Privacy Policy

Information on what personal data LoadImpact collects and how we process it

Effective November 30, 2020 | Archived version.

General

This Privacy Policy explains how Load Impact AB (“LoadImpact” or “we”), collects, uses and shares your “Personal Data” – information that identifies, relates to, describes or is capable of being associated with you as a particular individual, such as your name, address, email address or telephone number – and other data through your use of any of LoadImpact’s websites, services or application programming interfaces (APIs).

Your use of the LoadImpact’s services is subject to this Privacy Policy in effect at the time of your use. LoadImpact reserves the right to update and change this Privacy Policy, and will inform you about the changes from time to time. The latest version of this Privacy Policy will be available at https://k6.io/privacy-policy. Please visit our website regularly to check whether this Privacy Policy have been updated.

Collection of personal data

When you register for a LoadImpact account, your are required to provide email address for us to be able to send you on-boarding information and verify your account. Other information such as your name, company name or affiliation and location are optional to your discretion.

For subscriptions of premium accounts, we may collect additional personal data such as credit card number and billing address that is required to process the payment transaction.

LoadImpact has no knowledge about your full credit card number as this resides with our payment gateway providers, who are independent data controllers.

Do you have to provide personal data to us?

We are required to process certain personal data in order to enter into and perform in accordance with an agreement concluded with you and to comply with legal requirements. What personal data you are required to provide follows from the tables below where the legal basis is specified as “performance of contract” and “legal obligation”. If you do not provide this personal data that is necessary, you will not be able to enter into a contract with us and purchase our services.

Use of personal data

LoadImpact uses the Personal Data it collects for the following general purposes:

  • Services provision, including billing
  • Handling of your customer account
  • Improvement of services and our website
  • Contact
  • Handling of complaints and claims
  • Sending newsletters and direct marketing
  • Compliance with legal requirements

More details regarding the purposes for which we process your personal data follows below:

Purpose: Services provision, including billing
Processing performed:Personal data we process:Legal basis:
  • Deliver the services we provide
  • Carry out payment
  • Send order and delivery confirmation
  • Name
  • Contact details (postal address, email address and telephone number)
  • Order information (e.g. what services you have ordered)
  • Payment Information
  • IP-address
Performance of contract __The processing is necessary in order for us to fulfill the contract regarding your purchase. If the data is not provided, you will not be able to make a purchase with us.__
Retention time

The data is processed for twelve months after your products have been delivered or the termination of the customer relationship through the cessation of use of our services. Certain personal data may be processed for a longer period in accordance with what is specified below, for instance for Compliance with legal requirements

Purpose: Handling of your customer account
Processing performed:Personal data we process:Legal basis:
  • To create and manage your customer account.
  • To take security measures, e.g. ensure that only authorized logs in, and other security measures to prevent abuse.
  • Communicate regarding your customer account.
  • Email address
  • Password
  • Other information you provide optionally, such as name and company/affiliation

Performance of contract

The processing is necessary in order for us to create and administrate your customer account as a part of providing our services.

Abuse prevention and information security measures are processed on the basis of a balancing of interests.


The processing is justified by our legitimate interest to protect both our services and your use of the services from antagonistic attacks and other security risks.


Retention time: The personal data is stored for two years from the last time you were logged in. You can delete your customer account at any time, we will then immediately stop storing your personal data for this purpose.


Purpose: Improvement of services and our website
Processing performed:Personal data we process:Legal basis:
  • Send requests to participate in surveys on the use of our services
  • Manage the responses you provide in the survey
  • Compile statistics of the results of our surveys
  • Name
  • Email address
  • Information you leave in the survey

Balancing of interest

The processing is justified by our legitimate interest to be able to contact you with a request to review our services in order to improve them.


  • Examine how our services are used to take improvement measures
  • Information regarding which offers you have used
  • Information on how the services are used

Balancing of interest


The processing is justified by our legitimate interest to be able to improve our services.


