Waylog takes the processing of your personal data very seriously. Your feeling of security in how Waylog handles your personal information with respect and privacy is important to us. We have established this policy to inform you about how we handle your data. The policy is based on applicable law and clarifies how we work to protect your rights and safeguard your privacy. Waylog is the data controller for the processing of your personal data in accordance with this Privacy Policy. Please contact the Data Protection Officer at
[email protected] if you have any questions about the use of your personal data in accordance with this policy.
The supervisory authority for the processing of personal data is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten - IMY). If you wish to lodge a complaint with the Swedish Authority for Privacy Protection regarding our processing of your personal data, you have the right to do so. Please visit
www.imy.se for more information on how to proceed. Below, we outline why we collect personal data, the types of personal data processed, purposes, legal basis, and storage duration.
Why we need your data
We need to process your personal data in order to provide our services. When we create a user account for you at Waylog, your company enters into an agreement with us according to our terms of use. In order for us to fulfill our part of the agreement and provide our services, you must provide certain personal information such as your email address, and in some cases, your name and contact details. We require your personal data to manage the customer relationship effectively. This includes, for example, storing your information in our customer database, communicating with you, ensuring that your information is accurate and up-to-date, and managing your user account on the website. Waylog is also required to follow applicable anti-money laundering and counter-terrorism financing laws and regulations, and will therefore collect data relevant to fulfilling those obligations, including among other things information as to the purpose of using Waylog, ultimate beneficial owners. Waylog may also collect and store ID copies and/or store your personal ID number in order to be able to use BankID services in connection with using our services.
In order to obtain the best possible offer from us, we may ask that you connect your accounting software, banking system and/or sales system directly via API through one of Waylog's integration partners. By connecting your software directly, we can save time and gain a more comprehensive understanding of your business. Waylog will then have read-only access to your latest accounting data, including your accounts receivables and payables. You can at any time disconnect Waylog's direct API access either from your accounting software, banking system or sales system or from the Waylog app, however noting that it may lead to us withdrawing or adjusting our financing offer.
Where we obtain data from
Most of the personal data we have about you is information you have provided yourself, typically in connection with us establishing contact and, with your consent, creating a user account. Furthermore, we may collect information such as your name and contact details if you use contact forms or similar features on our website, www.waylog.com. Additionally, we may collect such necessary information from external sources (e.g., public registers and information services) to process an application for financing and conduct necessary checks, such as meeting the requirements for customer due diligence as per the Money Laundering Act (Swedish law:
lagen om åtgärder mot penningtvätt och finansiering av terrorism). This may involve the processing of personal data related to board members and beneficial owners. By using Waylog's services and applying for financing, you confirm that these individuals have been informed about our processing of their personal data in accordance with this privacy policy. We also automatically store certain information when you use our website and platform, including information on how the website and services are used and technical information such as visited web addresses (URL), IP address, and details about your web browser and operating system. We use cookies and similar technologies to collect this information, as described below.
How we process personal data
We process the information we collect, including personal data, to fulfill our legitimate interests in providing you access to and managing our services, processing financing applications, ensuring the proper functioning of the website and service, and furthering our legitimate interests in developing and improving our website and services. Additionally, we may process the personal data you provide to us to fulfill our legitimate interest in contacting you at your request and otherwise communicating with you regarding our services and for direct marketing purposes. When using our services, we also process your personal data to fulfill our legitimate interest in managing the contractual relationship with the company you represent and conducting analyses regarding the company's available borrowing capacity. To fulfill our legal obligations, we also conduct risk and credit assessments and take measures to comply with customer due diligence requirements under the Money Laundering Act. We may also process your personal data when necessary (a) to comply with applicable laws and regulations, such as accounting requirements, comply with requests or orders from supervisory authorities or competent courts; (b) to fulfill our legitimate interest in establishing, defending, and asserting legal claims; or (c) to protect our users.
Who we share your personal data with
We may disclose the information we have collected, including personal data, to our partners and service providers, as well as to third parties in connection with the transfer of a claim. We always ensure that the data is transferred securely. Furthermore, we may disclose your personal data to external advisors, authorities, courts, the police, and potential buyers if we were to sell the company. We may also share key financial indicators, such as revenue, with our funding partners should it be required.
The use of cookies
We use cookies on our website and in our services. A cookie is a text file that is stored on your computer or mobile device, for example, to display customized web pages for visitors or to collect visitor statistics. If your browser is set to accept cookies, the information is stored on your device until the specified expiration date for each cookie. We use the following cookies on our website and in our services. You have the option to decline the use of non-essential cookies, such as cookies for marketing purposes. We use the following cookies to enable the following services:
- 0Auth
- Dealfront
Storage of personal data
We retain your personal data for the time necessary to fulfill any of the purposes of our processing of your personal data or to comply with requirements in law or regulation, supervisory authority requests, or orders from competent courts. We use the following criteria to determine how long we can store your personal data: (i) for as long as we have an ongoing relationship with you; (ii) as long as required by legal obligations we are bound by (such as tax and accounting obligations and obligations under the Money Laundering Act); and (iii) as long as is appropriate in light of our legal position (including applicable statutory limitation periods)..
Transfer outside the EU/EES
We aim to process your personal data within the EU/EEA area. However, to provide the service and fulfill other purposes stated in this privacy policy, we may transfer and process your personal data in other countries, including countries outside the EU or EEA area. In such cases, we always ensure that such transfers are made in accordance with the law and that the recipient handles your personal data securely. Upon request, you have the right to receive a copy of documentation demonstrating that appropriate security measures have been taken to protect your personal data when transferred outside the EU/EEA area, such as standard contractual clauses established by the EU Commission.
Your rights
Right to rectification
We do our best to ensure that the processed personal data is accurate, complete, and up to date. If you discover that personal data related to you is incorrect or incomplete, you have the right to have the data corrected.
Access
You can request confirmation of whether personal data is being processed and, if it is, request access to your personal data and additional information such as the purpose of the processing. You also have the right to receive a copy of the processed personal data. If the request is made electronically, the information will also be provided in an electronic format that is commonly used, unless you request otherwise. You may need to authenticate yourself before we can ensure that the data is not disclosed to anyone unauthorized.
Objection to specific processing
You can object to the processing of your personal data based on legitimate interests, for reasons related to your situation, and to processing for direct marketing purposes.
Deletion
You can have your personal data deleted under certain circumstances, such as when the data is no longer needed to fulfill the purpose for which it was collected.
Limitation of processing
You can ask us to limit the processing of your personal data to only involve the storage of your personal data under specific circumstances, such as when the processing is unlawful but you do not want your personal data to be deleted.
Withdraw consent
You always have the right to withdraw your consent to the processing of personal data to the extent that the processing is based on your consent.
Data portability
You have the right to request a machine-readable copy of the personal data processed based on your consent or when processing is necessary to fulfill a contract with you, if the personal data has been provided directly by you (data portability). You can also request that this information be transferred to another data controller (if possible).
You also have the right to request at any time that your personal data not be processed for direct marketing purposes by notifying us in writing at the email address
[email protected] or by mail to Waylog AB, Bondegatan 74A, 116 33 Stockholm.