Information on what personal data LoadImpact collects and how we process it
Effective November 30, 2020 | Archived version.
This Privacy Policy explains how Load Impact AB (“LoadImpact” or “we”), collects, uses and shares your “Personal Data” – information that identifies, relates to, describes or is capable of being associated with you as a particular individual, such as your name, address, email address or telephone number – and other data through your use of any of LoadImpact’s websites, services or application programming interfaces (APIs).
Your use of the LoadImpact’s services is subject to this Privacy Policy in effect at the time of your use. LoadImpact reserves the right to update and change this Privacy Policy, and will inform you about the changes from time to time. The latest version of this Privacy Policy will be available at https://k6.io/privacy-policy. Please visit our website regularly to check whether this Privacy Policy have been updated.
When you register for a LoadImpact account, your are required to provide email address for us to be able to send you on-boarding information and verify your account. Other information such as your name, company name or affiliation and location are optional to your discretion.
For subscriptions of premium accounts, we may collect additional personal data such as credit card number and billing address that is required to process the payment transaction.
LoadImpact has no knowledge about your full credit card number as this resides with our payment gateway providers, who are independent data controllers.
We are required to process certain personal data in order to enter into and perform in accordance with an agreement concluded with you and to comply with legal requirements. What personal data you are required to provide follows from the tables below where the legal basis is specified as “performance of contract” and “legal obligation”. If you do not provide this personal data that is necessary, you will not be able to enter into a contract with us and purchase our services.
LoadImpact uses the Personal Data it collects for the following general purposes:
More details regarding the purposes for which we process your personal data follows below:
| Purpose: Services provision, including billing | ||
|---|---|---|
| Processing performed: | Personal data we process: | Legal basis: |
|
| Performance of contract __The processing is necessary in order for us to fulfill the contract regarding your purchase. If the data is not provided, you will not be able to make a purchase with us.__ |
| Retention time The data is processed for twelve months after your products have been delivered or the termination of the customer relationship through the cessation of use of our services. Certain personal data may be processed for a longer period in accordance with what is specified below, for instance for Compliance with legal requirements | ||
| Purpose: Handling of your customer account | ||
|---|---|---|
| Processing performed: | Personal data we process: | Legal basis: |
|
| Performance of contract The processing is necessary in order for us to create and administrate your customer account as a part of providing our services. Abuse prevention and information security measures are processed on the basis of a balancing of interests. The processing is justified by our legitimate interest to protect both our services and your use of the services from antagonistic attacks and other security risks. |
Retention time: The personal data is stored for two years from the last time you were logged in. You can delete your customer account at any time, we will then immediately stop storing your personal data for this purpose. | ||
| Purpose: Improvement of services and our website | ||
|---|---|---|
| Processing performed: | Personal data we process: | Legal basis: |
|
| Balancing of interest The processing is justified by our legitimate interest to be able to contact you with a request to review our services in order to improve them. |
|
| Balancing of interest The processing is justified by our legitimate interest to be able to improve our services. |
|
| Balancing of interest The processing is justified by our legitimate interest to be able to develop and improve our website in order to give you and other users a better user experience. |
Retention time: We will send inquiries to you as long as you have a customer account. However, we cease to store your personal data for this purpose if you object to receiving invitations for inquiries. We will only store the results of the surveys anonymously. The retention time for personal data that we have collected in connection with an individual visit to our website follows from our cookie policy found at https://k6.io/cookie-policy/. | ||
| Purpose: Contact | ||
|---|---|---|
| Processing performed: | Personal data we process: | Legal basis: |
|
| Balancing of interest The processing is justified by our legitimate interest to be able to respond to your questions and help you with the relevant matter. |
Retention time: We store your personal data for six months from the end of our communication. | ||
| Purpose: To handle complaints and claims | ||
|---|---|---|
| Processing performed: | Personal data we process: | Legal basis: |
|
| Legal obligation and balancing of interests The processing is necessary in order for us to act in accordance with consumer law and comply with a legal obligation. We also have a legitimate interest in being able to defend ourselves against a possible legal claim. |
Retention time: The data is processed from the time you submit your claim and is processed as long as the process of the claim is in progress. | ||
| Purpose: Sending newsletters and direct marketing | ||
|---|---|---|
| Processing performed: | Personal data we process: | Legal basis: |
|
| Balancing of interest The processing is justified by our legitimate interest in sending relevant advertising to you as a customer. You are entitled to object to the marketing when the data is collected and in each mail. Consent If you have chosen to subscribe to our newsletter on our website or given your consent via email, we will send the marketing based on your consent. |
|
