Privacy Policy
2026.09.23
1. Introduction
Drifter World AB values your privacy. This Privacy Policy explains how we process your personal data and the rights you have in relation to our processing of your personal data.
This Privacy Policy is addressed to you if you use any of our services, including our Drifter AI Sensor System parking services, and/or communicate with us.
In this Privacy Policy, we explain what personal data Drifter World collects from you, why Drifter World collects such personal data, and how Drifter World uses your personal data in connection with the use of the Services, Drifter World’s mobile application (the “Application”) or Drifter World’s website (the “Website”), so that you can exercise your rights.
Drifter World processes personal data in accordance with applicable data protection legislation. Unless otherwise stated in this Privacy Policy, Drifter World is the controller for the processing of personal data. Personal data means information that can be used to identify a natural person.
Drifter World provides the Services to both private customers (consumers, B2C) and business customers whose employees use the Services (B2B). This Privacy Policy applies to both types of customers.
Drifter World processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “General Data Protection Regulation” or “GDPR”). In this policy, we use the same definitions as in Article 4 GDPR.
If you have any questions regarding our processing of your personal data or if you wish to exercise any of your rights in relation to our processing of your personal data, you are welcome to contact us.
The data controller is:
Drifter World AB
Company registration number: 556982-8600
Importgatan 12 A
422 46 Hisings Backa
Sweden
Email: [email protected]
2. Sources of personal data
2.1 Personal data collected from you
The personal data that may be processed primarily concerns personal data that you provide to Drifter World, directly or indirectly. The specific personal data processed is described in more detail in Section 3 below. We process personal data that you provide to us, for example when you:
• register an account with Drifter World
• use our parking services
• use our Application or Website• contact Drifter World
Personal data may be processed temporarily to create anonymised statistics. The data is anonymised immediately and no personal data is retained.
2.2 Do you have to provide personal data to us?
We must process some of your personal data in order to enter into and perform our agreement with you, or to comply with requirements under legislation or other regulations. If you do not provide certain personal data to us, you will, for example, not be able to purchase parking permits from us. You can read more about which personal data you must provide in the sections below, where the legal basis for our processing is stated.
2.3 Who may have access to your personal data?
• IT suppliers and technical service providers
• Payment service providers and payment intermediaries in connection with payments
• Providers of invoicing and debt collection services
• Banks and insurance companies, where relevant
• Providers of camera-based systems (ANPR) for parking management
• Providers of vehicle register information
• Parking operators and partners to the extent required to provide the service
• Authorities and courts where required by law or in connection with legal claims
We and the parties with whom we share your personal data process your personal data only within the EU/EEA. For more information about the recipients that may have access to your personal data, please contact us.
2.4 Personal data from information service providers
We process personal data about you obtained from other sources in accordance with Article 14 GDPR, which we may collect from contracted companies that hold vehicle registers in order to process payment.
2.5 Personal data from credit reference agencies
If you apply to pay by invoice, we may request a credit report from a credit reference agency.
2.6 Personal data from acquired companies
When the Drifter World Group acquires companies, personal data may be processed in connection with the transfer and migration of customer databases from the acquired companies to the Drifter World Group, based on our legitimate interest in acquiring and integrating companies into the Drifter World Group.
2.7 Personal data from public and private operators
We may collect personal data from public and private parking operators, such as municipalities, railway stations, airports, hospitals and universities. They provide us with details of your parking transactions when you have chosen our Services, so that we can process your transactions accordingly. This information consists of your vehicle registration number, where required for the parking location, the parking fee, and the start and end time of the parking session.
2.8 Personal data from parking enforcement
We may collect personal data from parking enforcement providers, such as municipalities, private parking operators and their enforcement partners, for the purpose of checking parking in accordance with applicable parking regulations. This information consists of your vehicle registration number, where required for the parking location, the parking fee, and the start and end time of the parking period.
2.9 Personal data from automatic payment partners
We may collect personal data from automatic payment partners so that you can pay automatically after a parking transaction based on camera-based vehicle identification (ANPR – Automatic Number Plate Recognition). We receive this information only if you have registered for such a payment option via the Application, the Website or on site.
2.10 Personal data from the public and private sectors
We may collect personal data from our customers in the public or private sector that use our Services to facilitate parking for their employees. If, as an employee, you are part of such an arrangement, we may receive your name or employee number, email address, telephone number and vehicle registration number from your employer.
3. Purposes and legal basis for processing personal data
3.1 Provision of services
Drifter World processes personal data in order to provide parking services and related functions.
Personal data processed when registering an account
Identity data
First name, last name, customer number, personal identity number, vehicle registration number
Contact details
Postal address, email address, telephone number, mobile telephone number
Payment details
Payment method and related information: IBAN, BIC, account details, Swish number
Legal basis for processing
Contract. When you register an account with Drifter World, Drifter World will process the personal data necessary to fulfil its obligations to you under the terms and conditions for the Services.
When you park in an area where Automatic Number Plate Recognition (ANPR) is used, your vehicle registration number is automatically recorded by cameras upon entry and exit. Cameras may also read registration numbers bay by bay within the parking area to identify parked vehicles. The processing is carried out to administer the parking and is necessary to provide the parking service.
Your personal identity number may be processed where necessary to enable invoice payment at your request and, in that case, to ensure secure identification of you.
Retention period
The data is processed both when handling your matter and in order to provide the Services. Personal data is retained while your account is active (36 months) and/or for as long as a parking permit is valid. After this period, we delete your account information, except for personal data that we must retain by law or for our legitimate interests in establishing, exercising or defending legal claims in accordance with this Privacy Policy.
3.2 Provision of services
Drifter World processes your personal data in order to provide the Services. If you have allowed the Application to access location services, Drifter World processes information about the geographical position of your mobile phone for the same purpose. If you apply to become an invoice customer, we process your personal data in order to carry out a credit check.
Personal data processed
Identity data
First name, last name, customer number, personal identity number, vehicle registration number
Contact details
Postal address, email address, telephone number, mobile telephone number
Parking data
Start and stop time and area code for parking
Transaction data
Parking fee paid and fees for the Services
Technical data
The device used and the mobile phone’s unique device ID
Location information
Information about where you are at a particular time based on the mobile phone’s position, starting position, selected destination and route.
Legal basis for processing
Contract (Art. 6(1)(b) GDPR). Processing of the personal data is necessary to perform the agreement for the Services with you, to manage your account and to contact you within the scope of the agreement.
Consent
Where processing of location information is not necessary for the relevant service, the processing is based on your consent, which you provide by enabling location services for the Application on your mobile phone. You may withdraw your consent to Drifter World collecting, using and sharing such location information at any time by disabling the “allow access to location information” function on your mobile phone.
Retention period
Personal data is retained for 36 months if the user has not been active with our Services.
3.3 Marketing communications and offers
Drifter World may process personal data in order to communicate with you about our Services and to send offers or newsletters. In accordance with the Swedish Marketing Act (2008:486), we may market our goods and services digitally to our existing customers based on the legitimate interest of promoting our business. You have the right to unsubscribe from our email communications at any time by following the instructions in the email. If you no longer wish to receive notifications from the Application, you can change the settings directly in the Application. Drifter World ensures that marketing directed to you complies with applicable laws, regulations, codes of conduct and ethical marketing guidelines.
Personal data
Identity data
First name, last name, customer number, personal identity number, vehicle registration number
Contact details
Postal address, email address, telephone number
Parking data
Start and stop time and area code for parking
Transaction data
Parking fee paid and fees for the Services
Technical data
Device used and the mobile phone’s unique device ID
Financial information
Account number
Communication
Information about your question and our response
Legal basis for processing
Legitimate interest (Art. 6(1)(f) GDPR). Processing of personal data is necessary for Drifter World’s legitimate interest in communicating with you regarding the Services and providing you with offers within our existing customer relationship. You have the right to object to such processing at any time, including processing for direct marketing.
Retention period
We retain your data until your question has been answered and we have concluded our communication, or until you object to our processing. Social media posts are retained until you choose to delete them yourself or object to the processing.
3.4 Conducting surveys
Drifter World processes your personal data in order to conduct surveys about Drifter World, the Application and the Services, for example by requesting feedback and reviews via the Application and email. Please bear in mind that you should not share personal data when providing feedback in free-text fields. Where this is unavoidable, please do not share more personal data than necessary when providing the requested feedback or review.
Personal data
Identity data
First name, middle name, last name, customer number, personal identity number, vehicle registration number
Contact details
Postal address, email address, telephone number, mobile telephone number
Communication
Information about your question and our response
Legal basis for processing
Balancing of interests. Processing of personal data is necessary for Drifter World’s legitimate interest in conducting surveys.
Retention period
The data is processed for this purpose for three (3) months from the date of the survey. Reports that do not contain personal data may be retained indefinitely.
3.5 Monitoring and evaluation
Drifter World may process personal data to produce statistics and analyses of the Services. The data is anonymised immediately and no personal data is retained.
Personal data
User ID, vehicle registration number, parking and session data, and technical data (device ID, device type, operating system, IP address). The personal data is anonymised immediately upon storage for analytical and statistical purposes and thereafter no longer constitutes personal data within the meaning of the GDPR. Personal data linked to payment transactions is not processed for monitoring and evaluation under this section, but is covered by Section 3.2 (Provision of the Services) and Section 3.6 (Legal obligations).
Legal basis
Legitimate interest (Art. 6(1)(f) GDPR). Processing of the personal data is necessary for Drifter World’s legitimate interest in monitoring and evaluating the Services, the Website, the Application and interactions with you.
Retention period
Personal data processed for this purpose is retained for as long as necessary to fulfil the purpose of monitoring and evaluation through, for example, reports and preparation of aggregated statistics. Such statistics do not contain personal data and will generally be retained indefinitely.
3.6 Compliance with legal obligations
Drifter World processes personal data to comply with legal obligations such as bookkeeping and accounting requirements.
Personal data
Identity data
First name, last name, customer number, vehicle registration number
Contact details
Postal address, email address, telephone number, mobile telephone number
Parking data
Start and stop time and area code for parking
Transaction data
Parking fee paid and fees for the Services
Technical data
The device used and the mobile phone’s unique device ID
Communication
Information about your question and our response
Legal basis
Legal obligation (Art. 6(1)(c) GDPR). Processing is necessary for Drifter World to comply with legal obligations under the Swedish Accounting Act or other applicable regulations.
Retention period
We retain your data for seven (7) to eight (8) years in accordance with the Swedish Accounting Act.
4. Security
Drifter World takes the security of your personal data very seriously. Drifter World implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration or destruction, in accordance with Article 32 GDPR. Access to information is restricted in various ways (for example through user authorisation and password requirements, which are granted only to employees who need access to such information to perform their duties). Other security measures include encryption, firewalls, and physical limitations and restrictions on access to buildings and files.
5. Recipients of personal data
Personal data may be shared with the following recipients:
- Our IT suppliers that process personal data on our behalf as processors
- Subcontractors that process personal data on our behalf as processors
- Authorities and courts where we have a legal obligation to do so or where we have a legal claim
- Banks in connection with entering into an agreement with us and managing your payments
- Insurance companies in the event of an insurance matter
All processing takes place within the EU/EEA. If you have any questions about how we share your personal data, for example the legal basis for the sharing or which suppliers we share your personal data with, or if you would like a copy of the appropriate safeguards we have implemented, please contact us using the contact details stated above.
