Privacy Policy

Last updated: 18 November 2024

Why and for whom?

At Stowit AB org.no 556700-9179 (“Stowit”, “we”, “us”, “our”) we care about personal privacy. This means that we respect and safeguard your privacy and the right to control and transparency when processing your Personal Data.

Stowit is the Data Controller in relation to the Processing of your Personal Data listed in this Privacy Policy (the “Policy”). The Policy describes the purposes for which we process your Personal Data, the legal basis we rely on, and the measures we take to protect your Personal Data. We also inform you about how to exercise the rights you have in connection with our Processing of your Personal Data.

The Policy informs you about our Processing of your Personal Data when you communicate with us, use the Service, or visit our website www.stowit.se.

The Policy is aimed at:

• Users of the Service (existing customers)
• Potential customers
• Customers
• Visitors to our website

Definitions

”Processing”

Of Personal Data is everything that can be done with Personal Data, such as storage, modification, reading, transfer, etc.

”Applicable Law”

Is the legislation applicable to the Processing of Personal Data such as the General Data Protection Regulation (GDPR), supplementary national legislation, as well as case law, guidelines and recommendations issued by a national or European supervisory authority.

”Personal Data”

Is all kinds of information that can be linked to an identifiable, living person.

”Data Controller”

Is the company/organization that determines the purposes and means of Processing Personal Data and is therefore also responsible for ensuring that Personal Data is processed in accordance with Applicable Law.

”Data Processor”

Is the company/organization that processes Personal Data on behalf of the Data Controller and may therefore only Process Personal Data according to the Data Controller’s instructions and applicable legislation.

”Data Subject”

Means the living, natural person whose Personal Data is processed.

”Service”

Means the use of the Stowit platform to administer your company.

Stowit’s data controller responsibility

The information in the Policy covers Processing of Personal Data for which Stowit is the Data Controller, i.e. Processing for which we determine the purpose (why processing is done) and means (in what way, what personal data, how long, etc.). The Policy does not describe how we process personal data in the role of Data Processor - that is, when we process personal data on behalf of others.

Stowit’s processing of Personal Data

We at Stowit offer you as a customer help with administering your company. This includes but is not limited to:

• Annual report
• Ongoing bookkeeping
• K10 tax return
• INK2 tax return
• Employer’s declaration
• VAT reporting
• Annual general meeting minutes
• Certificate of approval

We have a responsibility to describe and demonstrate how we live up to the requirements placed on us according to Applicable Law when we process your Personal Data as Data Controller. The following sections aim to inform about:

• Why the Processing is necessary in relation to the purpose, and
• What legal basis we have identified for the Processing.

Legal basis according to Applicable Law

All Processing that takes place must be based on a legal basis according to GDPR. Examples of legal bases are a) performance of a contract, b) compliance with a legal obligation, c) legitimate interest and d) consent.

How long do we store your Personal Data?

We store your Personal Data as long as necessary with regard to the purpose for which it was collected and to provide the Service to you as a customer.

Collection and processing of personal data

What kind of information we collect and process about you depends on the capacity in which you have contact with us. When you register a user account on our website, you provide information about your name and email address. If you then choose to proceed and register one or more limited companies on the Service, additional information collection about you and your company will be added (for example organization number, accounting documents and other financial company information).

If you have a question for us or contact us in any other matter, we collect and process the personal data provided by you.

Purpose and legal basis for processing personal data

We process your personal data for different purposes depending on the capacity in which you are in contact with us. If you are in contact with us for the purpose of using the Service, we process your personal data in order to handle your case and administer your user account. The legal basis for our processing is to be able to fulfill our agreement with you.

For other contact with Stowit, e.g. in case of a question or other contact via email, we process your personal data to be able to communicate with you and answer your question.

In cases where we, for strategic or business reasons, decide in the future to sell or transfer all or parts of Stowit, your Personal Data may be shared or transferred to parties involved in the transaction. This processing is based on our legitimate interest in being able to develop our business.

Your rights

You are the one who decides over your Personal Data. We always strive to ensure that you can exercise your rights as efficiently and smoothly as possible.

Access

You always have the right to receive information about the Personal Data Processing concerning you. We only disclose information if we have been able to ensure that it is actually you who is asking for the information.

Rectification

If you discover that the Personal Data we process about you is incorrect, contact us at team@stowit.se and we’ll fix it!

Erasure

Do you want us to forget you completely? You have the right to request erasure of your Personal Data when it is no longer necessary for the purpose it was collected for. If we are obliged to retain your data according to law or an agreement we have entered into with you, we will ensure that it is only processed for the specific purpose stated in the law or agreement; thereafter we ensure that the data is erased as soon as possible.

Objection

Do you disagree with us that our interest in processing your Personal Data outweighs your interest in protection of personal privacy? No problem - in that case we review our balancing of interests and verify that it still holds. We of course take your objection into account when we make a new assessment to evaluate whether we can still justify our Processing of your Personal Data. If you object to direct marketing, we will remove your Personal Data immediately without reviewing our assessment.

Restriction

You can also ask us to restrict our Processing of your data:

• During the time we handle a request from you regarding any of your other rights
• If you, instead of requesting erasure, want us to mark that the data should not be processed for a certain purpose. If you for example do not want us to send you advertising in the future, we still need to save your name to know that we should not contact you
• In cases where we no longer need the data for the purpose it was collected for; provided that you do not have an interest in us retaining the data to be able to assert a legal claim.

Data portability

In certain cases, we can provide you with the information you yourself have provided to us or that we have received from you in connection with entering into an agreement with you. You receive your data in a commonly used and machine-readable format that you can then take with you to another Data Controller.

Withdraw consent

If you have consented to one or more specific Processing(s) of your Personal Data, you have the right at any time to withdraw your consent and thereby ask us to stop the Processing immediately. Please note that you can only withdraw your consent for future Processing(s) of Personal Data and not for Processing that has already taken place.

How you exercise your rights

Contact us at team@stowit.se.

Who do we share your personal data with?

Your personal data is not shared with any party outside Stowit.

Our security measures

Stowit has taken technical and organizational measures to ensure that your personal data is processed in a secure manner and that it is protected from loss, misuse and unauthorized or illegal access.

If we don’t keep our promises

If you feel that we process your Personal Data incorrectly, even after you have made us aware of this, you always have the right to submit your complaint to the Swedish Authority for Privacy Protection.

More information about our obligations as Data Controller and your rights as Data Subject can be found at https://www.imy.se/. You can also contact the Swedish Authority for Privacy Protection at imy@imy.se.

Changes to the Policy

We reserve the right to make changes to the Policy. In cases where the change affects our obligations or your rights, we will inform you about the changes in advance so that you are given the opportunity to take a position on the updated policy.

Contact

Please contact us if you have questions about your rights or if you have any other questions about how we process your Personal Data: team@stowit.se