Privacy Policy
Last updated: 2026-10-20
This is an English translation of the Swedish original. If the versions differ, the Swedish version prevails.
Change log and version
| Version | Date | Change |
|---|---|---|
| 2.0 | 2026-10-20 | New policy. Replaces the previous privacy policy. Based on a review of the app, admin and the website on 19 October 2026. Clarifies when JOBBS is the controller and when JOBBS is a processor, and sets out retention periods, location and Bluetooth, BankID and personal identity numbers, JOBBS AI and all sub-processors. |
1. Short summary: the essentials in one minute
- JOBBS AB operates the JOBBS app, admin for our customers and the website jobbs.se.
- For your account in the JOBBS app and for the website, JOBBS itself is responsible for your data.
- When you shop, book or enter at a store, association or property owner that uses JOBBS, it is that store or association that is responsible for the data. JOBBS handles it on their behalf. Contact them first; we will help.
- We use BankID and personal identity numbers to know securely who enters unmanned premises and to check age.
- We use your location only if you turn on proximity unlocking (“You are near”) yourself or if the store requires location at entry.
- We never sell your personal data.
- You can always contact us at support@jobbs.se.
2. Who is responsible: different roles in different situations
The controller is the party that decides why and how data is used. A processor is a party that handles data on behalf of someone else and according to their instructions.
| Situation | Who is the controller? | JOBBS role | Who do you contact first? |
|---|---|---|---|
| You create, use or delete an account in the JOBBS app, including logging in with BankID | JOBBS AB | Controller | JOBBS |
| You shop, get a receipt, book, or have a key, subscription, punch card or gift card at a store, association or property owner | The store, association or property owner (“the merchant”) | Processor | The merchant. JOBBS will help. |
| You enter premises and are recorded in the entry log or customer log | The merchant | Processor | The merchant. JOBBS will help. |
| You send a troubleshooting log from the app to a merchant | The merchant receives the log. JOBBS is responsible for the app creating and sending it. | Controller for the function in the app, processor for the log held by the merchant | The merchant or JOBBS |
| You work for one of our customers and have an admin account | JOBBS AB | Controller | JOBBS |
| You use JOBBS AI in admin | JOBBS AB for usage statistics and for how the service is built | Controller | JOBBS |
| You visit jobbs.se or fill in our contact form | JOBBS AB. For collection via Meta Pixel, JOBBS and Meta are joint controllers. | Controller | JOBBS |
| You contact our support | JOBBS AB | Controller | JOBBS |
If you are a customer of a merchant: The merchant decides which data is needed, how long it is kept (within the limits set out below) and who at the merchant may see it. The merchant’s own privacy policy therefore also applies. If you contact JOBBS about such a matter, we will forward it to the merchant and help them answer you.
3. Contact: how to reach us
| Controller | JOBBS AB, corporate ID no. 559378-9083 |
| Postal address | Mellbygatan 9, 531 31 Lidköping |
| Email for privacy matters | support@jobbs.se |
| Data protection officer | JOBBS has not appointed a data protection officer. Contact us at support@jobbs.se. |
We respond to your request without undue delay and at the latest within one month. If the matter is unusually complex, the time may be extended by at most two months. In that case we will let you know within the first month.
4. What data we handle: by group
Under each group you can see which data is involved, where it comes from, why we use it, which legal basis we rely on and how long it is kept.
Legal bases in Article 6(1) of the General Data Protection Regulation (GDPR):
- Contract (b): needed to provide the service you have asked for.
- Legal obligation (c): required by law, for example the Swedish Bookkeeping Act (bokföringslagen).
- Legitimate interest (f): we have carried out a balancing test and concluded that our interest outweighs your interest in the data not being used. You can always object.
- Consent (a): you have actively said yes and can withdraw it at any time.
