Integritet
Privacy Policy
1. Introduction
We are committed to protecting the privacy of our users and visitors. We therefore undertake to comply at all times with the terms of this Privacy Policy. This Privacy Policy describes your rights regarding the personal data we collect, how we use such data, and how we protect it.
This Privacy Policy applies to the use of the services provided through Kasello, a digital fundraising platform owned and provided by Kasello AB ("Kasello", "we", "our", "us"), Swedish reg. no. 559562-5327, a company incorporated under the laws of Sweden, with its registered office in Sweden.
If you represent a legal entity (such as a sports club, school, or organization), you are responsible for ensuring that your representatives, employees, coaches, and members are made aware of the contents of this Privacy Policy.
2. What is personal data?
For the purposes of this Privacy Policy, "Personal Data" means any information relating to an identified or identifiable natural person, such as name, phone number, email address, device identifiers, or other information that can directly or indirectly identify you.
3. When and what information do we process?
We collect and process personal data when you:
Create an account as a team administrator, organization administrator, or internal administrator
Participate as a member (e.g. a child or youth) using a participation code
Use Kasello's fundraising, QR, payment, or dashboard features
Contact us for support
Use our website or mobile application
Depending on your role, we may process the following categories of data:
Administrators (team / organization):
Name
Email address
Phone number
Role and organization affiliation
Login and authentication data
Delivery name and address provided when ordering products for a campaign
Members (children / youth):
Display name or nickname
Participation code / member identifier
Sales statistics and campaign activity
(Kasello minimizes the collection of personal data about children and does not require email or phone numbers for member participation.)
Buyers (purchasers):
name
email address and, where relevant, phone number
delivery address, where a physical product is purchased
order and transaction details, including the products purchased, the amount, the date, and the team and campaign the purchase relates to
Payment card and bank details are handled by Stripe and are not stored by Kasello (see section 5).
Technical and usage data:
Device information (device identifier, operating system)
IP address
Log and usage data
Analytics and error reports
How you use the app and website, such as which screens you open, which features you use and which steps you complete (for example creating a team, inviting members, starting a campaign or completing a sale)
An app instance identifier and your Kasello user ID, used to connect these events
Approximate location (country and region) derived from your IP address
Where you came from when you visited our website or installed the app, such as the ad, campaign or search term that led you to us
We do not collect your device's advertising identifier (IDFA on iOS or advertising ID on Android), and we do not send your name, email address or phone number to our analytics providers.
4. Purpose and legal basis for processing
We process personal data for the following purposes:
a) To provide and operate the service
Account creation and authentication
Campaign management
Sales tracking and statistics
QR code and payment flows
Legal basis: Performance of a contract and legitimate interest.
b) Customer support and service improvement
Responding to inquiries
Debugging, analytics, and feature improvements
Legal basis: Legitimate interest.
c) Product analytics and measuring our marketing
Understanding how the app and website are used, so we can improve onboarding, features and the marketplace
Measuring which of our ads and campaigns lead to people downloading the app and starting a campaign, so we can spend our marketing budget effectively
Legal basis: Legitimate interest. We use aggregated and pseudonymized data and do not use it to build advertising profiles of you. You can object to this processing at any time by contacting privacy@kasello.se.
d) Legal and regulatory compliance
Accounting
Fraud prevention
Compliance with applicable laws
Legal basis: Legal obligation.
5. Payments and third-party payment providers
Kasello facilitates fundraising payments through the third-party payment service provider Stripe.
Kasello does not store or process any payment card or bank information on its own servers. All payment transactions and sensitive payment data are handled directly by Stripe in accordance with Stripe's own Terms of Service and Privacy Policy.
Stripe may process payments using various payment methods made available through its platform. Kasello may receive limited transaction-related information (such as payment status, amount, and reference identifiers) solely for the purposes of campaign tracking, reporting, customer support, and accounting.
6. Sharing of data with third parties
We may share personal data with trusted third-party processors who process data on our behalf, such as:
Cloud hosting and database providers
Analytics and monitoring services, including Google Firebase and Google Analytics (Google Ireland Ltd / Google LLC)
Advertising platforms, such as Google Ads and Meta, which receive information that a visit, download or campaign start resulted from one of our ads, in order to measure the ads' effectiveness
Payment providers
Customer support tools
These providers are contractually bound to process personal data only in accordance with our instructions and applicable data protection laws.
