1. Who is reponsible for your personal data?
The Services are provided by [LEGAL ENTITY NAME] (“Loym”, “we”, “us” or “our”).
For questions concerning privacy and personal data, please contact:
Email: [PRIVACY EMAIL ADDRESS]
Depending on the Service and the circumstances, Loym may act as a data controller or as a data processor on behalf of a customer.
Where Loym processes personal data on behalf of a customer, the customer remains responsible for determining the purposes and means of processing, subject to the applicable data protection agreement and legislation.
2. Information we process
Depending on which Services you use, we may process different types of information, including:
- name and contact information;
- account and authentication information;
- company and organisation information;
- information provided when contacting us;
- technical information about your use of our Services;
- IP address, browser and device information;
- usage and diagnostic information;
- information contained in data submitted to or processed by our Services;
- financial or transaction information where required to provide a financial or accounting-related Service;
- other information necessary to provide, secure and improve the Services.
We only process information that is relevant to the particular Service and its purpose.
3. How we use personal data
We may process personal data to:
- provide and operate our Services;
- authenticate users and manage accounts;
- provide customer support;
- process transactions and integrations;
- connect to third-party services when authorised by the user;
- maintain and improve the Services;
- monitor and protect the security of our systems;
- detect and prevent fraud, abuse and unauthorised access;
- communicate with users about the Services;
- comply with legal and regulatory obligations.
We do not sell personal data to third parties.
4. Third-party services and integrations
Our Services may integrate with or depend on third-party services, including:
- banks and financial institutions;
- payment service providers;
- Open Banking providers;
- cloud and hosting providers;
- authentication providers;
- communication and email providers;
- accounting and business software;
- other APIs and software services.
When you authorise an integration, information may be exchanged between our Services and the relevant third-party service.
The processing performed by a third party may also be subject to that third party's own privacy policy and terms.
5. Data received through integrations
When you connect a third-party service to our Services, we may receive information made available through that service according to the permissions you grant.
Depending on the integration, this may include account information, transaction information, contact information, documents, files or other data.
We use such information only for the purposes for which the integration has been authorised and for providing the relevant Services.
6. Data storage and security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
The specific hosting location and infrastructure may vary depending on the Service.
Users are responsible for protecting their account credentials and for ensuring that access to their systems and accounts is appropriately controlled.
7. Data retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services, comply with legal obligations, resolve disputes and enforce agreements.
Where data is processed on behalf of a customer, retention may be determined by the customer and the applicable agreement.
Deleting an account or disconnecting an integration does not necessarily result in immediate deletion of all information where retention is required by law or is otherwise necessary for legitimate business or contractual purposes.
8. Legal basis for processing
Where the General Data Protection Regulation (GDPR) applies, we process personal data on one or more applicable legal bases, including:
performance of a contract;
compliance with legal obligations;
legitimate interests;
consent, where required.
The applicable legal basis depends on the particular processing activity.
9. International data transfers
Depending on the Services and third-party providers used, personal data may be processed in countries outside the country in which you are located.
Where required by applicable law, appropriate safeguards are used for international transfers of personal data.
10. Your rights
Where applicable under data protection law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate information;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing;
- request data portability;
- withdraw consent where processing is based on consent.
If you use a Service provided through an organisation or employer, requests concerning data processed on that organisation's behalf may need to be directed to that organisation.
11. Cookies and similar technologies
Our websites and Services may use cookies and similar technologies for purposes such as authentication, security, preferences, analytics and functionality.
The use of cookies may vary between different Services.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Services, technology or legal requirements.
The latest version will always be published at this URL.
13. Contact
For questions concerning this Privacy Policy or the processing of personal data, please contact:
Loym AS
Email: info@loym.com