4.1 Users of the JOBBS app: JOBBS is the controller
| Data | Source | Why | Legal basis | How long |
|---|---|---|---|---|
| Name, phone number, email address | From you and from BankID | Create and administer your account, send receipts, codes and important messages | Contract | As long as you have the account. On deletion, see below. |
| Personal identity number and BankID data at login | BankID | Secure identification at login, age verification (see section 6) | Contract. Personal identity number under the Swedish Data Protection Act (dataskyddslagen), Chapter 3, Section 10. | Personal identity number as long as you have the account. BankID data from each login 12 months. |
| Login and account events | The app | Security, preventing misuse, troubleshooting | Legitimate interest | 12 months |
| Location | Your phone | Proximity unlocking, and showing the merchant where you were when you unlocked (see section 5) | Consent, which you give in your phone’s settings | Background location stays on the phone. Your position when you unlock is saved in the merchant’s entry log (see 4.2). |
| Bluetooth and motion data (proximity to JOBBS Lockswitch) | Your phone | Find the right lock, unlock, and tune proximity unlocking so the door does not open when someone just walks past (see section 5) | Contract | Signal strength and motion data at unlocking are saved in the merchant’s entry log (see 4.2). Events from locks and devices are kept for 90 days. |
| Notifications (push token) | Your phone | Send notifications about purchases, bookings and entry | Consent, which you give on your phone | As long as notifications are on and the account exists |
| Camera | Your phone | Scan barcodes in the app. The image is processed only on the phone with Scandit’s software. Only the scanned code is sent to us. | Contract | Not stored |
| Troubleshooting log | The app, when you choose to send it yourself | Help the merchant and JOBBS solve a problem you have | Contract (your request) | 30 days |
| Error log (crashes and errors, with information about the device) | The app, automatically | Find and fix errors in the app | Legitimate interest | 30 days |
| Support tickets | From you | Help you | Legitimate interest | 24 months after the ticket is closed |
When you delete your account: The deletion is scheduled and carried out 30 days after your request. During those 30 days you can change your mind. After that, the account is anonymised so that the data can no longer be linked to you. Data that the merchant must keep by law, for example receipts under the Swedish Bookkeeping Act, remains with the merchant for as long as the law requires. After the deletion we keep only a note that the account has been deleted and when.
4.2 Customers of stores, associations and property owners: JOBBS is a processor
Here JOBBS handles the data on behalf of the merchant. The merchant is the controller and decides the purposes and legal basis. The table shows what it normally looks like.
| Data | Source | Why | Normal legal basis for the merchant | How long |
|---|---|---|---|---|
| Purchases, receipts, purchase history | Your purchases | Complete the purchase, receipt, bookkeeping, complaints | Contract and legal obligation | 7 years under the Swedish Bookkeeping Act, Chapter 7, Section 2 |
| Bookings, keys, subscriptions, punch cards, gift cards | Your choices in the app or the merchant’s admin | Deliver the service | Contract | As long as the service is valid, then according to the merchant’s decision. Receipt parts 7 years. |
| Entry log: name, personal identity number, BankID evidence (IP address, device ID, signature and OCSP response), time, door, the phone’s position, Bluetooth signal and motion data at unlocking | BankID, the app and the lock | Secure identification, age verification, being able to show who entered in the event of e.g. theft, damage or a dispute | Contract and legitimate interest. Personal identity number under the Swedish Data Protection Act, Chapter 3, Section 10. | 12 months, unless the merchant has chosen 3, 6, 24 or 36 months. The BankID evidence is deleted after 90 days. Automatic deletion applies from 1 December 2026 at the latest. |
| Customer log (events linked to you as a customer) | The system | Customer service, security, follow-up | Legitimate interest | 730 days |
| Events from locks and devices | Locks and devices | Operations, security, troubleshooting | Legitimate interest | 90 days |
| Visitors: name and contact details when you register a visit | From you | Know who is on the premises | Legitimate interest | 12 months after the most recent visit |
| Booking guests: name and contact details | From the person making the booking | Let in guests who are part of a booking | Contract | 12 months after the booking |
| Invitations: name, phone number or email | The merchant | Give you a key or an account | Contract | 90 days if the invitation is not used |
| Messages: email and SMS text that the merchant has sent to you | The merchant | Receipts, bookings, codes and information | Contract and legitimate interest | 12 months |
| Expression of interest at entry with BankID: name, personal identity number, email and phone | BankID and from you | The merchant can contact you about, for example, membership | Legitimate interest | 24 months after the most recent contact |
| Door phone: phone number and call details | The call | Connect calls from the door phone | Contract or legitimate interest | The call is connected via Twilio. Details about the call (number, time and duration) are stored by Twilio according to Twilio’s terms. |
| Payment | Adyen or the merchant’s bank (Swish) | Take payment | Contract | JOBBS does not store card numbers. Payment references are kept with the receipt for 7 years. |
| Troubleshooting log that you send | The app | Solve your problem | Contract (your request) | 30 days |
What to do if you want to exercise your rights: Contact the merchant. You can also write to JOBBS, and we will forward your request and help the merchant respond.
