GDPR

Afactor's processing of your personal data

Afactor is committed to protecting your privacy and protecting the personal data we process about you. All processing of personal data takes place in accordance with the General Data Protection Regulation and other applicable data protection legislation. The following describes how we collect, process and share your personal data in connection with the administration of the contractual relationship that exists between the company that you represent and Afactor.

What personal data will be processed?

Afactor collects and processes the following data; name, telephone number, address, e-mail address, title, social security number of signatories, social security number and credit report as well as any additional information that may be provided by you in connection with communication with us (your "personal data"). In certain situations, we may also process personal data regarding, for example, circumstances or data that is relevant to our business relationship.

Why do we process your personal data?

Afactor processes your personal data for the purpose of administering our business relationship (including to ensure fulfillment of commitments, for handling invoices, for follow-up on deliveries, etc.) We may also process your personal data in order to send you news about our business or invitations to events (including to administer such events, e.g. in terms of participants, food and food preferences).

Where do we get personal data from?

The personal data is collected directly from you. Data may also be collected from your employer. In the case of credit checks, information is collected from credit reference agencies. Afactor may also update the personal data to ensure that Afactor does not process outdated personal data about you.

Who has access to your personal data?

We have taken appropriate technical and organisational security measures to protect your personal data against loss and unauthorised access, among other things. Only people at Afactor have access to your personal data and these will only be processed in accordance with the purposes above.

We may share your personal data with our suppliers and other partners who perform services on our behalf. The personal data you provide to us may primarily be shared with our IT suppliers, to maintain and maintain our IT systems, and, depending on our business relationship, with our auditors and our bank.

How long is your personal data stored?

Your personal data will be stored and processed by us until it is no longer necessary with regard to the purpose of the processing, unless there are special requirements in legislation that require the data to be stored longer.

The data needed for our accounting (e.g. all orders, invoices and payments) and tax bases must be kept for at least seven years by law. Note that some data is stored for longer, e.g. data on invoices is stored for follow-up purposes longer than seven years. Otherwise, data is generally stored until we no longer have a business relationship with the company you represent, or until you no longer represent this company. Personal data that is processed to send you news about our business or invitations to events is stored for as long as you continue to be a contact person at the company you represent. Personal data processed for the purpose of administering events will be deleted no later than three months after the end of the event.

What is Afactor's right to process your personal data?

We process your personal data for the purpose of managing our business relationship in order for us to be able to fulfil the agreement or agreement that is the basis of our business relationship. Such processing that is not directly linked to the performance of the agreement or agreement that is the basis of our business relationship is done on the basis of a so-called balancing of interests. This includes processing your personal data in order to be able to contact you, send you news or invitations to events. Afactor believes that it has the right to process your personal data because the processing is necessary for the purposes of Afactor's legitimate interests.

This is how we thought

Afactor's legitimate interest in this case is to be able to contact you, maintain the business relationship that has been created and maintain a continued good relationship with you by, for example, sending you news or invitations to events. Afactor has weighed its legitimate interest against the possible violation of privacy that Afactor's processing could entail. Afactor makes the assessment that the risk of privacy violation is limited because contact persons in their professional role should be able to expect that certain data is processed for the above-mentioned purposes. The personal data that is processed cannot be considered to be particularly privacy-sensitive personal data. The personal data that is processed is also limited to what is necessary to fulfil the purposes of the personal data processing. Afactor therefore makes the assessment that Afactor has the right to process the personal data after a balancing of interests.

Your personal data is also processed when we save data for e.g. our bookkeeping (for example, all orders, invoices and payments) and tax data. This processing is based on our obligation to comply with our legal obligations.

What happens if you do not provide your personal data?

The provision of the personal data set out above is necessary for Afactor to be able to contact you and take the steps set out above. If the data set out above, collected from you, is not provided, said actions cannot be taken by Afactor.

Your rights

You have the right to request access to the personal data that Afactor processes about you. You have the right to have inaccurate personal data about you corrected and can request that personal data be deleted. You also have the right to object to certain processing of your personal data and request that the processing of personal data be restricted.

If you request that Afactor restrict or delete your personal data, it may mean that Afactor is unable to take the steps set out above. You also have the right to request your personal data in a machine-readable format for the purpose of transferring the data to another data controller (so-called data portability).

If you are dissatisfied with how Afactor processes your personal data, you can make a report to the supervisory authority for Afactor's personal data processing.

If you have any questions about how your personal data is processed, you are welcome to contact Afactor's Data Protection Officer at [email protected].