Privacy Policy

Privacy Policy

1. Purpose of this privacy policy

Your privacy is important to us at Bonanza Education AB (556395-0228) and Bonanzagraf AB (556575-4180), hereinafter collectively referred to as “Bonanza” and we are responsible for the personal information you provide to us. In order for you as a customer/visitor/user of our programs and services to feel safe, this privacy policy describes how Bonanza processes, stores and handles your personal data and your rights related to the processing of personal data.

2. Why do we process your personal data?

We process your personal data in particular in order to be able to fulfill our contract and our obligations towards you as a customer or user. We may also need to process the personal data as a result of a legal obligation, such as complying with requirements of applicable law. More detailed information on each individual processing and the legal basis for such processing is set out in Annex 1.

In some cases, we may also collect and process data about you who are not yet a customer but want to be contacted by us. How this data is processed is shown in the table Personal data processing.

Personal data may also be used to improve the user experience and functionality of our websites.

3. Who is responsible for the processing of personal data?

Bonanza is the data controller for the processing of the personal data that you (a.k.a.The user“) or your company (also called for”Customer“) leaves for Bonanza.

As data controller, Bonanza is responsible for ensuring that your personal data is processed securely and that the General Data Protection Regulation (GDPR) is complied with. We do not process sensitive personal data unless there is specific consent and reason for processing it.

Bonanza can be reached in the following ways:

4. What about this privacy policy?

This policy applies to users who visit and/or shop on the websites of the domains bonanza.se, bisgraf.com, bonanzaeducation.com or bonanzaeducation.dk. It also applies to the use of any of our programs, apps and/or services as well as our social media channels.

5. How does Bonanza access your personal data?

Bonanza primarily gains access to your personal data by providing it to Bonanza yourself. This can be done, for example, by providing the personal data by the Customer or the User on the respective website, by phone, e-mail, chat or directly at one of our trainings, seminars or fairs. We may also access personal data through public records, such as in the case of, but not limited to, credit checks.

6th. Type of data processing

The type of processing carried out by Bonanza is set out in Appendix 1, in the table Personal Data Processes. The table contains information on each type of data processing and the legal basis on which the processing is carried out.

7. Security

Bonanza protects your personal data through a combination of technical and organizational solutions. Access systems are required for access to all of Bonanza's systems that handle personal data. Bonanza employees and personal data processors and sub-processors shall comply with Bonanza's internal information security policy and no more employees than necessary have access to the data.

Personal data submitted to Bonanza without being requested will not be stored for longer than one month, the exception applies to spontaneous requests and support or contractual matters, which can be stored for up to two years.

8. Bonanza as a data processor

When Bonanza acts as a data processor for you as a user of any of our cloud-based services, a data processing agreement is required between you as a user and Bonanza.

Bonanza may, for support purposes and upon agreement, remotely control your computer to assist you as a user of our software.

9. Sub-contractors to Bonanza Education AB

Bonanza uses sub-processors for many of our services and cloud solutions. Bonanza undertakes to have data processing agreements with all sub-processors and that, in addition to complying with the GDPR, these sub-processors also comply with Bonanza's privacy, accessibility and security requirements applicable in Bonanza's internal information security policy. Contact information needed for direct mail may be processed by our agents.

10. How are cookies used?

Read about cookies here”

11. How is personal data used in direct marketing?

Bonanza uses direct marketing to provide relevant suggestions and offers for you as a user of any of Bonanza's products. We also use direct marketing to provide you with information on when major news in your product areas is available.

Bonanza complies with SWEDMA's ethical guidelines regarding direct marketing.

I'm 12. Storage, storage time and transmission of information

Bonanza and its sub-processors store their information on servers within the EU.

The retention period of personal data depends on the type of processing envisaged and, in some cases, that Bonanza has to store data in order to comply with legal requirements. Personal data will only be stored for as long as the storage fulfils a stated purpose. Details of the storage period can also be found in Appendix 1, the Personal Data Processing table.

The transfer of customer information is not made to third parties.

I'm 13. Changes to this Privacy Policy

Updates and changes to this privacy policy are posted on this page.

Your rights

As registered with Bonanza Education AB, you have the following rights:

Request for information and correction

You have the right to receive information about which personal data processing is carried out by us. We have collected these in Appendix 1, the Personal Data Processing table, below. The table shows, among other things, the purpose, the legal basis and the storage period. You have the right to request rectification if we have incorrect data recorded about you.

Request for register extracts

You have the right, free of charge, to request a register extract where you can see what personal data we process about you. You have the right to receive the extract from the register within one month of requesting it.

Withdraw consent

In the event that certain processing of your personal data takes place on the basis of your consent, you have the right to withdraw your consent to that processing at any time.

