Privacy Notice
Information to data subjects in accordance with articles 13 and 14 of the EU general data protection regulation
Business Driven Development AB (“BDD,” “we,” “us”) is the data controller responsible for the processing of personal data for which we determine the purpose and means. For example, we process personal data in handling the company’s business, in handling questions, for marketing purposes, and in our administration of courses and webinars.
If you, as a data subject, wish to exercise your rights or have questions concerning the company’s processing of your personal data, you can contact us by email: info@bdd.se
Alternatively, you can send a letter to: BDD AB, Adelgatan 21, 211 22 Malmö, Sweden
We have operations in several countries, and Swedish Authority for Privacy Protection (DPA) is the lead supervisory authority. Still, as a data subject, you can always choose which country’s supervisory authority you wish to contact, for example, when filing a complaint.
How and why we process your personal data
| Purpose | Category of data subjects | Category of personal data | Lawful ground | Information provided by |
| Visiting our website
Please see our Cookie notice. | Website Visitors | Depending on the visitor’s consent regarding cookies | Depending on the visitor’s consent regarding cookies. | Collected from the visitor’s web browser |
| When establishing contact with us
For us to answer questions and to provide service to existing and potential customers, suppliers, and business partners. | Potential and existing customers.
Suppliers.
Individuals wishing to get in contact with us. | Contact information at work: name, phone number, email, and other information left by the individual. | The legitimate interest of BDD | From the individual him/herself |
| Marketing
For us to inform existing and potential customers about offers, courses, and webinars. | Potential and existing customers. Participants in courses or webinars. | Contact information at work of those who have been in contact with us or representative of a contracting party: name, phone number, email, employer
| The legitimate interest of BDD. | The potential or the existing customer himself when agreeing, contacting BDD, or participating in a course or webinar. |
| Tendering
For contact with customers when participating in tendering. | Potential customers. | Contact information at work of those in contact with us or representatives of a contracting party: name, phone number, email, employer
| Legitimate interest | The representative of the customer. |
| When entering a contract with us
For us to administrate and deliver service in accordance with the agreement, to bill and for bookkeeping | Customers and customer employees | Contact information at work of those in contact with us or representatives of a contracting party: name, phone number, email, employer Contact information at work of those participating in a project: name, phone number, email, employer
| Necessary for the performance of a contract | The representative of a contracting party or directly from an individual themself. |
| Attending a course or webinar
For us to administrate the courses and webinars and to follow up and re-invite to new events | Customers/participants | When participating in the course or webinar, your name and initials are visible to other participants, live and in the chat. Participants can interact in different ways, for example, by raising a hand and using the microphone and/or camera.
| The information is necessary to perform a contract when a contract is at hand.
Otherwise, the lawful ground is the Legitimate interest of BDD.
| The employer/customer registers information about attending employees or from the participant themself. |
| Attending a course provided by BDD in cooperation with Scaled Agile Inc
For us to deliver the course and for Scaled Agile Inc. to provide information and course certification | Employees within the customer organization | We collect contact information at work regarding the course participants. We collect names and email addresses and register the information with Scaled Agile Inc. will send out the information necessary to attend the course and become certified. | Legitimate interest | The employer/customer. The employee can administer the information about them at the Scaled Agile webpage. |
| Billing | Customers and other suppliers | Contact information of those in contact with us or representatives of a contracting party: name, phone number, email
| Necessary for the performance of a contract | The representative of the customer. |
Data minimization
BDD never collects, stores, or in any other way processes more personal data than what is strictly needed to fulfill a purpose, as described in the table above.
If you do not wish for us to handle your personal data
For the performance of a contract, contact information is essential. If you don’t accept the processing of representatives’ and participants’ personal data, it will not be possible to enter into a contract with us. If you don’t agree to us processing your contact information, you will not be able to participate in our courses and webinars.
If you wish to oppose receiving information about upcoming events, please contact us. Please contact Scaled Agile Inc directly for marketing distributed by Scaled Agile Inc.
Special categories of personal data
We never ask for any data related to Special categories of personal data, for example, information about your health, political opinions, or religious beliefs. If any such data is sent to us, it will be deleted immediately if not needed for the service provided or the contract at hand. The data is not registered separately.
Documents and messages often contain other personal data of various kinds, other than contact information, when working together on a project. This data is handled in the relevant matter/project, is never registered separately, and is not made searchable. Correspondence related to projects will be saved with the rest of the documentation and deleted at the latest ten years after the project is finished. Otherwise, the data will be deleted as soon as it’s irrelevant.