| Balancing of interest The processing is justified by our legitimate interest in providing customised marketing to you as a customer. Your data is processed for this purpose only if you have made a purchase and have not objected to marketing. |
Retention time: The data is processed for one year from completed purchase based on the balance of interest, unless you have objected to receiving marketing from us. If the processing is based on performance of contract, we will send marketing to you as long as you have a customer account, unless you have objected to receiving marketing from us. If you have given your consent to receive marketing, we will send it to you until you unsubscribe to our newsletter or object to receiving marketing from us. The retention time for personal data that we have collected in connection with an individual visit to our website through cookies and similar technology follows from our cookie policy. | ||
| Purpose: Compliance with legal requirements | ||
|---|---|---|
| Processing performed: | Personal data we process: | Legal basis: |
|
| Legal obligation The processing is necessary in order for us to comply with a legal obligation, i.e. the Swedish Accounting Act. |
Retention time: The data is processed for seven to eight years in accordance with the Swedish Accounting Act. | ||
LoadImpact does not rent, sell, or share personal data about you with other people or non-affiliated companies except to provide products or services you’ve requested, when we have your permission, or under the following circumstances:
LoadImpact, our suppliers and partners will as a main principle only process your personal data within the EU/EES and the U.S. In case personal data is processed outside of the EU/EES, there is either a decision from the European Commission ensuring that the third country in question has an adequate level of protection or appropriate safeguards in the form of standard contractual clauses or binding corporate rules, which ensures that your rights are protected. LoadImpact continuously evaluates the use of standard contractual clauses and binding corporate rules to ensure that your personal data is subject to appropriate safeguards and only transferred and processed in accordance with applicable legislation and guidelines. If you have any questions regarding how we share your personal data or if you want more information about the appropriate safeguards we have in place to protect your personal data, please feel free to contact us.
Information regarding our use of cookies follows specifically from our cookie policy.
Since no data transmitted over the internet can be 100% secure, we cannot guarantee the security of any information you transmit to us. However, we make every effort to secure your data by working closely with trusted third party vendors and hosting partners needed to run the LoadImpact services. Where necessary, we seek to obtain confidentiality agreements with these providers that are consistent with this Privacy Policy and that limit their use or disclosure of your Personal Data.
Under data protection legislation, depending on the circumstances, you are entitled to a variety of rights when we process your personal data. We set these out below.
Right to withdraw consent and to object to processingIf we are relying on your consent to process your personal data you have a right to, wholly or partly, withdraw any given consent for the processing of your personal data. Your withdrawal will have effect from the time of your withdrawal.
You have a right to object to direct marketing and automated decision making (including profiling), such as newsletters and customized marketing.
You have a right to object to our processing when the processing is based on a “balance of legitimate interests” legal basis (see the table above for information regarding when we process your personal data on this basis). In some other cases, the right to object does not exist (e.g. since we must store your personal data). Please note that we are not obliged to uphold your objection, if we can show compelling legitimate reasons for the processing that outweigh your interests or if it is for the purpose of establishing, exercising, or defending legal claims.
You have the right to obtain confirmation as to whether we are processing personal data about you and information about the personal data that we process, such as the purposes of the processing, categories and receipts of your personal data, and for how long we store your personal data. You can gain access to this information and obtain a copy of the personal data processed by us by contacting us as described below.
You have a right to correct or update any inaccurate personal data concerning you that we may be processing and to ask us to have incomplete personal data completed. We may need to verify the accuracy of the new data you provide to us.
Under certain circumstances, you have a right to request that we delete your personal data. This is the case for example where the personal data is no longer necessary for the purposes for which they were collected or otherwise processed, or you withdraw your consent on which the processing is based and where there is no other legal ground for our continued processing for your personal data.
You also have a right to request that we restrict our processing of your personal data. That is the case for example when the accuracy of the personal data is contested by you, or the processing is unlawful but you do not want us to delete it and instead you request that we restrict our use of it.
If you have any complaints regarding our processing of your personal data, you have the right to lodge a complaint with a supervisory authority. You may do this in particular in the EU/EEA member state of your habitual residence, place of work or of an alleged infringement of the applicable data protection laws. In Sweden, the Swedish Data Protection Authority (www.datainspektionen.se) is the supervisory authority. You also have the right to seek a remedy from a national court.
You have a right to ask us to transfer certain of your personal data we have about you to another company (data portability). If the right is applicable, we will provide your personal data in a structured commonly used, machine-readable format.
Any questions about this Privacy Policy should be addressed to support@k6.io.