Privacy policy
We collect what is needed to answer your request, and nothing beyond it. The site carries no tracking cookies and no web analytics.
1 · Controller
UNMD AB, reg. no. 559305-7101, Borlänge, Sweden, is the controller for the processing described here. Questions about the processing go to hej@unmd.ai.
2 · Data we process
We process data in three cases.
- The booking form on unmd.ai. Name, company, email address and the free text you write in the field about what is done by hand today.
- Email to us. Sender address, content and any attachments.
- Server logs. Our hosting provider logs IP address, timestamp, requested path and user agent for operation and security. The logs are not used to follow visitors between visits.
We do not collect special categories of personal data, we do not buy data from third parties, and we carry out no profiling or automated decision-making concerning you.
3 · Purposes and legal bases
| Processing | Purpose | Legal basis |
|---|---|---|
| Booking form | Answer the request and propose time slots | Steps prior to contract, Art. 6(1)(b) |
| Email correspondence | Answer and document contact | Legitimate interest, Art. 6(1)(f) |
| Server logs | Operation, debugging, security | Legitimate interest, Art. 6(1)(f) |
| Accounting records | Comply with the Swedish Accounting Act | Legal obligation, Art. 6(1)(c) |
Where the basis is legitimate interest, that interest is being able to answer and follow up on business contacts. We have weighed it against your interest in the protection of your data and find the processing limited and foreseeable.
4 · Retention
- Requests that do not lead to a contract are deleted no later than 24 months after the last contact.
- Data connected to a contract is kept for the term of the contract and thereafter for as long as needed to establish or defend legal claims.
- Accounting records are kept for seven years under the Swedish Accounting Act.
- Server logs are rotated by the provider on an ongoing basis, normally within 30 days.
5 · Recipients
The data is not passed on for other purposes. It is processed by the providers we use to run the site and our email — hosting provider, email provider and, where one is used, a form-handling provider. Each provider is a processor and processes the data only on our instructions, governed by a data processing agreement.
Where a provider processes data outside the EU and the EEA, the transfer relies on a European Commission adequacy decision or on standard contractual clauses.
6 · Security
The site is served over HTTPS. Access to requests and email is limited to the people in the company who need it, and those accounts are protected with two-factor authentication.
7 · Your rights
You have the right to request access to your data, rectification of inaccurate data, erasure, restriction of processing and data portability. You also have the right to object to processing based on legitimate interest.
Requests go to hej@unmd.ai. We answer within one month. If you are not satisfied with how we handle your data, you may lodge a complaint with the Swedish Authority for Privacy Protection, the supervisory authority in Sweden.
8 · Cookies
The site sets one single cookie, and only if you change the language yourself. It is described in full under Cookies.
9 · Changes
If the processing changes, this page and the date below are updated. Material changes are communicated to anyone with an ongoing matter with us.