Privacy Policy
Last updated: February 24, 2026
Data controller
AIFY Sweden AB (reg. no. 559454-4230), based in Stockholm, is the data controller for the processing of your personal data on aifysweden.com. We process your data in accordance with the EU General Data Protection Regulation (GDPR) and Swedish data protection legislation.
Personal data we collect
Contact form
When you submit our contact form, we collect: your name, email address, company name (optional) and your message.
Legal basis: Legitimate interest (Art. 6.1f GDPR) – to respond to your inquiry.
Retention period: Data is kept as long as needed to handle your inquiry, then deleted.
Newsletter
When you subscribe to our newsletter, we collect your email address.
Legal basis: Consent (Art. 6.1a GDPR) – you give consent by actively subscribing.
Retention period: Until you unsubscribe.
Chat widget
Messages you send in our chat widget are processed in real-time. We do not store chat messages permanently.
Legal basis: Legitimate interest (Art. 6.1f GDPR) – to provide you with support.
Retention period: Only during your active session.
Cookies and web analytics
We use Google Analytics 4 with Consent Mode v2 to understand how visitors use the website. Analytics cookies are only activated after you give your consent.
Legal basis: Consent (Art. 6.1a GDPR).
Read more in our cookie policy →How we process your data
We process your personal data for the following purposes:
- Respond to inquiries via the contact form
- Send newsletters you subscribe to
- Provide support via the chat widget
- Analyze website usage (with consent)
- Improve our website and services
Sharing of data
We never sell your personal data. Data may be shared with the following categories of recipients:
Google Analytics (Google LLC, USA)
Anonymized visitor data – only after your consent. Google is certified under the EU-US Data Privacy Framework.
Automation system (EU server)
Contact form, newsletter and chat messages are processed via our automation system running on servers within the EU.
Transfers outside the EU/EEA
Google Analytics may transfer data to the USA. Google LLC is certified under the EU-US Data Privacy Framework, which means the transfer has an adequate level of protection according to the European Commission's decision. All other data processing takes place exclusively on servers within the EU.
Security measures
We take appropriate technical and organizational measures to protect your personal data, including:
- Encrypted data transfer (HTTPS/TLS)
- Encrypted databases
- Rate limiting and honeypot protection against abuse
- API key protection for sensitive endpoints
- Restricted access to personal data
Your rights
Under GDPR you have the following rights regarding your personal data:
Right of access (Art. 15)
You have the right to obtain confirmation of whether we process your personal data and, if so, access to it.
Right to rectification (Art. 16)
You have the right to request correction of inaccurate data.
Right to erasure (Art. 17)
You have the right to request deletion of your personal data under certain conditions.
Right to restriction (Art. 18)
You have the right to request restriction of the processing of your data.
Right to data portability (Art. 20)
You have the right to receive your data in a machine-readable format.
Right to object (Art. 21)
You have the right to object to processing based on legitimate interest.
Right to withdraw consent
You can withdraw consent at any time, e.g. for newsletters or cookies.
Complaints
If you believe we are processing your personal data incorrectly, you have the right to file a complaint with:
The Swedish Authority for Privacy Protection (IMY)
www.imy.se
Changes
We may update this privacy policy. In case of significant changes, we will inform you via the website. The latest version is always available on this page.
Contact
Have questions about how we handle your personal data? Contact us: