Version DECEMBER 2021
This processor privacy statement describes how the Acubiz mobile application (“Acubiz app”) and the Acubiz web interface (“Acubiz web”), which is provided by the company Visma Acubiz A/S (“Visma Acubiz” or “we”; “us” and “our” defined correspondingly), collect, use and share personal data about you (the “User” or “you”) as you use Acubiz software.
The Acubiz app and Acubiz web has been developed to be used as an integral part of the Acubiz expense management service (“Acubiz”), which is provided by Visma Acubiz to business customers. The purpose is to make it possible for businesses to provide their employees, board members, etc. an easy way to register and approve business related expenses, mileage tracking as well as time and absence reporting by using Acubiz app and Acubiz web.
Personal data about you collected via Acubiz and are collected due to your relationship (typically as an employee, board member, volunteer or teacher) with one of our business customers (the “Customer”) with whom Visma Acubiz has entered into an agreement regarding access for the Customer to use Acubiz. When the Customer, typically via an Acubiz pro-user working in the Customer’s finance, payroll or HR department, configures you as a user of Acubiz, personal data about you, such as full name, initials and work e-mail address, are registered by the Customer into the Acubiz solution; and as Acubiz (including the Acubiz app and Acubiz app) is subsequently used by you and the Customer, additional personal information may be collected and processed as further explained below.
Acubiz acts as a data processor for the Customer and this processor privacy statement is only intended to provide certain additional information to you regarding Acubiz.
The Customer is the data controller with regard to personal data about you that is collected and/or otherwise processed via the Acubiz app and Acubiz web. Visma Acubiz thus only acts as a data processor for the Customer in this regard. Therefore, Visma Acubiz has entered into a Data Processing Agreement with the Customer, to ensure that we only collect and process personal data as instructed by the Customer and in accordance with the EU General Data Protection Regulation (GDPR). This processor privacy statement does not change any terms of any agreement with the Customer but is simply intended to provide certain information to you regarding the Acubiz app and Acubiz web.
It is emphasized that this processor privacy statement is provided strictly for information purposes. The processor privacy statement does not constitute a contractual promise by Visma Acubiz to you. Furthermore, for the avoidance of doubt, the existence of this processor privacy statement does not in any way change that the Customer is regarded as the data controller within the meaning of applicable data protection laws in relation to the personal data about you that is collected and/or otherwise processed via the Acubiz app and Acubiz web. The information provided in this privacy statement does not replace any information that the Customer may, in order to fulfil its obligations as a data controller, provide, or may already have provided, to you regarding its processing of personal data, and you should direct to the Customer any question about how data about you is processed within or relating to Acubiz (including the Acubiz app and Acubiz web).
The Acubiz app and Acubiz web is used in connection with Acubiz to register and approve or decline single transactions and expense reports. To provide this service, different types of personal data about the User is collected through the Acubiz app and Acubiz web. The specific types of personal data that are collected may, depending on how the Customer has configured and uses Acubiz and on the User’s use of the Acubiz app and Acubiz web, include:
The Acubiz app and Acubiz web uses the User’s company e-mail address, company ID and password for login purposes. This information is used as unique identification of the User and to allocate transactions.
The data forms in the Acubiz app and Acubiz web are Expense, Invoice, Per Diem, Mileage and Time, each of which are called transactions types. It depends on the Customer’s agreement with Visma Acubiz and the Customer’s configuration of Acubiz which of these transaction types you can enter into Acubiz via the Acubiz app and Acubiz web.
Depending on the transaction type and the Customer’s configuration of Acubiz, relevant business and accounting data on individual transactions (transaction data), such as date, amount, currency, purpose for the transaction, start and end addresses, route, department code or project number, one or more photos of a receipt, and other non-sensitive personal data relevant to the accounting process can be entered into the Acubiz app and Acubiz web. See separate sections below for further details regarding each transaction type.
Acubiz uses non-specific device information, such as device type, language settings and operating system, to optimize user experience as well as for the purpose of troubleshooting any bugs in, or crashes of, the Acubiz app and Acubiz web.
Input of sensitive personal data into the Acubiz app and Acubiz web is not allowed: The User must NOT enter or cause to be entered into the Acubiz app or Acubiz web personal data which belongs to any of the following categories, as the Acubiz app and Acubiz web is not intended for processing of personal data of such categories:
The Acubiz app can be used to take photos of receipts, invoices, and other enclosures (payment documents) relevant for documenting that a business-related expense has occurred. Depending on the Customer’s configuration of Acubiz, accounting-related details, such as amount, currency, date, country and type of cost, and possibly comments may via the Acubiz app or Acubiz web be added to the expense registration, and the combined registration with the photo(s) (if added) and the said data can subsequently via the Acubiz app or Acubiz web-app be submitted for further approval and processing.
