Data Protection Your Data Subject Rights
1. Data Subject Requests

It is your right to have access to your personal records that are held by Crayon Group, subject to certain exemptions under applicable laws. This is known as a Subject Access Request (SAR). When you submit a SAR Application to us, you are able to exercise your:

  • Right of Access
  • Right to Rectification
  • Right to Erasure
  • Right to Restrict Processing
  • Right to Data Portability
  • Right to Object
  • Rights in Relation to Automated Decision Making and Profiling

You can download our SAR Application Form as a:

To make a request access to information on the personal data we may store on you, you are asked to complete a SAR Application Form and submit this by either by:

(a) Email:

(b) Postal Address: Crayon DPO, Landsvägen 50A, 17263 Sundbyberg, Stockholm, Sweden

Our Data Protection Officer (DPO) has a duty to establish the identity of the requester. The identification required is usually one document that includes photo identification and a signature (e.g. photo driving license or a passport), plus a current utility bill or bank statement showing your name and address. The DPO will then coordinate the gathering together of the appropriate information. Crayon will comply with SARs as quickly as possible but will ensure the information is provided within 30 days of receipt of a completed form unless there is good reason for delay. In such cases the reason for delay will be explained in writing to the requestor.

Fees: We do not routinely charge a fee for a SAR. However, if you have requested a hard copy response then we reserve the right to charge the costs of sending the response by recorded delivery. If you do not want to pay this fee, when requested, you may choose to receive your response electronically at no charge.

2. Opt-Out Marketing

To inform you of new service solutions that can address your emerging business needs, Crayon Group processes Personal Data for Direct Marketing purposes on the lawful basis of Legitimate Interest.

If you are receiving Marketing material, but your business needs have changed, we can remove your contact details from our marketing lists by using the unsubscribe link in the emails communications we send or simply send us a short email to:

3. Cookies

You can accept or reject cookies through our Privacy Preference Centre, accessible by clicking the Cookie Settings button in our Cookie Notice. You can also do so by adjusting your web browser controls. Please consult our Cookie Notice for more information about our use of cookies and how to manage them.

4. Complaint with a Supervisory Authority

We take a service-oriented approach to facilitating your rights. However, should you experience that we have not sufficiently responded to your request, or that our processing of your Personal Data infringes data protection laws, please do not hesitate to submit a complaint to our DPO.

Submitting a complaint to our DPO does not prevent you from submitting a complaint to the relevant supervisory authority in parallel. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.