Privacy Policy

Introduction

In this privacy policy, you can read about how the Swedish company: SmakShare AB with company registration number 559353-6385 (hereinafter referred to as "we" or "us") Processes Personal data. References to "you" and "your" refer to the Data subject whose Personal data we Process. This privacy policy covers all types of Personal data, in both structured and unstructured data. Our Processing of your Personal data takes place in accordance with the GDPR (and SCC where applicable) and the data protection principles.

Below you can read about how we Process your Personal data that we get access to when you for example enter into an agreement with us, contact us or when you use the Application "SmakShare" or "RecipeMind" for Android/iOS. If you choose to use our Application, then you agree to the collection and use of Personal data in accordance to this privacy policy. We will only Process your Personal data as described herein.

Definitions

The following terms have the meanings given below, both when expressed in the plural and the singular:

• Application: refers to the application "SmakShare" or "RecipeMind" for iOS and Android.
• User: refers to individuals who use the Application.
• User Account: refers to an identity in the Application that identifies a User and gives the User access to the Application's features.
• Personal data: All data that, directly or indirectly, alone or together with other data, can be linked to an identified or identifiable physical living person. Common examples include: name, telephone number, address, email address, user ID, credit card number, IP address, etc.
• Data subject: The natural person who can be identified through the Personal data.
• Processing: Everything that is made with Personal data, automated or otherwise, is a form of Processing. Examples include storage, erasure, sharing, usage, registration, copying, collection, organization, adjustment, destruction, etc.
• Controller: Anyone who determines the purpose of a particular Processing of Personal Data and how the Processing is to be carried out.
• Processor: The one who Processes Personal data on behalf of a Controller, according to the Controller's instructions.
• Third-party: Someone other than the Controller, the Data subject or the Processor.
• GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation).
• SCC: Commission implementing decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of Personal data to third countries.

Controller

SmakShare AB is responsible for the Processing of Personal data performed by us or on our behalf, and we are regarded as the Controller insofar as we determine the means and purpose of the Processing (according to the principle of liability). For example, SmakShare AB acts in the capacity of a Controller when we Process your Personal data that you provide to us in order to create your User Account, such as your name, email address, profile picture etc.

Categories of Processed Personal data

In accordance with the principle of data minimization, we only Process Personal data that is adequate, necessary and relevant to fulfill the purposes for which they were collected. We mainly Process the categories of Personal data listed below:

• Identification information: name.
• Contact information: e-mail address, telephone number, user ID for social media.
• Other Personal information: IP-address, other Personal information that is provided to us, such as that which is included in a message sent to us or that you register in the Application.

The Application does use Third-party services that may collect information used to identify you. The Third-party services declare their own terms and conditions.

The purpose and legal basis of the Processing

In accordance with the principle of purpose limitation, we only Process Personal data for specific, explicitly stated and justified purposes. Below you can read more about the legal basis and purpose of the Processing.

1. When you visit our website

Our website use cookies. The usage of necessary cookies does not need your prior consent, since they are necessary in order to provide the services in the website. The use of non-essential cookies takes place only if you give your consent to it. You can revoke a given consent at any time. In addition, you can manage the storage of cookies through your browser settings. Legal basis: Consent.

2. When we get in touch through e-mail, telephone, social media or contact form

We can contact you, and you can contact us, through e-mail, telephone or social media and in such case, we will get access to your Personal data that appears in connection with such contact. For example: name, telephone number, e-mail address, user ID from social media and other information that you provide to us. This information is Processed so that we can know who we are talking to and to keep in touch. Legal basis: Legitimate interest.

You can also contact us through the contact form on the Website. Before sending the message to us, you give your active consent to our Processing of your Personal data in accordance with this Privacy Policy. Legal basis: Consent.

3. When you enter into an agreement with us

We Process Personal data belonging to you in order to fulfill the agreement regarding our services. Personal data that we Process may refer to: profile picture, name, description, Instagram-account, website-URL and e-mail. Legal basis: Agreement.

4. When you use the Application

When you use the Application, we get access to the information that you register in connection to your use. Some information may also be visible to all other Users. We also have access to Users' chat messages to verify compliance with the Terms of use. Legal basis: Agreement.

Whenever you use the Application, in a case of an error we collect data and information (through third-party products) called "Log Data". This may include your device IP address, device name, operating system version, the configuration of the Application and other statistics. Legal basis: Agreement.

5. When we share or publish recipes made public by a User

We may share, publish and republish recipes that are made public by a User ("Public content") on our website and/or social media accounts and will list the User who has registered the Public content as the source. Legal basis: Agreement.

6. When you receive newsletters from us

When you create an account with us, you will automatically be subscribed to our newsletters containing updates and inspiration related to the service. You can unsubscribe at any time by clicking the link in the email or by contacting us. Legal basis: Legitimate interest and/or consent.

If you revoke your consent, you will be removed from the email list but your email address will remain in the database with a block to ensure you do not receive newsletters. You can contact us to have your e-mail address deleted from the blocked list.

7. Other purposes

If we are obliged by law, court or authority decision to Process certain Personal data, the Processing takes place on the basis of a "Legal obligation." Based on our legitimate interest, we may Process Personal data in order to:

• protect our rights and property,
• carry out direct marketing of our services,
• ensure the technical functionality of the Website and/or Application,
• collect anonymous statistics, performance measurements, etc.

Storage location and duration

We strive to store all Personal data within the EU/EEA. If Personal data is stored outside the EU/EEA, we ensure an adequate level of protection in accordance with the GDPR and SCC.

Personal data is stored for as long as it is necessary to fulfill the purposes for which it was collected. Personal data registered in your User Account is stored for as long as your User Account is active. You can delete your User Account at any time through the user panel or by contacting us at hej@smakshare.se.

Sharing of Personal data

Personal data that we Process is not shared with unauthorized persons. However, we may employ Third-party service providers to:

• facilitate our service,
• safeguard our legal interests,
• fulfill our contractual and legal obligations,
• detect and prevent technical, operational or safety problems,
• perform service-related services, or
• assist us in analyzing how the Application is used.

Before sharing Personal data with service providers, we enter into a Data Processing Agreement in accordance with the GDPR.

Technical and organizational security measures

We implement various security measures to protect against intrusion, abuse, loss, destruction and other changes that may pose a risk to privacy. Examples include:

• Access to databases and IT systems requires a password.
• Suppliers and sub-Processors guarantee an adequate level of security.
• All employees have knowledge of data processing practices.
• All employees have entered into confidentiality agreements.
• We follow the seven data protection principles in all Processing.

Links to other websites

The Website and/or Application may contain links to external sites not operated by us. We strongly advise you to review the privacy policy of these websites. We have no control over and assume no responsibility for external sites.

Children's Privacy

The Website and/or Application do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us.

Data subjects' rights according to GDPR

You have the right to:

• be informed about the collection and the use of your Personal data,
• access your Personal data and supplementary information,
• have your inaccurate Personal data rectified or completed,
• have your Personal data erased in certain circumstances (right to be forgotten),
• restrict Processing in certain circumstances,
• data portability,
• object to Processing in certain circumstances,
• not be subject to automated decision-making and profiling,
• withdraw your consent at any time,
• complain to the Supervisory authority, and
• be informed about any Personal data breach concerning your data.

Personal Data Breaches

We follow the provisions of the GDPR regarding the handling, reporting and documentation of Personal data breaches. When required, we will report breaches to the Swedish Authority for Privacy Protection within 72 hours.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. You are advised to review this page periodically for any changes. This policy is effective as of 08/10/2025.

Questions or complaints

If you have any questions or concerns, you are always welcomed to contact us:

Our contact person for Personal data matters

You also have the right to contact the Swedish Authority for Privacy Protection: