Privacy Policy – Netgraph Sverige AB

1. General

This Privacy Policy explains how Netgraph Sverige AB (“Netgraph”, “we”, “our”, “us”) processes personal data. The policy describes what information we collect, why we collect it, how we use and store it, and your rights as a data subject.

We are committed to ensuring your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

2. Data Controller

Netgraph Sverige AB
Organization number: 556951-4622
Address: Biblioteksgatan 6A, 831 30 Östersund, Sweden
Email: info@netgraph.se
Phone: +46 (0)10 – 458 04 00

We are the Data Controller for personal data collected via our website, during business relations, or in the context of recruitment and employment.

In cases where we deliver services to customers as a technical sub-processor, we act as a Data Processor and process personal data on behalf of our customers, based on their instructions.

3. What Personal Data We Collect

Depending on your interaction with us, we may collect:

Contact details: Name, email address, phone number, company name, job title
Technical identifiers: IP address, MAC address, user agent
Application data: CV, social security number, personal letter (for recruitment)
Service usage data: Device logs, usage metrics, authentication events (for platform users)

4. How and Why We Process Personal Data

Purpose	Type of data	Legal basis	Retention
Responding to contact requests	Name, email, message	Legitimate interest	12 months
Account and user management	Name, email, org details	Contract performance	Duration of agreement
Sending newsletters and offers	Name, email	Consent	Until withdrawal
Recruitment and hiring	CV, contact info, ID data	Consent / Legitimate interest	Max 2 years (with consent)
Platform delivery and customer support	Technical data, usage logs	Contract performance / Legal obligation	Up to 12 months or contract end
Improving services and security	Logs, metadata	Legitimate interest	Varies by service
Invoicing, accounting, legal compliance	Name, org, billing details	Legal obligation	7 years (per accounting laws)

5. Cookies

Our website uses cookies to improve the user experience, analyze traffic, and support marketing efforts. For more information, please see our [Cookie Policy].

6. Sub-Processors

We may engage third-party sub-processors, such as hosting providers and cloud service providers, to deliver our services. We always sign Data Processing Agreements (DPAs) with these providers.

If a sub-processor is located outside the EU/EEA, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs).

You may request a full list of current sub-processors by contacting us.

7. Security Measures

We implement technical and organizational measures to protect personal data, including:

Role-based access control
Encryption in transit and at rest
Logging and monitoring
Firewalls and intrusion prevention
Employee training and confidentiality policies

We also require our sub-processors to adhere to strict security standards.

8. Your Rights

Under GDPR, you have the following rights:

Right to access – You may request a copy of your personal data we process.
Right to rectification – You may request correction of incorrect data.
Right to erasure – You may request deletion of your data (“right to be forgotten”).
Right to restriction – You may limit how your data is processed.
Right to data portability – You may obtain your data in a machine-readable format.
Right to object – You may object to certain types of processing (e.g. marketing).
Right to withdraw consent – If processing is based on consent, you can withdraw at any time.

To exercise your rights, please contact:
info@netgraph.se

9. Complaints

If you believe your data has been processed in violation of GDPR, you may contact the Swedish Authority for Privacy Protection (IMY):
https://www.imy.se

10. Changes to this Policy

We may update this Privacy Policy when necessary. The latest version is always available at [https://netgraph-connect.com/privacy-policy] or upon request.