5.1 Parking operators
We may share personal data with municipal and private parking operators that use Drifter’s Services so that they can provide the Services in their areas, check ongoing parking sessions and reconcile completed parking sessions. The parking operator may also process anonymised location information for statistical purposes; such anonymised information does not constitute personal data within the meaning of the GDPR.
Personal data
Identity data
Vehicle registration number, customer number
Parking data
Start and stop time and area code for parking
Transaction data
Parking fee paid and fees for the Services
Legal basis for the transfer
Contract (Art. 6(1)(b) GDPR). Processing is necessary for Drifter World to fulfil its obligations to you and provide the parking service in the parking operator’s area.
Legitimate interest (Art. 6(1)(f) GDPR). The transfer is necessary for the parking operator’s legitimate interest in checking ongoing parking and reconciling parking in its area.
Retention period
The personal data is processed for the duration of the parking session and for the time required to carry out reconciliation and checks. Thereafter, the data is retained only to the extent required under the Swedish Accounting Act (up to seven (7) years).
5.2 Payment recipients and payment service providers
When paying by invoice, personal data is shared with providers of invoice payment and any debt collection services so that we can fulfil our obligations to you under the terms and conditions for the Services when invoicing is used as the payment method.
When payment and connection are made through a leasing company, personal data and information about your parking sessions are shared with the leasing company in order to process payment in connection with your vehicle leased through the leasing company.
Personal data may include:
Identity data
First name, last name, customer number, personal identity number, mobile telephone number, vehicle registration number
Contact details
Postal address, email address, telephone number, mobile telephone number
Parking data
Start and stop time and area code for parking
Transaction data
Parking fee paid and fees for the Services
Legal basis for the transfer
Contract. Processing of the personal data is necessary for Drifter World to fulfil its obligations to you under the terms and conditions for the Services. Personal identity numbers are processed to ensure secure identification of you.
Retention period
We retain your data until payment has been completed. If required for bookkeeping purposes or in a warranty matter, the data is retained for seven (7) years after the end of the calendar year in which the financial year ended, in accordance with the Swedish Accounting Act.
For card payments or digital payments (e.g. Apple Pay and MobilePay), we share only the invoice number and amount in order to process the payment.
5.3 Service providers
In order to fulfil the purposes of processing your personal data, Drifter World may share personal data with service providers. These service providers provide Drifter World with services including information services, telephony services (PSMS), support services and IT services, such as marketing, support, operations, improvement, development and services for managing mailings. These service providers may process your personal data only in accordance with Drifter World’s explicit instructions and may not use your personal data for their own purposes. They are also required by law and contract to protect your personal data.
5.4 Other recipients
Personal data may be shared with:
Authorities
Purpose: We share your personal data with authorities if we have a legal obligation to do so, to establish, exercise or defend legal claims, or to cooperate with authorities.
Legal basis: Processing is necessary to comply with legal obligations or for Drifter World’s legitimate interests. Specifically, these legitimate interests consist of establishing, exercising or defending legal claims, or cooperating with authorities.
Courts, external advisers & counterparties
Purpose: In connection with a dispute, we may transfer personal data to other parties in order to establish, exercise or defend legal claims.
Legal basis: Processing is necessary for our legitimate interest in establishing, exercising and defending legal claims.
Law enforcement authorities, e.g. the police
Purpose: We may share personal data with law enforcement authorities, e.g. the Police, if we are required by law to disclose your personal data, to contribute to an ongoing criminal investigation, or to establish, exercise or defend legal claims.
Legal basis: Processing is necessary to comply with legal obligations or for our legitimate interest in contributing to an ongoing criminal investigation upon request, or in establishing, exercising or defending legal claims.
Potential buyers & sellers
Purpose: We may share information with potential buyers and sellers if we were to sell all or part of the business or in connection with a merger.
Legal basis: Processing is necessary for our legitimate interest in carrying out the disposal or merger.
