Personal data is information that can identify you as a person, such as an email address, street address, telephone number, etc.
What personal data does Visma process?
Personal data that Visma may process about you includes:
- Basic personal information, such as name, address, telephone number, email, and demographic information.
- Information about users and web traffic, such as login ID, username, and IP address.
- Financial information, such as invoice-related information.
- Content that you have uploaded or shared, such as photos, comments, articles, and video clips.
- Statistics showing how users use our software and consume the content that we offer.
- Information via job applications.
For the purposes mentioned in the section “Why we process personal data”, Visma does not process sensitive personal data about you.
How we collect your personal data
In general, Visma collects personal data directly from you or other persons associated with our customers. If the customer you work for buys Visma products or services through a Visma partner company, we may collect information about you from that partner company.
In some cases, we may also collect information about you from other sources. These sources may be data aggregation from a third party, Visma’s marketing partner, public sources, or third-party social networks.
Why do we process your personal data
Purchase and deliver
- Manage customer orders, agreements, and payments.
- Offer services directly to you, such as e-learning, webinars, and reports.
- Offer products and services to customers.
- Create and manage accounts for users of our services.
Support and improvements
- Improve and develop quality, functionality, and user experience within our products, services, and Visma websites.
- Offer customer support for our products and services.
- Run user forums to educate and enable interactions between users and Visma Security.
- Detect, prevent, and assist when it comes to security threats, as well as to perform maintenance and troubleshooting.
- Manage and send marketing materials.
- Create interest profiles to market relevant products and services (profiling).
- To manage recruitment processes and job applications.
- Evaluate submitted documents, conduct interviews, and communicate with given references.
Information on how personal data is processed in one of our many services is described in the respective data processing agreement for that service. In these cases, Visma acts as a data processor and processes the data on behalf of – and according to, instructions from the customer. For more information on the matter, please contact customer support.
Legal basis for processing your personal data
Visma processes personal data on several legal grounds.
In agreement with you
We process your personal data based on a legally binding agreement with you, such as when you apply for a job through Visma. Processing your personal data, such as your resume, applications, and references, are all necessary parts of handling requests from applicants before a contract is entered into.
Visma may process your personal data based on your consent. You always have the option to withdraw your consent after it has been given.
Visma has a legitimate interest in processing your personal data for security, support, and improvements. This also applies when you act as a contact person for an existing or potential customer. Your personal data is processed from a business perspective in such a way we believe does not conflict with your rights as a private person.
How your personal data is shared
Since Visma consists of many different subsidiaries, it is important for us to provide you with the best possible experience overall. To maintain an overview and insight, Visma may share your personal data between companies within the Visma Group.
Outside of Visma
Visma may also share your personal data with external, third parties in the following contexts:
Visma User Forum (Communities)
If you make a post, comment, or similar on the Visma User Forum, or other forums on any of Visma’s websites, this information may be read and used by others who have access to these forums. Visma is not responsible for any of the information you provide on such forums or on Visma’s websites.
Visma may share your personal data with our partners it is in accordance with legitimate interest from a business perspective. This also needs to be in accordance with applicable data protection legislation.
The Police Authority and other authorities may request access to personal data from Visma. In these cases, Visma only provides the information if there is a court order to do so.
For how long is your personal data stored?
Visma only stores your personal data for as long as it is deemed necessary to fulfill our contractual obligations. When we process your personal data on other legal grounds, such as legitimate interest, the information is stored for as long as necessary to fulfill the purpose of the processing.
Consequently, your personal data may be subject to different storage policies based on the type of data and the purpose of collecting it. Examples are as follows:
Contact information stored for marketing purposes, including leads or potential customers, such personal data will be deleted no longer than 24 months after the last registered activity.
Your basic rights
You have the right to access your personal data by requesting an overview of the personal data we process about you, you may have the right to data portability. You may also have the right to request that Visma corrects any inaccuracies in your personal data.
Marketing and profiling
The legitimate interest
When you interact with Visma, such as by visiting Visma’s websites, downloading content, participating in webinars, and by using Visma’s services, Visma will process your personal data based on legitimate interest.
One of Visma’s legitimate interests are to process personal data for direct marketing purposes.
Visma uses your personal information to provide you with relevant content through direct marketing on social media platforms, as well as through email, websites, or within a Visma service, based on your preferences. The personal data we process is aggregated information about you, such as IP address, interests (when you may have clicked, etc.), username, and device. This is done through cookies and is called profiling. Visma will also have the opportunity to combine this information with intell into the customer relationship we may have with your company.
The purpose of profiling is to deliver personalized marketing to you, improve your user experience of our services/websites, and provide products that our customers are satisfied with. Visma’s services are generally used as tools for work-related purposes, and your behavior in their tools says little about your privacy. No sensitive data is processed. Your personal information is therefore processed from a business perspective in a way that we assess is not in conflict with your freedoms and rights as an individual.
Visma uses email as a tool for communication marketing, but only with your consent and in accordance with applicable marketing laws (if required). If you have given your consent, you will always have the opportunity to opt-out as described below, or when you receive an email containing marketing material.
Your right to opt-out of marketing communication
You have the right to opt-out of receiving marketing material from Visma and being subject to profiling. You may do so by following the opt-out instructions in marketing communication.