1.0 Initial policy
Crumbs AB ("Crumbs") highly values your personal integrity. Crumbs always strive to protect your personal data and comply with all laws and regulations for data protection wherever applicable. We follow the GDPR, and we always ask you to consent to Crumbs processing and saving information about you in our database. You consent to Crumbs storing this data by registering on the app. According to the Personuppgiftslagen (1998:204), you have the right to access this information. If deemed incorrect, incomplete, or irrelevant, you can request the information stored be corrected or deleted. You can also request to have your personal data transferred to you in an electronic format. If you have any questions regarding Crumbs’ processing of your data, please reach out to firstname.lastname@example.org. For any complaints regarding the data processing, please contact Integritetsskyddsmyndigheten at www.imy.se/om-oss/kontakta-oss/.
What type of information do we collect?
Crumbs receives, collects, and stores any information you enter on our website or provide. We collect the Internet protocol (IP) address used to connect your device to the Internet, name, e-mail address, and phone number. We also collect payment details such as your account number and transaction amount. In addition, we collect a traffic overview from our users, such as site sessions, unique visitors, and average session durations. We do not collect or store your social security number; we only process it through the open banking platform Tink’s Account Initiation services as specified below.
How do we collect the information?
When using the Crumbs’ services, your name, e-mail address, and phone number are collected during the sign-up process for user identification purposes. The user log-in authentication is done through the electronic identification system BankID and the open banking platform Tink’s Account Initiation services. Here, personal user data such as name, contact information, social security number, account information (account number and account history), purchases (amount and time of purchase), and geographic location are processed.
Why do we collect such personal information?
We collect the above-mentioned non-personal and personal information for the following purposes: To provide and operate the Crumbs’ services; to provide our users with ongoing customer assistance and technical support; to be able to contact our visitors and users with general or personalized service-related notices and promotional messages; to create aggregated statistical data and other aggregated and/or inferred non-personal information, which our business partners or we may use to provide and improve our respective services; to comply with any applicable laws and regulations.
How do we store, share and disclose the information?
We use 256-BIT AES encryption to store sensitive user data securely. The data is made accessible when the open banking platform Tink provides its Account Initiation services to us. The data disclosed to us are only such data necessary to utilize the Tink service requested by Crumbs. Tink retains the data up to one year after the service was performed, as do we. Please note that the user data may be deleted after a shorter time period than one year. All types of data logs generated from Crumbs are stored in MongoDB and hosted at Amazon Web Services.
How do we communicate with our site/app visitors?
We may contact you to notify you regarding your account, to troubleshoot problems with your account, to resolve a dispute, to collect fees or monies owed, to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you to enforce our User Agreement, applicable national laws, and any agreement we may have with you. For these purposes, we may contact you via email from email@example.com.
Questions and our contact information
If you would like to: access, correct, amend or delete any personal information we have about you, you are invited to contact us at firstname.lastname@example.org.