Right to erasure

You have the right to have your personal data deleted under the following conditions:

  • If the data is no longer needed for the purpose for which it was collected.
  • If the data is stored with your consent and you withdraw the consent.
  • If the processing is based on a balance of interests and there are no longer legitimate reasons that outweigh your interest.
  • If the personal data has been processed unlawfully.
  • If you object to processing for direct marketing purposes.

The right to have personal data erased does not apply if we are obliged by law (e.g. the Accounting Act) to retain the data.

Data portability

You have the right to data portability (the right to have personal data that we store about you moved, copied or transferred to another IT environment, e.g. to a competing service or platform) provided that the legal basis is consent or agreement and applies only to personal data relating to you, provided by yourself or generated by your actions/activities.

Restrict treatment

You also have the right to restrict parts of our processing of personal data in certain cases. Restricting processing means that the data is marked so that in the future it may only be processed for certain limited purposes. This right applies, among other things, when the data subject has requested correction and can then also request that the processing of personal data be restricted while the accuracy of the data is being investigated.

Complaint to the Privacy Protection Authority (IMY)

You have the right to lodge a complaint with the Privacy Protection Authority about the processing carried out by us. The Privacy Protection Authority is most easily reached by email to imy@imy.se.

If you wish to invoke any of your rights, please contact us by phone 08 445 70 40 or by email to info@bonanza.se.

Appendix 1, Processing of personal data

Personuppgiftsbehandling Syftet med behandlingen Kategorier av personuppgifter Kategorier av registrerade Rättslig grund Lagringstid
Köp av produkt eller tjänst via någon av våra kanaler/leverantörskontra Leverera varan/tjänsten Kontakt, adress- och faktureringsuppgifter Kunder Avtal Avtalstiden + 1 år
Test av produkt/tjänst (demo) Uppföljning av test av produkt Kontaktuppgifter Potentiella kunder Intresseavvägning 60 dagar
Besök på hemsidan Analys och uppföljning Cookie, IP-adress Hemsidesbesökare Intresseavvägning 1-365 dagar
Anmälan till gratis tjänster såsom seminarier, webbinarier Leverera varan/tjänsten Namn, epost, företagsnamn Kunder, Potentiella kunder Avtal Avtalstiden + 1 år
Direkt marknadsföring Erbjuda varor/tjänster Kontaktuppgifter Kunder, Potentiella kunder Intresseavvägning 3 år efter avtalet upphört resp. 3 år
Arbetssökande specifik tjänst Utvärdera och välja rätt person att rekrytera Namn, epost, gatukadress, ålder, cv, företag, plus alla till oss frivilligt angivna data Arbetssökande Intresseavvägning Under rekryteringsprocessen + ytterligare 2 år
Bearbetning av kunddata Leverans av tjänst Alla kategorier av personuppgifter Kunder Avtal Under avtalstiden + 90 dagar
Leverantörskontra Köpa vara/tjänst Faktureringsuppgifter Leverantörer Avtal, Rättslig förpliktelse 7 år
Kundärenden/Support Loggning i ärendehanteringssystem Kund och kontaktuppgifter Kunder Avtal Avtalstiden + 3 år
Program- och frågeserviceforum Support och självhjälp Kontaktuppgifter Kunder, Potentiella kunder Avtal + Intresseavvägning 3 år
Kontakt via telefon, chatt Underlag samt fullgörande för återkontakt, avtal Kontaktuppgifter, ljudinspelningar Alla kategorier Intresseavvägning + Avtal 2 år
Kontakt via mail, sociala media Underlag samt fullgörande för återkontakt, avtal Kontaktuppgifter: Namn, epostadress Alla kategorier Avtal + Intresseavvägning 5 år
Lagring av data i molnet För personuppgiftsansvariges räkning lagra data Alla kategorier av personuppgifter Kunder Avtal Under avtalstiden + 90 dagar
Backup av lagrade data i molnet/lokalt Säkerställa tillgång till data i händelse av avsiktlig eller oavsiktlig förlust Alla kategorier av personuppgifter Kunder Intresseavvägning 13 mån efter avtalets slut
Anmälan Bonanza-Konto Skapa ett Bonanza-Konto för att ge tillgång till tjänster som kräver Bonanza-Konto e-postadress, inloggningsuppgifter, kontaktuppgifter Kunder Avtal Under avtalstiden + 1 år
Adressuttag för direktreklam Marknadsföring Adressuppgifter Potentiella kunder Intresseavvägning 30 dagar
Anmälan till gratis tjänst såsom Bonanza-Nyhetsbrev Leverera vara/tjänst e-postadress Kunder Avtal Under avtalstid + 30 dagar

