Where the data sits and who does what

The roles

The customer who commissions a study is the controller for employees' answers. Danadot processes the data on the customer's behalf, as a processor, under a written agreement.

In practice that means the customer decides what is studied and why, and that Danadot does not use the answers for anything else.

Where data is processed

The service runs on servers within the EU. Which sub-processors are used, and for what, is set out in the register linked below.

The survey answers

Answers are used to build the customer's evidence. Results are reported at a level where individual answers cannot be singled out, and business units with too few answers are not reported separately.

Anyone answering a survey will find the information that applies to their answers on a page of its own.

The site itself

This website sets no cookies and loads no third-party scripts. Questions to the assistant are stored for 90 days without any record of who asked them and are answered with the help of an AI service.

With your consent, we count visits with our own tool on our own server, without cookies. On your first visit a box asks whether you accept cookies and similar technology. Accepting also covers the visit statistics, and nothing is counted until you have accepted. In the box's settings you can choose the statistics on their own. Your choice, accepted or declined, is saved in your browser's local storage for 12 months. After that the box asks again, and you can change your choice at any time under “Cookie settings” at the bottom of the page. What is counted is which page is shown, which website the visit came from and which buttons are used, never what you write in forms. The IP address is not stored. It is combined with the browser's name and a value that changes every day, so the same visitor is not recognised from one day to the next. The statistics are kept for 13 months, and the legal basis is your consent. If your browser has asked not to be tracked (Do Not Track or Global Privacy Control), nothing is counted and the box does not ask.

The server also keeps an access log, separate from the statistics and regardless of your choice in the box. For each request it stores the IP address, the time, the type of request, the path without the query string, the status code, the browser's name (User-Agent) and the other technical details of the request, except cookies, login details and which page you came from. The log is used for operations, troubleshooting and security, for example to detect and stop intrusion attempts and overload. The legal basis is our legitimate interest in running the website securely (Article 6(1)(f) GDPR). The log is kept for at most 90 days, is not shared and is not linked to the statistics. You can object to the processing by writing to privacy@danadot.com (Article 21).

The typeface is served from our own origin, so no visit leaves a trace with anyone else.

How the details in the contact form are processed is stated in the section below, and about the assistant in the section after that.

The contact form

Through the form you can ask a question, book a walkthrough or request a quote. WeOffice AB is the controller, and the details are used only to answer the request and contact you about it. The legal basis is our legitimate interest in being able to answer requests sent to us (Article 6(1)(f) of the GDPR). You may object to the processing by writing to privacy@danadot.com (Article 21), and we will then erase the details.

Only the email address is required. What is stored is what you choose and write in the form: email and, if you give them, name, company, phone, message, what it is about, what fits best, number of employees, area and city. Stored with it are when the request arrived and which page you came to the form from. Please do not enter information about other people in the message.

The request is stored in the Danadot app and sent by email to info@danadot.com, where people at WeOffice AB read and answer it. You receive a confirmation email yourself. It contains only what the request is about, what fits best if you chose it and when we will reply, nothing you wrote.

The details are kept for ten years from the request. Our having contacted you does not erase them. We may erase them earlier, and an erased request is gone completely within a month.

Newsletter

At the bottom of each page you can sign up for Danadot's newsletter with your email address. WeOffice AB is the controller. We first send an email with a link, and you only receive the newsletter once you have confirmed with it. The legal basis is your consent, which you give when you confirm (Article 6(1)(a) GDPR).

We store the email address, the language, the page where you signed up, when you signed up and confirmed, and which version of this text applied. Nothing else.

Every newsletter has a link to unsubscribe, and you can also write to privacy@danadot.com. You can withdraw your consent at any time, as easily as you gave it. This does not affect what happened before.

A sign-up that is not confirmed is deleted after one day. When you unsubscribe, your data is deleted. Only a check value derived from the address is kept, not the address itself, so that we do not add it again by mistake. The check value is kept for as long as we send the newsletter. The legal basis is our legitimate interest in respecting that you have unsubscribed (Article 6(1)(f)).

Your address is stored in Danadot's app on our server within the EU. Once mailings begin, the service that sends them will be named here and among our sub-processors. You have the right to know what data we hold about you, to have it corrected or deleted, to ask us to restrict its processing and to receive it in a machine-readable format. Write to privacy@danadot.com.

Questions to Danadot Assistant

The assistant answers primarily from a bank of questions that we have reviewed and that is built on the texts on this website. If there is no reviewed answer, an AI service can answer from the website's texts; that answer is marked "not yet reviewed". It has no access to the app or to any information about our customers.

Your question is sent to our own service and stored for 90 days without any record of who asked it. Email addresses and phone numbers in the question are removed before it is stored. Even so, do not write names or other personal data.

The conversation is kept only in your browser tab and disappears when the tab is closed. Nothing is stored in the browser between visits.

WeOffice AB is the controller for the questions, which are used only to answer them and to improve the answers on the site.

Your rights

You have the right to complain to the Swedish Authority for Privacy Protection (IMY) if you believe we process your data incorrectly.