Privacy notice

Data controller

CoAccept AB, Reg. no. 559548-7405, registered in Stockholm, Sweden. Contact: gustav@remembill.com.

What is processed

Contact details you provide in the pilot form (name, email, company, phone number, message).

Bill reference data needed to present and pay a bill (invoice reference, amount, currency, due date, recipient, payment status).

Technical logs (IP address, timestamp, user agent, event log) generated automatically when the service is used.

Purposes and legal bases

Delivering the service and executing bill payments: necessary to perform the agreement with you, Article 6(1)(b) GDPR.

Handling pilot requests and customer correspondence: legitimate interest to reply to incoming requests, Article 6(1)(f) GDPR.

Security, abuse prevention and running the service: legitimate interest to protect the service and its users, Article 6(1)(f) GDPR.

Complying with legal obligations such as bookkeeping and payment-related requirements, Article 6(1)(c) GDPR.

Recipients and processors

Payment partners responsible for executing bank and card payments.

Hosting provider running the application and database within the EU/EEA.

Email delivery provider for transactional messages and customer communication.

Where needed: contracted debt collection partner for unpaid bills.

Storage within EU/EEA

Personal data is stored and processed within the EU/EEA. If a sub-processor exceptionally needs to transfer data outside the EU/EEA, this happens under appropriate safeguards required by the GDPR.

Retention

Contact details from the pilot form are kept for as long as needed to answer the request, and at most 24 months after the last contact.

Data tied to a completed payment is kept for as long as bookkeeping and tax law require, as a rule seven years.

Technical logs are rotated continuously and kept for at most 12 months.

Your rights

You have the right to request access, rectification and erasure of your personal data, to object to or request restriction of processing, and to data portability where applicable. Contact gustav@remembill.com.

Right to complain to IMY

You can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), the supervisory authority for personal data processing in Sweden. See imy.se for contact details.

Contact

Questions about this notice or the processing of your personal data are answered at gustav@remembill.com.