  • Examine and analyze how our website is used to make improvement measures.
  • Gender
  • Age
  • Language
  • Country and city
  • Interests
  • Information from the unit you use to visit our website, namely IP-address, web browser, internet supplier, operating system, display resolution

Balancing of interest


The processing is justified by our legitimate interest to be able to develop and improve our website in order to give you and other users a better user experience.


Retention time: We will send inquiries to you as long as you have a customer account. However, we cease to store your personal data for this purpose if you object to receiving invitations for inquiries. We will only store the results of the surveys anonymously.


The retention time for personal data that we have collected in connection with an individual visit to our website follows from our cookie policy found at https://k6.io/cookie-policy/.



Purpose: Contact
Processing performed:Personal data we process:Legal basis:
  • Communicate with you if you contact us via email, phone, our website or social media
  • Answer your questions
  • Answer and administer your customer service matter by email, phone or social media
  • Name
  • Email address
  • Phone number
  • Information you leave to us, such as order number

Balancing of interest


The processing is justified by our legitimate interest to be able to respond to your questions and help you with the relevant matter.


Retention time: We store your personal data for six months from the end of our communication.


Purpose: To handle complaints and claims
Processing performed:Personal data we process:Legal basis:
  • Handle possible withdrawal of purchase
  • Handle possible complaints or other claims
  • Name
  • Contact information (postal address, email address and phone number)
  • Information from our communication with you regarding your claim (e.g. details about the current order)

Legal obligation and balancing of interests


The processing is necessary in order for us to act in accordance with consumer law and comply with a legal obligation. We also have a legitimate interest in being able to defend ourselves against a possible legal claim.


Retention time: The data is processed from the time you submit your claim and is processed as long as the process of the claim is in progress.



Purpose: Sending newsletters and direct marketing
Processing performed:Personal data we process:Legal basis:
  • Send marketing and newsletters with offers and information via electronic communication
  • Send personalised and customised marketing so you get offers and information that we think you are interested in
  • Name
  • Email address
  • Telephone number

Balancing of interest


The processing is justified by our legitimate interest in sending relevant advertising to you as a customer. You are entitled to object to the marketing when the data is collected and in each mail.


Consent


If you have chosen to subscribe to our newsletter on our website or given your consent via email, we will send the marketing based on your consent.


  • Provide customised marketing in digital channels, social media and third party web pages including sharing of data with those parties.
  • Email address
  • IP address
  • Cookies

Balancing of interest


The processing is justified by our legitimate interest in providing customised marketing to you as a customer. Your data is processed for this purpose only if you have made a purchase and have not objected to marketing.


Retention time: The data is processed for one year from completed purchase based on the balance of interest, unless you have objected to receiving marketing from us. If the processing is based on performance of contract, we will send marketing to you as long as you have a customer account, unless you have objected to receiving marketing from us. If you have given your consent to receive marketing, we will send it to you until you unsubscribe to our newsletter or object to receiving marketing from us.


The retention time for personal data that we have collected in connection with an individual visit to our website through cookies and similar technology follows from our cookie policy.



Purpose: Compliance with legal requirements
Processing performed:Personal data we process:Legal basis:
  • Comply with the Accounting Act
  • Name
  • Postal address
  • Email address
  • Payment history and transactions

Legal obligation


The processing is necessary in order for us to comply with a legal obligation, i.e. the Swedish Accounting Act.


Retention time: The data is processed for seven to eight years in accordance with the Swedish Accounting Act.



Sharing of personal data

LoadImpact does not rent, sell, or share personal data about you with other people or non-affiliated companies except to provide products or services you’ve requested, when we have your permission, or under the following circumstances:


  • We believe it is necessary to share information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of LoadImpact’s terms of use, or as otherwise required by law. An example of such illegal activity is using LoadImpact to execute a denial of service (DDOS) attack on a website or application not legally owned or managed by the user.
  • We provide the information to trusted partners such as performance engineers, testing professionals, other IT service providers or consultants who work with or on behalf of LoadImpact under confidentiality agreements. When our partners constitute data processors that only processes personal data on our instructions, we enter into data processing agreements with them.
  • As we continue to operate, we may merge or be acquired by another entity. In this event, we may transfer information about you. LoadImpact will notify you before any information about you is transferred and becomes subject to a different privacy policy.
  • We may share information with public authorities when complied to do so by law, for instance in relation to law enforcement requests and accounting requirements. When public authorities receive personal data from us, they are independent data controllers.

