Handling of personal data

Policy

WHAT, WHY AND HOW LONG DO WE PROCESS PERSONAL DATA

General

In many cases, when we request personal data, we do so in order to fulfill statutory legal requirements, contractual requirements or other requirements that are necessary to enter into an agreement, for example with customers, suppliers & funding partners. In the event that the data subject fails to provide the information we request, this may in some cases mean that we cannot enter into or fulfill our obligations in an agreement with the data subject.

The legal basis for the processing

In order to enter into and manage agreements with our customers, suppliers and funding partners, Prefinance processes the personal data of the individuals who are representatives, owners and creditors. The basis for this treatment is consent and agreement.

Prefinance can also process personal data relating to representatives of potential customers, potential suppliers and potential funding partners. The basis for this treatment is a balancing of interests.

Certain personal data relating to customers, suppliers and funding partners may also be processed due to Prefinance's legal obligations, for example through the provisions of the Accounting Act or money laundering regulations.

If we have a legitimate interest, we may process personal data to carry out market and customer analyzes in order to develop our business and improve our product range. The information can also be used to develop our systems and perform customer/supplier analyzes to detect and counter fraud. We may also use the information to perform risk analyzes and produce statistics, for example to improve our risk models.

Personal data processed and its recipients 

We process personal data relating to representatives, owners and creditors of companies with whom we have customer agreements and cooperation agreements. Personal data processed may be name, telephone number, e-mail, social security number, professional title and financial status. We may also process personal data relating to representatives of companies who are potential customers, potential suppliers and potential funding partners. The personal data that is processed may include name, social security number, telephone number, e-mail, address, professional title and financial status. In addition to information that customers, potential customers, suppliers, potential suppliers, funding partners and potential funding partners provide to us directly or indirectly, we may collect information about them from other sources. This applies, for example, when we carry out the checks we need to do to prevent our products and services from being used for money laundering (by collecting information through sanctions lists from international organizations) and when we collect information from credit reference agencies. Recipients of the data are primarily those responsible for the agreement at Prefinance within the sales department, credit department, finance department, agreement administrators, managers. and possibly also the corresponding departments and administrators at selected funding partners where credit requests have been made or financing agreements drawn up where parties for the treatment are included.

The personal data is processed for the following purposes 

Prefinance processes personal data in order to provide our services and enter into agreements with customers, suppliers and funding partners. In order to be able to enter into agreements and manage contractual relationships, Prefinance only processes personal data that is relevant to the customer relationship & collaborative relationship and that is necessary for the fulfillment of the agreement and to be able to provide a good service. Personal data such as the agent's name, e-mail, professional title and telephone number are processed so that the party can be contacted and otherwise to manage the contract with the customer, supplier or funding partner. Personal data such as social security numbers are only processed if necessary to manage invoicing, credit information or the like.

Processing also takes place to comply with regulations that apply to businesses in general, such as accounting rules and money laundering rules.

Prefinance can also process personal data as a basis for market and customer analyses.

Where Prefinance processes personal data relating to representatives of potential customers, potential suppliers or potential funding partners, this is done to provide them with interesting offers and information by telephone, e-mail or to manage booked meetings. Personal data relating to representatives may also be processed for the same purpose and to deliver advertising. The representative has the right to object at any time to the processing of personal data for direct marketing purposes. See more in the section "Rights to object" below. Prefinance may also process personal data regarding representatives of, owners of or creditors of customers and potential customers within the framework of automated individual decision-making including profiling, for the purpose of e.g. be able to give an automated approval or rejection of a credit application. This type of decision is only made if the person has given expressed consent or if it is necessary to enter into or fulfill an agreement with the party.

The personal data is not stored longer than necessary for processing purposes

Prefinance never keeps data longer than is necessary for processing purposes. As a result, Prefinance regularly deletes stored personal data and deletes data that is no longer needed after the end of the customer relationship/collaboration relationship. However, Prefinance may need to retain personal data after the end of the customer relationship & the end of the cooperation relationship, among other things, to handle legal claims that may be directed against Prefinance or with regard to the service market and to send offers that Prefinance believes may be of interest to our former customers, suppliers and funding partners. As a result, personal data is saved for a certain period of time after the underlying relationship has ended or until the person objects to direct marketing. Personal data relating to a potential customer's representative, potential supplier's representative or potential funding partner's representative will be deleted when the conversation with the customer ends, provided no customer relationship is established, or immediately if that person objects to direct marketing or announces that they have terminated their employment with the prospect the customer, supplier or funding partner.

Generally speaking, personal data may also need to be stored to ensure compliance with legal obligations, for example in connection with accounting. If there is such an obligation, personal data may be stored for up to 10 years.

COLLECTION OF PERSONAL DATA

General

Where Prefinance collects, processes and stores personal data, this must in any case be done in a legal, correct, transparent and appropriate manner and only to the extent that Prefinance deems necessary. Prefinance will systematically process personal data in such a way as to avoid violating the data subject's personal integrity. In all cases of personal data processing, Prefinance ensures that personal data is protected by appropriate security measures.

