General information regarding personal data processing within Valitive

Natural person registered in the population register

Handling corrections (denials)

Categories of personal data

When correcting errors, we process the information that is necessary in the specific case to make the corrections.

Purposes of personal data processing

Processing your or another person’s request to fix or correct errors or misleading information appearing in the credit report.

Legal basis

The processing occurs on the basis of Article 6 c of the General Data Protection Regulation, since it is necessary to fulfil a legal obligation.

Collecting information

In the event of a correction request, we collect information from other debt collection companies, the Swedish Enforcement Services [Kronofogdemyndigheten] and from you directly.

Categories of recipients

We only share your personal data with other people if it is necessary to achieve our objectives listed above.

Subcontractors and transfer

We use subcontractors (personal data processors) who may process personal data on our behalf. Storage and other processing take place within the EU as well as outside of the EU. In the event of the transfer of data to so-called third countries, we ensure that appropriate safeguards are taken, and that the transfer follows the provisions of the GDPR regarding transfer to third countries.

Storage and sorting

The information is saved for the amount of time that is determined to be necessary for the stated objectives or what is required by law.

 

 

Protecting natural persons from fraud/ID theft (fraud prevention)

Categories of personal data

The information that you provide in the request regarding fraud prevention.

Purposes of personal data processing

Processing takes place at your request and for the purpose of being able to protect your credit information and prevent attempted fraud and ID theft.

Legal basis

Personal data processing takes place on the basis of Article 6 f, our interest in being able to provide you with the opportunity to take action to reduce the risk of further fraud/ID theft, and administering this.

Data collection

From you directly as well as from credit information companies that are included in the collaboration when exchanging protected information.

Categories of recipients

We only share your personal data with other people if it is necessary to achieve our objectives listed above.

  • Our customers who have a legitimate need.
  • Other credit information companies associated with a joint arrangement in order to also be able to protect you from fraud and ID theft.
  • Service providers who perform IT operations and support.
  • Valitive’s group company when it is required to perform a specific work task.

Subcontractors and transfer

We use subcontractors (personal data processors) who may process personal data on our behalf. Storage and other processing take place within the EU as well as outside of the EU. In the event of the transfer of data to so-called third countries, we ensure that appropriate safeguards are taken, and that the transfer follows the provisions of the GDPR regarding transfer to third countries.

Storage and sorting

The information regarding fraud prevention is saved in the company’s internal log for 12 months after the fraud protection ends.

Handling questions regarding credit information operations and personal data processing

Categories of personal data

Information that is processed includes identity information, contact information as well as information about communication, and behaviour regarding a customer file.

Purposes of personal data processing

The purpose of the processing is to handle various types of requests from you (customer service). For example, answering questions regarding records of non-payment and credit information, but also processing corrections and sending you information about the data processing.

Legal basis

The processing takes place on the basis of Article 6 f, our interest in answering and handling your queries, and in certain cases, the law requires us to provide you with certain information or perform a certain action, hence it is thus in our interest to follow the law.

Collecting data

From you directly.

Categories of recipients

We only share your personal data with other people if it is necessary to achieve our objectives listed above.

  • Service providers who perform IT operations and support.
  • Valitive’s group company when it is required to perform a specific work task.

Subcontractors and transfer

We use subcontractors (personal data processors) who may process personal data on our behalf. Storage and other processing take place within the EU as well as outside of the EU. In the event of the transfer of data to so-called third countries, we ensure that appropriate safeguards are taken, and that the transfer follows the provisions of the GDPR regarding transfer to third countries.

Storage and sorting

We delete the information at an interval of six months unless circumstances in the individual case require a longer processing period.

Certain actions that are taken are logged in the credit information register and are subject to the data sorting interval for the log.

 

Customers, suppliers and government agencies

Provision and administration of services

Categories of personal data

The information that is processed includes identity information (not national ID numbers), information about companies and title as well as contact information.

Purposes of personal data processing

We need to process personal information about employees at our customers and suppliers in order to enter into and administer contracts, manage access to our website and authorisations, as well as to be able to identify users.

