Privacy Policy
We believe in privacy and have therefore created a privacy policy that protects both your and our interests
We aim to simplify the student life of students across the world by enabling interaction and collaboration between students, as well as between students, student associations, and employers. In all our functions, we strive to eliminate messengers and intermediaries and instead offer an innovative, simple, powerful, and secure digital platform that enables direct interaction between students, associations, companies, brands, and others based on shared drivers, passions, and interests.
Our promise to you
Security
We offer a digital student world where safety and the simplification of your daily life are our focus, regardless of the party involved. We aim to bring parties together and foster strong interaction to inspire tomorrow's talents to feel a sense of security and belonging in themselves, their studies, and their future employers. We practice what we preach by handling your personal data with the utmost care to create a sense of security for you as a user on hitract. Your personal data is processed solely for the purpose of providing you with the best possible user experience and opportunities for interaction with all relevant parties on the platform.
Safety
We view safety from two perspectives: your individual safety and the safety of the digital student world of hitract and the community you are part of and operate within. That is why verifying a registered user (“Member”) becomes a key factor in ensuring your safety and the safety of others on hitract. We believe this is a prerequisite for creating an open, transparent, and secure digital environment.
Transparency
In the hitract student world, we believe in full transparency and openness to create the best possible conditions for interaction and to highlight and unleash individual drivers, passions, and interests. We view our obligations to you in the same way. We will always be open and transparent about the information we collect about you and will only process it for the purpose of achieving our mutual interests and ultimate goal — creating the right conditions for you as a student to interact, collaborate, and be inspired by like-minded individuals and other relevant parties available to you on hitract.
Introduction
As a registered user (“Member”) or visitor of hitract, you should always feel confident that your personal data is handled in a safe, secure, and trustworthy manner. As the data controller, we continuously work to ensure that all our services and internal processes meet the high standards required by both you and the General Data Protection Regulation (GDPR).
It is important that you, as a member or visitor, read and understand this document before registering and becoming a member of hitract. This document outlines which personal data we process, how we process it, and what rights you have as a member. If you have any questions regarding this document, how your personal data is handled, or other questions related to privacy and/or data protection, please contact [email protected].
What personal data do we collect?
We primarily collect data directly from you, but as a Member you are also allowed to import data from third parties such as Meta (Facebook, Instagram), Google, Apple, and antagning.se to simplify the account creation and verification process. As hitract is a community platform, it is also possible that you may be mentioned by others in the context of your usage. Depending on how you use hitract, we collect different types of information from or about you.
Below you’ll find the categories of personal data we process, along with examples of the types of data included in each category.
Personal data we collect directly from you as a member
Individual and profile data
When you register on hitract, we collect and/or you provide a number of details that can directly identify you, as well as some data linked to you in order to create your profile. Examples include your first and last name, university information, and a photo of you (this may vary depending on your settings with third parties). You can also choose to add more details to your profile such as work experience, hobbies, and interests. When using the app, you may add information relevant to specific contexts such as applying for membership in a student association or organization on Hitract.
Course history
To be able to access the hitract student world, enjoy the best possible user experience, and verify your identity, we can retrieve your course history from antagning.se upon your request. You have full control over which courses are imported and displayed on your profile.
Communication and interaction
A core part of hitract is enabling you to communicate and interact with other students, student associations, and employers. All conversations are stored so that you can communicate efficiently and access them later. We also save data that enables you to stay in touch with others. We also store communication you've had with us, such as in customer service cases, so we can assist you more effectively in future matters.
Material you publish (posts, reviews, questions, etc.)
You can publish content on hitract such as posts, reviews, or questions. This content is saved and made available to other users on the platform. We advise you not to share any particularly sensitive personal data such as ethnic origin, health information, religious or philosophical beliefs, sexual orientation, political views, or other information you consider sensitive.
Product purchases
To offer a complete experience, hitract allows you to purchase various products and services provided by associations or organizations. When you make a purchase, we store information related to your transaction and make it visible to you. Examples of stored information include the products and services you bought, the transaction itself, the price, and other relevant details depending on the specific product or service.