4.3 Staff and admin users at our customers: JOBBS is the controller
| Data | Source | Why | Legal basis | How long |
|---|---|---|---|---|
| Name, email, phone, role, which customer you belong to | Your employer or you | Give you access to admin, contact in the customer relationship | Legitimate interest (to perform the contract with your employer) | As long as you have access, then 12 months |
| Logins to admin | Admin | Security, traceability, investigating errors and misuse | Legitimate interest | 24 months. Unlocks from admin are saved in the merchant’s entry log and follow its retention period. |
| Use of JOBBS AI, without the question text (see 4.5) | Admin | Statistics, improvement, cost control | Legitimate interest | At most 24 months |
| Billing and contract details for contact persons | Contracts and invoices | Invoicing and bookkeeping | Legal obligation | 7 years |
4.4 Website visitors and leads: JOBBS is the controller
| Data | Source | Why | Legal basis | How long |
|---|---|---|---|---|
| Technical information (IP address, browser, page views) via Cloudflare Web Analytics, without cookies | Your browser | Statistics on how the website is used. Loaded only if you have accepted Statistics. | Consent | Detailed data 7 days, then aggregated statistics for 6 months |
| Statistics and marketing via cookies and similar technologies (Google Analytics, Google Ads, Meta, LinkedIn) | Your browser | Measure visits, measure ads, show relevant ads | Consent | See the cookie policy |
| Contact form: name, email, phone, company, message | From you | Reply to you and follow up the deal in our CRM (Pipedrive) | Legitimate interest, or steps prior to entering into a contract | 24 months after the most recent contact, if no deal is made |
| Campaign data sent with the form (e.g. gclid, fbclid, li_fat_id, msclkid, UTM, landing page, referring page) | Your browser | Understand which campaign led to the contact | Consent (marketing). The data is stored and sent only if you have accepted marketing. | Same as the form data |
| Hashed email and phone to Google (Enhanced Conversions) and Meta (Conversions API), plus IP address and browser to Meta | The form | Measure whether ads lead to contacts | Consent (marketing) | At Google and Meta according to their terms, see the cookie policy |
4.5 JOBBS AI in admin: JOBBS is the controller
JOBBS AI is an assistant in admin that helps staff at our customers.
| Data | Source | Why | Legal basis | How long |
|---|---|---|---|---|
| Your question, the conversation, any images, which page in admin you are on and aggregated figures for the company without personal data (e.g. sales per day) | Admin | Give an answer | Legitimate interest | JOBBS does not store the conversation; it exists only in the browser window until you close it. If you send a support ticket from the chat, the conversation is included in the email. At Anthropic: deleted within 30 days. |
| Usage statistics (who, when, how much), without the question text | Admin | Cost control and improvement | Legitimate interest | At most 24 months |
| Unlocks made via JOBBS AI | Admin | Security and traceability | Legitimate interest | Same as the action log in 4.3 |
How we protect data in JOBBS AI:
- Questions and page content are sent to Anthropic, which provides the AI model. Our contracting party is Anthropic Ireland, Limited, and the data is processed in the USA. Anthropic may not train its models on the data and deletes it within 30 days. The transfer is protected by the European Commission’s standard contractual clauses.
- We ask users not to enter personal data in their questions.
- JOBBS AI is built so that the answers do not disclose personal data about individual customers.
