Privacy Notice
The protection of your personal data is important to us at Serrala Group GmbH (further, ” Serrala Group GmbH “, “we” or “us”), and we strictly adhere to the applicable privacy laws.
When using the Serrala App (further, the “Serrala App” or “App”), personal data is only collected when technically necessary or required to provide the underlying services. We will only process your personal data if there is an appropriate legal basis for processing. The collected information will be treated confidentially and used exclusively for the stated purpose.
In this Privacy notice, we would like to inform you about the nature, scope and purpose of the personal data we collect, use and process. In addition, this Privacy notice informs you of your rights
Privacy Notice for “Serrala App”
Version: 1.0, 09.04.2025
1. General Topics
The provider of the Serrala App is Serrala Group GmbH with its registered office in Südportal 7,
22484 Norderstedt, Germany.
With the Serrala App, integrated as an add-on in Microsoft Teams (MS Teams), you can accelerate your company’s cash flow with advanced financial transaction processing. You can:
– Manage, review, approve, or reject financial transactions;
– Add additional notes or view supporting documents for audit purposes;
– Track the status of financial transactions in real-time.
In addition, you can access all necessary details and attachments without having to switch to another platform – including the ability to update information in real time (all via the chat interface).
You can choose between two add-ons: the MS Teams App without the use of artificial intelligence (AI) and the advanced AI-powered MS Teams App with generative AI capabilities.
A. MS Teams Serrala App without the use of AI
With the MS Teams Serrala App without the use of AI you can quickly see the transactions that need their attention, such as a supplier invoice approval or credit limit increase request. Simply review the details and supporting documents in the Microsoft Teams chat. There’s no need to log into a separate solution to correct data, add notes or documents, or suggest additional reviewers or approvers. The App helps improve collaboration between finance and the business users they rely on to process financial transactions without delay.
B. Advanced AI-Powered MS Teams Serrala App
With the advanced AI-Powered MS Teams Serrala App you can pose natural language questions and receive answers directly in Microsoft Teams.
The use of the add-ons is only possible if the respective add-on has been purchased. The app can be added to MS Teams, but permissions are granted through Serrala Support. This means that after the app has been added to the Teams client from the MS Teams Store, a message appears with the contact details of Serrala Support. You must contact Serrala Support so that Serrala Support can verify whether the app has been purchased and activate its usage. Once this verification is complete and the app’s usage has been activated, you can use the app.
The Serrala App is available only for users using Serrala Solutions. To use this app, you must have an active subscription.
2. Type of Information
In the context of using the Serrala App, we collect, retain and process the following information during regular use:
Contact Details
Name, Surname and Email address
Financial Data (insofar as including or relating to personal data)
Time of communication between the Serrala App and the product portal and information on invoices – invoice number, vendor number, vendor name, company name, company code number, invoice attachments, invoice amount, approval reasons, discounts, invoice due dates, discount due dates, G/L account, cost Center, profit center and comment from users on product portal.
C. Crash Log Data
In addition to the above personal information, if your App crashes, a crash log report may be provided to Serrala by Microsoft (typically no personal data is included in the crash logs sent to Serrala).
D. Other Data
Language
3. Use of Information
All information required for the functionality of the App is retained in the product and in the App (encrypted on the MS Teams) during the duration of the session. Communication between the App and the relevant product is also encrypted.
4. Deletion Periods
Serrala Group GmbH processes and, where applicable, may store your personal data only for the time necessary to achieve the purposes for which it was collected, or as otherwise provided by law or regulation to which the controller is subject.
Once the purpose is achieved and the relevant retention period under applicable legislation expires, the personal data will be deleted in accordance with the relevant provisions.
The data will be deleted in a timely manner upon termination of subscription or upon request by the relevant data controller.
5. Transfer of your Information to Third Parties and locations outside the European Economic Area (EEA)
Personal data collected from you may be transferred to third parties involved in the provision of the service and be accessible to us and to your company for the purposes of providing and managing the product portal.
Your personal data may be transferred to other entities of Serrala group, as well as to other entities involved in the provision of services; as the recipients may be located outside the EEA, an international transfer of data may take place. In this case we will always ensure that the appropriate safeguards are in place, according to chapter V of the GDPR (namely by concluding Standard Contractual Clauses).
6. Technical Security
We continuously check and update our technical and organizational security measures to protect your information. The measures are intended to prevent unauthorized access, unlawful deletion or manipulation and the accidental loss of data in the best possible way.
7. Rights of Data Subjects
As a data subject under GDPR you have the right to access, correct, delete, restrict, and object to the use of your personal data, as well as the right to data portability and to withdraw consent at any time. You can exercise your rights by contacting us at dataprotection@serrala.com. Data processed in connection with the Serrala App is not used for automated decision-making or profiling.
The relevant supervisory authority for data protection is the Independent State Center for Data Protection (Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (Postfach 71 16, 24171 Kiel).
8. Legal Basis of Processing
The processing of personal data, for the purposes of the Serrala App, is necessary for the performance of a contract, such as in the case of processing operations necessary for the delivery of goods or the provision of any other service or consideration, the processing is based on Article 6(I)(b) GDPR. The same applies to processing operations required for the execution of pre-contractual measures, for example in cases of inquiries about our products or services.
Additionally, the processing of personal information is based on Art. 6(I)(f) GDPR, as the processing is necessary for the purposes of the legitimate interests pursued by us and by your company; such legal basis is accepted provided the data subject’s interests, fundamental rights and freedoms are not overridden. In this respect, Serrala’s legitimate interest is the performance of our business activities, namely the provision of the underlying services to our customers; such has been recognized under Recital 47(2) GDPR.
As indicated above, if Art. 6(I)(a) GDPR is our legal basis for a processing activity, we will obtain your consent for such specific purpose/activity, prior to such.
9. Responsible parties for processing of personal data
The responsible parties, within the terms of Art. 4(7) GDPR are, as applicable, Serrala Group GmbH and your company.
10. Contact
Please direct any inquiries, explanations and queries regarding data processing in the App by email to dataprotection@serrala.com.
If your inquiries, clarifications, and/or questions pertain to the processing of personal information included in the relevant portal, please contact your company’s relevant point of contact. Please kindly note that requests sent to dataprotection@serrala.com, which concern the processing of personal information for which your company is responsible as a data controller, in the terms of Art. 4(7) GDPR, will not be answered.