communication Content in email, published posts and communication in customer service matters
Contact details Address, email address, phone number
Digital data Click and visit statistics on the website, user preferences, interactions when using the Services
Feedback data Feedback on the Services that you as a user provide in the Terra Labs Platform, for example input on the accuracy of satellite data or insights
Identity data Name, personal identity number
Location data Information about your device’s geographic location
Order data Type of order, order request date/time, price and discounts, order history
Organizational data Title, position and the company or organization that you work for
Payment data Payment status
Profile data User ID, username
Property data Information on properties and buildings from public records (such as ownership)
Subscription data Type of subscription, subscription period
Technical data Type of device, IP address, version of web browser and operating system

Terms & Conditions

User Privacy Notice

Terms & Conditions

User Privacy Notice

Login

Contact us

Login

Contact us