In short
- Insyt is a personal project run by Mia Appleby in Malmö, Sweden. Contact: hello@insyt.se.
- You can use Insyt without an account. Accounts open soon. We will update this notice before they do.
- Google Analytics runs only if you choose "Accept analytics". You can change your choice at any time with Cookie settings at the bottom of every page.
- What you type in Get started and in the Paths stays in your browser. It is not sent to Insyt.
- We never sell your information and we show no adverts.
- If you are unhappy with how we use your information, tell us. You can also complain to the Swedish Authority for Privacy Protection (IMY).
01Who is responsible for your information
Insyt is a personal project run by Mia Appleby, a private individual in Malmö, Sweden. Insyt is not a company. In data protection law Mia is the "controller" of your information. This means she decides how it is used and is responsible for keeping it safe.
How to reach us: email hello@insyt.se. We reply within one month at the latest.
Insyt does not have a data protection officer. The law does not require one for a service like Insyt.
02What we collect, why, and our legal reason
The law lets us use your information only for a stated reason. We use three:
- Legitimate interest: we have a fair reason of our own that does not override your rights. We name the reason each time. You can object to this use (section 9). (GDPR Article 6(1)(f).)
- Consent: you have said yes to one specific use. You can take it back at any time. (GDPR Article 6(1)(a).)
- Legal obligation: the law requires us to do it. (GDPR Article 6(1)(c).)
2.1 When you visit insyt.se
What: our web host (GoDaddy) keeps technical logs of each request: the page address, the result, the time, your device's IP address and your browser type.
Why: to deliver the site, keep it secure and find and fix faults.
Legal reason: legitimate interest (running a secure website).
2.2 Google Analytics, only if you accept
What: if you choose "Accept analytics", Google Analytics records which pages you visit, how you arrived, the type of device and browser you use, your approximate location (country and city) and actions such as clicks on links. It sets two cookies that hold a random number, so that visits can be told apart. It does not record your name, your email address or what you type.
Google uses your IP address to work out your approximate location. Google Analytics does not store IP addresses.
We tell Google Analytics not to use your visit for advertising.
Why: to learn which pages help people and to find what does not work.
Legal reason: consent. You can take it back at any time with Cookie settings. If you do, Google Analytics stops loading and we delete its cookies from your browser.
2.3 What stays in your browser
What: your Get started answers (your first name, role, stage, the skills you marked, your direction and your picture), your choices in "See Insyt for your role" on the home page, and your answer to the analytics question.
These stay on your device. They are not sent to Insyt and we cannot see them. Full details are on the Cookies and storage page.
Legal reason: they are needed for features you asked for, so the law does not require consent for them.
2.4 When you contact us
If you email hello@insyt.se we keep your message and our reply, so we can help you. Our email is provided by Microsoft 365, bought through GoDaddy. Microsoft stores it within the EU/EFTA under its EU Data Boundary.
Legal reason: legitimate interest (answering you). If you are using a privacy right, the law requires us to answer (legal obligation).
03What we do not do, and what we ask of you
- We do not sell or rent your information.
- We do not show adverts, and we tell Google Analytics not to use your visit for advertising.
- We do not use your information to train artificial intelligence.
- Please do not enter confidential information from your own workplace. All practice in Insyt uses a fictional company's data.
04Cookies and storage in your browser
Insyt sets no cookies of its own. If you accept analytics, Google Analytics sets two cookies. Insyt also keeps a few things in your browser so the features you use work. Full details are on our Cookies and storage page.
05Where your information is kept
- The website is hosted by GoDaddy.
- Google Analytics data is processed by Google and may be stored in the United States.
- Emails you send to hello@insyt.se and our replies are stored by Microsoft within the EU/EFTA, under its EU Data Boundary.
- What you type in Get started and in the Paths stays in your own browser.
06Who else handles your information
We use these service providers. Each one works on our behalf and on our instructions, under a written data processing agreement (GDPR Article 28):
- GoDaddy: hosts the website and sold us the mailbox. It may reach the mailbox when it gives support.
- Google (Google Ireland Limited, with Google LLC in the USA): runs Google Analytics, only if you accept analytics.
- Microsoft: hosts the hello@insyt.se mailbox (Microsoft 365).
Each provider's own terms:
- GoDaddy: https://www.godaddy.com/legal/agreements/privacy-policy
- Google: https://policies.google.com/privacy
- Microsoft: https://privacy.microsoft.com/privacystatement
We share information with public authorities only when Swedish or EU law requires it.
07Information that leaves the EU
- Google: Google Analytics data may be processed in the United States. Safeguard: Google LLC is certified under the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795, GDPR Article 45). Google's data processing terms also include the EU Standard Contractual Clauses.
- GoDaddy: GoDaddy's group is based in the USA. Where GoDaddy may access data from outside the EU, this is covered by the EU-US Data Privacy Framework. Its agreement also includes the EU Standard Contractual Clauses.
- Microsoft: where Microsoft may access data from outside the EU, this is covered by the EU-US Data Privacy Framework.
Email hello@insyt.se and we will send you a copy of any agreement.
08How long we keep your information
- Google Analytics data: up to 14 months, then Google deletes it. The two cookies last up to 2 years, unless you reject analytics or clear them.
- Web server logs: kept by GoDaddy under its own settings. We do not keep copies.
- What stays in your browser: until you clear it, or choose Start again at the end of Get started.
- Emails you send us: 12 months after our last message to each other. Emails about your privacy rights: 3 years, so we can show that we answered.
09Your rights
You have these rights under the GDPR (Articles 15 to 21). To use any of them, email hello@insyt.se.
- See your information and get a copy.
- Correct your information.
- Delete your information.
- Limit how we use your information while a question about it is being settled.
- Take your information to another service.
- Object to how we use your information when our reason is a legitimate interest.
- Take back your consent at any time, for example to analytics. This does not affect what we did before.
How we handle a request: it is free. We answer within one month. If a request is complex we may need up to two more months, and we will tell you why within the first month.
Analytics data is linked only to a random number in your browser, not to your name, so we may not be able to find your analytics data. Rejecting analytics in Cookie settings stops any new data at once.
10Automated decisions
Insyt makes no decisions about you by automated means that have legal effects or affect you in a similarly significant way (GDPR Article 22). The Paths suggested at the end of Get started and the feedback in the Paths only help you learn. You can ignore them.
11How we protect your information
- Every connection to Insyt is encrypted (HTTPS).
- What you type in Get started and the Paths never leaves your browser.
- If a security breach puts your information at risk, we report it to IMY within 72 hours. If the risk to you is high, we also tell you directly and without delay.
12Children
Insyt is a career learning service written for people aged 16 and over. We do not knowingly collect information from children under 16.
13Changes to this notice
We will update this notice before accounts open, and whenever we change how we use your information in an important way. The date at the top of this page shows the latest change. Earlier versions are available on request.
14How to complain
Please tell us first at hello@insyt.se, so we can put it right.
You also have the right to complain to a data protection authority. In Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY):
- Online: https://www.imy.se (choose "Complaint" or "Klagomål")
- Email: imy@imy.se
- Post (Sweden): Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm.
If you live or work in another EU country, you can also complain to the authority there.