Skip to main content

Privacy and Cookie Notice

Privacy Notice

Information to data subjects in accordance with articles 13 and 14 of the EU general data protection regulation

Business Driven Development AB (“BDD,” “we,” “us”) is the data controller responsible for the processing of personal data for which we determine the purpose and means. For example, we process personal data in handling the company’s business, in handling questions, for marketing purposes, and in our administration of courses and webinars.

If you, as a data subject, wish to exercise your rights or have questions concerning the company’s processing of your personal data, you can contact us by email: info@bdd.se

Alternatively, you can send a letter to: BDD AB, Adelgatan 21, 211 22 Malmö, Sweden

We have operations in several countries, and Swedish Authority for Privacy Protection (DPA) is the lead supervisory authority. Still, as a data subject, you can always choose which country’s supervisory authority you wish to contact, for example, when filing a complaint.

How and why we process your personal data

PurposeCategory of data subjectsCategory of personal dataLawful groundInformation provided by
Visiting our website

 

Please see our Cookie notice.

Website VisitorsDepending on the visitor’s consent regarding cookiesDepending on the visitor’s consent regarding cookies.Collected from the visitor’s web browser
When establishing contact with us

 

For us to answer questions and to provide service to existing and potential customers, suppliers, and business partners.

Potential and existing customers.

 

Suppliers.

 

Individuals wishing to get in contact with us.

Contact information at work: name, phone number, email, and other information left by the individual.The legitimate interest of BDDFrom the individual him/herself
Marketing

 

For us to inform existing and potential customers about offers, courses, and webinars.

Potential and existing customers.

Participants in courses or webinars.

Contact information at work of those who have been in contact with us or representative of a contracting party: name, phone number, email, employer

 

 

The legitimate interest of BDD.The potential or the existing customer himself when agreeing, contacting BDD, or participating in a course or webinar.
Tendering

 

For contact with customers when participating in tendering.

Potential customers.Contact information at work of those in contact with us or representatives of a contracting party: name, phone number, email, employer

 

Legitimate interestThe representative of the customer.
When entering a contract with us

 

For us to administrate and deliver service in accordance with the agreement, to bill and for bookkeeping

Customers and customer employeesContact information at work of those in contact with us or representatives of a contracting party: name, phone number, email, employer

Contact information at work of those participating in a project: name, phone number, email, employer

 

Necessary for the performance of a contractThe representative of a contracting party or directly from an individual themself.
Attending a course or webinar

 

For us to administrate the courses and webinars and to follow up and re-invite to new events

Customers/participantsWhen participating in the course or webinar, your name and initials are visible to other participants, live and in the chat. Participants can interact in different ways, for example, by raising a hand and using the microphone and/or camera.

 

The information is necessary to perform a contract when a contract is at hand.

 

Otherwise, the lawful ground is the Legitimate interest of BDD.

 

 

The employer/customer registers information about attending employees or from the participant themself.
Attending a course provided by BDD in cooperation with Scaled Agile Inc

 

For us to deliver the course and for Scaled Agile Inc. to provide information and course certification

Employees within the customer organizationWe collect contact information at work regarding the course participants. We collect names and email addresses and register the information with Scaled Agile Inc. will send out the information necessary to attend the course and become certified.Legitimate interestThe employer/customer. The employee can administer the information about them at the Scaled Agile webpage.
BillingCustomers and other suppliersContact information of those in contact with us or representatives of a contracting party: name, phone number, email

 

Necessary for the performance of a contractThe representative of the customer.

Data minimization

BDD never collects, stores, or in any other way processes more personal data than what is strictly needed to fulfill a purpose, as described in the table above.

If you do not wish for us to handle your personal data

For the performance of a contract, contact information is essential. If you don’t accept the processing of representatives’ and participants’ personal data, it will not be possible to enter into a contract with us. If you don’t agree to us processing your contact information, you will not be able to participate in our courses and webinars.

If you wish to oppose receiving information about upcoming events, please contact us. Please contact Scaled Agile Inc directly for marketing distributed by Scaled Agile Inc.

Special categories of personal data

We never ask for any data related to Special categories of personal data, for example, information about your health, political opinions, or religious beliefs. If any such data is sent to us, it will be deleted immediately if not needed for the service provided or the contract at hand. The data is not registered separately.