Prefinance can process personal data by collecting and processing it independently or on behalf of our Funding partners. Thus, Prefinance can act partly as a personal data controller but also in some cases as a personal data assistant. In many cases, when we request personal data, we do so, as mentioned above, in order to fulfill legal or contractual requirements or requirements that are necessary to sign an agreement with customer, supplier and funding partner. If the data subject fails to provide the information we request, it may in some cases mean that we cannot enter into or fulfill our obligations in an agreement with the data subject. If data subjects feel uncertain or concerned about providing certain personal information, they can contact Prefinance's data protection officer (see below under "Data Protection Officer") and we can provide additional information to the data subject.

Use of e-mail

To facilitate communication and be able to communicate effectively with customers, prospects, suppliers and Funding partners, we use e-mail. The processing of personal data via e-mail takes place on the basis of an agreement or the support of a balancing of interests.

Our email accounts are cleaned regularly according to our email management guidelines. Personal information that appears in e-mail messages can be transferred to other registers and systems within Prefinance.

Prefinance shares data with external parties.

Prefinance may, from time to time, need to provide information to relevant third parties (including, without limitation, situations where we are legally required to do so), for example: for our data system providers. To ensure that personal data is handled in a safe and secure manner in each individual case, Prefinance has drawn up an assistance agreement with each external party to process personal data on Prefinance's behalf.

Prefinance may also share personal data with partners within the EU and EEA to the extent necessary to fulfill the agreements before and during the agreement period. Personal data can also be transferred outside the EU and EEA (also called third countries) and to international organizations. We make such a transfer only if the other rules of the data protection regulation are followed and if any of the following conditions are met: (i) the European Commission has decided that there is an adequate level of protection in the country in question, (ii) we have taken other appropriate safeguards (e.g. standard contractual clauses or binding corporate regulations), (iii) there is a special permission from the supervisory authority, or (iv) it is permitted in special cases under applicable data protection legislation.

Prefinance as personal data assistant

Prefinance is always responsible for personal data within the scope of its own operations. Some Funding partners consider that Prefinance is a personal data assistant for certain personal data processing that is carried out in order to enter into agreements with customers in which Funding partners is involved, while other Funding partners consider that both Funding partners and Prefinance are personal data controllers. .

In each case Prefinance acts as a personal data assistant, Prefinance will contract a personal data assistant with the personal data controller. It is, for example, the personal data controller who decides on the purpose and duration of personal data storage. Where Prefinance is a personal data processor, personal data is therefore always processed in accordance with the personal data processor agreement and according to instructions from the personal data controller.

YOUR RIGHTS AS A REGISTERED

Right to information

The registered person has the right to contact Prefinance as the personal data controller and to request access to the personal data processed by Prefinance and also to receive information about, among other things, the purpose of the processing and who received the personal data (so-called request for register extract).

Prefinance, as the personal data controller, will provide the data subject with a copy of the processed personal data free of charge. For additional copies, Prefinance may charge an administration fee.

Right to correction, erasure or restriction

The data subject has the right to correct his personal data or, under certain conditions, to have it restricted or deleted without undue delay. If the data subject considers that Prefinance processes personal data concerning them that are incorrect or incomplete, the data subject may request that these data be corrected or supplemented.

Registrants also have the right to have their data deleted, among other things, in the event that it is no longer needed or if the processing is based on consent and this has been withdrawn. In some cases, we may not be able to delete all data, as the data is still needed for the original purpose and we still have a lawful basis for processing.

If the data subject requests that the data be corrected, deleted or restricted from processing, Prefinance, as the personal data controller, is in the habit of notifying each recipient of personal data of the request from the data subject with a reasonable effort.

Right to data portability

The data subject has the right to receive the personal data that they have provided to the personal data controller and has the right to transfer this data to another personal data controller. However, this applies on the condition that this is technically possible and that the legal basis for the processing includes consent or that the processing is necessary for the fulfillment of an agreement.

Right to object

The data subject has the right to object at any time to the processing of their personal data if the legal basis for the processing includes a balancing of interests according to the Data Protection Regulation Article 6.1(F) The data subject also has the right to object to the processing of their personal data at any time if it is processed for direct marketing purposes . To opt-out of direct marketing from us, the data subject must contact us and let us know that they wish to be blocked from direct marketing.

Right to withdraw consent

If the processing of personal data is based on consent from the data subject, the data subject has the right to withdraw this consent at any time. This revocation does not affect the lawfulness of the processing of personal data prior to consent to revocation. If consent is withdrawn, this may affect certain contractual terms, such as if the data subject received a lower price as a result of the information provided.

DATA PROTECTION OFFICER

Prefinance has a data protection officer whose task is to check that we comply with the regulations on the protection of personal data. For any policy questions or other inquiries about personal data, please contact Prefinance (personal data controller) and our data protection officer at William.hellman@prefinance.se

ARE YOU DISSATISFIED WITH OUR TREATMENT

If a registered person has a complaint about our processing of your personal data, they can contact the Data Inspectorate via the website datainspektionen.se, by phone 08-657 61 00 or by post to the Data Inspectorate, Box 8114, 104 20 Stockholm.

CORRECTION OF THE POLICY

Prefinance reserves the right to correct and update the policy. In the event of significant changes to the Policy or if existing information needs to be handled in a different way than stated in the Policy, Prefinance will inform about this in an appropriate way.