Privacy Policy

Your privacy is our priority

1. Introduction

Gerd Bistand ('we', 'our') is committed to respecting your privacy and protecting your personal data. This policy explains how we collect, use and protect your information in accordance with the GDPR and Swedish law (Lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning).

2. Data Collected

Identification Data
  • Full name
  • Email address
  • Phone number
  • Postal address
  • Personnummer (Swedish identification number)
Financial Data
  • Estimated income
  • Financial situation (existing loans, etc.)
  • Banking information (Bankgiro, Swish)
  • Credit data (UC AB, Bisnode)
Navigation Data
  • IP address
  • Browser and device type
  • Pages visited and time spent
  • Cookie data (see Cookies section)

3. Purposes of Processing

Your data is used for:

  • Request processing: Analyze your financing request
  • KYC verification: Legal anti-money laundering compliance (Lagen om penningtvätt)
  • Communication: Contact you regarding your file
  • Contracts: Establish and manage the financing agreement
  • Service improvement: Optimize our services
  • Legal compliance: Comply with Swedish regulatory obligations

4. Legal Basis

Processing is based on:

  • Contract: Execution of loan agreement
  • Legal obligation: Anti-money laundering directives (Lagen om penningtvätt)
  • Legitimate interest: Fraud prevention
  • Consent: Marketing (newsletter) - opt-in

5. Data Sharing

Your data may be shared with:

  • Financial partners: For loan financing
  • UC AB / Bisnode: Swedish credit registers
  • Kronofogden (Swedish Enforcement Authority): If necessary
  • Service providers: Identity verification, notaries, etc.
  • Authorities: Upon request (Polisen, Skatteverket)

❌ NEVER: Sale to third-party advertisers. Your data is not commercialized.

6. Cookies and Trackers

Types of Cookies Used
Type Duration Purpose
Essential Cookies Session Site navigation, security
Analytics 13 months Google Analytics (anonymized)
Marketing 2 years Google Ads (if opt-in)

Consent banners: On first access, you can accept or refuse non-essential cookies in accordance with the ePrivacy Directive (Lag om elektronisk kommunikation).

7. Retention Period

Data Type Duration
Active loan file Contract duration + 7 years (Swedish law)
Rejected KYC 5 years (legal obligations Lagen om penningtvätt)
Navigation data 13 months (analytics)
Marketing (newsletter) 3 years or unsubscribe

8. Your Rights (GDPR)

You have the right to:

  • Access: Obtain a copy of your data
  • Rectification: Correct inaccurate data
  • Erasure: Right to be forgotten (except legal obligations)
  • Portability: Receive your data in a common format
  • Objection: Refuse marketing processing
  • Restriction: Temporary suspension of processing

To exercise a right: privacy@gerdbistand.com

Response time: Maximum 30 days (IMY recommendation).

9. Data Security

  • ✅ SSL/TLS encryption in transit
  • ✅ AES-256 encryption at rest
  • ✅ Servers located in the EU (GDPR)
  • ✅ Multi-factor authentication (MFA)
  • ✅ Annual security audit
  • ✅ ISO 27001 compliance

10. Data Protection Contact

DPO (Data Protection Officer):

  • Email : dpo@gerdbistand.com
  • Adresse : Gerd Bistand, Birger Jarlsgatan 15, 111 45 Stockholm, Sweden