Privacy Policy
Last updated: 2026-06-10
1. Data Controller
IVAR Automation (org. no. 559572-7578) is the data controller for the processing of personal data described in this policy. Contact details: Email: info@ivarautomation.se Website: https://www.ivarautomation.se
2. What Data We Collect
We collect the following personal data: • Contact information you provide via email (name, email address, company name) • Technical information collected automatically when visiting the website (IP address, browser type, pages visited, time of visit) We do not collect sensitive personal data, and our website does not have a contact form that stores data — all contact is via email.
3. Why We Process Data and Legal Basis
We process your personal data for the following purposes: • Responding to inquiries and communicating with you — legal basis: legitimate interest (GDPR Art. 6.1 f) • Performing and delivering agreed assignments — legal basis: performance of a contract (GDPR Art. 6.1 b) • Improving our website and services — legal basis: legitimate interest (GDPR Art. 6.1 f) • Complying with accounting law and other legal obligations — legal basis: legal obligation (GDPR Art. 6.1 c)
4. How Long We Keep Data
We keep personal data for as long as necessary for the purposes they were collected: • Email correspondence: during the ongoing business relationship plus 12 months • Project documentation: during the ongoing assignment plus 24 months • Accounting material: 7 years according to Swedish accounting law • Technical website logs: maximum 90 days
5. International Transfers
Our website is hosted on Vercel, whose servers may be located in the USA and other countries outside the EU/EEA. Vercel has committed to comply with the EU Standard Contractual Clauses (SCC) to ensure an adequate level of protection for personal data transferred to third countries. Email is handled through providers that may process data outside the EU/EEA, with appropriate safeguards in accordance with GDPR.
6. Cookies
Our website currently does not use any cookies or third-party tracking. If this changes in the future, this policy will be updated.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data: • Right of access — you can request a copy of the data we hold about you • Right to rectification — you can request that incorrect data be corrected • Right to erasure — you can request that your data be deleted • Right to restriction — you can request that processing be restricted • Right to data portability — you can request your data in a machine-readable format • Right to object — you can object to processing based on legitimate interest To exercise your rights, contact us at info@ivarautomation.se.
8. Right to Complain
If you believe our processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY). Integritetsskyddsmyndigheten (IMY) Box 8114 104 20 Stockholm, Sweden www.imy.se
9. Chat Assistant (AI)
Our website offers an AI assistant (chat) that you may optionally use to ask questions about our services. You are always informed that you are chatting with an AI and not a human. What we process: the content of the messages you write and, if you choose to provide it, your email address (and optionally your name) so we can get back to you. Your IP address is processed temporarily for security and abuse prevention (bot and rate-limit protection). Legal basis: your consent (GDPR Art. 6.1 a) when you provide your email address to be contacted, and our legitimate interest (Art. 6.1 f) in answering questions and protecting the service against abuse. Where processing takes place and sub-processors: the AI model runs on Amazon Web Services within the EU (Stockholm, eu-north-1) — your messages do not leave the EU/EEA for model processing. The model (Anthropic Claude) is never trained on your data, and we have disabled prompt retention and training. If you provide your email address, it is stored with our database provider (Neon) and we receive a notification via our email provider (Resend). The website itself is hosted by Vercel (see section 5). Retention: we do not store chat messages permanently after the response has been delivered. Contact details you provide via the chat are processed in accordance with section 4. You never have to share personal data in the chat — please avoid writing sensitive information. To exercise your rights, see section 7.
10. Changes to This Policy
We may update this privacy policy. For significant changes, we will update the "Last updated" date at the top of the page. We recommend that you regularly review this policy.
11. Contact
If you have questions about this privacy policy or our handling of personal data, contact us: Email: info@ivarautomation.se