Privacy Policy

1 - Introduction

&Money ApS (“&Money”, “the Company”, “we”, “us”, “our”) processes information about you as a user of bconomy (the “Platform”) in various situations. We are therefore obliged to inform you of a number of matters relating to the processing of personal data about you, in accordance with the General Data Protection Regulation (“GDPR”).

2 - Data Controller

The company is the data controller for processing your personal data in the different situations described in more detail below.

You will find our contact information at the bottom of the “Our contact information” section.

3 - Processing of your personal data

The Company processes personal data in different situations when you use the Platform:

• Use of cookies
• User management
• When you communicate with us

Below you can read more about the different purposes of processing your personal data in different situations. You can also see what data we process in the different situations and what the legal basis for the processing is.

3.1: Use of cookies

When you use bconomy, we record through cookies information about your use of the Platform, including information about your IP address, browser type, time of visit, features used, etc. In some cases, this information may include personal data.

3.1.1: Objectives and legal bases

We record the above information in order to provide a secure, stable and customer-friendly user experience on the Platform and to keep statistics on the use of bconomy. The legal basis for the processing is Article 6 (1) (f) of the Data Protection Regulation (for necessary functionality cookies), as we pursue our legitimate interest in maintaining the functionality and security of the Platform, and Article 6 (1) (a) of the Data Protection Regulation (for other cookies). You can read more about our use of cookies in our separate Cookie Policy

3.1.2: Storage

Information related to our use of cookies is generally deleted when the cookie is deleted from your device, and thus depends on the specific cookie. You can read more about the different cookies, including their lifetime, in our Cookie Policy

3.2: Administration of Users and Operation of the Platform

When you create a user account in bconomy, we record your login and contact information, including first name, last name, phone number, email address and password. In addition, information about the company in which you are employed, your role and granted accesses is recorded in the Platform. Finally, we process information about whether you have validated your account with MiTiD and whether you have associated the business' bank account and/or e-conomic account. In addition, we record all payments in an event log, which shows who performed what action in relation to a payment. This will indicate, for example, which user has approved a specific payment.

We do not process information about MiTid or Social Security Number in connection with the validation of your account.

3.2.1: Objectives and legal bases

The purpose is to provide you with access to the Platform and the opportunity to use the Platform and its functions.

The legal basis for the processing is Article 6 (1) (f) of the General Data Protection Regulation, as we pursue our legitimate interest in managing users of the Platform and offering the selected features of the Platform.

3.2.2: Storage

Your user information will be deleted or anonymised no later than 1 year after the end of the financial year in which you or the company where you are employed closed your user account last login, after which the user account will be automatically closed].

3.3: When you communicate with us

If you as a user of the Platform contact us, your request will often contain personal data, such as contact information, your affiliation with a particular company or other personal data that you may provide to us. In some cases, we may also receive similar personal data about you from third parties, such as your employer (when you represent a business customer).

3.3.1: Objectives and legal bases

We process the information in order to handle and respond to general inquiries from you or the company you may represent.

The legal basis for the processing is Article 6 (1) (f) of the General Data Protection Regulation, as we follow our legitimate interest in answering general inquiries, providing support and taking care of the day-to-day administration and relationship with our customers and users.

3.3.2: Storage

The personal data we process on the basis of your enquiry will be deleted or anonymised as a rule no later than 3 years after the end of the financial year in which your last enquiry has been finished/completed.

However, information related to a customer agreement or similar and/or included in our accounting materials (such as invoices) is generally retained for 5 years from the end of the financial year to which the information relates, as a result of the accounting rules to which we are subject or for the purpose of documenting a specific agreement.

3.4: Recipients of your personal data

We disclose your personal data in a number of different situations:

• Information that is included in our accounting material, or in documentation of a specific statement, is disclosed to the relevant authorities, for example, when we are obliged to do so in accordance with the law (e.g. disclosure of accounting material to SKAT).
• If you have consented to the use of third party cookies, we will disclose your information to the relevant third party providers.
• We disclose your personal data to third parties in connection with functions in the Platform, including banks in connection with bank account association, NETS DanID A/S in connection with MITID validation and Visma e-conomic A/S when linking an e-conomic account.
  

In addition, your personal data will be entrusted to our data processors, which we use, among other things, for hosting the Platform and our IT systems. We have entered into data processing agreements with all our data processors.

3.5: Transfer of your personal data to third countries

Your personal data will be transferred to recipients located in the United States. The basis of transfer is the European Commission's Standard Contractual Clauses.

If you would like further information about our transfer of personal data outside the EU/EEA, including a copy of the relevant security measures, etc., you can request this by exercising your rights, as set out below in the “Your rights etc.” section.

4 - Your rights, etc.

You have a number of rights under the Data Protection Regulation in relation to our processing of information about you. Your rights include:

• Right to see information (right of access)
  You have the right to access the information that we process about you, as well as a number of additional information.
  
• Right to rectification (rectification)
  You have the right to have misinformation about yourself corrected.
  
• Right to erasure
  In special cases, you have the right to have information about you deleted before the time of our amicable general deletion.
  
• Right to restriction of processing
  In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, in future we will only process the data — apart from storage — with your consent, or for the purpose of establishing, asserting or defending legal claims, or for the protection of a person or important public interests.
  
• Right to object
  In certain cases, you have the right to object to our otherwise lawful processing of your per-son data.
  
• Right to transmit information (data portability)
  In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one data controller to another without hindrance.
  

If you wish to exercise your rights, please contact us using the contact details provided below.

You can read more about your rights in the Data Protection Authority's guide on the rights of data subjects, which you can find on www.datatilsynet.com

5 - Complaint to the Data Inspectorate

You have the right to lodge a complaint with the Danish Data Protection Authority if you are dissatisfied with the way we process your personal data. You can find the contact details of the Data Protection Agency at www.datatilsynet.com

6 - Our contact information

&Money ApS
CVR No 40 71 62 97
Kalvebod Brygge 1
1560 Copenhagen V
Email: info@andmoney.dk