Contact Information For FLATPAY ApS DEnmark
CVR no. 42718033
Lyskær 13A, 3 sal, 2730 Herlev Denmark
Phone: +45 7192 4848
Read below how we handle your personal data at FLATPAY ApS ("Flatpay", "we" or "us").
Flatpay is a provider of payment solutions for businesses. In our daily operations, we are therefore in contact with many customers and suppliers and their personal data. Our processing of personal data means a lot to us, and you can read more about this below.Personal data: any form of information about an identified or identifiable physical person, cf. article 4 (1) (GDPR)
At Flatpay, we consider the protection of personal data and compliance with personal data law as more than just a duty and responsibility. We see it as a significant step towards all of us enjoying better protection and more responsible handling of the personal data we share with companies and other organizations. It's something that we at Flatpay would like to support.
Our processing of your personal data
Which personal data we process and why
How we protect your personal data
What rights you have
Your contact and complaint options
Our processing of your personal data
Whether Flatpay is a Data Processor, Data Controller, or if we simply have access to other companies' personal data, we incorporate the following six data processing principles into any handling of personal data:Flatpay considers itself as the Data Controller when we determine for what purpose and by what means personal data may be processed according to article 4(7) (GDPR).
- We process personal data in a lawful, fair, and transparent manner. We ensure that all processing is legal according to personal data law, as well as other relevant legislation, e.g., marketing legislation. We also strive to have the greatest possible transparency when we process personal data or observe the duty of disclosure.
- The purpose of processing is always explicitly stated and has a legitimate purpose. We only process personal data for purposes that fall within our business area. We do not carry out other treatments that are not compatible with the purpose for which the personal data was collected. When we disclose the purpose, we always try to be as specific and formulate it as clearly as possible.
- We only collect the necessary personal data. We process exclusively personal data necessary to fulfill the purpose we have informed you about. If we come into possession of additional unnecessary personal data, they are immediately deleted.
- We strive to ensure your personal data is always updated and correct.
- We only store personal data as long as they are relevant. We only store information as long as it is relevant to the agreement or cooperation you have with us. After this, we typically delete personal data unless there is another legal obligation dictating otherwise.
- Last but not least, we always store and process your personal data securely. We always protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.
What personal data do we process and why?
• Being able to send communication with existing or potential customers, including being able to answer inquiries regarding our services, services, and products
• Being able to provide the services and products that you or your business/employer request
• Being able to send you marketing material, including our newsletter, if you have signed up for it
• Other administrative or commercial purposes intended to ensure the consistency and quality of our services, e.g., customer satisfaction surveys
We only store the personal data that is relevant to our cooperation. Therefore, it usually involves information about:
• Work email address
• Work phone number
• Any information for billing purposes
Since we do not collect other personal data than those you or your employer send to us, we discourage you from sending personal data that are not relevant.Particularly sensitive personal data: We do not collect or process special categories of personal data or information about criminal convictions or offenses without a special and explicit agreement on this.The legal basis for processing your personal data is derived from the Data Protection Regulation. When we process personal data, it is either because it is
:• Necessary to enter into or fulfill a contract with the registered,
• Because we have another legitimate interest in the processing or
• Because we have obtained consent for the processing
When we base the legality on a legitimate interest, we have documented our considerations around this in what we call a 'Legitimate Interest Assessment' (LIA). If you wish to see this LIA, you can contact us using the provided contact information.Protection of your personal dataWe have implemented a number of technical and organizational measures to ensure effective protection of your personal data, e.g.,
• A number of policies, processes, and controls that ensure our employees can comply with current personal data legislation
• The guidelines and technical measures are continuously developed based on an assessment of the sensitivity of the information and the risks associated with the particular processing
• Access restrictions that ensure that only authorized employees or partners access personal data
We have supplemented these processes and policies with a series of technical security measures, including the use of firewalls, anonymization technology, as well as updating and implementing newer and more secure IT systems.In the event of a security breach, Flatpay has a contingency plan that ensures timely notification of the Data Inspectorate, and if the security breach involves a high risk to you, we will also immediately notify you.
The Data Protection Regulation grants you, as the registered individual, a number of rights. Many of these rights are complex, and we recommend that you read more at datatilsynet.dk to gain the best understanding of your rights for the sake of creating as much clarity as possible, we have made a brief summary of your rights below.
Right to access
Right to be forgotten
If a number of conditions are met, you have the right to have your personal data deleted before our usual deletion period.
Right to restriction of processing
If you object to our processing of your personal data, we will immediately stop all processing - except storage - until an agreement is reached or the Data Inspectorate makes a decision on this.
Right to objectIn some cases, you have the right to object to certain types of processing, for example direct marketing or automatic individual decisions.
Right to data portabilityIf you request access to your personal data, we ensure that the information is provided to you in a structured, commonly used, and machine-readable format.
Right to withdraw consent
If we base the processing of your personal data on consent, you have the right to withdraw your consent at any time. You can do this by contacting us at our contact details.
Right to complain
Should you, contrary to expectations, be dissatisfied with our processing of your personal data, you have the right to complain to the Data Inspectorate at any time.Contact and complaint guidanceIf you wish to object or complain about our processing of your personal data, you should immediately contact info@Flatpay.dk.
If you complain to Flatpay, it does not prevent you from concurrently complaining to the Data Inspectorate.
To access region-specific privacy policies, please visit the corresponding local site for each market using the link below.