Your data rights under the GDPR.

Who is responsible for your data

S.T. Swimm Tech Ltd., Daniel Frisch 3 St., Tel Aviv, Israel, is the controller of personal data collected through swimm.io and our services. Questions and requests: info@swimm.io.

What we collect, and why

• Details you give us: name, work email, company and role, when you book a call, request a document, take the self-assessment or contact us. Used to answer you, run the engagement and, with your consent or where we may rely on legitimate interests, send relevant updates.
• Website data collected automatically: device, browser, pages visited and approximate location, through cookies and similar technologies. Used to run and improve the site. See the cookie policy.
• Customer engagements: we work from code and schemas, never production data. A data processing agreement (DPA) with our subprocessor list comes with every engagement. Request the DPA.

Legal bases

We process personal data to perform a contract with you or your company, with your consent (for example marketing emails and non-essential cookies), for our legitimate interests in running and securing our business and services, and to meet legal obligations.

Your rights

• Access and portability: see the personal data we hold about you and, where applicable, receive it in a portable format.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data where we no longer need it.
• Restriction and objection: ask us to limit or stop processing, including for direct marketing, at any time.
• Withdraw consent: where processing relies on consent, withdraw it at any time without affecting earlier processing.
• Automated decisions: we make no decisions about you based solely on automated processing.
• Complain: lodge a complaint with your national data protection authority.

How to exercise them

Email info@swimm.io with your request. We may ask you to verify your identity, and we answer within one month. Marketing emails carry an unsubscribe link, and cookie choices can be changed at any time through cookie settings.

International transfers

Personal data collected in the EEA, the UK or Switzerland may be processed in countries without an adequacy decision, including Israel and the United States. Where required, we rely on European Commission Standard Contractual Clauses and the UK International Data Transfer Addendum.

Retention and security

We keep personal data only as long as needed for the purposes above or as the law requires. Swimm is SOC 2 and ISO 27001 certified. How your code and data are handled.