How we process personal data
This policy covers the website wfsecurity.cloud, the customer panel and the WF SecurityCloud software. The data controller is Webbfabriken AB.
Data we process
Account details
Name, email address, company name and registration number where applicable, and billing details. You provide these when creating an account and they are needed to deliver and invoice the service.
Licence and device details
Which licences your account holds, which devices and websites they are activated on, and when the devices last contacted the service.
Blocking events
When a device blocks something, the blocked address, the type of event, the time and which of your devices it concerned are recorded. The contents of the traffic are not recorded.
Server logs
The web server logs IP address, time, requested page and browser for operations and troubleshooting.
Contact with us
If you write to us, the message and your contact details are kept for as long as the matter requires.
Purposes and legal basis
Account details, licence details and blocking events are processed in order to deliver the service you have contracted for. The legal basis is performance of a contract.
Billing details are also processed to meet accounting obligations. The legal basis is legal obligation.
Server logs and security-related logging are processed for operations, troubleshooting and to protect the service against misuse. The legal basis is legitimate interest.
We do not use your data to market other parties, do not sell it on and do not disclose it for profiling.
Who may gain access
Data is processed in Webbfabriken's own operating environment. Beyond us, the following recipients occur:
- Stripe, for payments. Stripe receives the details required to complete the transaction. We store no card details.
- A partner, if you are a customer through one, receives the details needed to administer your licences.
- A public authority, if we are required by law to disclose data.
How long data is kept
Account details are kept for as long as you have an active account and thereafter for as long as needed to wind down the relationship.
Accounting records are kept for the period required by the Swedish Accounting Act.
Blocking events and server logs are kept for a limited period for operations and troubleshooting and are then removed.
If you want to know the exact retention periods that apply to your account, get in touch and we will answer concretely.
What you can request
You have the right to know what data we hold about you, to have inaccurate data corrected, to have data erased where there is no reason to keep it, to restrict processing, to object to processing based on legitimate interest, and to receive your data in a machine-readable format.
Send your request to support@wfsecurity.cloud. We respond without undue delay.
If you are not satisfied with how we process your data, you have the right to complain to the Swedish Authority for Privacy Protection (IMY).
Questions about your data?
Write to us and we will go through exactly what is held about your account.