if you have any questions about the use of your personal data in accordance with this policy.
The supervisory authority for the processing of personal data is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten - IMY). If you wish to lodge a complaint with the Swedish Authority for Privacy Protection regarding our processing of your personal data, you have the right to do so. Please visit www.imy.se
for more information on how to proceed. Below, we outline why we collect personal data, the types of personal data processed, purposes, legal basis, and storage duration.
Why we need your data
In order to obtain the best possible offer from us, we may ask that you connect your accounting software, banking system and/or sales system directly via API through one of Waylog's integration partners. By connecting your software directly, we can save time and gain a more comprehensive understanding of your business. Waylog will then have read-only access to your latest accounting data, including your accounts receivables and payables. You can at any time disconnect Waylog's direct API access either from your accounting software, banking system or sales system or from the Waylog app, however noting that it may lead to us withdrawing or adjusting our financing offer.
Where we obtain data from
Most of the personal data we have about you is information you have provided yourself, typically in connection with us establishing contact and, with your consent, creating a user account. Furthermore, we may collect information such as your name and contact details if you use contact forms or similar features on our website, www.waylog.com. Additionally, we may collect such necessary information from external sources (e.g., public registers and information services) to process an application for financing and conduct necessary checks, such as meeting the requirements for customer due diligence as per the Money Laundering Act (Swedish law: lagen om åtgärder mot penningtvätt och finansiering av terrorism
How we process personal data
We process the information we collect, including personal data, to fulfill our legitimate interests in providing you access to and managing our services, processing financing applications, ensuring the proper functioning of the website and service, and furthering our legitimate interests in developing and improving our website and services. Additionally, we may process the personal data you provide to us to fulfill our legitimate interest in contacting you at your request and otherwise communicating with you regarding our services and for direct marketing purposes. When using our services, we also process your personal data to fulfill our legitimate interest in managing the contractual relationship with the company you represent and conducting analyses regarding the company's available borrowing capacity. To fulfill our legal obligations, we also conduct risk and credit assessments and take measures to comply with customer due diligence requirements under the Money Laundering Act. We may also process your personal data when necessary (a) to comply with applicable laws and regulations, such as accounting requirements, comply with requests or orders from supervisory authorities or competent courts; (b) to fulfill our legitimate interest in establishing, defending, and asserting legal claims; or (c) to protect our users.
Who we share your personal data with
We may disclose the information we have collected, including personal data, to our partners and service providers, as well as to third parties in connection with the transfer of a claim. We always ensure that the data is transferred securely. Furthermore, we may disclose your personal data to external advisors, authorities, courts, the police, and potential buyers if we were to sell the company. We may also share key financial indicators, such as revenue, with our funding partners should it be required.
Storage of personal data
We retain your personal data for the time necessary to fulfill any of the purposes of our processing of your personal data or to comply with requirements in law or regulation, supervisory authority requests, or orders from competent courts. We use the following criteria to determine how long we can store your personal data: (i) for as long as we have an ongoing relationship with you; (ii) as long as required by legal obligations we are bound by (such as tax and accounting obligations and obligations under the Money Laundering Act); and (iii) as long as is appropriate in light of our legal position (including applicable statutory limitation periods)..
Transfer outside the EU/EES
Right to rectification
We do our best to ensure that the processed personal data is accurate, complete, and up to date. If you discover that personal data related to you is incorrect or incomplete, you have the right to have the data corrected.
You can request confirmation of whether personal data is being processed and, if it is, request access to your personal data and additional information such as the purpose of the processing. You also have the right to receive a copy of the processed personal data. If the request is made electronically, the information will also be provided in an electronic format that is commonly used, unless you request otherwise. You may need to authenticate yourself before we can ensure that the data is not disclosed to anyone unauthorized.
Objection to specific processing
You can object to the processing of your personal data based on legitimate interests, for reasons related to your situation, and to processing for direct marketing purposes.
You can have your personal data deleted under certain circumstances, such as when the data is no longer needed to fulfill the purpose for which it was collected.
Limitation of processing
You can ask us to limit the processing of your personal data to only involve the storage of your personal data under specific circumstances, such as when the processing is unlawful but you do not want your personal data to be deleted.
You always have the right to withdraw your consent to the processing of personal data to the extent that the processing is based on your consent.
You have the right to request a machine-readable copy of the personal data processed based on your consent or when processing is necessary to fulfill a contract with you, if the personal data has been provided directly by you (data portability). You can also request that this information be transferred to another data controller (if possible).
You also have the right to request at any time that your personal data not be processed for direct marketing purposes by notifying us in writing at the email address email@example.com or by mail to Waylog AB, Bondegatan 74A, 116 33 Stockholm.