- An unlock via JOBBS AI is carried out only after the user has confirmed it, and it is logged.
5. Location and Bluetooth in the JOBBS app: when and how
5.1 Location
The app asks for access to your location, including in the background, because proximity unlocking needs it. You decide yourself in your phone’s settings whether the app may use your location.
- Proximity unlocking (“You are near”). If you turn it on, the phone sets up virtual zones (geofences) around the premises you have access to. An iPhone can hold up to 20 zones and an Android phone up to 90. The zones are monitored on the phone. Your background location is not continuously sent to us.
- When you unlock. If you have given the app access to your location, the phone’s position is sent to JOBBS every time you unlock a door, and it is saved in the merchant’s entry log together with the entry. If the merchant requires it, the app also checks that you are on site before the door opens.
On Android, Google’s location services on the phone (Google Play Services) are used. JOBBS does not send any data about you to Google.
5.2 Bluetooth
The app uses Bluetooth to detect when you are near a JOBBS Lockswitch and to send the command that opens the door. We do not use Bluetooth to track where you go. When you unlock, the signal strength and the phone’s motion data are saved in the entry log, so that proximity unlocking can be tuned not to open when someone just walks past. Events from the lock are kept for 90 days.
5.3 How to turn it off
| What | How | What happens then |
|---|---|---|
| Proximity unlocking | Turn off “You are near” in the app’s settings | The zones are removed from the phone and the app stops using location in the background. You unlock manually. |
| Location permission, iPhone | Settings > Privacy & Security > Location Services > JOBBS | Proximity unlocking does not work. At merchants that require location, you cannot enter. |
| Location permission, Android | Settings > Apps > JOBBS > Permissions > Location | As above |
| Bluetooth | Turn off Bluetooth or the “Nearby devices” permission (Android) or “Bluetooth” (iPhone) | You cannot open doors with JOBBS Lockswitch via Bluetooth |
| Notifications | Your phone’s notification settings | You receive no notifications |
Turning something off does not affect data that has already been saved. If you want it deleted, see section 11.
6. BankID and personal identity numbers: why we need them
Many of the premises that use JOBBS are unmanned. The merchant must therefore be able to trust that the right person enters, that the person is of the right age and that it is possible afterwards to show who was there.
The following therefore applies:
- You log in and identify yourself with BankID. BankID is provided by Finansiell ID-Teknik BID AB and your bank. JOBBS has an agreement on BankID with a bank.
- At entry, a BankID evidence record is saved in the entry log: personal identity number, name, IP address, device ID, signature and the response from BankID’s verification service (OCSP). The evidence shows that it really was you who identified yourself.
Why personal identity numbers. Under the Swedish Data Protection Act (2018:218), Chapter 3, Section 10, personal identity numbers may be used without consent only when this is clearly justified having regard to the purpose, the importance of secure identification or some other considerable reason. We consider it clearly justified because:
- name and phone number are not enough to securely identify a person entering unmanned premises,
- age must be checkable securely before age-restricted goods are sold or premises with an age limit are opened,
- the merchant needs to be able to show who entered if something happens, for example theft, vandalism or a payment dispute.
How we limit the use:
- The personal identity number is shown masked to staff in admin.
- The personal identity number is not used for marketing.
- Only authorised staff at the merchant and JOBBS can access it, and only when needed.
7. Automated checks: what the computer decides
Some checks happen automatically, without a human being involved at the time:
| Check | What happens |
|---|---|
| Age limit | Entry or purchase is refused if your BankID-verified age is below the limit |
| Distance | Entry is refused if the merchant requires location and you are not close enough |
| Block | Entry is refused if the merchant has blocked you |
| Opening hours | Entry is refused outside the hours the merchant has set |
| Bluetooth unlocking | The door unlocks automatically when you have proximity unlocking on and are at the door |
We consider that these are not automated decisions that produce legal effects or similarly significantly affect you under Article 22 GDPR. A refusal applies only to that particular entry or purchase. We still tell you about the checks so that you understand how the service works.
