Privacy Notice.
Parties and responsibilities
Boardeaser AB (hereinafter ”Boardeaser”) provides an innovative platform for corporate governance on Boardeaser.com, hereinafter referred to as the ”Service”.
Boardeaser as data controller
In some cases, Boardeaser is the data controller and in other cases the data processor for the processing of your personal data. This Privacy Notice informs you about processing of personal data when Boardeaser is the data controller.
For clarification, Boardeaser is a data processor in relation to its customers, who have entered into an agreement with Boardeaser to use the Service. Boardeasers customers will then be the data controller in relation to you, and Boardeaser the data processor in relation to the customers. If you have questions or require information about how our customers process personal data please contact them instead.
Boardeaser is the data controller for the processing of the personal data that you share with us when:
– you or the person you represent order the Service and become a customer of Boardeaser,
– you receive login details and become a user of the Service,
– you are a supplier or represent a supplier with whom Boardeaser has an agreement,
– you are a potential customer of Boardeaser,
– you contact us for support,
– you receive our newsletters, and
– you visit our website.
Contact details
Boardeaser AB
Organisation number: 556930-6664
Address: Götgatan 78, 118 30 Stockholm
E-post: info@boardeaser.com
Contact details Data Protection Officer
Boardeaser is part of Fortnox and has a registered Data Protection Officer.
The Data Protection Officer can be reached by email at dpo@fortnox.se or postal address as set out below.
Data Protection Officer
Legal Department
Fortnox AB (publ) Box 427
351 06 Växjö
What personal data do we process about you and why?
The personal data that is processed varies depending on the type of company you have. Customer and company data can become personal data for customers and business partners who are sole proprietorships.
More detailed information about the different categories of personal data, purpose of data processing and legal basis etc. is listed in this table, click here.
With whom do we share your personal data?
We may need to share the personal data with other companies within our group of companies (Fortnox) and with business partners, suppliers etc. for the purposes described in this Privacy Notice, such as managing your business, managing billing (distribute and collect invoices etc.), for marketing purposes or to be able to contact you. Furthermore, personal data is disclosed to subcontractors, such as suppliers of IT systems, CRM systems, etc., that Boardeaser engages to perform a service. Such subcontractor are a data processor to Boardeaser.
Transfer to third countries
If personal data is transferred to, or access is made possible from, a location outside the EU/EEA, Boardeaser shall ensure that there is a legal basis for the transfer in accordance with applicable data protection legislation, such as the European Commission’s Model Clauses. Subcontractors are obliged, according to agreements with Boardeaser, to comply with and ensure that transfers and recipients provide an adequate level of data protection.
More information about transfers can be found in the table above. You are welcome to contact us if you would like more information about where your personal data is processed, by whom and what security measures have been taken.
How long do we keep your data?
How long your personal data is stored with us varies depending on the purpose for which it was collected and how long the processing is necessary for this particular purpose. For more information about specific processing, please see the table above.
Your rights
As a data subject, you have several rights that you should be aware of. You have the right of access to the information that we process about you. In some cases, you also have the right to data portability. You have the right to have your personal data corrected if it is inaccurate, incomplete or misleading and the right to restrict the processing of personal data until it is amended. Under certain conditions, you have a right ”to be forgotten”, i.e. to have the personal data we have about you deleted. However, we have the right to refuse deletion in certain situations, for example if it is required to fulfil the agreement or if other Swedish or European law, court or authority decisions state otherwise.
You have, under certain conditions, the right to request that the processing of your personal data be restricted for specified purposes. Should you object to that there are no legitimate grounds or that the balancing of interests is incorrect, you have the right to object to the processing. You also have the right to withdraw consent (with effect from the withdrawal), object to automated decision-making, profiling, direct marketing and to file a complaint about the processing with the Swedish Authority for Privacy Protection (Sv. Integritetsskyddsmyndigheten), but we would truly appreciate of you submit a complaint to us first.
More information
If you have questions about the information in this Privacy Notice, the processing of your personal data, or wish to delete or amend inaccurate data, please contact us. Contact information for Boardeaser and our Data Protection Officer can be found above under the heading ”Parties and responsibility for the processing of your personal data”.
Last updated: 1 juli 2024