Privacy Policy – Swetaps

1) Data controller

The data controller responsible for the processing of personal data is:

2) What personal data we collect

Depending on how you interact with us, we may process the following categories of personal data:

• Contact details: name, email address, phone number, company name, job title/role.
• Communication data: the content of messages you send to us (e.g., enquiries, requests, meeting notes) and our responses.
• Business relationship data: information necessary to manage a B2B relationship (e.g., quotations, delivery coordination, invoicing references, contractual correspondence).
• Website/technical data: IP address, device and browser information, language settings, approximate location derived from IP (country/city level), pages visited, timestamps, and security logs.

3) Purposes and legal bases

We process personal data for the purposes below, based on the following legal bases under GDPR:

4) Cookies and similar technologies

We may use cookies and similar technologies that are necessary for the website to function and to support security and performance. Where we use cookies that are not strictly necessary (e.g., analytics), we will do so in accordance with applicable cookie rules and, where required, based on your consent.

You can manage cookies in your browser settings (block or delete cookies). Please note that disabling certain cookies may affect site functionality.

5) Who we share personal data with

We do not sell personal data.

We may share personal data with trusted recipients where necessary for the purposes described above, such as:

• Website hosting, IT operations, and support providers
• Service providers used for business administration (e.g., accounting and invoicing systems)
• Logistics and delivery partners (when relevant)
• Authorities or other parties when required by law or necessary to protect our legal rights

Where applicable, such recipients act as our processors and are bound by data processing agreements and confidentiality obligations.

6) Transfers outside the EU/EEA

If personal data is processed outside the EU/EEA, we ensure appropriate safeguards under GDPR (for example, EU Commission Standard Contractual Clauses or other valid transfer mechanisms).

7) How long we keep personal data

We retain personal data only for as long as needed for the relevant purpose, and then delete or anonymise it unless we are required to keep it longer.

• Accounting-related information is generally kept in line with Swedish requirements (accounting records must be stored for seven years).
• Business communications and enquiries are kept as long as necessary to handle the matter and for reasonable follow-up, and may be retained longer where needed for documentation or legal claims.
• Technical/security logs are kept for a limited period necessary for security and operational purposes.

8) Your rights under GDPR

You have rights under GDPR, including the right to request:

• access to your personal data,
• rectification,
• erasure (in certain cases),
• restriction of processing,
• to object (in certain cases),
• data portability (in certain cases).

To exercise your rights, contact us at info@swetaps.com. We may need to verify your identity before fulfilling certain requests.

9) Complaints to the supervisory authority

If you believe your personal data is being processed incorrectly, you may contact the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), to file a complaint.

10) Security

We use appropriate technical and organisational measures to protect personal data, such as access controls, secure systems, and procedures for managing suppliers and incidents.

11) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with the updated date.

12) Contact

Questions about privacy or personal data can be sent to: