Last updated
april 6, 2023
Instabee Platforms
Privacy Notice
1. Introduction
1.1 Instabee Group AB and its subsidiaries and affiliates within the Instabee Group ("Instabee", "we", or "us") are committed to respecting and protecting your privacy. Our goal is to be clear about what personal data we collect and how we use and protect it in accordance with applicable laws and regulations.
1.2 Although this privacy notice refers to “Instabee”, “we” or “us”, only an individual Instabee company is and can be the data controller for each individual processing of personal data. For information about which company within the Instabee Group that is the data controller, see section 7 ("Contact details of the data controller and the data protection officer”) below.
1.3 In this privacy notice, we explain how Instabee, acting as the data controller, may process personal data as a result of its Instabee website platform where Instabee offers its transport services to various partners for managing deliveries of Instabee (“Small-Medium-enterprises) webshops merchants.
2. What Personal Data Do We Process and From Where Have We Obtained It?
2.1 We have received personal data from at least one employee working at a partner’s company registering and-or executing the Transport Services Agreement.
When registering an account on Instabee’s platform, we’ll process the following type of data: full name, email address, phone number as well Company name, display name, org. Number, webshop category (eg fashion, electronics), estimated annual volume, ecommerce platform used.
Should a partner decide to use our Transport Services, an agreement shall be executed between us and said partner, in which name, email address, phone number, invoicing address, postal code, country and city, applicable invoicing currency will be processed.
3. For What Purpose Do We Process Your Personal Data?
3.1 We process your personal data for the following purposes:
To allow prospective partners to access our platform where all information about our potential business partnership can be found (API documentation, pricing structure etc);
To execute a Transport Services Agreement and further manage said relationship
In fine, we also process some of above personal information for finance purposes
4. What Are the Legal Basis Associated With Each Of the Above Processing?
4.1 The legal basis related to the processing for the account registration is based on our legitimate interests, whereas the legal basis of the execution and management of the Transport Services Agreement is contractual.
4.2 The personal data included in the agreement is also further processed for meeting some of our legal obligations imposed on us (tax and accounting records, or contracts records).
5. How Long Do We Keep Your Personal Data?
5.1 If you have not signed any Transport Services agreement, we’ll keep your account active for one year.
5.2 We’ll keep the Transport Services Agreement and any tax or accounting records after termination of our business relationship to fulfil some of our legal obligations.
6. Recipients of Your Personal Data
6.1 Your personal data may be shared with subsidiaries and affiliates within the Instabee Group and to selected employees on a need to know basis.
We may also, on a case to case basis, share your personal data to our professional advisors (e.g. attorneys and auditors), if deemed necessary in connection with the handling of a report. In the event that we sell or buy any business or assets, personal data may be disclosed to the prospective seller or buyer of such business or assets;
Based on your consent, we may share your personal data also to other third parties, such as competent authorities, court or tribunals, unless we are under a duty to disclose or share your personal data in order to comply with any legal obligation, to protect the rights, property or safety of Instabee, our customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.
We will never sell your personal data to any third party. However, we may share your personal data with companies who are experts in their field and assist us in operating our operation and conducting our business or servicing you. Each of our service providers have been selected by us for their ability to provide the particular services needed, including their ability to handle your personal information. All those providers provide sufficient guarantees to implement the technical and organisational measures necessary to meet the requirements of the GDPR and our own.
7. Your Rights in Connection With Our Processing
7.1 Pursuant to applicable data protection legislation, you have certain rights in relation to us.. These are set out in general below:
Right of access (register transcript) – a right to information about our processing of your personal data and access to it.
Right to rectification – a right to have erroneous data rectified and partial data completed.
Right to object – a right to object to our personal data processing about you if it takes place based on a legitimate interest.
Right to erasure – a right to have your personal data erased under certain circumstances unless the data is necessary for a particular purpose or there is another legal ground for the processing.
Right to restriction of processing – a right to request that personal data processing is restricted, e.g. if you contest the accuracy of the data. Our access to the data is restricted while the accuracy of the data is investigated.
Right to data portability – a right to request that personal data are transferred from one data controller to another. This right is restricted to data that you have supplied to us yourself.
7.2 Some of the rights above are only applicable in certain situations. If you want to exercise any of these rights, or get more information, please contact us via the contact details below in section 7. Kindly note that the processing described in this privacy notice does not include automated decision-making. You always have the right to file a complaint about how we process your personal data to the relevant supervisory authority. Depending on where you are a resident, there are different supervisory authorities you may contact, see the table below.
Belgium
Autorité de protection des données / Gegevens-beschermings-autoriteit
8. Contact Details of the Data Controller and the Data Protection Officer
8.1 If not specifically indicated or communicated otherwise, Instabee Group AB is the data controller in respect of the processing of personal data described in this privacy notice.
Instabee Group AB | ||
Org. No: 559396-6236 Address: Hälsingegatan 40, 113 43 Stockholm, Sweden | ||
Contact details for DPO: dpo@budbee.com or dpo@instabee.com |
9. Updates and Questions
9.1 We will keep this privacy notice under regular review, continuously updating it when deemed necessary. If significant changes are made, and if such a change requires a notice or consent under applicable law, you will be notified of this or given the opportunity to issue your consent (if necessary).