Payment information
When purchasing a product or service, hitract aims to make the process as smooth as possible. To do this, you’ll be required to provide payment details (first name, last name, card number, etc.). This data is not stored by hitract but is shared only with our third-party providers (SumUp or Stripe, depending on the payment processor used) and the party you're transacting with (e.g., a student association). To simplify the payment process, you may also choose to save your payment details with our third-party provider SumUp through hitract. In some cases (e.g., during order processing), you may be asked to provide product-related information such as allergies, meal choices, or seating preferences. This information is shared only with the party from whom you are purchasing the product, not with the payment provider.
Personal data about you that other members may make available
Content published by others (posts, reviews, questions, etc.)
On hitract, content can be published by others where, for example, your name may appear and/or you may be visible in a photo. This can include posts in feeds (from students, student associations, or employers) or in reviews, comments, and/or questions. You can always report content that you find inappropriate for yourself or for another Member of hitract.
Personal data about you that third parties may provide to hitract
Information regarding potential memberships in, for example, student associations
Hitract is a digital hub for students where associations and organizations from student life are represented. If you intend to or have become a Member of one of these associations or organizations (through the hitract app or directly via the association or organization), certain data may need to be shared with hitract to facilitate your membership. In such cases, the following information may be stored: first name, last name, and email address. Upon request from the association or organization—and only the ones you wish to join—additional data such as personal ID number, phone number, study pace, and the program you're enrolled in may also be required to enable your membership.
Personal data our service captures about you as a member or site visitor
User data and analytics
To provide you with the best possible experience on our website and app, we collect data about how you use the site or app. This can include how often you visit or launch the app, what you click on, what you search for, and other behavioral data related to your usage.
Device information
We use cookies to create a seamless, user-friendly, and efficient service for you as a member or visitor. To do this, we save data such as screen size, language settings, and various types of session IDs.
How do we process the personal data we collect?
How we use your personal data depends on how you use the platform and the settings you've chosen. Hitract only processes the data you provided when registering or that you chose to share with hitract afterward. We may also process personal data from email communications or other documented interactions with us, in order to support you as effectively as possible.
Below is a description of each purpose for which we process your personal data. The legal basis is also explained for each purpose, as well as whether any profiling is carried out.
Creating an account and verifying your student status
To provide the best registration and account creation experience, we collect and process data to verify your student status and create your profile. Verification is done via antagning.se (at your request), and during this process, your course history may be collected and processed. You have full control over which courses are retrieved and shown on your profile.
We do this to fulfill our contract with you as a Member.
Membership in associations and organizations
Hitract is the go-to digital meeting place for students during their studies. You can become a Member of relevant associations and organizations on hitract, and any data handling related to membership occurs only if you've chosen to apply or join an association or organization.
We do this to fulfill our contract with you as a Member.
Searching and matching with other parties
We make parties searchable on hitract and strive to ensure a secure and efficient search experience by using collected data to display relevant profiles. We perform profiling based on your profile and usage. Based on this, you are categorized and presented to other parties (e.g., employers or members) who match your profile and usage. This enables you to be discovered by others who share your interests and passions.
We do this to fulfill our contract with you as a Member.
Enabling communication and interaction
We enable communication and interaction between you and other parties by allowing you to publish posts, send messages, like or comment, and manage communications with us in case of any support needs.
We do this to fulfill our contract with you as a Member.
Enabling payments
We enable you to make payments for products and services on hitract to ensure a seamless experience. No payment data is stored by hitract. Your data is shared directly with our payment partners (SumUp or Stripe). If you choose to save your payment information, it will be stored with our third-party partner SumUp.
We do this to fulfill our contract with you as a Member.
Service development and surveys
To give you the best user experience, we continually develop and improve our features. Occasionally, this may involve using your personal data, though never to analyze you individually. Instead, we study patterns across larger user groups. We also sometimes conduct surveys, participation in which is voluntary. These help us understand how you view changes or trends in the market. We process data for: (1) Creating a personalized experience and efficient interaction between parties. (2) Creating business opportunities and providing partners with insights into trends and the job market. (3) Ensuring a safe and reliable service by thoroughly testing all features.