6. Where is my personal data processed?
Drifter World and our suppliers process personal data only within the EU/EEA. If personal data were to be processed outside the EU/EEA, Drifter World will ensure that appropriate safeguards are implemented in accordance with the GDPR, for example by using the European Commission’s Standard Contractual Clauses (Art. 46 GDPR) or another lawful transfer mechanism. You may contact us for more information about such safeguards.
7. Cookies
Drifter World uses cookies and similar technologies to optimise the Services, for statistical evaluation, analysis and marketing. A cookie is a small text file stored on your computer, mobile device or other terminal that enables the device to be identified. Cookies help Drifter World adapt, for example, the Application and the Website to your needs as a user of the Services.
We use the following categories of cookies:
- Necessary cookies – required for the Website and Application to function technically. Legal basis: legitimate interest.
- Functional cookies – used to improve your user experience, for example by remembering your choices and settings. Legal basis: your consent.
- Analytics cookies – used to collect statistics and analyse how the Services are used. Legal basis: your consent.
- Marketing cookies – used for targeted marketing and advertising. Legal basis: your consent.
You can change your cookie settings at any time via our cookie banner on the Website or through your browser settings. If you decline non-essential cookies, certain functions on the Website or in the Application may be limited.
8. Your rights
Under the General Data Protection Regulation, you have the following rights.
As a data subject, you have rights in relation to our processing of your personal data. You can exercise your rights primarily by contacting Drifter World’s customer service or by contacting the Swedish data protection supervisory authority, the Swedish Authority for Privacy Protection (IMY). Contact details are provided below.
8.1 Right of access
You have the right to request information about the personal data we process about you and to request access to or a copy of the personal data we process about you, i.e. a data subject access request. Article 15 GDPR. A copy can be requested through our customer service.
Some information we have registered about you can be viewed by logging into your user account in the Application and on the Website.
8.2 Right to rectification
If personal data about you processed by Drifter World is inaccurate or incomplete, you have the right to request rectification of the personal data from Drifter World. Some of the personal data we store about you is available by logging into your personal account in the Application or on the Website.
8.3 Right to erasure
Under certain circumstances, you have the right to request erasure of your personal data if the processing is no longer relevant in relation to the purpose for which the data was collected or if you withdraw your consent.
Article 17 GDPR. This does not apply if, for example, we are required by law to retain the personal data.
8.4 Right to restriction of processing
You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. However, if you request restriction of processing, this may mean that Drifter World cannot provide certain Services to you during the period in which processing is restricted. Article 18 GDPR.
8.5 Right to data portability
If you have given your consent or if we base the processing on a contract with you, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller, or to have us assist in transmitting the data to another controller where technically feasible. Article 20 GDPR.
8.6 Withdrawal of consent
Where processing is based on your consent, you have the right to withdraw your consent at any time. To do so, please contact our customer service. Please note that withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
8.7 Right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY)
If you have any complaints about Drifter World’s processing of personal data, please contact us so that we can investigate the matter. You also have the right to lodge a complaint with a supervisory authority. The supervisory authority in Sweden is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). Its contact information is available at: https://www.imy.se/
9. Changes to the Privacy Policy
Drifter World may amend this Privacy Policy from time to time. If changes are made to Drifter World’s Privacy Policy that change the way Drifter World processes your personal data, for example by collecting additional personal data for stated purposes or processing personal data for new purposes, Drifter World will notify you of such changes via, for example, the Website, the Application or email. Drifter World recommends that you regularly review Drifter World’s Privacy Policy for the latest information about how Drifter World processes your personal data.
10. Contact information
If you have questions or comments regarding the Drifter World Privacy Policy, you can contact Drifter World’s customer service at [email protected]
Drifter World AB
Importgatan 12 A
422 46 Hisings Backa
Sverige
Email address of the Data Protection Officer: [email protected]
Senast uppdaterad: 2026-04-17