Boka demo


Thank you for visiting Zmash, an online Talent Attraction platform (the “Service”). Please read this Privacy Policy (the “Policy”) carefully, before you start using our Service. This Policy provides information regarding how the personal data collected about you is used.

The Service Zmash is owned and provided by Zmash AB which also is the Controller, with Swedish registration number 559128-2834, a company incorporated under the laws of Sweden and with its registered office located at Humlegårdsgatan 22, 114 46, Stockholm, Sweden. If you wish to contact us via e-mail, please do so to

We reserve the right to, at any time and of any reason, make amendments to this Policy. You will be notified by e-mail to your registered e-mail address. The amended Policy will also be published at (the “Site”). This privacy statement is effective as of May 7, 2018


Throughout this document, we may use certain words or phrases, and it is important that you understand the meaning of them. The following is a non-exhaustive list of definitions of words and phrases that are used in this Policy:

Zmash” “We” refers to our company Zmash AB; our Site; our Service; or a combination of all or some of the preceding definitions, depending on the context in which the word is used.

You” refers to you who use the Service on behalf of a legal entity who, for example, might be your employer.

The “Company” refers to the legal entity which you are representing, as an employee, consultant or similar


The Service includes functions for analyzing data and AI based conversations. You are always responsible for content you upload or otherwise make available. The Company is the controller for content and for personal data regarding the applicants.

By agree on content being uploaded to the Service, you warrant that you are either the owner of or holds a valid permission to such content from the appropriate right holder and that the content and your or your Company’s use thereof, is in no way a violation of any national or international legislation.

Personal Data

With “personal data”, we mean all information through which you directly or indirectly can be identified. For example: your name, your address, your civic registration number, your IP- address, your login information, your e-mail address and any other data through which you can be identified. All of this is called “personal data” in short.

When you sign up as a user of the Service, you will be asked to provide certain personal data such as your name, surname and e-mail address. 

We will furthermore collect some information automatically, both identifiable but also anonymized data to be able to analyze and improve our Service. Identifiable information that we collect automatically is your IP-address,

If you are invited to the Service by your Company, the Company will provide us with your name, surname and e-mail address in order for us to set up your account and send an invitation. We will furthermore automatically receive information and statistics about your use of the Service.

Legal Grounds for and Purpose of Processing

The legal grounds we have for processing the data you provide to us is our legitimate interest of upholding the Agreement in which we have entered with the Company and providing our Services in accordance with this Agreement.

For marketing purposes and to communicate important information about our systems or updates to our Service, we may occasionally send you emails. This is to tell you about new features of the Service, solicit your feedback or just keep you up to date with what’s going on with our products. We primarily use our various product blogs to communicate this type of information, so we expect to keep this type of communication to a minimum. If you do not wish to receive emails with direct marketing, you can opt out at any time by clicking the unsubscribe button in our email.

Information to Third Parties

We will not share your personal information with any third party besides what is written in this Privacy Policy. 

Your personal data will be visible to other users of the Service within your Company. We will furthermore share your personal data with our subcontractors in order for them to help us with the following:

In cases where we share personal data with a third party we remain responsible for our subcontractors’ processing of your personal data. We always make sure that our subcontractors provide sufficient safeguards and require them by contract to protect your personal data in accordance with this Privacy Policy, legal requirements. Our subcontractors have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use your personal data for any other purpose.

Transfer to Third Countries

We keep your personal data within the EU/EEA. We will take appropriate technological, organizational and legal measures to ensure that the level of security regarding personal information is the same as in the EU/EEA. This means ensuring that the receiver of information falls under a EU Commission issued adequacy decision pursuant to article 45 in the GDPR (Privacy-Shield compliant companies in the US included) or by using the EU Commission’s Standard Contractual Clauses.

Your Rights

We are currently building the structure that enables you to review and edit the personal information you have provided to us by logging on to your account on the Site and edit your user account. Although most changes or deletion occur immediately, information may still be stored in a web browser’s cache. We take no responsibility for stored information in your cache, or in other devices that may store information, and disclaim all liability of such. In addition, we may, from time to time, retain residual information about you in our backup and/or database. Until this feature has been put in place, please contact us at for reviews and changes to the information you have provided to us.

Under the General Data Protection Regulation (EU) 2016/679 (GDPR) you have the right to request information from us about the personal data that we process as a Controller, and one copy of such information free of charge. If you have doubts about the accuracy of the information we hold about you, please contact us. At your request, we shall correct any of your personal data that is found to be inaccurate, incomplete or misleading. To exercise any of these rights please contact us at Note however that the Company also may process the same information for which we are not responsible. If you have doubts about the accuracy of the information we hold about you have the right to request us to update the information. We might also update the same information if we consider that it contains factual errors or is out of date. You can request us to delete the personal data we have about you, for example if this data no longer is necessary for the purpose for which it was initially collected or if you believe that we have processed the data in an illegal manner. This also applies if you opt out from direct marketing from us. Please note that we might have to decline your request if we are legally obliged to keep the information or if the information is necessary to defend legal claims.

Furthermore, you have the right to request limitations of or object our processing of your personal information. Upon such request we might have to investigate the situation further prior to a decision. You always have the right though to opt out of direct marketing activities and request limitation of the processing we have based on legitimate interests.

If you believe that the information we hold about you is not being processed in according with this Privacy Policy or the GDPR you have the right to lodge a complaint against us with the Swedish Data Protection Authority (

Server Logs and Non-Personally Identifiable Information

Like most website operators, we collect non-personally identifying information that web browsers and servers typically make available, such as your browser type, language preference, referring site, and the date and time of each visitor request. We will collect and share statistics about such use of the Service and the Site in an aggregated and non-personally-identifiable manner. Our purpose for collecting such information is to better understand how our visitors and users use the Service and the Site and for marketing and advertising purposes. Such information is however used in an aggregated manner, and is never linked back to any personal data, unless to identify anyone using the Service or the Site in an unauthorized manner. Without a subpoena, voluntary compliance on the part of your internet service provider, or additional records from a third party, this information alone cannot usually be used to identify you.

Childrens Data

We have no reason to collect personal data from people who do not fall within our demographics. We, therefore, do not collect, or otherwise process, personal data from any individual under the age of 16.

Contact Details

Zmash AB, company registration no. 559128-2834
Visiting address: Humlegårdsgatan 22, 114 46 Stockholm
Stockholm, August, 2019