Privacy policy

Scope of this Privacy Notice

This Privacy Notice describes how Valuation Europe AB, trading as Valu8 (“Valu8”, “we”, “us” or “our”), processes personal data in connection with its website, client and user relationships, and its corporate-information database and related services. It applies to clients and users of Valu8’s services and to individuals whose business roles, ownership or beneficial ownership information appears in the corporate-information database.

For the processing described in this Privacy Notice. Valu8 acts as the data controller.
Nothing in this Privacy Notice shall be interpreted or construed to limit other rights available to you under applicable law. We may provide a separate or supplementary privacy notice for a particular product, service or processing activity. Where we do so, that notice will apply to the processing it describes.

Notification of changes to this Privacy Notice

Valu8 may update this Privacy Notice from time to time to reflect changes in its services, business practices, technology or applicable law. The current version will be posted on Valu8’s website and the Effective Date above will be updated. Where changes are material, Valu8 will provide any additional notice required by applicable law, which may include a prominent notice on the website or another appropriate communication.

Collection, use and disclosure of personal data

Corporate information from public and authoritative sources

Valu8 processes personal data relating to individuals involved in companies and other organisations through a key position, board membership, ownership or beneficial ownership. This information is used to provide enriched and verified corporate information to authenticated business subscribers.

The personal data processed for this purpose may include name; date or year of birth; personal registration number where legally permitted and necessary board, management or other corporate position; number of shares; direct or beneficial ownership interests; business or other officially registered address;

We obtain this information from sources such as company, beneficial-ownership and insolvency registers; official gazettes; securities, regulatory and other official filings; court or public authority records where lawfully accessible; corporate websites; and other publicly accessible business sources. We may receive this information directly from competent public authorities or through Valu8’s affiliates and third-party data suppliers using data feeds, application programming interfaces or other secure transfer methods. The role of each supplier depends on the circumstances. Some suppliers process personal data independently for their own purposes, while others process personal data on Valu8’s instructions and are subject to contractual data protection and security obligations.

Information not obtained directly from you

We generally obtain the corporate information described above from public or authoritative sources rather than directly from the individual concerned. This Privacy Notice is made publicly available to explain that processing.

Where required by applicable law, we provide this information directly to affected individuals within the applicable period. In some circumstances, direct provision of the information to every affected individual may be impossible or involve disproportionate effort, particularly because of the scale, age or source of the records. Where Valu8 relies on an applicable exemption from direct notification, it takes appropriate measures to protect individuals’ rights and interests, including making this Privacy Notice publicly available, limiting the information processed, restricting access to authenticated business users, maintaining correction and objection procedures, and applying contractual and technical controls to the use of the service

Client and user information

Valu8 also processes limited personal data relating to clients and users where necessary to provide and administer subscriptions and access to the Valu8 services, manage the business relationship, respond to enquiries and support requests, maintain security, and communicate about the services.

Information collected through the website

Valu8 uses cookies and similar technologies on its website as described in the Cookies section below. These technologies may collect information about use of the website and are used for necessary website functionality and, where permitted, analytics, preferences and marketing.

Sensitive personal data

Valu8’s corporate-information service is intended to process business-related identity, role and ownership information described above Valu8 does not seek to collect special categories of personal data for the purposes of the corporate-information database.

Links to other websites

Valu8’s website may contain links to websites operated by third parties. These links are provided for reference and convenience only and do not imply any endorsement of the activities of these third-party websites or any association with their operators. Valu8 does not control those websites and is not responsible for their operation, content or privacy practices. You should review the privacy information provided by any third-party website before providing personal data.

Cookies

Cookie Declaration

Valu8 uses cookies and similar technologies to operate and secure its website, to provide social media features, and to analyse our traffic. We also share information about your use of our site with our social media, advertising and support marketing analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services. Our HTML-enabled emails and Website contains hyperlinks to other pages on our Website. We may use technology to track how often these emails are accessed, links are used and which pages on our Website our visitors choose to view.

Cookies are small text files that can be used by websites to make a user's experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Learn more about who we are, how you can contact us and how we process personal data in our Privacy Notice.

The live cookie declaration and cookie settings tool on our website provide current information about the cookies and similar technologies in use, including their providers, purposes and duration.

Use of personal data and legal bases

Valu8 processes personal data only where it has a valid legal basis under applicable data protection law. The principal purposes and legal bases are set out below.

For Valu8’s processing of publicly available corporate informationValu8 relies principally on legitimate interests when it collects, verifies, organises and provides corporate information from public and authoritative sources. Those interests include promoting corporate transparency and accountability, informed business decision-making; support for KYC and AML compliance; due diligence and risk and management.

In carrying out this assessment, Valu8 considers that the information is already available from public or authoritative sources, is limited to information relevant to corporate transparency and business purposes, and is made available only to authenticated subscribers with legitimate business purposes. Valu8 also recognises the privacy rights and interests of the individuals concerned and limits access and use accordingly.