Documents and messages often contain other personal data of various kinds, other than contact information, when working together on a project. This data is handled in the relevant matter/project, is never registered separately, and is not made searchable. Correspondence related to projects will be saved with the rest of the documentation and deleted at the latest ten years after the project is finished. Otherwise, the data will be deleted as soon as it’s irrelevant.

Processing personal data for a legitimate interest

We believe the people connecting with us are interested in our services and appreciate invitations to upcoming events such as webinars or courses. We also believe that the partners, potential customers, and former participants in our activities appreciate invitations to our upcoming events. It’s always possible to contact us for immediate exclusion of marketing, in accordance with the data subject’s rights to oppose direct marketing. Inform us if you don’t want any further invitations. We will then, of course, remove your data from our marketing list. If you receive marketing directly from our business partner, Scaled Agile Inc., please turn directly to them.

When an employer registers employees for attending a course or webinar, we use the contact information about the employees to provide the service. We assume that the employer has the right to provide the employee information to us, and it’s a legitimate interest for us to register the information to invite clients to attend and to provide the course or webinar.

When we organize courses in cooperation with Scaled agile the links and other information are provided directly from Scaled agile. The participant’s email address and name are registered with Scaled agile as a third party. For more information about how Scaled agile use your information, please visit https://scaledagile.com/privacy-policy/.

Transfers of data to countries outside EU/EES 

BDD is an international company. Information provided to us will be handled in systems reachable to our BDD partners worldwide.

When providing a course, it’s delivered to you by Scaled Agile, a US-based company. Your contact information will be registered with Scaled Agile and handled in accordance with their privacy policy which you can find here https://scaledagile.com/privacy-policy/.

Microsoft (M365) and Google suite are examples of services we use provided by American companies. See below for a full list of data processors. In accordance with US law, the American authorities have the right to access information stored by these companies. The risk of American authorities showing any interest in our business most likely is limited. Yet, we urge you never to register more personal information than needed for the service of a course or in an email.

Organizations with whom we share your data

We use different business partners and several so-called data processors to provide our services. The data processors engaged may only process personal data in accordance with the purposes and instructions that we issue for the processing. The processor and anyone acting on behalf of the processor may never see more data than is necessary to carry out the service covered by the agreement with BDD. WA’s so-called data processor agreement is drawn up where personal data is to be processed by a data processor; BDD uses data processors for various IT services.

ProcessorPurposeLocationData storage
GoogleDocument storage, streaming, collaboration, and emailUSUS
MicrosoftDocument storage collaboration and emailUSUS
ZoomMeeting and collaborationUSUS
Scaled AgileProvide courses and course certificatesUSUS
SlackCommunication and collaboration in projectsUSUS
Baker TillyBookkeepingEUEU
MiroCollaborationEUEU
AtlassianCollaborationAustraliaAustralia
OderlandHosting of website and tool for course registrationSESE
HubspotMarketingUSUS
LinkedInMarketingUSUS

There might also be situations where we are obliged to share your data with an authority, for example, if a data subject files a complaint against BDDs treatment of personal data or in correspondence with tax authorities.

Period for which the personal data will be stored

Personal data is retained only as long as needed for the purposes for which it is processed.

When performing a contract, we store contact information for ten years after the contract expires. Personal data relating to ongoing work is stored together with other relevant information as long as it is relevant to the ongoing work. Still, no longer than ten years after the work has finished.

Observe that BDD might be obliged to store personal data in accordance with Swedish law, for example, in accordance with the Swedish accountant law.

Your rights as a data subject

You have several rights as a data subject. If you, as a data subject, wish to exercise your rights or have questions concerning BDDs processing of your personal data, you can contact us at info@bdd.se.

Right of access

You can request information as to whether BDD processes personal data relating to you and, if so, receive a copy of such data – called a register extract – together with more detailed information.

Right to rectification

If you consider that the personal data relating to you is inaccurate or incomplete, you can request to have the data rectified or completed.

Right of objection

When BDD processes personal data, you can object to the processing anytime. If BDD cannot show that there are compelling, authorized reasons to continue processing the data, BDD must terminate the processing.

Right to limitation of processing

In certain cases, for example, if you have objected to the processing, you can demand that the processing of your personal data be limited. By requesting a limitation, you have, at least for a certain period, the possibility to stop BDD from using the data other than, for example, defending legal claims. You can also prevent BDD from erasing the data, for example, if you need the information to claim damages.

Right to erasure (“right to be forgotten”)

You can, in certain cases, have your personal data erased. When your personal data is needed for BDD to be able to comply with laws and regulations, for example, in accordance with the Swedish accounting act, BDD cannot erase the data.

