Adcyma AB (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Identity and Access Management (IAM) services (“Services”). Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Services.

1. Information We Collect

We may collect the following types of personal data:

1.1 Personal Identifiable Information:

• First name
• Last name
• Middle name
• Display Name
• Employee ID
• Email address
• Phone number
• Company name
• Job title
• Department
• Country
• City
• Manager
• Mobile
• Language
• Employee Start Date
• Employee End Date
• Mail Nickname

1.2 Account Information:

• Username

1.3 Usage Data:

• IP address
• Device information
• Operating System
• Browser type
• Pages visited
• Time spent on pages

2. How We Use Your Information

We may use the information we collect for various purposes, including:

• To provide, maintain, and improve our Services.
• To manage your account and provide customer support.
• To communicate with you, including sending service-related communications and promotional materials (if you have opted in).
• To monitor usage and analyze trends to improve our Services.
• To comply with legal obligations and protect our rights.

3. Legal Basis for Processing Personal Data (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using the personal information described in this Privacy Policy depends on the information we collect and the context in which we collect it. We may process your personal data because:

• We need to perform a contract with you.
• You have given us permission to do so.
• The processing is in our legitimate interests, and it is not overridden by your rights.
• To comply with the law.

4. Sharing Your Information

We may share your personal data in the following situations:

• With Service Providers: We may share your personal data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf.
• For Business Transfers: We may share or transfer your personal data in connection with or during negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• With Affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy.
• With Consent: We may disclose your personal data for any other purpose with your consent.

5. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal data. While we have taken reasonable steps to secure the personal data you provide to us, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure.

6. Your Data Protection Rights (GDPR)

If you are a resident of the EEA, you have certain data protection rights, including:

• The right to access, update, or delete the information we have on you.
• The right to rectification.
• The right to object.
• The right of restriction.
• The right to data portability.
• The right to withdraw consent.

If you wish to exercise any of these rights, please contact us.

7. Third-Party Links

Our Services may contain links to third-party websites or services that are not owned or controlled by us. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party websites you visit.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: info@adcyma.com

10. Children’s Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under age 16 without verification of parental consent, we will take steps to remove that information from our servers.

11. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside Europe and choose to provide information to us, please note that we transfer the data, including personal data, to Europe and process it there.

By using the Services, you consent to the transfer of your information to Europe and the use and disclosure of your information as described in this Privacy Policy.

Effective Date: 2024-09-14

Last Updated: 2024-10-13