Travalytics AB ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and manage data in connection with our web-based surveys.

Definitions

• Respondent: an individual participating in a survey

• Client: an organisation that commissions a survey

• Employer: an organisation employing respondents (which may also be the client)

Purpose

We conduct surveys to understand travel behaviour and support the development of sustainable mobility solutions. When surveys are commissioned by employers or other organisations, the purpose is typically to improve mobility options and conditions for respondents.

What we collect

We collect information such as travel habits, commute distances, postal codes, workplace department or unit, and opinions about mobility. We do not collect names, email addresses, or other direct identifiers.

Although we do not collect direct identifiers, some responses — such as travel patterns, postal codes, or organisational unit — may constitute personal data under the General Data Protection Regulation (GDPR), particularly when combined.

How we use your data

Survey responses are used for analysis, research, and reporting. We only present results in aggregated form, where individuals cannot be identified. We apply methods such as aggregation and minimum group sizes (k-anonymity) to ensure that no individual can be singled out in published results.

Legal basis

When you participate in a survey, we process your responses based on your consent, which is collected at the start of the survey. You may withdraw your consent at any time; however, due to the anonymous nature of the data, we may not be able to identify and remove your specific responses after submission.

Where we process data in the context of our relationship with clients who commission surveys, we rely on our legitimate interest in understanding travel behaviour and delivering the commissioned analysis.

Data sharing

We may share survey data with the following categories of recipients:

• Clients who commission the survey, for the purpose of analysis and reporting

• Consultants or analysts engaged by the client or by us to carry out the analysis

We do not share raw response data with employers. Results shared with employers are aggregated and anonymised, subject to minimum group sizes to prevent identification of individuals.

We do not sell or share data for marketing purposes.

Storage and hosting

Survey data is stored using Supabase, a cloud-based database and hosting provider. Supabase acts as a data processor on our behalf under a Data Processing Agreement.

Data is stored on servers located within the European Union (EU). Supabase may use sub-processors (such as cloud infrastructure providers) to deliver its services; these sub-processors also operate within the EU. For details, refer to Supabase's own sub-processor documentation.

We ensure that appropriate technical and organisational measures are in place to protect the data, including secure storage, access controls, and encryption where applicable. Travalytics AB is the data controller and bears primary responsibility for how your data is processed.

Cookies and local storage

Our surveys do not use tracking cookies or third-party analytics. Limited use of browser local storage or session storage may occur for technical purposes (such as preserving your progress during a session) but is not used to identify you.

Data retention

We retain survey data for as long as it remains relevant for analysis, research, and longitudinal studies. As the data is collected anonymously and cannot be linked to individuals, extended retention poses minimal privacy risk. We periodically review stored data and delete or fully anonymise it when it is no longer needed. Data that has already been aggregated into published reports is retained separately and contains no individual-level information.

Anonymity and its limitations

Survey responses are not linked to direct identifiers, and we are generally not able to identify individual respondents after submission. When surveys use links tied to specific organisational units, responses are associated with that unit. In small units, this may increase the theoretical risk of re-identification; we mitigate this by enforcing minimum group sizes in all reporting.

Because we cannot identify individuals in the dataset, we may not be able to provide, correct, or delete specific individual responses upon request.

Your rights

Under GDPR, you have rights regarding your personal data, including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. Due to the anonymous nature of the data collected, these rights may be limited in practice, as explained above.

You also have the right to lodge a complaint with a supervisory authority. In Sweden, the relevant authority is: Integritetsskyddsmyndigheten (IMY), imy.se

Age restriction

Our surveys are intended for respondents aged 16 or older. We do not knowingly collect data from children under this age.

Contact Us

If you have any questions about this Privacy Policy or how we process your data, please contact:

Travalytics AB, Swedish organisation number 559527-2468
Raffinadgatan 2, 222 35 Lund, Sweden
hello@travalytics.io