What data do we store, and why?

Technical solution

All the apps we develop are built on the same technical principle. We publish compiled apps that communicate securely with a database on our own server in Sweden. The database controls the app's features and content, and the client edits the content themselves in a content management system (CMS). Some settings and features are managed by OnSpotStory.

The database contains no information about the person using the app – only about the app's content.

GPS positioning

The apps are made for place-based stories, and they are built around an interactive map. GPS is built in so that users can see their own position on the map and get notifications about nearby places. That's why we recommend that users allow GPS positioning.

The position is not stored. It is only used locally on the phone to send notifications when the user approaches a stop, and it is never sent to our servers.

Open source

As far as possible we use established open source software and operating systems, on our own servers in Sweden. For statistics on how the apps are used we use Matomo, and that data is also stored on our own servers in Sweden.

Data protection

The apps require no login. We therefore store no personal data such as names or email addresses about the users.

The data that is recorded is about how the app is used – not who is using it. We don't use Google Analytics but Matomo on our own server. Since a complete IP address is personal data, only the first two parts of the IP address are recorded.

Data processor

We work with many municipalities and public organisations and sign data processing agreements with our clients. As a template we use the data processing agreement from the Swedish Association of Local Authorities and Regions (SKR).

Sub-processors

A sub-processor is someone who processes personal data on behalf of the data processor. A data processor may not engage a sub-processor without specific or general prior written authorisation from the data controller.

We don't work with any sub-processors.

GDPR on our website

On onspotstory.com, too, we record as little as possible. The website uses no cookies for tracking or marketing, and visitor statistics are collected with Matomo without cookies. Read more in our privacy policy and on the Cookies page.

Cyber security

All software is updated continuously. We use firewalls and alarm systems.

Access management

Only OnSpotStory employees have access to the computer environment. We don't engage any external consultants.

Operations and storage

All data is stored on our own redundant servers in secure data centres in Sweden. Backups are made daily, weekly and monthly to physically separate locations within Sweden, and we also use cold storage.

Support

A phone number for urgent support is available around the clock. Otherwise, support is open on weekdays from 9 am to 5 pm (Swedish time) by phone and email.