Legal
Privacy Policy
Last updated: 2026-09-29
Contents
1. Data Controller
Ivar Automation (org. no. 559572-7578) is the data controller for the processing of personal data described in this policy. Contact details: Email: info@ivarautomation.se Website: https://www.ivarautomation.se
2. What Data We Collect
We collect the following personal data: • Contact details you provide via email (name, email address, company name) • Details you provide when booking a call on the website: name, phone number, email address, company name if you give one, and whatever you write about what you would like to discuss. The same details are collected if you instead send a request for another time. • Your email address if you leave it in the contact form on the home page or the contact page, so that we can get in touch • Details you voluntarily provide in the chat (see section 9) • Technical information collected automatically when you visit the website (IP address, browser type, pages visited, time of visit). When you make a booking, we also store the IP address the booking was made from, as protection against abuse. We do not collect sensitive personal data. You never have to provide such data in the free-text fields — write only what we need in order to understand your question.
3. Why We Process Data and Legal Basis
We process your personal data for the following purposes: • Responding to inquiries and communicating with you — legal basis: legitimate interest (GDPR Art. 6.1 f) • Getting in touch when you have asked us to via the contact form on the home page or the contact page — legal basis: your consent (GDPR Art. 6.1 a) • Performing and delivering agreed assignments — legal basis: performance of a contract (GDPR Art. 6.1 b) • Improving our website and services — legal basis: legitimate interest (GDPR Art. 6.1 f) • Complying with accounting law and other legal obligations — legal basis: legal obligation (GDPR Art. 6.1 c)
4. How Long We Keep Data
We retain personal data for as long as necessary for the purposes for which it was collected: • Email correspondence: for the duration of the business relationship plus 12 months • Bookings and booking requests, including cancelled ones: 12 months after the booked time • Email addresses you leave in the contact form or the chat: 12 months after you left them. If we start working together, the period for email correspondence applies instead. • Project documentation: for the duration of the engagement plus 24 months • Accounting records: 7 years under the Swedish Accounting Act • Technical logs from the website: no more than 90 days
5. International Transfers
Our website is hosted on Vercel, whose servers may be located in the USA and other countries outside the EU/EEA. Vercel has committed to comply with the EU Standard Contractual Clauses (SCC) to ensure an adequate level of protection for personal data transferred to third countries. Email is handled through providers that may process data outside the EU/EEA, with appropriate safeguards in accordance with GDPR. Bookings are stored with our database provider Neon, whose database for this website is located in the United States, and the booking confirmation is sent via our email provider Resend. When someone books a call or sends a booking request, we receive an internal notification via Telegram so that we see it immediately. The notification contains the details you provided in the booking — name, phone number, email address, and what you wrote about your enquiry. Telegram is operated by companies outside the EU/EEA, which means this data is processed in a third country. The notification goes only to us and is not used for anything other than enabling us to get back to you. If you leave your email address in the contact form on the home page or the contact page, it is stored together with the consent you gave with Neon in the United States. We then receive a notification with the email address via Resend and via Telegram, in the same way as above.
6. Cookies
Our website currently does not use any cookies or third-party tracking. If this changes in the future, this policy will be updated.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data: • Right of access — you can request a copy of the data we hold about you • Right to rectification — you can request that incorrect data be corrected • Right to erasure — you can request that your data be deleted • Right to restriction — you can request that processing be restricted • Right to data portability — you can request your data in a machine-readable format • Right to object — you can object to processing based on legitimate interest To exercise your rights, contact us at info@ivarautomation.se.
8. Right to Complain
If you believe our processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY). Integritetsskyddsmyndigheten (IMY) Box 8114 104 20 Stockholm, Sweden www.imy.se
9. Chat Assistant (AI)
Our website offers an AI assistant (chat) that you may optionally use to ask questions about our services. You are always informed that you are chatting with an AI and not a human. What we process: the content of the messages you write and, if you choose to provide it, your email address (and optionally your name) so we can get back to you. Your IP address is processed temporarily for security and abuse prevention (bot and rate-limit protection). Legal basis: your consent (GDPR Art. 6.1 a) when you provide your email address to be contacted, and our legitimate interest (Art. 6.1 f) in answering questions and protecting the service against abuse. Where processing takes place and sub-processors: the AI model (Anthropic Claude) is reached via the Vercel AI Gateway, and the model processing itself takes place at Anthropic in the United States. If you provide your email address, it is stored with our database provider Neon, whose database for this website is located in the United States. Both your chat messages and any email address you provide are therefore transferred to a country outside the EU/EEA. The model is never trained on your data — we have disabled training on prompts. We also receive a notification when you provide your email address — both via our email provider (Resend) and as an internal message via Telegram, which is operated by companies outside the EU/EEA. The notification contains the email address and name you provided along with a short note about what you asked, and goes only to us. The website itself is hosted by Vercel (see section 5). We have decided to move the model processing into the EU (AWS Bedrock, Stockholm); this text will be updated once that move is complete. Retention: we do not store chat messages permanently after the response has been delivered. Contact details you provide via the chat are processed in accordance with section 4. You never have to share personal data in the chat — please avoid writing sensitive information. To exercise your rights, see section 7.
10. Changes to This Policy
We may update this privacy policy. For significant changes, we will update the "Last updated" date at the top of the page. We recommend that you regularly review this policy.
11. Contact
If you have questions about this privacy policy or our handling of personal data, contact us: Email: info@ivarautomation.se