Integrity policy

Updated: 2020-09-21

We will process your personal data when you use vChain’s services, contact us or visit our website. vChain will also use electronic communications channels to send information to you. Our processing of personal data is described in this policy. It is important that you read and understand our integrity policy before using our services.  

vChain is the data controller for the processing of the personal data you share with us when:

  • you order the service
  • you receive login details and become a user of the service
  • you use vChain portal vOne or globl
  • you have a question and/or contact us
  • you visit our website and accept cookies

 

When you use our service, you will probably be processing the personal data of other people (typically name, address, e-mail, phone number of consignee, consignor and other parties connected to consignments). You and your company are data controllers and consequently responsible for the processing of personal data in accordance with the GDPR. The website of the Swedish Data Protection Authority contains detailed information and guidance for data controllers. For this type of information, vChain acts as a data processor with its main responsibility being to ensure that the availability and storage of personal data is performed in a secure manner.

 

What personal data do we process about you?

When you order the service, we collect your contact and company details. All users have contact details, login details, and online identifications registered so they can use the service. When using vOne, you register your e-mail address and / or phone, which will then be processed by us. If you have a question or you contact us regarding any other matter, the amount of personal data and what it is may vary, depending on the communication channel used. Categories of personal data are often contact details, online identifications, company details, and the matter itself as unstructured material, which contains the personal data you have chosen to share with us. A detailed list of the personal data that appears in the different categories, on what occasions, and the legal basis for processing are provided in Appendix 1.

 

What personal data do we process about you?

When you order the service, we collect your contact and company details. All users have contact details, login details, and online identifications registered so they can use the service. When using vOne, you register your e-mail address and / or phone, which will then be processed by us. If you have a question or you contact us regarding any other matter, the amount of personal data and what it is may vary, depending on the communication channel used. Categories of personal data are often contact details, online identifications, company details, and the matter itself as unstructured material, which contains the personal data you have chosen to share with us. A detailed list of the personal data that appears in the different categories, on what occasions, and the legal basis for processing are provided in Appendix 1.

 

Why do we process your personal data?

vChain collects personal data about you as a user and customer in order to provide the service, fulfil commitments to you in accordance with the agreement, and provide you with the best possible experience of our services and our website. It is necessary, so that we can identify you and administer your account, for statistical purposes and for direct marketing (from which you can unsubscribe). The personal data collected when you order a service is required to process your order and to send invoices and login details to you. We will also use it to inform you, via phone, email or normal post, about offers complementing or replacing functionality and/or transport services supported in the service (from which you can unsubscribe). When using the service, personal data is required to give you access to the service, to identify you and to know which users and customers use the service. When contacting us via any of vChains´ communications channels, your information will be used to handle the question, contact you and help us improve our service by saving the case for recurring questions. If you visit vChains’ website, you agree to cookies for processing your information.

 

Who do we share personal data with?

When using our services, we may share personal data with subcontractors to vChain both inside and outside the EU/EEA. Subcontractors  have similar obligations regarding the processing of personal data that you as a customer have agreed with us.

 

For how long do we save your personal data?

The time period for which your personal data is stored by us varies depending on the purpose of the data collection. vChain saves personal data about you as a customer as long as we have customer-supplier relationship, or it is necessary for any other reason stated in this policy. On termination of the agreement, vChain will delete or anonymize your data within a reasonable period of time after termination, unless other Swedish or European law, court or authority states otherwise. Your data can also be saved, based on the legal ground of pursuing a legitimate interest. Personal data collected when you contact us is stored as long as you are a customer with us so that we can fulfil our commitment. On completion of a customer relationship, we can store it, based on the legal ground of pursuing a legitimate interest, as evidential material in the event of problems that may arise.

 

What rights do you have?

As a registered customer with vChain you have several rights that you ought to know about. You have a right to request a registry extract of any information that is registered about you, free of charge once a year, provided you have legitimate reasons. In some cases, you also have the right to data portability of your personal data. You have the right to have your personal data rectified if it is incorrect, incomplete or misleading, and the right to the restriction of processing of personal data until it is rectified. You have the right to erasure (‘right to be forgotten’), but the deletion of personal data cannot be carried out if it is required for us to fulfil the agreement or other Swedish or European law, court or government decision states otherwise, and if it is based on a pursue legitimate interests. Should you feel that there are no legitimate reasons or the pursue legitimate interests is incorrect, you may object to the processing. You also have the right to withdraw a consent, submit complaints about processing to the Swedish Data Protection Authority, and you have the right to oppose automated decision-making, profiling and the right to oppose direct marketing.

 

Amendments to this  integrity  policy

vChain may, from time to time, make changes to this integrity policy. The latest version of the integrity policy is always available here.

vChain cares about your personal  integrity. This integrity policy explains how vChain collects and uses your personal data. It also explains your rights in relation to us and how you can  assert  your rights. You can always contact us with questions about  integrity  and data protection issues by sending an e-mail to us at dpo@vchain.se.