If you think something went wrong: Contact the merchant. The merchant can make a manual assessment and, for example, lift a block or correct incorrect data. JOBBS will help if needed.
8. Children and age: rules for young users
- You must be at least 13 years old to create an account in the JOBBS app. This corresponds to the age limit in the Swedish Data Protection Act, Chapter 2, Section 4.
- The merchant can require your age to be verified with BankID for purchases of age-restricted goods and for entry to premises with an age limit.
- If we learn that someone under 13 has created an account, we delete the account.
- Are you a parent and believe your child under 13 has an account? Contact us.
9. Recipients and sub-processors: who we share with
We share data only with suppliers that are needed for the service to work. They may only use the data according to our instructions, and we have contracts with them. We never sell personal data.
On transfers outside the EU/EEA: When data is sent to a country outside the EU/EEA, it is protected in one of these ways:
- Adequacy decision: The European Commission has decided that the country has an equivalent level of protection (for example Switzerland and the United Kingdom).
- EU-US Data Privacy Framework (DPF): US companies that are certified.
- Standard contractual clauses (SCC): the European Commission’s contract templates from 2021.
- Binding corporate rules (BCR): rules within a group of companies approved by a supervisory authority.
9.1 The JOBBS app and admin
| Supplier | What they do | Country where data is processed | Transfer safeguard |
|---|---|---|---|
| Microsoft Ireland Operations Ltd (Azure) | Hosting, database, storage, monitoring (Application Insights) | Ireland (North Europe) | Within the EU. Microsoft follows the EU Data Boundary. If Microsoft Corporation in the USA gets access for support: DPF and SCC. |
| Adyen N.V. | Card payments | Netherlands | Within the EU |
| The merchant’s bank (Swish) | Swish payments | Sweden | Within the EU. The bank is an independent controller. |
| Finansiell ID-Teknik BID AB and JOBBS’s bank (BankID) | Identification | Sweden | Within the EU |
| Twilio Ireland Limited (for Twilio Inc.) | SMS and voice for the door phone | USA | DPF, binding corporate rules (BCR) and SCC 2021 |
| Twilio SendGrid | USA | DPF and SCC 2021 | |
| jsreport s.r.o. (jsreport online) | Creates receipts, reports and signs as PDF | Czech Republic, with cloud hosting at Amazon Web Services and MongoDB | Within the EU. The subcontractors are certified under the DPF. |
| Anthropic Ireland, Limited (for Anthropic PBC) | AI model for JOBBS AI | USA | SCC 2021 |
| Google LLC | Fonts in admin (Google Fonts, which sees your IP address) and the location service on Android phones. JOBBS does not send any data to Google from its servers. | USA | DPF |
| Volentio JSD Limited (jsDelivr) | Delivers the scanner in the web app via Cloudflare, Fastly and Gcore (sees your IP address) | United Kingdom and globally | Adequacy decision for the United Kingdom and the suppliers’ SCC |
| Scandit AG | Software for barcode scanning on the phone. The software sends usage data for licence checks: IP address, installation ID, device model and operating system. | Switzerland | Adequacy decision |
| Seam Labs, Inc. | Connection to Yale and August locks | USA | DPF |
| Openpath (Motorola Solutions, Inc.) | Connection to Openpath locks | USA | Motorola’s binding corporate rules (BCR) and SCC |
| Telcred AB | Access control system | Sweden | Within the EU |
| Raspberry Pi Ltd (Raspberry Pi Connect) | Remote access to controllers on the premises | United Kingdom | No personal data, only registration of the control boxes. |
Integrations that the merchant chooses to turn on. Data is shared only if the merchant has activated the integration:
| Supplier | What they do | Country | Safeguard |
|---|---|---|---|
| Specter | Business system for wholesalers: items, customers and orders | According to the merchant’s contract with the supplier | According to the merchant’s contract |
| Visma Retail (SmartStore) | Point of sale system | According to the merchant’s contract with the supplier | According to the merchant’s contract |
| SkiStar | The customer’s bookings and cards, for merchants that have the integration | According to the merchant’s contract with the supplier | According to the merchant’s contract |