Processing personal data for a legitimate interest
We believe the people connecting with us are interested in our services and appreciate invitations to upcoming events such as webinars or courses. We also believe that the partners, potential customers, and former participants in our activities appreciate invitations to our upcoming events. It’s always possible to contact us for immediate exclusion of marketing, in accordance with the data subject’s rights to oppose direct marketing. Inform us if you don’t want any further invitations. We will then, of course, remove your data from our marketing list. If you receive marketing directly from our business partner, Scaled Agile Inc., please turn directly to them.
When an employer registers employees for attending a course or webinar, we use the contact information about the employees to provide the service. We assume that the employer has the right to provide the employee information to us, and it’s a legitimate interest for us to register the information to invite clients to attend and to provide the course or webinar.
When we organize courses in cooperation with Scaled agile the links and other information are provided directly from Scaled agile. The participant’s email address and name are registered with Scaled agile as a third party. For more information about how Scaled agile use your information, please visit https://scaledagile.com/privacy-policy/.
Transfers of data to countries outside EU/EES
BDD is an international company. Information provided to us will be handled in systems reachable to our BDD partners worldwide.
When providing a course, it’s delivered to you by Scaled Agile, a US-based company. Your contact information will be registered with Scaled Agile and handled in accordance with their privacy policy which you can find here https://scaledagile.com/privacy-policy/.
Microsoft (M365) and Google suite are examples of services we use provided by American companies. See below for a full list of data processors. In accordance with US law, the American authorities have the right to access information stored by these companies. The risk of American authorities showing any interest in our business most likely is limited. Yet, we urge you never to register more personal information than needed for the service of a course or in an email.
Organizations with whom we share your data
We use different business partners and several so-called data processors to provide our services. The data processors engaged may only process personal data in accordance with the purposes and instructions that we issue for the processing. The processor and anyone acting on behalf of the processor may never see more data than is necessary to carry out the service covered by the agreement with BDD. WA’s so-called data processor agreement is drawn up where personal data is to be processed by a data processor; BDD uses data processors for various IT services.
| Processor | Purpose | Location | Data storage |
| Document storage, streaming, collaboration, and email | US | US | |
| Microsoft | Document storage collaboration and email | US | US |
| Zoom | Meeting and collaboration | US | US |
| Scaled Agile | Provide courses and course certificates | US | US |
| Slack | Communication and collaboration in projects | US | US |
| Baker Tilly | Bookkeeping | EU | EU |
| Miro | Collaboration | EU | EU |
| Atlassian | Collaboration | Australia | Australia |
| Oderland | Hosting of website and tool for course registration | SE | SE |
| Hubspot | Marketing | US | US |
| Marketing | US | US |
There might also be situations where we are obliged to share your data with an authority, for example, if a data subject files a complaint against BDDs treatment of personal data or in correspondence with tax authorities.
Period for which the personal data will be stored
Personal data is retained only as long as needed for the purposes for which it is processed.
When performing a contract, we store contact information for ten years after the contract expires. Personal data relating to ongoing work is stored together with other relevant information as long as it is relevant to the ongoing work. Still, no longer than ten years after the work has finished.
Observe that BDD might be obliged to store personal data in accordance with Swedish law, for example, in accordance with the Swedish accountant law.
Your rights as a data subject
You have several rights as a data subject. If you, as a data subject, wish to exercise your rights or have questions concerning BDDs processing of your personal data, you can contact us at info@bdd.se.
Right of access
You can request information as to whether BDD processes personal data relating to you and, if so, receive a copy of such data – called a register extract – together with more detailed information.
Right to rectification
If you consider that the personal data relating to you is inaccurate or incomplete, you can request to have the data rectified or completed.
Right of objection
When BDD processes personal data, you can object to the processing anytime. If BDD cannot show that there are compelling, authorized reasons to continue processing the data, BDD must terminate the processing.
Right to limitation of processing
In certain cases, for example, if you have objected to the processing, you can demand that the processing of your personal data be limited. By requesting a limitation, you have, at least for a certain period, the possibility to stop BDD from using the data other than, for example, defending legal claims. You can also prevent BDD from erasing the data, for example, if you need the information to claim damages.
Right to erasure (“right to be forgotten”)
You can, in certain cases, have your personal data erased. When your personal data is needed for BDD to be able to comply with laws and regulations, for example, in accordance with the Swedish accounting act, BDD cannot erase the data.
