Privacy Notice

In this document we have gathered information about how we use personal data, and about your rights when you visit our website, buy our products, contact us for support or otherwise come into contact with us.

Please note that the Swedish version of this content remains the only legally binding text. The English translation is provided solely to assist non-Swedish speakers and is not legally binding.

GAIM Immersive Technology Group AB (“GAIM”), company registration number 559183-9047, is the data controller for the processing of your personal data as described in this notice.

Contact details
GAIM Immersive Technology Group AB
Jägershillsgatan 26
213 75 Malmö, Sweden
E-mail: info@gaim.com

Personal data is information that can be directly or indirectly linked to you as an individual, such as your name, e-mail address etc.

Below you will find a description of the categories of personal data that we collect or create.

• Contact and customer data: Name, e-mail address, delivery address, telephone number, order number etc.
• Payment and delivery details: Name, e-mail address, delivery address, phone number, payment details etc.
• User data: Licence number, technical information you generate when using the simulator (activity feed) etc. You can choose to add your age, language, country and interest in hunting.
• Social media information: Username, picture etc. that you have provided to the respective social media platform.
• Technical information: Technical data such as which pages you visit, how long you stay on the website, when you visited it etc.

Below we summarise the purposes for which we process personal data, the categories of personal data used for each purpose, the legal basis for the processing and how long we process your data. Unless otherwise stated below, we have collected the data from you.

Buying our products – when you make a purchase via our website

• Personal data: Customer, payment and delivery details
• Legal basis: Necessary for the fulfilment of the sales contract with you.
• How long: As long as you have an active licence, unless you ask to be removed before then.

User account – when you become a customer, you create a user account with us to use the product (also available via the myGAIM app)

• Personal data: Customer and user data
• Legal basis: Necessary for the fulfilment of the sales contract with you.
• How long: As long as you have an active licence.

Contacting us via the contact form on the website or another support channel

• Personal data: Contact and customer details, payment and delivery details, user details
• Legal basis: Necessary for the fulfilment of our contract with you, our obligations under sales law, or our legitimate interest (Article 6(1)(f) GDPR) in responding to those who contact us.
• How long: Up to two years from the time you contact us.

B2C/B2B licence database

• Personal data: E-mail address and licence number
• Legal basis: Necessary for the fulfilment of the sales contract with you.
• How long: As long as the customer has an active licence.

Customer register used to create customised recipient groups for newsletters

• Personal data: Customer data
• Legal basis: Our legitimate interest (Article 6(1)(f) GDPR) in being able to send relevant offers and information about our products to customers.
• How long: Two years from the last purchase or interaction with us.

Newsletter to customers

• Personal data: Customer data
• Legal basis: Our legitimate interest (Article 6(1)(f) GDPR) in being able to send offers and information about our products to existing customers.
• How long: Two years from the last purchase or interaction with us.

Anonymisation of personal data for statistics, product development and security

• Personal data: User data
• Legal basis: Our legitimate interest (Article 6(1)(f) GDPR) in analysing the use of our products, improving them and keeping the platform secure. This is why we anonymise data so that it can be used for these purposes.
• How long: Anonymised data has been processed to remove personal information, making it impossible to link it to a specific individual. As this data can no longer be used to identify a person, it is not considered personal data.

Digital marketing via advertising, or newsletter subscription via the website

• Personal data: Contact details and technical information
• Legal basis: Your consent (Article 6(1)(a) GDPR).
• How long: The validity period of each cookie is stated in our Cookie Policy. We process data for sending newsletters until you unsubscribe or otherwise withdraw your consent.

Analysis and statistics on the use of our website, for product development and for security

• Personal data: Technical information and user details
• Legal basis: Our legitimate interest (Article 6(1)(f) GDPR) in analysing the use of our website to improve and optimise the website and user experience.
• How long: The validity period of each cookie is stated in our Cookie Policy.

Sign-up at trade fairs

• Personal data: Contact details
• Legal basis: Your consent (Article 6(1)(a) GDPR).
• How long: We process data for sending newsletters until you unsubscribe or otherwise withdraw your consent.

The GAIM Group on Facebook, through which we communicate with our followers

• Personal data: Social media information, and statistics that give us insight into our community
• Legal basis: Our legitimate interest (Article 6(1)(f) GDPR) in being able to communicate and interact with our followers and gain relevant insights about visitors to our page.
• More information: For our fan page group on Facebook, we have entered into an agreement on joint controllership regarding the insights we can obtain about visitors to our page. For more information, see [here]. Among other things, the agreement states that Meta is responsible for providing information about the processing. For information about Meta’s processing of personal data, see their [privacy notice].

Competitions and events via our social media accounts

• Personal data: Username on the respective social platform, and the winner’s contact details if requested
• Legal basis: Our legitimate interest (Article 6(1)(f) GDPR) in being able to interact with and market ourselves to those interested in our products.
• How long: While the competition is running and for up to six months afterwards.

