Privacy Policy – Deployat AB

Last Updated November 24, 2025 | Version 1.0

1. Introduction and Data Controller

This Privacy Policy explains how Deployat AB collects and processes personal data that you provide via our contact form on the website. We value your privacy and are responsible for ensuring that your personal data is processed in compliance with the General Data Protection Regulation (GDPR).

Data Controller Details:

Data Controller Deployat AB
Corporate Identity Number 559526-5439
Address Hälsans promenad 11, 431 53 Mölndal, Sweden
Website www.deployat.se
Contact for Data Protection Issues jacob@deployat.se

2. Personal Data Collected and Purpose

We process the personal data you provide to us when you fill out and submit our contact form.

Category	Purpose of Processing	Legal Basis (GDPR)
Contact Information (Name, Email)	To identify you and communicate with you regarding your inquiry.	Legitimate Interest
Message Content	To understand your request, respond to your question, and prepare potential quotes or agreements.	Legitimate Interest and/or Contract/Preparation of a Contract
Technical Data (IP, Timestamp)	To prevent spam and maintain evidence of when a request was received.	Legitimate Interest (Security)

Note: You are not required to provide any personal data, but if you choose not to provide the required information, we will not be able to process or respond to your inquiry.

3. Retention Period

Your personal data is stored only for as long as necessary to fulfill the purpose for which it was collected.

Incoming messages are stored in our inbox for six (6) months after the matter has been concluded.
If the contact leads to a business relationship, the data is stored throughout the duration of the business relationship and for the period required by accounting legislation (usually 7 years).

4. Sharing of Personal Data and Third Countries

Your data is shared with external service providers we use to manage our email communication.

Data Processor Details:

Recipient Amazon Web Services (AWS) - SES

Role Data Processor, used to send the email message from the contact form.

Third-Country Transfer No, as our AWS SES service is configured in the EU-west-1 (Ireland) region. All processing takes place within the EU/EEA.

We have a valid Data Processing Agreement (DPA) in place with AWS that governs their handling of the data and ensures their compliance with GDPR.

5. Protection of Your Personal Data

We take appropriate technical and organizational security measures to protect your personal data. Our systems are protected by:

Password protection
Two-factor authentication (2FA)
Encryption (both during transfer and storage)

6. Your Rights

Under GDPR, you have several rights regarding your personal data. Please contact us at jacob@deployat.se if you wish to exercise any of the following:

Right of Access (Subject Access Request) Right to obtain confirmation and access to your personal data.
Right to Rectification Right to have inaccurate or incomplete data corrected.
Right to Erasure ("Right to be Forgotten") Right to request that your personal data be erased under certain circumstances.
Right to Restriction of Processing Right to request that we restrict the processing of your personal data.
Right to Object Right to object to processing based on our legitimate interest.
Right to Data Portability Right to receive your data in a structured, commonly used, and machine-readable format.
Right to Lodge a Complaint Right to lodge a complaint with the Swedish Supervisory Authority, the Swedish Authority for Privacy Protection (IMY).