| Pricer | Electronic shelf labels. Normally no personal data. | According to the merchant’s contract with the supplier | According to the merchant’s contract |
9.2 The website jobbs.se
| Supplier | What they do | Country | Safeguard |
|---|---|---|---|
| Pipedrive OÜ | CRM for leads and customers | EU (Frankfurt and Dublin) | Within the EU |
| Google Ireland Ltd / Google LLC | Google Analytics 4, Google Ads, Enhanced Conversions, YouTube | Ireland and USA | DPF |
| Meta Platforms Ireland Ltd / Meta Platforms, Inc. | Meta Pixel and Conversions API | Ireland and USA | DPF. Joint responsibility for the collection, see below. |
| LinkedIn Ireland Unlimited Company | LinkedIn Insight Tag | Ireland and USA | DPF and SCC |
| Cloudflare, Inc. | Security, delivery of the website, Web Analytics | USA and globally | DPF |
Joint responsibility with Meta. When we use Meta Pixel or Conversions API, JOBBS and Meta Platforms Ireland Ltd are joint controllers for the collection and transfer of the data to Meta (judgment of the Court of Justice of the European Union in case C-40/17, Fashion ID). Meta is independently responsible for what Meta then does with the data. We have a joint controller addendum with Meta (Meta Controller Addendum). You can exercise your rights with both JOBBS and Meta. For LinkedIn Insight Tag, LinkedIn Ireland processes the data on behalf of JOBBS according to LinkedIn’s terms for marketing services.
9.3 Other recipients
- The merchant you shop at or enter receives the data relating to your purchase, your booking and your entry.
- Authorities, for example the Swedish Police or the Swedish Tax Agency (Skatteverket), if required by law.
- Advisers, for example auditors and lawyers, who are bound by confidentiality.
- A buyer if JOBBS or part of the business is sold. You will be informed of this in advance.
10. Security: how we protect the data
- The service runs in Microsoft Azure in Ireland.
- Data is encrypted in transit and at rest.
- Access is controlled by role. Staff see only what they need for their work.
- Personal identity numbers are shown masked in admin.
- Unlocks and important actions are logged.
- We have data processing agreements with our suppliers and with the merchants.
- If a personal data breach occurs, we report it to the Swedish Authority for Privacy Protection (IMY) within 72 hours when required, and inform you if it may result in a high risk to you.
11. Your rights: what you can request
| Right | What it means |
|---|---|
| Access | Find out what data we hold about you and get a copy |
| Rectification | Have incorrect data corrected |
| Erasure | Have data deleted, unless we must keep it by law, for example under the Swedish Bookkeeping Act |
| Restriction | Have the use restricted while something is being investigated |
| Data portability | Receive data you have provided yourself in a machine-readable format, when the basis is contract or consent |
| Objection | Object to use based on legitimate interest. You can always object to direct marketing, and we will then stop. |
| Withdraw consent | Withdraw a consent at any time. This does not affect what has already happened. |
How to do it: Write to support@jobbs.se. We may need to ask you to confirm who you are, for example with BankID, so that we do not disclose data to the wrong person. It is free of charge.
If the data is handled on behalf of a merchant (section 4.2): Contact the merchant. If you write to us, we will forward your request and help the merchant respond within one month.
Delete your account: You can delete your account directly in the app. See section 4.1 for what happens.
12. Cookies: on the website
On jobbs.se we use cookies and similar technologies. Statistics and marketing are used only if you have consented. Read more in our cookie policy: jobbs.se/en/cookiepolicy. You can change your choice at any time via the Cookie settings link at the bottom of the website.
13. Changes: when the policy is updated
We update the policy when the service or the law changes. The date and the change are shown at the top under “Change log and version”. For major changes, we will notify you in the app or by email before the change takes effect.
14. Complaints: the Swedish Authority for Privacy Protection
We would like you to contact us first if you are dissatisfied. You also always have the right to lodge a complaint with the supervisory authority:
The Swedish Authority for Privacy Protection (IMY) Box 8114, 104 20 Stockholm imy.se