Last updated: 17 augusti 2026
This Privacy Policy applies when AddComply (a Swedish limited liabaility company with registration number 559495-7960) processes your personal data.
If you have any questions or wish to contact us regarding this Privacy Policy or our processing of personal data, please email us at hello@addcomply.com.
Processing of personal data
This Privacy Policy explains how AddComply collects and uses personal data when you visit our website, contact us, interact with our online services, or are a customer, supplier or business contact.
Personal data processed within our SaaS platform is handled on behalf of our customers. In such cases, the customer acts as the data controller and we act as a data processor. This processing is governed by a separate Data Processing Agreement (DPA).
When you visit our website
When you visit our website, we process certain technical information, such as IP address and usage data, in order to ensure that the website functions securely and correctly, and to improve its performance.
We also use cookies and similar technologies. You may accept or refuse non-essential cookies through our cookie banner.
Personal data processed: IP address, browser type, pages visited, device identifiers, time spent on pages.
Legal basis: Consent (for non-essential cookies) and legitimate interest (for necessary cookies and security purposes).
For more information, please see our Cookie Policy and cookie banner settings.
When you contact us via forms on the website, by email, through LinkedIn or other social media
When you contact us through a form on our website, or directly via one of our email addresses, we process your personal data in order to handle your enquiry and respond to your request. This also applies when you attend a webinar or contact us through LinkedIn or other social media.
We may also use your contact details for marketing purposes, such as sending you offers and newsletters. You may object to direct marketing at any time, and we will stop processing your data for such purposes immediately.
Personal data processed: Name, workplace, job title, phone number, address, email address.
Legal basis: Legitimate interest.
When you are a customer of AddComply
We process personal data in order to provide our services in accordance with our agreement with the customer. This may include personal data relating to customer representatives, counterparties, and other relevant contacts.
We also process financial information in order to manage invoicing, payment reminders, payments, and accounting obligations.
Personal data processed: Name, job title, employer, contact details, assignment reference, description of the engagement, billing details, and payment information.
Legal basis: Legitimate interest, legal obligation and performance of a contract.
When you are an employee or contractor of our suppliers
If you are an employee or contractor of one of our suppliers, we may process your personal data in connection with our business relationship with your employer or contracting entity.
This processing is carried out for purposes such as invoicing, payment, administration of the contractual relationship, deliveries, and communication.
Personal data processed: Name, phone number, email address, and other information provided in the course of the relationship.
Legal basis: Legitimate interest.
Data retention – how long we keep your personal data
If you have given your consent, we will process your personal data until you withdraw your consent. You may withdraw your consent at any time, for example by clicking the “unsubscribe” link in our communications.
Personal data processed for contractual purposes is generally stored for as long as necessary to administer the relationship, exercise our rights, and fulfil our obligations. Where we have the right to retain your data for a longer period based on legitimate interest, we may store your personal data for an extended time.
Personal data relating to payments, where retention is required under accounting legislation, will be stored for seven (7) years in accordance with the Swedish Accounting Act.
Recipients of your personal data
Your personal data may be shared with IT service providers that process data on our behalf, so-called data processors. For example, cloud service providers may have access to your personal data. We have entered into data processing agreements with such providers, which, among other things, require them to process the information securely, lawfully, and in accordance with confidentiality obligations.
International transfers of personal data outside the EU/EEA
We and our suppliers and business partners generally process your personal data only within the EU/EEA.
In cases where personal data is processed outside the EU/EEA, such transfers are carried out in accordance with applicable data protection laws, based on either:
- an adequacy decision by the European Commission, or
- appropriate safeguards, such as the EU Standard Contractual Clauses (SCCs), ensuring that your rights remain protected.
Your rights as a data subject
You have the right to exercise the following rights under the GDPR. To do so, please contact us using the contact details above.
- Right to withdraw consent and to object to processing
You may withdraw your consent at any time and object to certain types of processing, including direct marketing. - Right of access
You have the right to request information about what personal data we process about you and how such data is processed. - Right to rectification
You have the right to have inaccurate data corrected and incomplete data completed. - Right to erasure (right to be forgotten)
You may request deletion of your personal data where applicable. - Right to restriction of processing
You have the right to request that we limit the processing of your personal data in certain situations.
-
- Right to data portability
If you have provided your consent or if the processing is based on a contract with you, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transfer those data to another controller, or to request our assistance in transferring the data where technically feasible. - Right to submit a complaint with the supervisory authority
If you have any complaints regarding our processing of your personal data, you have the right to submit a complaint with the relevant authorities (In Sweden: Swedish Authority for Privacy Protection (IMY) www.imy.se).
- Right to data portability