Right to data portability
Suppose BDD processes personal data relating to you to perform an agreement. In that case, you have the possibility in certain cases to be given the personal data relating to you to use it somewhere else, for example, transfer the data to another data controller.
The right to file a complaint
As a data subject, you have the right to file a complaint with the data protection authority; in Sweden, it’s the Swedish Authority for Privacy Protection – imy.se
You also have the right to receive compensation from a data processor or us if you have suffered material or non-material damages because of an infringement of this regulation.
Links to Websites and Third-Party Content
For your convenience and information, we may provide links to websites and third-party content not owned or operated by us. The websites and third-party content we link may have separate privacy notices or policies. We are not responsible for the privacy practices of any entity that it does not own or control.
Children’s Privacy
Our website and mobile application are not intended for individuals under 18. We do not knowingly collect personal information from children under age 13. If we learn that we have collected personal information from an individual under 13, we will delete that information.
Cookie Notice
We use cookies on our website. The cookies collect personal data about you as a visitor to the website. Some cookies are necessary to enable core functionality, and we do not require your consent to use these cookies.
For analyzing how our website is being used and optimizing the website, we use Google Analytics and Hubspot. Consenting to our use of cookies is optional, and you can at any time choose to withdraw your consent. By consenting to our use of cookies, you consent to us collecting information about your device and how you use the website. This data is then linked to Google’s data about you.
BDD AB is the controller for using cookies on the website and for processing your personal data collected through cookies when you visit https://bddagile.com/. Please see our privacy notice for further information about our processing of personal data through cookies,
What cookies are and how they are used
A cookie is a small text file the website you visit asks you to save on your computer (similar devices with internet connections such as tablets and mobile phones are also included). For more general information about cookies, please see www.pts.se/cookies,
www.aboutcookies.org and/or www.allaboutcookies.org/.
There are two types of cookies, persistent cookies, and session cookies. Both types of cookies are used on our website. Session cookies are stored temporarily when you as a visitor visit and browse our website and are deleted when you close your web browser. Persistent cookies are stored as a file on the computer for a period of time, until you, as a visitor or the server that sent them, delete them.
Furthermore, cookies can be divided into first and third-party cookies. First-party cookies are set by the website owner (BDD AB), and third-party cookies are set by suppliers providing services that BDD uses on our website. Both first and third-party cookies are used on our website.
We use Google Analytics and Hubspot as statistical analysis tools to get a picture of how our visitors use the website and to evaluate how the website can be developed, e.g., to improve the website’s content, navigation, and structure. We also use the collected information for marketing purposes.
Cookies that are used on bddagile.com
| Cookie Name | Duration | Category | Purpose |
| UserMatchHistory | One month | Others | Needed to understand the effect of marketing campaigns on LinkedIn and whether the Linked In campaign visitors also visit the BDD homepage |
| cookielawinfo-checkbox-functional | One year | Others | Needed to track visitor consent of cookies in the category “Functional” |
| li_sugr | Three months | Others | Needed to store browser details to track the effects of marketing activities on LinkedIn |
| cookielawinfo-checkbox-necessary | One year | Necessary | Needed to track visitor consent of cookies in the category “Necessary” |
| cookielawinfo-checkbox-performance | 1 year | Necessary | Needed to track visitor consent of cookies in category “Performance” |
| cookielawinfo-checkbox-analytics | One year | Necessary | Needed to track visitor consent of cookies in category “Analytics” |
| cookielawinfo-checkbox-advertisement | One year | Necessary | Needed to track visitor consent of cookies in category “Advertisement” |
| cookielawinfo-checkbox-others | One year | Necessary | Needed to track visitor consent of cookies in the category “Others” |
| __hssrc | session | Necessary | Needed to determine if the visitor has restarted their browser from Hubspot |
| JSESSIONID | session | Necessary | Needed to ensure consistent user experience throughout the visit to the BDD homepage. |
| bscookie | Two years | Advertisement | Needed to ensure visitors can interact with LinkedIn directly from the BDD homepage (Post articles/Share content etc.) |
| YSC | session | Advertisement | Used to track the views of embedded Youtube videos on the BDD Homepage so that BDD can monitor the effects of video marketing campaigns. |
