Effective date: November 3, 2025

1. Data Controller

ActiCal AB is the data controller for the personal data processed in connection with your ActiCal-ID user account.

Our contact details are:
ActiCal AB
Gamla Vägen 1
448 33, Floda
Sweden
Organization Number: 559461-4017
Email: privacy@actical.eu

For personal data processed within our services on behalf of our customers (organizations), we act as a data processor. In such cases, the organization is the data controller and responsible for its own privacy policy. Our Data Processing Agreement (DPA) and General Terms and Conditions are available at the page Legal Information & Agreements.

2. Personal Data We Collect

We collect and process the following categories of personal data as data controller for your ActiCal-ID:

• Name
• Email address
• Personal identification number
• Family member details (if provided)

We may also collect company-related data that could include personal data, such as:

• Organization number
• Position or role
• Company name

Personal data is collected when you create or use an ActiCal-ID account, or interact with our services through an organization.

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

• To provide and manage your ActiCal-ID user account and access to our services.
• To handle support requests and communications.
• To comply with legal obligations, such as accounting and tax requirements.

The legal bases for processing are:

• Performance of a contract (Article 6(1)(b) GDPR) for account management and service provision.
• Legitimate interests (Article 6(1)(f) GDPR) for support and operational purposes.
• Legal obligation (Article 6(1)(c) GDPR) where required by law.

4. Recipients of Personal Data

We share your personal data with the following subprocessors to provide our services:

• Sentry (error monitoring)
• AWS (cloud hosting)
• Sinch (communication services)
• Heroku (platform hosting)
• Fortnox (accounting)
• Stripe (payment processing)
• Swish (Getswish AB) (payment processing)
• BankID (Finansiell ID-Teknik BID AB) (identity verification)
• Loopia (domain and hosting)

These subprocessors are bound by data processing agreements ensuring compliance with GDPR. We may also share data with authorities if required by law.

5. International Data Transfers

Personal data may be transferred to countries outside the EU/EEA (e.g., USA) through subprocessors like AWS and Stripe. Such transfers occur only with appropriate safeguards, such as EU Standard Contractual Clauses (SCC) or adequacy decisions (e.g., EU-US Data Privacy Framework).

6. Data Retention

We retain your personal data for as long as your ActiCal-ID account is active and necessary to fulfill the purposes above. After account termination, data is deleted within 90 days, unless longer retention is required by law (e.g., for accounting purposes, up to 7 years).

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Access (Article 15)
• Rectification (Article 16)
• Erasure (Article 17)
• Restriction of processing (Article 18)
• Data portability (Article 20)
• Objection (Article 21)

To exercise these rights, contact us at privacy@actical.eu. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

8. Cookies

We use the following strictly necessary cookies to operate our website and services:

• “wp-wpml_current_language”: Remembers your language preference.
• “_acti_cal_web_user_remember_me” (on calendar.actical.eu and dashboard.actical.eu): Remembers your session for extended periods.
• “_actical_key” (on calendar.actical.eu and dashboard.actical.eu): Manages your session.

These cookies are essential for functionality and do not require consent. No analytics or tracking cookies are used.

9. Changes to This Policy

We may update this policy. Changes will be posted here with the effective date. For significant changes, we will notify you via email or on our website.

10. Contact Us

For questions about this policy or your personal data, contact us at privacy@actical.eu.