Right to data portability

Suppose BDD processes personal data relating to you to perform an agreement. In that case, you have the possibility in certain cases to be given the personal data relating to you to use it somewhere else, for example, transfer the data to another data controller.

The right to file a complaint

As a data subject, you have the right to file a complaint with the data protection authority; in Sweden, it’s the Swedish Authority for Privacy Protection – imy.se

You also have the right to receive compensation from a data processor or us if you have suffered material or non-material damages because of an infringement of this regulation.

Links to Websites and Third-Party Content
For your convenience and information, we may provide links to websites and third-party content not owned or operated by us. The websites and third-party content we link may have separate privacy notices or policies. We are not responsible for the privacy practices of any entity that it does not own or control.

Children’s Privacy
Our website and mobile application are not intended for individuals under 18. We do not knowingly collect personal information from children under age 13. If we learn that we have collected personal information from an individual under 13, we will delete that information.

 

Cookie Notice

We use cookies on our website. The cookies collect personal data about you as a visitor to the website. Some cookies are necessary to enable core functionality, and we do not require your consent to use these cookies.

For analyzing how our website is being used and optimizing the website, we use Google Analytics and Hubspot. Consenting to our use of cookies is optional, and you can at any time choose to withdraw your consent. By consenting to our use of cookies, you consent to us collecting information about your device and how you use the website. This data is then linked to Google’s data about you.

BDD AB is the controller for using cookies on the website and for processing your personal data collected through cookies when you visit https://bddagile.com/. Please see our privacy notice for further information about our processing of personal data through cookies,

What cookies are and how they are used
A cookie is a small text file the website you visit asks you to save on your computer (similar devices with internet connections such as tablets and mobile phones are also included). For more general information about cookies, please see www.pts.se/cookies,
www.aboutcookies.org and/or www.allaboutcookies.org/.

There are two types of cookies, persistent cookies, and session cookies. Both types of cookies are used on our website. Session cookies are stored temporarily when you as a visitor visit and browse our website and are deleted when you close your web browser. Persistent cookies are stored as a file on the computer for a period of time, until you, as a visitor or the server that sent them, delete them.

Furthermore, cookies can be divided into first and third-party cookies. First-party cookies are set by the website owner (BDD AB), and third-party cookies are set by suppliers providing services that BDD uses on our website. Both first and third-party cookies are used on our website.

We use Google Analytics and Hubspot as statistical analysis tools to get a picture of how our visitors use the website and to evaluate how the website can be developed, e.g., to improve the website’s content, navigation, and structure. We also use the collected information for marketing purposes.

 

Cookies that are used on bddagile.com

 