For (1) and (2), we use pseudonymized, aggregated data for profiling, never individual-level analysis. For (3), the processing is based on our contract with you as a Member.
Recommendations
We aim to provide each party with relevant content and recommendations. To do so, we process your personal data in various ways. We use pseudonymized, aggregated information (we do not know it's you personally) to categorize and generate insights that improve your experience and help us provide more relevant suggestions. Recommendations shown to you are based on the behavior of the category you belong to. As a result, you receive more relevant suggestions.
We do this based on a legitimate interest defined by us. We never analyze individual users, only large sets of pseudonymized data. We always value and protect your privacy.
How long do we store your personal data?
Hitract stores your personal data for as long as you are a member or use a particular service, or as long as necessary to fulfill our obligations to you as a member. Generally, we delete all data about you as an individual as soon as you choose to delete your account. However, hitract may retain personal data for a longer period if there are potential legal claims, such as in cases where you have not paid for a product or service received.
How does hitract protect my personal data?
Hitract takes all necessary technical and organizational security measures to protect your personal data from unauthorized access, alteration, distribution, or destruction. For example, we have implemented encryption (both during storage and transmission), strong authentication, backup routines, and procedures for handling potential incidents. We also ensure that the third-party providers we use to process your personal data meet our security requirements.
Does hitract transfer personal data to third countries?
Hitract stores and processes all personal data within the EU/EEA. However, data may be transferred to third countries if we use third-party providers whose parent companies are located outside the EU/EEA. In such cases, hitract ensures that your personal data is adequately protected and that the provider complies with the EU-U.S. Data Privacy Framework when transferring data to the U.S. Personal data is only transferred to third countries when necessary to fulfill our obligations to you as a member or when required by authorities.
Is data about me collected from third parties?
In all cases where personal data is collected from a party other than you, you will be informed and retain control over when this data is collected. You will also be informed which party the data is collected from. For example, data may be collected from Google, Apple, or Facebook during your account registration.
What are my rights as a member or visitor?
As a customer or visitor, you have the right to receive information about which personal data is processed by hitract. Therefore, you have the right to:
- a) receive a data extract,
- b) request correction of incorrect or incomplete data,
- c) request deletion or restriction of the processing of personal data (hitract may, however, deny deletion in certain cases if the data must be kept due to an ongoing customer relationship — you can always choose to delete your account),
- d) object to the processing,
- e) under certain conditions, retrieve the personal data you have provided to hitract and request to have it transferred to another data controller (data portability).
Your request or objection regarding items b)–e) will be reviewed by hitract on a case-by-case basis. To exercise your rights, please contact [email protected] — we will always respond to such requests within one calendar month. You can also contact [email protected] to opt out of direct marketing or decline certain types of communication from hitract.
Hitract’s responsibility
Hitract takes data protection seriously and is responsible for the management and processing of personal data. The overall role of our appointed officer is to ensure that hitract complies with applicable data protection laws. Their responsibilities include gathering information on how hitract processes your personal data and advising internally to maintain a high level of data protection. They also act as a contact point for both you as a member and for the Swedish Authority for Privacy Protection (IMY). The officer is not personally responsible for hitract's data processing compliance — this responsibility lies with hitract as the data controller. If you have any questions about data protection, you can always contact hitract at [email protected] or reach out to the appointed officer directly.
You may also file complaints directly with IMY.
Data Protection and Data Protection Officer (DPO)
You can contact our Data Protection Team regarding general data protection matters via:
Email: [email protected]
You can contact our designated Data Protection Officer for questions regarding the processing of personal data via:
Email: [email protected]
Responsible handling of personal data
Hitract takes full responsibility for the processing of your personal data as described above. Hitract complies with Swedish data protection legislation. Hitract AB is registered with the Swedish Companies Registration Office (Bolagsverket) under registration number 559210-3260 and is based in Stockholm.
Visit www.hitract.se for more information about Hitract.