Data breaches and security incidents are becoming more common, and attackers now use AI to make scams more convincing. That’s why we want to be open about how we work with security and what happens if something goes wrong.
How we protect your data
We only process the personal data needed to manage your queue registrations and your account. Most of the data is stored within the EU. Some of our providers, for example for customer support, store data outside the EU, and when they do, it’s with the safeguards GDPR requires. Access is limited to the employees who need it for their work and requires two-factor authentication. We keep a record of all personal data processing and set requirements for our providers through data processing agreements.
If an incident occurs
We follow a set process as soon as we suspect a security incident:
We stop and contain it. We act immediately to stop the incident and prevent more data from being affected.
We investigate. We find out what happened, what data is involved, and which users may be affected.
We report to the authority. When the incident must be reported, we report it to the Swedish Authority for Privacy Protection (IMY) within 72 hours, as required by the General Data Protection Regulation (GDPR).
We notify you when needed. If the incident could pose a high risk to you, such as a risk of fraud or identity theft, we contact you directly by email without undue delay.
We fix it and learn from it. We correct the cause and review our routines so it doesn’t happen again.
What you’ll be told if we contact you
Our message to you will describe:
what happened and when
which of your data is involved
what we have done and are doing to fix it
what you can do to protect yourself
how to contact us with questions
Watch out for scams
After an incident, or when a brand is well known, scammers often pretend to be the company. Keep the following in mind:
dibz will never ask for your password, your BankID login, your full card number or your card’s security code (CVC) by email, text message or phone. We may sometimes ask for the first or last digits of your card number to locate a payment, but never more than that.
Don’t click links in messages that look suspicious. Log in directly via dibz.se or our app instead.
If you’re unsure whether a message really comes from us, contact us first.
Contact us
If you have questions about security, or suspect something is wrong with your account, contact us through the chat here or at [email protected].
Read more in our privacy policy and terms of use.