Legal basis

The processing takes place on the basis of Article 6 f of the General Data Protection Regulation, our interest in entering into and completing contracts with customers, as well as operating the business in a manner that protects information and privacy.

Collecting data

From you directly or your employer.

Categories of recipients

We only share your personal data with other people if it is necessary to achieve our objectives listed above.

  • Service providers who perform IT operations and support.
  • Valitive’s group company when it is required to perform a specific work task.

Subcontractors and transfer

We use subcontractors (personal data processors) who may process personal data on our behalf. Storage and other processing take place within the EU as well as outside of the EU. In the event of the transfer of data to so-called third countries, we ensure that appropriate safeguards are taken, and that the transfer follows the provisions of the GDPR regarding transfer to third countries.

Storage and sorting

The information is saved for the length of time that the agreement with your employer remains in effect. Information in contract documents may be saved for a period of 10 years after the contract ends. Information that is generated for you to use the services is processed for the period that you have access to login information and a period of 12 months thereafter.

Checking that our services are used as per agreements and law as well as troubleshooting

Categories of personal data

The information that is processed includes identity information (not national ID number), information about company and title, contact information, information about your usage (logs).

Purposes of personal data processing

We need to ensure that our services are used for the purposes that your employer has indicated, and in accordance with the agreement and law. Furthermore, we need to be able to troubleshoot our services if needed.

Legal basis

The processing takes place on the basis of Article 6 f of the General Data Protection Regulation, our interest in being able to check that the services are being used in accordance with the agreement and law, investigating errors, as well as operating the business in a manner that protects information and privacy.

Collecting data

From you directly or your employer.

Categories of recipients

We only share your personal information with other people if it is necessary to achieve our objectives listed above.

  • Service providers who perform IT operations and support.
  • Valitive’s group company when it is required to perform a specific work task.

Subcontractors and transfer

We use subcontractors (personal data processors) who may process personal data on our behalf. Storage and other processing take place within the EU as well as outside of the EU. In the event of the transfer of data to so-called third countries, we ensure that appropriate safeguards are taken, and that the transfer follows the provisions of the GDPR regarding transfer to third countries.

Storage and sorting

The logs are saved for 12 months calculated from when the task is completed.

 

 

 

Handling customer service

Categories of personal data

The information that is processed includes identity information (not national ID number), contact information, communication, information about behaviour and the customer issue, company and title.

Purposes of personal data processing

In order to be able to answer customer questions and communicate with you, we need to process your personal information together with the information that is required to handle the individual case. For example, when you communicate with us via email or telephone.

Legal basis

The processing takes place on the basis of Article 6 f of the General Data Protection Regulation, our interest in being helpful to our customers and handling/solving their issues, as well as being able to fulfil the agreement with the customer.

Collecting data

From you directly or your employer.

Categories of recipients

We only share your personal data with other people if it is necessary to achieve our objectives listed above.

  • Service providers who perform IT operations and support.
  • Valitive’s group company when it is required to perform a specific work task.

Subcontractors and transfer

We use subcontractors (personal data processors) who may process personal data on our behalf. Storage and other processing take place within the EU as well as outside of the EU. In the event of the transfer of data to so-called third countries, we ensure that appropriate safeguards are taken, and that the transfer follows the provisions of the GDPR regarding transfer to third countries.

Storage and sorting

The communication in a customer case is saved for 6 months from when the matter is considered to have been dealt with.

 

 

 

Handling and meeting legal requirements

Categories of personal data

The information being processed includes identity information, contact information, communication, information about behaviour and the issue, company and title, information that is necessary in the individual case.

Purposes of personal data processing

In terms of handling, receiving, or making a legal claim, personal data that is a part of the individual case is necessary.

Legal basis

The processing takes place on the basis of article 6 f of the General Data Protection Regulation, our interest in being able to establish, submit or defend legal claims.

Collecting data

From you directly or your employer.

