Privacy Notice and Cookie Policy

A blurry image of a blue and purple background.
A multicolored image of a white background.

This privacy policy (“Privacy Policy”) applies when Gigapay AB (Corp. ID. No. 559070-3616), Box 3181, 103 63 Stockholm, Sweden (”Gigapay” also referred to as “we”) provides the service (“Service”) described in our terms and conditions (“Terms and Conditions” and “Terms and Conditions - International”).

You should always feel secure when providing personal data to us. This Privacy Policy is designed to show you how your personal data is processed securely in accordance with applicable legislation.

When the Service is used, several parties can be involved. This Privacy Policy only applies in relation to the processing performed by Gigapay in its capacity as data controller. Therefore, we recommend that you also read the privacy policies of the other parties who may be involved in the use of the Service, for example, the parties for which you carry out your tasks.

In order to use the Service, you must, in addition to the requirements set forth in the Terms and Conditions, accept this Privacy Policy.


Personal data controller and data protection officer


Gigapay is the data controller for Gigapay’s processing of your personal data and is responsible for ensuring that the processing takes place in accordance with applicable legislation.

You may submit inquiries regarding personal data protection, privacy and security matters to  security@gigapay.se, +46 (0) 79 104 29 29. For a quicker response please write GDPR - DPO in the subject line and describe your case.

How we process your personal data

Gigapay will process your personal data for the following purposes and for the following legal reasons.

For service in general

Providing, administering, developing and adapting the Service and allowing for support and customer service for you as a user.

Legal basis

The processing is necessary to fulfil the agreement with you as a user.

Categories of Personal Data

Name; Personal number; Date of birth; Address; Email address; Bank account number; Phone number; Details on income; ID documents; Work and residency permits; Medical certificate; SINK tax document; A1 certificatetax information and other documents; VAT number; TIN number; Company registration number; IP-number

For legal requirements

Fulfilling statutory requirements, for example, security requirements.

Legal basis

The processing is necessary to fulfil Gigapay’s legal obligations.

Categories of Personal Data

Name; Personal number; Date of birth; Address; Country of residence; Nationality; Email address; Bank account number; Phone number; Details on income; ID documents; Work and residency permits; Medical certificate; SINK tax document; A1 certificatetax information and other documents; VAT number; TIN number; Company registration number

For marketing

We will use your personal data to generate and send ads, newsletters, notifications, information, surveys and invitations through multiple communication channels. Ads, promotions and other direct marketing communication may be distributed through email, sms, phone calls or postal mail as well as displayed in your mobile app, social media channels or web browser.

Legal basis

Targeted marketing is done after obtaining your consent.You can remove your consent at any time by clicking on “Unsubscribe” in any of our newsletters, by updating your settings on your page, or by contacting us on the contact form.

Categories of Personal Data

Name; Address; Email address; Phone number; IP number

For business development, market, and customer analysis

Enable business follow-ups, market and customer analysis, market research, and developing businesses and methods via regular mail, email, phone call, SMS, or the app.

Legal basis

The processing is necessary to meet Gigapay’s legitimate interest to improve its Service and other similar services to you as a user (as so-called weighing of interests).

Categories of Personal Data

Name; Address; Email address; Phone number

At any time you can withdraw the provided consent regarding Gigapay’s services by providing written notification to Gigapay.

Retention Period

Your personal data is stored as long as is needed to fulfill the objectives that require the data to be collected in accordance with this Privacy Policy and to comply with laws and regulatory requirements. You may cancel the use of the Service at any time. Gigapay does not retain your personal data after you have canceled use of the Service according to this section, unless it is required by law or to protect Gigapay’s legitimate interests, for example, in case of a legal proceeding.

Who do we share your personal data with? 

