EU/EEA & UK Privacy Supplement
Last updated: 1 June 2026
Data controller & supervisory authority
| Controller | Framtidsforum I&M AB, organisationsnummer 556406-9770, Hällbygatan 34 A, 752 28 Uppsala, Sweden |
| Contact | privacy@spreadsheetconverter.com |
Under the GDPR there is no general controller-registration requirement. Your supervisory authority is the Integritetsskyddsmyndigheten (IMY) in Sweden and, for UK users, the Information Commissioner's Office (ICO).
Legal bases for processing (GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Account identity, entitlement, audit log | Performance of a contract (Art. 6(1)(b)) |
| Conversion, cloud test/preview, publish-to-cloud | Performance of a contract (Art. 6(1)(b)) |
| Telemetry, security, abuse prevention | Legitimate interests (Art. 6(1)(f)) |
| Strictly-necessary authentication cookie | Performance of a contract / your request |
International transfer safeguard
As set out in the general policy, our servers are in the
United States, so the personal data we hold (your account
email and Microsoft Entra oid, plus workbook content during
conversion) is transferred to the US. For EU/EEA/UK users we rely on the
EU Standard Contractual Clauses (SCCs) — and, for UK data,
the UK International Data Transfer Addendum — as the
safeguard for that transfer, with appropriate technical and organisational
measures. You can request a copy of the relevant safeguards by emailing us.
(We do not collect or store your payment or card details — those are held
by the Merchant of Record, not by us.)
Your GDPR rights
You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. To exercise these, email privacy@spreadsheetconverter.com.
You also have the right to lodge a complaint with a supervisory authority: in Sweden the Integritetsskyddsmyndigheten (IMY) (imy.se), in the UK the Information Commissioner's Office (ICO) (ico.org.uk), or the authority in your own EU/EEA country.