Bookkeeping

• Personal data: Contact and payment details
• Legal basis: Legal obligation
• How long: Seven years after the end of the current financial year, according to the Swedish Accounting Act.

Protecting our legal interests

• Personal data: All existing categories of personal data
• Legal basis: Our legitimate interest (Article 6(1)(f) GDPR) in defending our legal interests.
• How long: As long as necessary for the purpose.

When we share personal data, we make sure the recipient handles it properly and securely by entering into data transfer agreements or contracts with data processors. These agreements include all reasonable contractual, legal, technical and organisational measures to ensure that personal data is processed with an adequate level of protection and in accordance with applicable law.

Categories of recipients we share personal data with

• Suppliers and subcontractors: Companies that may only process the personal data we share according to our instructions (data processors). Examples include software and data storage providers. We have a legitimate interest in being able to access services and functionality in order to run our business.
• Authorities: We may need to provide necessary information to authorities such as the tax authorities, the police or other authorities (including courts). We share data with these recipients when it is a legal obligation, or when we need to protect ourselves against crime or protect our legal position (legitimate interest).
• Advertising services: We may share your data with Google and Meta in order to show more relevant advertising about us on websites other than our own. This processing is based on your consent, and you can withdraw your consent at any time by changing your settings on our website. The withdrawal applies from the time you make it. The supplier may also use the data for its own purposes. For more information on their processing of personal data, please see their privacy notice, which you can find [here].

Our business does not involve automated decision-making that has legal consequences for you or similarly significantly affects you.

However, we may use profiling to better understand our customers’ needs, improve our services and for our marketing. Profiling means that we analyse information about you in an automated way, for example to adapt our marketing.

We use profiling for the following purposes:

• To personalise our marketing to you on our own and other platforms and websites.

If you have any questions about our profiling, please contact us. You can object to profiling at any time by contacting us or changing your cookie settings on our website.

We use cookies on our website, gaim.com, to save personal preferences, to measure and analyse how the website is used, and for advertising purposes. For more information about the tracking technologies we use and how to manage your choices, please see our cookie policy, which you can find [here], and the settings on the website.

When you contact us via one of our social media accounts, your data will also be processed by the respective platform. For more information on how each social media platform processes personal data, please see their privacy notices.

We always aim to process your personal data within the EU/EEA. In some cases, when we share data with a supplier or group company in the US, personal data may be transferred outside the EU/EEA. We always make sure that your personal data has the same high level of protection when it is transferred outside the EU/EEA.

If you would like more information about the security measures we have taken, you are welcome to contact us (see contact details under section 1). More information about which countries are considered to have an “adequate level of protection” can be found on the [European Commission’s website]. Information on standard contractual clauses (in Swedish) is on the Swedish Data Protection Authority’s website [here], and information on binding corporate rules (“BCR”) is [here].

Below you can read about your rights under the GDPR. For more information about these rights, see the website of the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), [here].

If you want to exercise any of your rights, please submit your request through our form, which you can find [here].

Right to have your data erased (“right to be forgotten”)
In certain cases, you have the right to have your personal data erased. For example, this applies to data that (i) is no longer needed for the purpose it was collected for, or (ii) we processed based on consent that you have withdrawn. In some cases, GAIM cannot delete your personal data. This may be because the data is still needed for the original purpose, because GAIM’s interest in continuing to process the data outweighs your interest in having it deleted, or because legal requirements oblige us to keep it. You also have the right to object to us using your personal data for certain purposes, such as direct marketing.

Right to be informed
You have the right to be informed about how we process your personal data. We provide this information through this privacy notice and by answering your questions.

Right of access
You have the right to know whether GAIM is processing your personal data and to get a copy of it. This is known as the data subject’s right of access. A register extract will show you what information we hold about you and how we process it.

Right to data portability
You can ask for a copy of the data GAIM holds about you, which we process to fulfil a contract with you or based on your consent, in a machine-readable format. This lets you transfer your personal data to another recipient.

Right to rectification
You have the right to ask us to correct inaccurate or incomplete information about you, and to complete your information.

Right to restriction of processing
If you believe that the data we hold about you is inaccurate, that our processing is unlawful, or that we do not need the data for a specific purpose, you have the right to ask us to restrict our processing of that data. You can also ask us not to process your data while we check this, or while we check whether you have the right to object to certain processing.

Right to object
You can object to processing that is based on legitimate interest, with reference to your personal circumstances. You can also always object to us using your personal data for direct marketing.

Right to withdraw your consent
If we process your personal data based on your consent, you have the right to withdraw that consent at any time. When you withdraw your consent, we will stop the processing.

Right to lodge a complaint
If you have a complaint about how we process your personal data, you can contact the Swedish Data Protection Authority (Integritetsskyddsmyndigheten).