We share your personal data as follows:

  • Gigapay may share your personal data with a third party, companies who provide services and support related to the Service as well as group companies, in order to be used by the recipient to fulfill the purposes for processing your personal data.
  • In some cases, Gigapay is required to disclose personal data about the User to the Client. The Client needs, from time to time, to access and process the personal data of the User who undertakes assignments on its behalf. The processing is necessary in order for Gigapay to enter into and fulfill our contractual obligations with the Client. 
  • Gigapay may also share your personal data with the police or other government authorities, e.g. to report fraud or pursuant to a compelling request.
  • Gigapay may share your personal data in other cases where you have given your consent to share it or when we are otherwise legally entitled to do so.
  • Gigapay may disclose your personal data with other parties in connection with corporate transactions (i.a. mergers, joint ventures, assignments, spin-offs, acquisitions, reorganisations, transfers or sale or disposition of all or any portion of Gigapay’s business, including bankruptcy or similar proceedings).

Marketing 

We may contact you for marketing purposes as indicated above in the part where we describe how we are processing your personal data. Targeted marketing is only done after obtaining your consent. 

If you do not want Gigapay to use your personal data for direct marketing, you have the right to provide written notification of this to Gigapay at any time. Once Gigapay has received your notification, Gigapay will cease processing your personal data for marketing purposes. If you unsubscribe from marketing communication, we may still contact you with service information (e.g. information about our services, communication that fits within our weighting of interests and information about your rights).

Transfer of personal data to third countries

Gigapay will not transfer your personal data to any country outside the EU/EEA. However, recipients, partners and suppliers may move, store, transfer, or otherwise process your personal data outside of the EU/EEA, provided such transfer meets the requirements and undertakings which follow from the General Data Protection Regulation. Therefore, we recommend that you also read the privacy policies of the other parties who may be involved in the use of the Service. If recipients or suppliers are transferring personal data to a third party country, we always try to ensure that there are guarantees that the information and your rights are protected through e.g. the use of standard contractual clauses.

Your rights

Gigapay, in its capacity as the data controller, is responsible for ensuring that your personal data is processed in accordance with applicable law.

Gigapay will, at your request or on its own initiative, correct, de-identify, delete or complete information that is determined to be incorrect, incomplete or misleading.

You have the right to require from Gigapay access, correction or deletion of your personal data (for example, if deletion is required according to applicable legislation), request restrictions on continued processing of your personal data as well as the right to object to the processing (for example, if you question whether the personal data is correct or if the processing is legal).

You are entitled to data portability, in other words, the right under certain circumstances to receive and transfer your personal data to another data controller in a structured, generally usable and machine-readable format.

Once per calendar year, you are entitled to obtain an extract from the registry from Gigapay, free of charge with a signed, written request, indicating which personal data about you has been recorded, the purposes of processing the data and the recipients who have received the data or will receive the data. You are also entitled to receive information in the extract from the registry regarding where the data was collected, if the personal data was not collected from you directly, the occurrence of automated decision-making (including profiling) as well as the anticipated period during which the data will be stored or the criteria that are used to determine this period.

Protection of your personal data

You should always feel secure when providing personal data to us. Therefore, Gigapay has taken the necessary safety precautions to protect your personal data regarding unauthorised access, modification and deletion. However, please note that Gigapay disclaims any responsibility for or liability related to the security of any information that you are sending to us. There is a risk that such data may be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. Also, we cannot guarantee the security of your personal data from unauthorized access or use, hardware or software failure, or other circumstances beyond our control.

Cookies

We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services. Cookies are small text files that can be used by websites to make a user's experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission. This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages. You can at any time change or withdraw your consent from the Cookie Declaration on our website.

For more information see our cookie policy.

Changes to this privacy policy

Gigapay has the right to modify this Privacy Policy at any time. Gigapay will provide reasonable advance warning of changes to the Privacy Policy. If you do not approve of the modified terms, you have the right to cancel the agreement with Gigapay before the modified Privacy Policy takes effect.

Contact information

Please do not hesitate to contact Gigapay if you have any questions about this Privacy Policy, the processing of your personal information or if you would like an extract from the registry. Gigapay’s contact information can be found under the section “Personal data controller and data protection officer” in this Privacy Policy.

Cookie Declaration