Personuppgiftsbehandling Syftet med behandlingen Kategorier av personuppgifter Kategorier av registrerade Rättslig grund Lagringstid
Överföring av kundfiler Support Alla uppgifter som ingår i programmen Kunder Avtal Under tid supportärendet är öppet + 7 dagar, max 12 mån
Fjärrstyrning av kunddator Support Uppgifter som ingår i programmen Kunder Avtal Ingen
Register över ingångna personuppgiftsbiträdesavtal Uppfylla bestämmelser i dataskyddsförordningen Kunduppgifter Kunder Rättslig förpliktelse Under avtalstiden + 1 år
Register för utnyttjande av rättigheter enligt GDPR Säkerställa att tider hålls och att alla begäranden behandlas Namn och kundnummer Kunder Rättslig förpliktelse 10 år
Potentiella kunder Spara kontaktuppgifter om intresserade av varor/tjänster Kontaktuppgifter Potentiella kunder Intresseavvägning 3 år
Personuppgiftsincidentshantering Lagring av personuppgifter för drabbade personer vid personuppgiftsincidenter Alla kategorier av personuppgifter Alla kategorier Rättslig förpliktelse 10 år
Foto, filmning, ljudupptagning av kunder Marknadsföring av produkter/tjänster Generella uppgifter, ytterligare personuppgifter Kunder Samtycke Under aktuell marknadsföring alternativt tills återkallat samtycke
Register för samtycke av foto, filmning, ljudupptagning av kunder Säkerställa rättslig grund för personuppgiftsbehandlingen Generella uppgifter Kunder Samtycke Under aktuell marknadsföring alternativt tills återkallat samtycke
Loggning av nedladdning av filer Leverera enligt avtal Kunduppgifter Kunder Avtal 6 månader efter nedladdning
Recension av produkter på hemsidan Visa vem som lämnat recensionen Namn etc. Kunder Intresseavvägning 5 år

Appendix 2, Cookies

What is a cookie?

A cookie is a small text-based data file that a web server asks to save in your browser. By generally sending the content of the cookie back with each request to the relevant website, it is possible for the server to keep track of the visitor's preferences, behaviour or identity (to the extent known). Cookies act as an ID and make the website work in the best possible way.

Different types of cookies

There are three types of cookies and all of them are used on Bonanza's main website, as well as our application websites; bisgraf.com, etc.

The first type, known as a Permanent Cookie, saves a file that remains on the visitor's computer. For example, it is used to ensure that you remain logged in even if you change pages, that a product you have added to the cart will remain in your shopping cart during your session, and that the website remembers whether you have said yes or no to any type of cookie in the past.

The second type called Session Cookie. While a visitor is on a web page, it is temporarily stored in the memory of the visitor's computer. Session Cookies disappear when you close your browser.

The Bonanza website also uses so-called third party cookies. The purpose of third-party cookies is usually to compile statistics on visitors' browsing habits or to obtain information for targeted marketing on other websites, e.g. through digital advertising networks. For third party cookies, Bonanza Education AB is not responsible for personal data.

If you do not want to receive cookies, you can change your cookie settings in your browser, and you can also block cookies. Please note that if you block cookies, you will not be able to use all features of Bonanza's website.

How are cookies used on Bonanza's websites?

Cookies are stored on your computer to save your shopping basket in connection with purchases on the website. Cookies are also used to provide you with a personalized experience on our website and to make the website work in the best possible way.

On the Bonanza website, cookies are used to improve the experience on the website in the following ways:

  • Ensures that you only need to log in once and not for every page that you visit.
  • Controls how the site is used by checking traffic patterns. In this way, we can design the page to give you the best experience as a user.
  • Saves down what you shop in a shopping cart.
  • Customize our services so that you only receive advertising that is relevant to you.
  • Collects and analyzes behavioral data based on the use of the website and services in order to improve the user experience and also enable personalized communication and messages to the user.


Cookies and processing of personal data

When you visit bonanza.se or app.bisgraf.com, personal data is collected through cookies for various purposes and these processes are governed by the EU Data Protection Regulation GDPR and the Swedish Data Protection Act. For more information on the processing of personal data read our personal data policy.

About interest-based advertising

The European Interactive Digital Advertising Alliance (EDAA) is a non-profit organisation responsible for self-regulation for Online Behavioural Advertising (OBA) or in Swedish Interest-Based Advertising across Europe.

EDAA has developed the Your Online Choices website (the text is in Swedish) that gives you a detailed explanation of how interest-based advertising works and your choices. You are also given the option to disable interest-based advertising.

Contact us!

We help you develop your employees and your business. When more people gain in-depth knowledge of how business and profitability are related, the result will be affected in the right direction.

Want to hear more about how we can help you?
Contact us and we will tell you more.

Thank you for your message, we will get back to you as soon as we can!
Oops! Something went wrong when the form was submitted.