Categories of recipients

We only share your personal data with other people if it is necessary to achieve our objectives listed above.

  • Our customer involved in the matter.
  • Legal representatives such as law firms, as well as governmental authorities such as a District Court or Swedish Enforcement Services.
  • Service providers who perform IT operations and support.
  • Valitive’s group company when it is required to perform a specific work task.

Subcontractors and transfer

We use subcontractors (personal data processors) who may process personal data on our behalf. Storage and other processing take place within the EU as well as outside of the EU. In the event of the transfer of data to so-called third countries, we ensure that appropriate safeguards are taken, and that the transfer follows the provisions of the GDPR regarding transfer to third countries.

Storage and sorting

The information is processed for the time needed for this purpose.

 

 

Fulfilling legal obligations

Categories of personal data

Information that is processed includes information that is necessary in the individual case, such as verification documentation.

Purposes of personal data processing

As a company, we are obligated to perform accounting and save accounting records. Sometimes, these records may contain personal information, for example, whether you are listed as a reference on an invoice.

Legal basis

The processing takes place on the basis of Article 6 c of the General Data Protection Regulation, to fulfil a legal obligation that rests with us.

Collecting data

From you directly or your employer.

Categories of recipients

We only share your personal data with other people if it is necessary to achieve our objectives listed above.

  • Government agency such as the Swedish Tax Agency [Skatteverket].
  • Service providers who perform IT operations and support.
  • Valitive’s group company when it is required to perform a specific work task.

Subcontractors and transfer

We use subcontractors (personal data processors) who may process personal data on our behalf. Storage and other processing take place within the EU as well as outside of the EU. In the event of the transfer of data to so-called third countries, we ensure that appropriate safeguards are taken, and that the transfer follows the provisions of the GDPR regarding transfer to third countries.

Storage and sorting

The information is saved in accordance with the Swedish Accounting Act, i.e. 7 + 1 years.

 

 

 

The rights of data subjects

You have control over your personal data. These are your rights.

When we process your personal data, you have a number of statutory rights. These are listed below. In order to protect your rights, we must process your personal data.

Right of information and access

You have the right to receive information from us about the use of personal data that concerns you, together with a copy of the personal data in what is known as a registry extract.

Right to have incorrect information corrected

If we detect that we have incorrect information about you, we will take responsibility for correcting it. If you feel that information is incorrect or incomplete, you are entitled to request that the information be corrected or completed.

Right to have information erased

In certain cases, you have the right to request that your personal data be erased. However, we will not be able to erase your data if there is a compelling legitimate interest, legal obligations, or we are entitled to continue the data processing, for example, for accounting purposes and credit information purposes.

Right to object

You have the right to object to our use of your personal data for the performance of a task carried out in the public interest or for the purposes of our legitimate interest. We will only continue processing the data if we determine that there are compelling legitimate reasons for this, and that these weigh more heavily than the rights, freedoms and interest of the data subject.

Right to refuse direct marketing

You have the right to demand that your personal data is not used for direct marketing purposes in cases where we perform such actions.

You are entitled to move your data

You also have the right to be provided with the personal data we process when executing a contract with you and/or if you have given us your consent, in a machine-readable format, (we can assist with transferring the data to another party if technically feasible).

 

Right to withdraw consent

If we use your personal data on the basis of your consent, you have the right to withdraw your consent at any time.

Unhappy with our processing of your personal data? How to submit a complaint.

If you are dissatisfied with the way we are processing your personal data, you may contact the supervisory authority in your country of residence; in Sweden this is the Swedish Commission on Security and Integrity Protection. Their contact details are Swedish Commission on Security and Integrity Protection [Integritetsskyddsmyndigheten] Box 8114, SE 104 20 Stockholm, Sweden.

If you have questions about the information above, you can always contact us at dataprotection@alektumgroup.com or with our contact information above.

NOTE! Email involves security and confidentiality risks – it is the digital equivalent of a postcard. Therefore, do not include information that is sensitive or which you do not wish unauthorised persons to see.