Transfer of personal data to a third country

LoadImpact, our suppliers and partners will as a main principle only process your personal data within the EU/EES and the U.S. In case personal data is processed outside of the EU/EES, there is either a decision from the European Commission ensuring that the third country in question has an adequate level of protection or appropriate safeguards in the form of standard contractual clauses or binding corporate rules, which ensures that your rights are protected. LoadImpact continuously evaluates the use of standard contractual clauses and binding corporate rules to ensure that your personal data is subject to appropriate safeguards and only transferred and processed in accordance with applicable legislation and guidelines. If you have any questions regarding how we share your personal data or if you want more information about the appropriate safeguards we have in place to protect your personal data, please feel free to contact us.


Cookies

Information regarding our use of cookies follows specifically from our cookie policy.


Data transmission and storage

Since no data transmitted over the internet can be 100% secure, we cannot guarantee the security of any information you transmit to us. However, we make every effort to secure your data by working closely with trusted third party vendors and hosting partners needed to run the LoadImpact services. Where necessary, we seek to obtain confidentiality agreements with these providers that are consistent with this Privacy Policy and that limit their use or disclosure of your Personal Data.


Your rights

Under data protection legislation, depending on the circumstances, you are entitled to a variety of rights when we process your personal data. We set these out below.

Right to withdraw consent and to object to processing

If we are relying on your consent to process your personal data you have a right to, wholly or partly, withdraw any given consent for the processing of your personal data. Your withdrawal will have effect from the time of your withdrawal.


You have a right to object to direct marketing and automated decision making (including profiling), such as newsletters and customized marketing.


You have a right to object to our processing when the processing is based on a “balance of legitimate interests” legal basis (see the table above for information regarding when we process your personal data on this basis). In some other cases, the right to object does not exist (e.g. since we must store your personal data). Please note that we are not obliged to uphold your objection, if we can show compelling legitimate reasons for the processing that outweigh your interests or if it is for the purpose of establishing, exercising, or defending legal claims.


Right to information and access

You have the right to obtain confirmation as to whether we are processing personal data about you and information about the personal data that we process, such as the purposes of the processing, categories and receipts of your personal data, and for how long we store your personal data. You can gain access to this information and obtain a copy of the personal data processed by us by contacting us as described below.


Right to rectification

You have a right to correct or update any inaccurate personal data concerning you that we may be processing and to ask us to have incomplete personal data completed. We may need to verify the accuracy of the new data you provide to us.


Right to erasure (“the right to be forgotten”) and restriction of processing

Under certain circumstances, you have a right to request that we delete your personal data. This is the case for example where the personal data is no longer necessary for the purposes for which they were collected or otherwise processed, or you withdraw your consent on which the processing is based and where there is no other legal ground for our continued processing for your personal data.


You also have a right to request that we restrict our processing of your personal data. That is the case for example when the accuracy of the personal data is contested by you, or the processing is unlawful but you do not want us to delete it and instead you request that we restrict our use of it.


Right to lodge a complaint to a supervisory authority

If you have any complaints regarding our processing of your personal data, you have the right to lodge a complaint with a supervisory authority. You may do this in particular in the EU/EEA member state of your habitual residence, place of work or of an alleged infringement of the applicable data protection laws. In Sweden, the Swedish Data Protection Authority (www.datainspektionen.se) is the supervisory authority. You also have the right to seek a remedy from a national court.


Right to data portability

You have a right to ask us to transfer certain of your personal data we have about you to another company (data portability). If the right is applicable, we will provide your personal data in a structured commonly used, machine-readable format.


Questions

Any questions about this Privacy Policy should be addressed to support@k6.io.