Information about personal data processing

We process two types of data about you:

We collect data:

• that you provide yourself when you create an account, subscribe, fill in your profile or contact us,
• that is created when you use the service, for example which apartments you are matched with and which messages you receive,
• from our payment service provider about your payments, and from ad platforms about which ad you clicked,
• through cookies and similar technologies on our websites, to the extent you have consented in the cookie banner.

What type of data we process about you depends on which service(s) you use.

We use suppliers for hosting and storage (including Amazon Web Services in Stockholm), payments (Kustom), email delivery (SendGrid), SMS (Twilio), address and map lookups (Google) and, with your consent, analytics (PostHog) and ad measurement (Google, Microsoft and Meta). Suppliers may only use the data for the assignment we have given them.

Some of our suppliers may process data outside the EU/EEA, for example in the United States. In that case the transfer is based on a European Commission adequacy decision, such as the EU–US Data Privacy Framework, or on the European Commission's standard contractual clauses.

We may be required to disclose data to authorities, for example the police, if the law or a decision by an authority requires it. The legal basis is legal obligation.

We do not sell your personal data and do not disclose it to landlords. Data you send to a landlord yourself, for example by copying your application profile, is handled by the landlord under its own terms.

If you have questions about our processing of personal data, want incorrect data corrected, want data deleted or want to complain about the processing, you are welcome to contact us at support@homespotter.se.

If you are unhappy with how we process your personal data, you can also complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se.

You have the right to receive a free copy of the personal data we process about you. We respond without undue delay and within one month at the latest. If we need more time, or cannot disclose everything, we will explain why. We may ask you to confirm your identity, and we send the copy to the email address linked to your account.

If any of the data we process is incorrect or if additional data needs to be processed with regard to the purpose for which we process data, you have the right to have such incorrect data corrected or to supplement with such additional data as may be needed for the processing. When we have corrected your data, we will contact parties to whom we have disclosed your data and inform them of the corrections made, provided it does not entail an overly burdensome effort for us or if it would for any reason be impossible. We will also, if you request it, contact you and tell you to whom the correction has been disclosed.

You have the right in certain cases to have your data deleted, for example when it is no longer needed. Contact us at support@homespotter.se and we will delete your account. Data we must keep by law, for example accounting records, is kept for as long as the law requires.

You also have the right in certain cases to have the processing we carry out restricted. Restriction means that the data is marked so that in the future it may only be processed for certain limited purposes. The right to restriction applies, among other things, when you consider the data to be incorrect and you have requested rectification. In such cases, you may also request that the processing of the data be restricted while we investigate whether the data is correct or not. When the restriction is lifted, we will inform you of this.

You also have the right to so-called data portability for the data you have given us in cases where we carry out the processing based on your consent or when we process data to fulfill an agreement with you. This means that you have the right to obtain the data you have given us and that we process about you in a certain format and that you have the right to transfer this to another data controller. The right to portability only applies to data we have processed automatically. This means that data that is only processed in paper files is therefore not covered by the right to data portability.