How we handle your data.

1. Data controller

VNDY Varuautomater AB, corporate registration number 559472-2976, is the data controller for the processing of your personal data.

Stureparksvägen 1 A, Uddevalla · Kemistvägen 2 A, Stockholm
Email: [email protected]

2. What data we collect

When you fill in a form on the site (e.g. "Book a demo" or the contact form), we collect the data you provide yourself:

• Name
• Company
• Email address
• Phone number
• Details about your interest (model, quantity, location/industry) and any message
• Technical origin of your enquiry: the page you arrived on, the referring page and any ad or campaign tagging (e.g. Google click ID and UTM parameters)

We do not collect more data than you voluntarily provide. Fields marked with * are required for us to be able to get back to you.

3. Purposes and legal basis

We process your data in order to:

• respond to your enquiry and come back with a proposal or quote,
• contact you about a demo or installation, and
• administer any customer or contractual relationship.

The legal basis is our legitimate interest in responding to enquiries and conducting sales (Article 6(1)(f)), and the need to enter into and perform contracts with you or your company (Article 6(1)(b)).

4. Who we share data with

We never sell your data. To run the site and our business we engage suppliers who process data on our behalf (data processors):

• Cloudflare. Hosting and database (storage of form submissions).
• Resend. Sending of email related to your enquiry.
• Google: if you consent to statistics/marketing cookies, measurement of web traffic and advertising.

5. Transfers to third countries

Some of our suppliers may process data outside the EU/EEA. Where this happens, we ensure that the transfer is protected by appropriate safeguards, such as the European Commission's standard contractual clauses.

6. How long we keep the data

We keep your data for as long as needed for the purpose. If an enquiry does not lead to a deal, we normally delete the data within 24 months. If you become a customer, the data is kept for the duration of the contract and for as long as we have a legal obligation (e.g. under the Swedish Accounting Act).

7. Cookies and similar technologies

We use essential storage to make the site work (e.g. your theme choice). Statistics and marketing cookies (e.g. Google) are set only after your consent. You can change your choice at any time via the cookie settings.

8. Your rights

Under the GDPR you have the right to:

• request access to the data we hold about you,
• have inaccurate data corrected,
• have data erased,
• object to or request restriction of the processing,
• receive your data in a machine-readable format (data portability).

To exercise any of your rights, email [email protected].

9. Complaints

If you believe we process your data incorrectly, you have the right to lodge a complaint with the supervisory authority, the Swedish Authority for Privacy Protection (IMY), imy.se.

10. Changes

We may update this policy. The latest version is always available on this page, with the date of the most recent change at the top.