Cookie NameDurationCategoryPurpose
UserMatchHistoryOne monthOthersNeeded to understand the effect of marketing campaigns on LinkedIn and whether the Linked In campaign visitors also visit the BDD homepage
cookielawinfo-checkbox-functionalOne yearOthersNeeded to track visitor consent of cookies in the category “Functional”
li_sugrThree monthsOthersNeeded to store browser details to track the effects of marketing activities on LinkedIn
cookielawinfo-checkbox-necessaryOne yearNecessaryNeeded to track visitor consent of cookies in the category “Necessary”
cookielawinfo-checkbox-performance1 yearNecessaryNeeded to track visitor consent of cookies in category “Performance”
cookielawinfo-checkbox-analyticsOne yearNecessaryNeeded to track visitor consent of cookies in category “Analytics”
cookielawinfo-checkbox-advertisementOne yearNecessaryNeeded to track visitor consent of cookies in category “Advertisement”
cookielawinfo-checkbox-othersOne yearNecessaryNeeded to track visitor consent of cookies in the category “Others”
__hssrcsessionNecessaryNeeded to determine if the visitor has restarted their browser from Hubspot
JSESSIONIDsessionNecessaryNeeded to ensure consistent user experience throughout the visit to the BDD homepage.
bscookieTwo yearsAdvertisementNeeded to ensure visitors can interact with LinkedIn directly from the BDD homepage (Post articles/Share content etc.)
YSCsessionAdvertisementUsed to track the views of embedded Youtube videos on the BDD Homepage so that BDD can monitor the effects of video marketing campaigns.
VISITOR_INFO1_LIVEFive monthsAdvertisementUsed to improve quality of embedded Youtube videos on BDD Homepage, adapting to user’s current connection bandwidth
test_cookie15 minutesAdvertisementUsed to determine if a visitor’s browser supports cookies so that BDD can track and understand the effects of Google marketing campaigns
IDEOne yearAdvertisementUsed to determine which ads to present to visitors so that BDD advertisement is targeted to the right visitors
yt-remote-device-idneverAdvertisementUsed to store video preferences to improve user’s experience when viewing embedded Youtube videos on BDD Homepage
yt-remote-connected-devicesneverAdvertisementUsed to store video preferences to improve users’ experience when viewing embedded Youtube videos on BDD Homepage
_ga_ZLZH9FPBH6Two yearsAnalyticsUsed to collect visitor data to understand the effects of Google marketing campaigns
_gaTwo yearsAnalyticsUsed to collect visitor data to understand the effects of Google marketing campaigns
_gidOne dayAnalyticsUsed to collect visitor data to understand the effects of Google marketing campaigns
_gat_gtag_UA_203962734_11 minuteAnalyticsUsed to collect visitor data to understand the effects of Google marketing campaigns
__hstcOne yearAnalyticsUsed to track visitors of the BDD homepage so that Hubspot can support BDD in understanding visitors’ behavior and how to improve the effects of marketing
hubspotutkOne yearAnalyticsUsed to track visitors of the BDD homepage so that Hubspot can support BDD in understanding visitors’ behavior and how to improve the effects of marketing
CONSENT16 yearsAnalyticsUsed to track the views of embedded Youtube videos on the BDD Homepage so that we can monitor the effects of video marketing campaigns
langsessionFunctionalUsed by WordPress to store language preferences for visitors to the BDD homepage
bcookieTwo yearsFunctionalNeeded to ensure that visitors can interact with Linked In directly from the BDD homepage (Post articles/Share content etc.)
lidcOne dayFunctionalUsed to store performed actions on the BDD website so that effects of marketing campaigns can be monitored on LinkedIn
__cf_bm30 minutesFunctionalRequired to support Cloudflare Bot Management so that global users to the BDD website can access regionally cached mirrors and experience quicker browsing
__hssc30 minutesFunctionalUsed in conjunction with __hstc cookie to track visitors to the BDD website so that Hubspot can support BDD in understanding visitors’ behaviors and how to improve the effects of marketing
AnalyticsSyncHistoryOne monthOthersUsed to monitor effects of marketing campaigns on LinkedIn
li_gcTwo yearsOthersUsed by LinkedIn to store consent from visitors regarding the use of cookies for non-essential purposes in support of monitoring the effects of marketing campaigns
kursguiden5 minutesOthersUsed by Kursguiden, an external portal for marketing our courses to track the effects of marketing courses through Kursguiden
wc_cart_hash_#PersistentUsed by Woo Commerce to enable users to buy course seats online
wc_fragments_#SessionUsed by Woo Commerce to enable users to buy course seats online
_ptq.gifSessionTracks the visitor across devices and marketing channels to enable improvement of marketing effect.
ads/ga-audiencesSessionTo re-engage visitors that are likely to convert to customers based on the visitor’s online behavior across websites
embed/v3/counters.gifSessionCollect information on user preferences and interaction with web-campaign content to promote events

How to block or delete cookies

Consenting to our use of cookies is optional, and you can at any time choose to withdraw your consent.

You can block some cookies through your browser settings. In such a case, your browser automatically rejects the use of such cookies or informs you every time a website (such as ours) requests to use cookies.

Here you will find information on how to manage cookies in your particular browser:
Chrome (link: https://support.google.com/…)
Safari (link: https://support.apple.com/…)
Safari on iPhone and iPad (link: https://support.apple.com/…)
Internet Explorer and Microsoft Edge (link: https://support.microsoft.com/…)
Firefox (link: https://support.mozilla.org/…)

After you visit our website, you can review and delete any permanent cookies stored on your browser. To make the identification of our cookies easier, we provide the name of each cookie in the table above.

More information and the right to make a complaint to a supervisory authority

Please contact us at info@bdd.se if you have questions about using cookies on our website.

If you would like more information about cookies, permitted use of cookies, or if you would like to complain about our use of cookies, you can reach out to the supervisory authority for electronic communication. In Sweden, you can reach out to Post- och Telestyrelsen – pts.se.

When the cookie collects personal information about you, you can also turn to the data protection authority, Integritetsskyddsmyndigheten, with your complaints.