1. Data Controller
Bilbo Glans AB (org. no. 559401-XXXX) is the data controller for the processing of your personal data. If you have questions about how we process your data, please contact our Data Protection Officer at privacy@bilboglans.se. We take data protection very seriously and comply with Regulation (EU) 2016/679 (GDPR) and applicable Swedish supplementary legislation.
2. What Personal Data We Collect
We collect the following categories of personal data: (a) Identification data: name, email address, phone number, personal identity number for BankID verification. (b) Vehicle data: registration number, make, model, color. (c) Payment data: transaction history, payment method (full card numbers are not stored). (d) Usage data: IP address, device type, operating system, app version, page views, click behavior. (e) Location data: GPS position for booking and service delivery tracking. (f) Communication data: message history with support and BilboAI chat.
3. Purposes and Legal Basis
We process your personal data for the following purposes: (a) To perform a contract with you – booking processing, payments, and service delivery (legal basis: Article 6.1(b) GDPR). (b) To comply with legal obligations – accounting, regulatory compliance (legal basis: Article 6.1(c) GDPR). (c) For legitimate interests – security monitoring, fraud prevention, business development (legal basis: Article 6.1(f) GDPR). (d) Based on your consent – marketing, user behavior analysis (legal basis: Article 6.1(a) GDPR). You may withdraw your consent at any time.
4. Retention Period
Your personal data is stored only as long as necessary for the purposes for which it was collected. Account data is retained for the lifetime of the account and up to 36 months after termination. Booking history is retained for 24 months for warranty claims and complaints. Payment data is retained in accordance with accounting law requirements (7 years). Communications data is retained for 12 months. Analytics data is anonymized after 12 months.
5. Sharing of Personal Data
We share your personal data with: (a) Service providers (car care partners) – only necessary information for service delivery. (b) Payment processors (Swish, Klarna, Adyen) – for transaction processing. (c) IT providers (cloud services, hosting, analytics tools) – under strict data processing agreements. (d) Authorities – when legally required. We never sell your personal data to third parties.
6. Your Rights
You have the following rights: (a) Right of access – you may request a copy of the data we process about you. (b) Right to rectification – you may request correction of inaccurate data. (c) Right to erasure – you may request deletion of your data ("right to be forgotten"). (d) Right to restriction – you may request restricted processing. (e) Right to data portability – you may request your data in a machine-readable format. (f) Right to object – you may object to processing for direct marketing. Contact us at privacy@bilboglans.se to exercise your rights. We will respond within 30 days.
7. Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including: encryption at rest and in transit (TLS 1.3), access controls based on the principle of least privilege, regular security audits and penetration tests, staff data protection training, and incident response procedures for data breaches.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyze usage, and deliver relevant marketing. For detailed information about which cookies we use and how you can manage them, please see our Cookie Policy. You can change your cookie settings at any time via your browser settings.
9. Complaints
If you believe that our processing of your personal data violates applicable law, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, imy@imy.se.
10. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be notified via email or in-app notification. The latest version is always available on our website.