Privacy Notice
The protection of your personal data is important to us at Serrala Group GmbH, and its affiliates (further, “Serrala “, “we” or “us”) and we strictly adhere to the applicable privacy laws.
When using Serrala’s Alevate AP (further,”Alevate AP” or “Alevate Solution”), personal data is processed at various points. Information is collected when necessary to enable this Alevate Solution and to comply with legal obligations. We will only process your personal data if there is an appropriate legal basis for processing. The information is treated as strictly confidential and is used exclusively for the stated purpose.
In this Privacy notice, we would like to inform you about the nature, scope and purpose of the personal data we collect, use and process. In addition, this privacy notice informs you of your rights.
Privacy Notice for Alevate AP
1. General Topics
The provider of Alevate AP is Serrala Group GmbH with its registered office in Südportal 7, 22484 Norderstedt, Germany.
Alevate AP is a cloud-based Accounts Payable automation solution designed to seamlessly integrate with any Enterprise Resource Planning (ERP) accounting systems, enhancing the efficiency of accounting teams. While using this Alevate Solution, your personal data is collected, stored or processed by Serrala, on behalf of your company, for the purposes of providing the services to your company; in addition, your personal data may also be processed in case you contact our Global Support team.
2. Type of Information
In the context of using Alevate AP, we process the following information from you:
• Last name, First name (possibly in the User ID)
• Email address (if used in User ID)
• E-Mail Contents (Conversation, Remittance Data, Structures Document Data)
• Phone details (if included)
• Time of log-in
• IP Address
• Invoice Data
• Credit Notes
Note: In addition to the above, personal data from data subjects, which your company includes in this Alevate Solution (e.g., customers, suppliers, etc.) may also be available to you; hence, kindly recall the need to observe the applicable privacy rules, as well as the instructions of your company on how to handle such data.
3. Use of Artificial Intelligence (AI)
Our solution utilizes AI in the form of Intelligent Document Processing (IDP) to automatically analyze documents, extract relevant information, and efficiently automate workflows. This is achieved through a combination of machine learning, computer vision, and natural language processing. We don’t use personal data for training purposes.
4. Use of Information
All information required for the functionality of Alevate AP is only use for the solution used by your company and subject to encryption. Communication between this Alevate Solution and your systems (if applicable) is also encrypted.
5. Deletion Periods
Serrala and, where applicable, your company will process and store your personal data only for the time necessary to achieve the purposes for which it was collected, or as otherwise provided by law or regulation to which either Serrala or your company are subject. If the retention purpose no longer applies, or if a retention period prescribed by the applicable legislation expires, the personal data will be deleted in accordance with the relevant provisions. The data will be deleted in a timely manner upon termination or upon request by the relevant data controller.
6. Transfer of your Information to Third Parties and Third Countries
Personal data collected from you shall not be transferred to third parties for other purposes; personal data shall be accessible to us and to your company for the purposes of providing and managing the Alevate AP portal. Your personal data may be transferred to other entities of Serrala group, as well as to other entities involved in the provision of services; as the recipients may be located outside the EEA, an international transfer of data may take place. In this case we will always ensure that the appropriate safeguards are in place, according to chapter V of the GDPR (namely by concluding Standard Contractual Clauses).
7. Technical Security
We continuously check and update our technical and organizational security measures to protect your information. The measures are intended to prevent unauthorized access, unlawful deletion or manipulation and the accidental loss of data in the best possible way.
8. Rights of Data Subjects
As a data subject under GDPR you have the right to access, correct, delete, restrict, and object to the use of your personal data, as well as the right to data portability and to withdraw consent at any time. You can exercise your rights by contacting us at dataprotection@serrala.com. Data processed in connection with Alevate AP is not used for automated decision-making or profiling.
The relevant supervisory authority for data protection is the Independent State Center for Data Protection (Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (Postfach 71 16, 24171 Kiel).
9. Legal Basis of Processing
The processing of personal data, for the purposes of using Alevate AP, is necessary for the performance of a contract, such as in the case of processing operations necessary for the delivery of goods or the provision of any other service or consideration, the processing is based on Article 6(I)(b) GDPR. The same applies to processing operations required for the execution of pre-contractual measures, for example in cases of inquiries about our products or services.
Additionally, the processing of personal information is based on Art. 6(I)(f) GDPR, as the processing is necessary for the purposes of the legitimate interests pursued by us and by your company; such legal basis is accepted provided the data subject’s interests, fundamental rights and freedoms are not overridden. In this respect, Serrala’s legitimate interest is the performance of our business activities, namely the provision of the underlying services to our customers; such has been recognized under Recital 47(2) GDPR.
10. Controller of Personal Data
The controller, within the terms of Art. 4(7) GDPR, is your company; for clarity, Serrala operates this Alevate Solution as a processor on behalf of your company.
11. Contact
In case of any inquiries, clarifications, and/or questions pertain to the processing of your personal data, as included in this Alevate Solution by you or your company, please contact your company’s point of contact for data protection or privacy issues.
Requests on the above sent to dataprotection@serrala.com, which concern the processing of your personal data for which your company is responsible, in the terms of Art. 4(7) GDPR, will be forwarded to your company’s relevant point of contact, insofar as sufficient information is present to allow the identification of your company. The foregoing does not extend to the exercise of data rights from data subjects, for which your company is the Controller, in the terms of Art. 4(7) GDPR; in this case, your company shall use the relevant module, included in this Alevate Solution, to address such requests.