Your privacy in CRM de la Crème.

Who is responsible for your data?

CRM de la Crème is operated by Emanuel Ström, a sole trader. We are the controller for processing related to your user account, our customer relationship, support and our own website. Contact us at info@crmcreme.com.

When a business uses CRM de la Crème for its customer records and communication, that business decides why the data is processed. We then process it on the business’s behalf. Contact that business first if your question concerns its newsletters, forms or customer enquiries.

What data do we use?

For your account, we use your name, email address, sign-in information, any profile picture, and information about your organisations and permissions. The information comes from you, your chosen sign-in provider or the business that invites you.

A business workspace may contain contacts, contact details, messages, form responses, notes, tasks, deals, lists and newsletters. Content comes from the business’s users, imports, connected services and people contacting the business. If you connect a mailbox, we process emails and the information needed for that connection.

We also process subscription and billing records, support messages and technical information, such as IP address, device and session information, for secure sign-in, troubleshooting and operation. Payment card details are handled by our payment provider.

If you allow app notifications, we register the app installation that should receive them. You choose which notifications you want and can turn them off in the app or your phone settings. Images are used when you choose to upload them.

Why do we need the data?

We use the data to provide your account and the service, manage permissions, save and display business content, deliver messages and selected notifications, and handle support and payments. Without essential account and sign-in details, we cannot provide access to a protected workspace.

When you are personally party to the contract, we process necessary data to fulfil our contract with you. When you represent a customer business, account and customer administration relies on our legitimate interest in providing and administering that business’s agreed service. Support and necessary security rely on our legitimate interest in helping users, preventing misuse and protecting the service.

Data needed for accounting is processed to meet legal obligations. If you subscribe to CRM de la Crème’s own newsletter, we rely on your consent. You can withdraw it at any time by unsubscribing, without affecting processing already carried out on the basis of that consent.

The customer business is responsible for the purposes and legal basis of its own customer records and campaigns. When email opening information is used, a signal may be recorded when the email’s content is fetched. This can happen automatically and does not reliably show that the recipient read the message.

Who can access the data?

Workspace content is shown to members with the appropriate permissions. We use providers for hosting, storage, sign-in, payments, email delivery and app notifications. They receive the data needed for their respective services. We may also need to disclose data when required by law or to handle legal claims.

When you choose Apple or Google for sign-in, that provider participates in the sign-in process under its own terms. Payment and other providers may act as independent controllers for parts of their processing, for example to meet their own legal obligations.

Some providers process data outside the EU/EEA, including in the United States. For transfers requiring special safeguards, applicable transfer mechanisms are used, such as the European Commission’s standard contractual clauses. Contact info@crmcreme.com for information about the providers involved and the safeguards applying to a particular transfer.

How long is data kept?

Account details are needed while the account is used and until a requested account closure is completed. Business customer content is managed according to the business’s instructions and deletion requests. Cancelling a subscription is not automatically a request to delete business data.

Support information is needed to handle and follow up an enquiry. If a case concerns an ongoing dispute or legal claim, necessary information may need to be kept during that process. Accounting records are retained as required by applicable law.

For technical operational and security data, retention depends on the need to detect and investigate faults, protect accounts and follow up security incidents. Providers’ logs and recovery copies have their own retention procedures; there is no single retention period covering all data.

Our own database backups are normally removed after 30 days. Removal may temporarily pause if a current backup or recovery check cannot be verified, to prevent data loss. Such exceptions need to be resolved before normal removal resumes.

Your choices and rights

You can change your profile and notification settings in the service. Contact info@crmcreme.com to access your personal data, correct errors or request deletion, including closure of your personal account. We may need to verify your identity before disclosing or deleting data.

Depending on the processing, you may also have the right to object, restrict processing or receive data to transfer to yourself or someone else. You can object to processing based on legitimate interests. You have the right to complain to the Swedish Authority for Privacy Protection, imy.se.

Your personal account and the business workspace are separate. Closing an account does not automatically delete the business’s customer records, colleagues’ accounts or the business subscription. Contact the business administrator if your request concerns business content.

Unsubscribing from a newsletter stops the campaigns covered by your choice. It does not automatically delete other information the sending business holds about you.

Questions and changes

Contact info@crmcreme.com if anything is unclear or you want to exercise your rights. When this information changes, we update the date on this page. For material changes, we inform affected users in an appropriate way.