Where Valu8 relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing of personal data

Valu8 makes corporate information available to authenticated business subscribers as part of the Valu8 services. Subscribers may use that information only for authorised business purposes, such as due diligence, corporate research, risk assessment, compliance and informed business decision-making, subject to their agreement with Valu8 and applicable law. Subscribers are responsible for ensuring that their own use of personal data has an appropriate legal basis and complies with applicable data protection law. Valu8 may restrict or terminate access where it identifies misuse or use for an incompatible purpose. Subscribers must not use the service for unlawful discrimination, unauthorised consumer credit or employment decisions, harassment, or other purposes prohibited by their agreement with Valu8 or applicable law.
Valu8 may disclose personal data to various third-party service providers that support the operation, hosting, security, maintenance and delivery of Valu8’s website and services. These providers act under appropriate contractual, confidentiality, data protection and security obligations.

Valu8’s hosting provider acts as a processor on Valu8’s behalf under a data processing agreement. The server infrastructure used to host the Valu8 service is located in Sweden, Germany and the Netherlands. Approved sub-processors may be used where necessary to provide or support the services.

Valu8 may also disclose personal data where necessary to professional advisers, auditors, insurers, competent authorities or other recipients where disclosure is required or permitted by law, or where necessary to establish, exercise or defend legal claims.

In the event of a corporate sale, merger, reorganisation, dissolution, acquisition, financing, transfer of assets or similar transaction, personal data may be disclosed or transferred as part of that transaction, subject to applicable data protection law and appropriate confidentiality and security measures.

Valu8 does not make the corporate-information database available to the general public. Access is restricted to authenticated users with an active Valu8 subscription or another authentication method approved by Valu8.

Retention

Valu8 retains personal data only for as long as reasonably necessary for the purposes described in this Privacy Notice, including to provide and secure its services, maintain accurate corporate records, comply with legal obligations, resolve disputes and establish, exercise or defend legal claims.

Due to the legal and commercial interest in the information, combined with its public nature, and the fact that the information, through public authorities, is widely available, the information is not obsolete and is constantly available. To protect personal integrity, personal data of individuals who no longer have an active role in a company are stored for five years to allow compliance with AML and KYC requirements. Valu8 performs annual checks of the database to delete obsolete data.

Data security

Valu8 maintains appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access..The personal data is only accessible for users with an active subscription to Valu8 services and a valid password generated by Valu8. The Valu8 platform is only accessible via a firewall to prevent unauthorized data access. The personal data available is minimized by not allowing access to unique personal identifiers such as personal registration number. Access to source data is restricted to key employees. The personal data is encrypted to ensure that any unauthorized access to data will not result in personal data being compromised.

International transfers

Personal data is primarily hosted in the EU/EEA, including in Sweden, Germany and the Netherlands. It may also be accessed or otherwise processed from outside the EU/EEA by Valu8 group companies, service providers or approved sub-processors where necessary to provide, support, secure or administer the services.

Where personal data is transferred to a country that is not recognised as providing an adequate level of protection, Valu8 uses an appropriate transfer mechanism required by applicable law. This may include the European Commission’s standard contractual clauses, together with supplementary contractual, technical or organisational measures where appropriate.

You may contact Valu8 using the details below to request further information about the countries in which personal data is processed and the safeguards applicable to international transfers, including information about how to obtain a copy of relevant contractual safeguards.

Your rights

Depending on the applicable law and the circumstances, you may have the following rights in relation to your personal data:

• the right to obtain confirmation as to whether Valu8 processes personal data concerning you and to obtain access to that personal data and related information;

• the right to have inaccurate personal data corrected and incomplete personal data completed;

• the right, in certain circumstances, to request erasure of your personal data;

• the right, in certain circumstances, to request restriction of processing;

• the right to object to processing based on legitimate interests, including profiling based on those interests;

• where processing is based on consent, the right to withdraw consent at any time;

• where applicable, the right to data portability for personal data you have provided to Valu8 and which is processed by automated means on the basis of consent or contract;

• the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, except where such processing is permitted by applicable law and appropriate safeguards are in place; and

• the right to lodge a complaint with a competent data protection supervisory authority.

Valu8 does not make decisions about individuals based solely on automated processing that produce legal effects or similarly significant effects.

These rights are subject to the conditions and limitations set out in applicable law. In some circumstances Valu8 may be permitted or required to retain information or may be unable to fulfill a request in full.

Exercising your rights and complaints

To exercise your rights or ask a question about Valu8’s processing of personal data, please contact the Data Protection Officer using the details below. Valu8 may need to verify your identity before responding to a request and will respond within the timeframe required by applicable law.

If you believe that Valu8’s processing of your personal data infringes applicable data protection law, you may lodge a complaint with a competent supervisory authority, including the authority in the country of your habitual residence, place of work or place of the alleged infringement. Valu8’s lead supervisory authority in Sweden is Integritetsskyddsmyndigheten (IMY).

Contact us

Valuation Europe AB
Data Protection Officer

Karl von Baumgarten
dpo@valu8group.com