Terms of Use for Finance Data

1. About the service

Finance Data is provided by:

Subaio ApS
CVR no. 37766585
Gasværksvej 26B, 1st floor
9000 Aalborg
Denmark

Subaio is authorised as an Account Information Service Provider, AISP, under the supervision of the Danish Financial Supervisory Authority.

These terms apply when you use Finance Data through a company from which you have requested financial insight or a financial overview for the assessment of credit circumstances.

In these terms, this company is referred to as the "Company".

2. What Finance Data does

Finance Data allows you to connect payment accounts and have information from these processed for the purpose of the service you have requested.

Depending on the service, Subaio may:

• prepare financial insight for you
• prepare a financial overview for the assessment of your credit circumstances

Subaio does not hold your money, operate payment accounts or initiate payments.

Subaio does not itself provide financial advice and does not make credit decisions or decisions regarding interest rates, fees or other individual terms.

3. Connecting accounts

You select and approve the specific payment accounts as part of the bank connection.

Subaio only gains access to an account once you have selected and approved it through your bank or the approved connection flow.

You may only connect accounts that you have the right to access.

Subaio does not ask you to provide your personal banking credentials. Authentication is carried out by your bank or through another approved authentication solution.

4. Consent and acceptance

The consent declaration is displayed on the consent screen.

By selecting "Accept and continue":

• you give the consent described on the screen
• you accept these Terms
• you confirm that you have received and read the Privacy Policy

You may withdraw your consent or disconnect an account connection at any time. Subaio's future access to the account in question will then cease.

Withdrawal does not affect the lawfulness of the processing or sharing that has already taken place before the consent was withdrawn.

5. Sharing with the Company

If the service you have requested involves sharing, Subaio makes the result available to the Company specified in the consent flow.

For advisory services, the result may contain the account and financial information necessary for the advice you have requested.

For credit-related services, Subaio only shares an aggregated financial overview. The Company does not receive raw transactions or other transaction-level information from Subaio for use in the credit assessment. If necessary, it may be necessary for the Company to have individual payees identified in connection with the credit-related services.

The Company is independently responsible for its subsequent use, storage and any onward transfer of the information it receives.

The Company's own service, advice and decisions are governed by the Company's own terms.

6. Personal data

Subaio is the data controller for the processing carried out by Subaio when collecting, processing and delivering the Finance Data result.

You can read more about the information Subaio processes, purposes, legal bases, recipients, storage, security and your rights in Subaio's Privacy Policy.

The Company is an independent data controller for its subsequent processing and must provide you with its own information about this processing.

7. Your use of the service

You must use Finance Data lawfully and may not:

• connect accounts that you do not have the right to access
• give others access to your login information
• attempt to circumvent the service's security measures
• scrape, copy, decompile or reverse engineer the service
• sell, resell, license, distribute or otherwise make the service, access or results available for commercial purposes
• use the service for fraud, misuse or other unlawful purposes

The prohibitions do not apply to the extent that an action is expressly permitted under mandatory law.

8. Accuracy and availability

Finance Data depends on information and systems from banks and other external providers.

Information, categories, budgets and insights may therefore be delayed, incomplete or inaccurate.

Subaio does not guarantee that the service will always be available. Subaio may temporarily suspend access for reasons of security, maintenance, suspected misuse or compliance with the law.

9. Intellectual property rights

Subaio and Subaio's licensors own the service, software, design, data models, documentation and underlying technology.

You are only granted a personal, limited and non-transferable right to use the service in connection with the specific service you have requested.

You retain your rights to your own personal data.

10. Liability

These terms do not limit rights or liabilities that cannot lawfully be limited.

Subaio is not liable for the Company's advice, credit decisions, prices, terms or other subsequent use of the information.

Subaio is also not liable for losses resulting from incorrect bank information, unavailable banking systems, your own use or circumstances beyond Subaio's reasonable control, unless otherwise required by mandatory law.

11. Termination

Your access ends when the service you have requested has been completed, when you withdraw your consent, or when the account connection is disconnected.

Subaio may suspend or terminate your access in the event of material misuse, security risk or if continued provision would be contrary to law or regulatory requirements.

Personal data is handled after termination in accordance with the Privacy Policy.

12. Changes

Subaio may change these terms for legal, regulatory, security, technical or operational reasons.

Material changes affecting an ongoing service will be notified with reasonable notice, unless a faster change is necessary under the law or for security reasons.

13. Contact and complaints

Questions about personal data can be directed to:

Email: dpo@subaio.com

You can lodge a complaint about Subaio's processing of personal data with:

The Danish Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby
www.datatilsynet.dk

Complaints regarding the Company's advice, decisions or processing of information must be directed to the Company.

14. Governing law

These terms are governed by Danish law.

This does not limit mandatory consumer rights that apply under the laws of your country of residence.