Privacy policy – ConfSales

ConfSales is a digital B2B service operated by Derfla Invest AB.

Data controller: Derfla Invest AB Company registration number: [To be completed] Postal address: Mjölnarvägen 24, 131 74 Nacka Contact person: Alfred Högbom Email: info@confsales.se Phone: 072-983 72 41

ConfSales compiles and structures information about corporate conferences, events, organisers and conference venues.

Information is collected from publicly available sources and presented together with links to the original sources.

The conference database is designed to contain company and event information. Named contact people and personal email addresses must not form part of the stored conference information. Contact people can be found in the original sources.

When you use ConfSales or contact us, we may process:

• Names and work-related contact details.
• Email addresses and account details for login.
• Company affiliation and user permissions.
• Subscription and customer relationship details.
• Communications and support enquiries.
• Technical information needed for security and operations, such as IP addresses and login logs where these are recorded.

We do not collect visitor statistics through Google Analytics, Meta Pixel or equivalent tracking tools.

We process personal data for the following purposes:

User accounts and access permissions: To create accounts, manage login and give users access to the service. When a user represents a business customer, the legal basis is normally our legitimate interest in administering the service and the customer relationship.

Customer relationships and support: To communicate with customers, answer questions and provide support. The legal basis is normally legitimate interest or contract where applicable.

Security and operations: To protect accounts, prevent misuse and resolve technical problems. The legal basis is legitimate interest.

Finance and accounting: To comply with statutory obligations. The legal basis is legal obligation.

We do not process personal data for automated decision-making that has legal or similarly significant effects on data subjects.

ConfSales uses automated and AI-based tools to identify relevant conference information from public sources.

We store selected facts about events and links to the original sources, not complete copies of source pages.

When source pages are read, personal data may appear in the content temporarily processed. Our purpose is to identify relevant event information, not to create a register of individuals.

Any temporary processing of personal data must be limited to what is necessary and have an applicable legal basis. Where such processing relies on legitimate interest, a legitimate interests assessment must be carried out.

We may engage providers for web hosting, database operations, login, AI processing and other technical functions.

Providers receive access to personal data only to the extent necessary for their assignment. Where a provider acts as a data processor, an appropriate data processing agreement must be in place.

Under our current service design, personal data must not be transferred outside the EU. This also includes subcontractors and any remote access to the extent that these constitute a transfer of personal data.

We apply the following retention principles:

• Active user accounts: For as long as the account is needed.
• Closed user accounts: Normally deleted within 30 days, unless further retention is required for a specific purpose or by law.
• Support enquiries: Normally 12 months after the enquiry is closed.
• Security logs: Normally no longer than 90 days.
• Customer agreements and business communications: During the customer relationship and afterwards for no longer than 24 months where there is a documented need, unless longer retention is required.
• Accounting records: Retained in accordance with the requirements of the Swedish Accounting Act.

When data is no longer needed, it is deleted or anonymised in accordance with our procedures.

ConfSales does not use cookies for targeted advertising or analysis of visitor behaviour.

The service may use technically necessary cookies for purposes such as login, session management and security.

More information is available in our cookie policy.

We use technical and organisational measures to protect personal data against unauthorised access, loss and unlawful use.

Access to ConfSales is restricted through login and access controls.

Under the GDPR, where each right applies, you have the right to:

• Receive information about and access to your personal data.
• Request correction of inaccurate data.
• Request erasure.
• Request restriction of processing.
• Object to processing based on legitimate interest.
• Request data portability where this right applies.

Contact us at info@confsales.se to exercise your rights.

We respond to requests without undue delay and normally within one month.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se.

Derfla Invest AB – ConfSales Contact person: Alfred Högbom Email: info@confsales.se Phone: 072-983 72 41

We may update this policy if the service, our working practices or applicable rules change. The latest version is available on the ConfSales website.