| VISITOR_INFO1_LIVE | Five months | Advertisement | Used to improve quality of embedded Youtube videos on BDD Homepage, adapting to user’s current connection bandwidth |
| test_cookie | 15 minutes | Advertisement | Used to determine if a visitor’s browser supports cookies so that BDD can track and understand the effects of Google marketing campaigns |
| IDE | One year | Advertisement | Used to determine which ads to present to visitors so that BDD advertisement is targeted to the right visitors |
| yt-remote-device-id | never | Advertisement | Used to store video preferences to improve user’s experience when viewing embedded Youtube videos on BDD Homepage |
| yt-remote-connected-devices | never | Advertisement | Used to store video preferences to improve users’ experience when viewing embedded Youtube videos on BDD Homepage |
| _ga_ZLZH9FPBH6 | Two years | Analytics | Used to collect visitor data to understand the effects of Google marketing campaigns |
| _ga | Two years | Analytics | Used to collect visitor data to understand the effects of Google marketing campaigns |
| _gid | One day | Analytics | Used to collect visitor data to understand the effects of Google marketing campaigns |
| _gat_gtag_UA_203962734_1 | 1 minute | Analytics | Used to collect visitor data to understand the effects of Google marketing campaigns |
| __hstc | One year | Analytics | Used to track visitors of the BDD homepage so that Hubspot can support BDD in understanding visitors’ behavior and how to improve the effects of marketing |
| hubspotutk | One year | Analytics | Used to track visitors of the BDD homepage so that Hubspot can support BDD in understanding visitors’ behavior and how to improve the effects of marketing |
| CONSENT | 16 years | Analytics | Used to track the views of embedded Youtube videos on the BDD Homepage so that we can monitor the effects of video marketing campaigns |
| lang | session | Functional | Used by WordPress to store language preferences for visitors to the BDD homepage |
| bcookie | Two years | Functional | Needed to ensure that visitors can interact with Linked In directly from the BDD homepage (Post articles/Share content etc.) |
| lidc | One day | Functional | Used to store performed actions on the BDD website so that effects of marketing campaigns can be monitored on LinkedIn |
| __cf_bm | 30 minutes | Functional | Required to support Cloudflare Bot Management so that global users to the BDD website can access regionally cached mirrors and experience quicker browsing |
| __hssc | 30 minutes | Functional | Used in conjunction with __hstc cookie to track visitors to the BDD website so that Hubspot can support BDD in understanding visitors’ behaviors and how to improve the effects of marketing |
| AnalyticsSyncHistory | One month | Others | Used to monitor effects of marketing campaigns on LinkedIn |
| li_gc | Two years | Others | Used by LinkedIn to store consent from visitors regarding the use of cookies for non-essential purposes in support of monitoring the effects of marketing campaigns |
| kursguiden | 5 minutes | Others | Used by Kursguiden, an external portal for marketing our courses to track the effects of marketing courses through Kursguiden |
| wc_cart_hash_# | Persistent | Used by Woo Commerce to enable users to buy course seats online | |
| wc_fragments_# | Session | Used by Woo Commerce to enable users to buy course seats online | |
| _ptq.gif | Session | Tracks the visitor across devices and marketing channels to enable improvement of marketing effect. | |
| ads/ga-audiences | Session | To re-engage visitors that are likely to convert to customers based on the visitor’s online behavior across websites | |
| embed/v3/counters.gif | Session | Collect information on user preferences and interaction with web-campaign content to promote events |
How to block or delete cookies
Consenting to our use of cookies is optional, and you can at any time choose to withdraw your consent.
You can block some cookies through your browser settings. In such a case, your browser automatically rejects the use of such cookies or informs you every time a website (such as ours) requests to use cookies.
Here you will find information on how to manage cookies in your particular browser:
Chrome (link: https://support.google.com/…)
Safari (link: https://support.apple.com/…)
Safari on iPhone and iPad (link: https://support.apple.com/…)
Internet Explorer and Microsoft Edge (link: https://support.microsoft.com/…)
Firefox (link: https://support.mozilla.org/…)
After you visit our website, you can review and delete any permanent cookies stored on your browser. To make the identification of our cookies easier, we provide the name of each cookie in the table above.
More information and the right to make a complaint to a supervisory authority
Please contact us at info@bdd.se if you have questions about using cookies on our website.
If you would like more information about cookies, permitted use of cookies, or if you would like to complain about our use of cookies, you can reach out to the supervisory authority for electronic communication. In Sweden, you can reach out to Post- och Telestyrelsen – pts.se.
When the cookie collects personal information about you, you can also turn to the data protection authority, Integritetsskyddsmyndigheten, with your complaints.