Depending on the User’s consumption pattern of the Acubiz app, the User might want to access and upload via the Acubiz app a previously taken photo of a payment document. In order to do so, the User must grant Acubiz app permission to access the photo library of the User’s mobile device. Acubiz supports the following photo library settings: ‘All photos’, ‘Selected photos’, or ‘None’; by which Acubiz can respectively access all photos in the library, access only selected photo(s), or have no access to the photo library at all.
Any permission regarding the Acubiz app using the camera and/or accessing the photo library of the User’s mobile device is granted by the User upon initial use of the feature. The User can at any time easily change the permission settings in Acubiz app or from the system settings of the mobile device.
The Acubiz app does not use location tracking features of the User’s mobile device when registering expenses.
For the transaction type Mileage (if part of the Customer’s configuration of Acubiz) the Acubiz app or Acubiz web can be used to register business-related mileage and through an advanced rules and rates matrix to calculate the Customer’s mileage receivables. Thus, the registration of the trip including distance travelled, purpose of the trip, as well as the starting point and end destination addresses can be entered into Acubiz app or Acubiz web and submitted via the Acubiz app or Acubiz web for further approval and processing.
The User can key in her/his starting point and destination addresses manually. Alternatively, for a more convenient usage of the Acubiz app, and a more exact calculation of the distance between starting point and destination, the User may let the Acubiz app use the location tracking feature of the User’s mobile device to track the actual route travelled. When the location tracking feature is used, location data is stored in the Customers Acubiz solution for the purpose of being able to draw the route traveled on a map as documentation of the mileage expense.
Any permission regarding the Acubiz app using the location tracking feature of the User’s mobile device is granted by the User upon initial use of the feature. The User can at any time easily change the permission settings in Acubiz or from the system settings of the mobile device.
If the User does not want the Acubiz app to use the location service of the mobile device, the ‘Do not allow’ setting should be selected.
Otherwise, the User may select the ‘Allow while using the app’ setting of the location service. GPS-tracking is then used to show the current location, map the route and calculate the distance travelled. Furthermore, the background usage of the location tracking ensures that the User can use the mobile device for other legal purposes while driving.
The Acubiz app will not track the location of the User (even if the ‘Always’ setting is selected) until she/he begins tracking the route. The tracking of the location will stop once the User stops tracking the route.
For the transaction type Time (if part of the Customer’s configuration of Acubiz) the Acubiz app or Acubiz web is mainly used to register project related time spending as well as absence and standard time compared to a weekly working scheme. Where relevant, the Customer has set up the relevant wage types and mandatory comments for the User’s business purpose.
The relevant details (which depend on how the Customer has configured Acubiz and may include, e.g., specification of account, type, dimensions and date) can be registered by the User in the Acubiz app or Acubiz web, and the time registrations can subsequently be submitted via the Acubiz app or Acubiz web for further approval and processing.
The Acubiz app does not use location tracking features of the User’s mobile device when reporting time and absence.
Some of the personal data about you collected by the Acubiz app and Acubiz web is retrieved from Acubiz, e.g. configuration information that was provided by the Customer when configuring you as a user of Acubiz, information you have previously entered into Acubiz (including via the Acubiz app or Acubiz web) and, in some cases, transaction data from credit card company(ies) used by the Customer. The rest of the personal data about you is collected from you (including your mobile device) in connection with your use of the Acubiz app and Acubiz web.
For the avoidance of doubt, the personal data collected via the Acubiz app and Acubiz web is available to the Customer (the data controller). (Accordingly, it may become available to any other users, persons or third parties to which the Customer chooses to provide access to such data (whether through the Acubiz app or Acubiz web or otherwise).)
Furthermore, as permitted under our Data Processing Agreement with the Customer, we may share the personal data with any sub-processors used by us in our provision of the Acubiz service to the Customer.
Other than as set forth above, we do not, except if required by law, share the personal data with any third party without your prior permission to do so.
Acubiz uses appropriate technical and organizational measures to ensure in relation to its processing of the personal data a level of security that is in accordance with Danish law, the GDPR and the agreement between the Customer and Acubiz.
The period during which we will retain the personal data is determined in accordance with our agreement with the data controller (i.e., the Customer).
Under certain circumstances, local data protection laws (such as the GDPR) may give you certain rights vis-à-vis the data controller (i.e., the Customer) with respect to the personal data. These rights may, depending on the circumstances, include one or more of the following:
If the User has any questions on or seeks to excise any such rights, the User should contact the data controller, i.e., the Customer.
Acubiz may change and update this processor privacy statement at any time and without notice, including to comply with applicable laws and other requirements. The latest version will at all times be available here: acubiz.com/legal-documents/acubiz-privacy-policy. You are advised to consult this statement regularly for any changes.