Sharing with teams, clubs, and organizations
Kasello is a platform for teams and organizations, and certain personal data is therefore visible to the team and, where applicable, the organization your account is connected to.
If you use the Application as a team administrator, class administrator, or member, the following data may be visible to administrators of your team and to administrators of the club, school, or organization that your team belongs to:
your display name
your role and team affiliation
sales statistics and campaign activity generated through your use of the Application
This applies whether you joined using a code provided by the organization or your team was connected to an organization at a later time. Where a team is connected to an organization after you have started using the Application, the data described above becomes visible to that organization, including data generated before the connection was made.
Organizations that use Kasello's organization dashboard are contractually bound to use this data solely to administer their own activities. They may not transfer it to third parties or use it for unrelated purposes.
Purchases and buyer information
When you make a purchase in support of a team or organization, information about your purchase is made available to that team and to the club, school, or organization the team belongs to. This includes your name, contact details, the products purchased, the amount and date of the purchase, and delivery details where a physical product is to be delivered.
This is necessary in order for the team and organization to fulfil and follow up the sale, handle deliveries and enquiries, and account for the campaign. Organizations using Kasello's organization dashboard are contractually bound to use this data solely for those purposes and may not transfer it to third parties or use it for unrelated purposes.
Payment card and bank details are never shared with the team or organization and are handled solely by Stripe.
Where a team orders physical products for a campaign, the delivery name and address provided by the team or class administrator are shared with the supplier of those products for the sole purpose of delivering the order. Suppliers do not receive any information about individual buyers.
7. Transfer of data outside the EU/EEA
Personal data is primarily processed within the EU/EEA. If data is transferred outside the EU/EEA, Kasello ensures that such transfers comply with GDPR requirements, including the use of Standard Contractual Clauses or other approved safeguards.
Some of our providers, such as Google and Meta, may process data in the United States. These transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
8. Retention of data
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected.
Account data is retained while you are an active user
Inactive accounts may be deleted or anonymized
Certain data may be retained longer where required by law (e.g. accounting)
Data related to historical campaigns may be anonymized to preserve statistics without identifying individuals.
9. Your rights
Under GDPR, you have the right to:
Request access to your personal data
Request rectification or deletion
Object to or restrict processing
Request data portability
Lodge a complaint with a supervisory authority
You may manage much of your data directly within the Kasello app. To exercise your rights, please contact us at:
10. Account deletion
Users can delete their Kasello account directly within the app.
To delete your account:
Open the Kasello app
Navigate to your profile or settings
Tap "Radera konto"
Confirm the deletion
When an account is deleted, the following data is removed or anonymized:
Display name / nickname
Team membership
User profile data
Transaction and payment-related data may be retained where required for legal, accounting, or fraud prevention purposes. Such data will either be retained in accordance with applicable law or anonymized so that it can no longer be linked to an individual user.
If you are unable to access the app, you may request deletion by contacting: support@kasello.se
11. Security
We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.
All data is stored on secure servers with access controls and encryption where appropriate. While no system is 100% secure, we continuously work to maintain a high level of security.
12. Cookies, analytics and app usage data
Kasello uses cookies and similar technologies to:
Ensure basic functionality
Analyze usage and improve the service
Measure the effectiveness of our ads
On our website, analytics and advertising cookies are only used if you accept them in our cookie banner. You may also control or disable cookies through your browser settings. Some features of the service may not function properly if cookies are disabled.
In the Kasello app we use Google Firebase Analytics to understand how the app is used. Firebase stores an app instance identifier on your device and sends usage events (described in section 3) to Google, which processes them on our behalf. Analytics data is retained for 14 months and then deleted.
If you do not want your app usage to be included in our analytics, contact privacy@kasello.se and we will delete the analytics data linked to your account. We plan to add a setting in the app that lets you turn analytics off yourself.
13. Links to third-party services
Kasello may contain links to third-party websites or services. We are not responsible for the privacy practices of such third parties and encourage you to review their privacy policies before providing any personal data.
14. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time. Changes will be published within the app or on our website. Material changes will take effect no earlier than thirty (30) days after publication, unless required by law to apply immediately.