Integrity (Privacy) Policy

Who We Are

Sparv Embedded AB

Fridtunagatan 33

582 13 Linköping, Sweden

Data Protection Officer: Jane Doe, dpo@sparvembedded.com

We process personal data to deliver meteorological instrumentation, support and marketing services. This policy explains what we collect, why we use it and how you can exercise your rights.

What Data We Collect

We collect personal data you provide directly or we receive indirectly from partners. Data categories include:

Personal and contact details (name; organization; invoice and shipping address; email; phone)
Payment information (invoice numbers; billing details)
Product and service records (contract details; purchase history)
Analytics and survey responses (website behavior; satisfaction scores)

You can receive your personal data in a structured, commonly used and machine-readable format and transmit it to another controller.

Our Security

Encryption at rest and in transit (TLS/HTTPS)
Role-based access controls and audit logging
To add what measure we are taking here

Sources of Your Data

We obtain data from these sources:

You, when you register, request quotes, submit tickets or sign up for marketing
Our website, via cookie consent and analytics tools
Third parties, such as resellers or public registers, when authorized by you

Purposes and Legal Bases

We process your data for these purposes and legal grounds:

Fulfilling contracts and delivering products or services – performance of a contract
Billing and accounting – legal obligation under Swedish bookkeeping law
Marketing and customer surveys – your consent and our legitimate interest in improving offerings
Website analytics – your consent obtained via cookie banner

Mandatory vs. Optional Fields

Certain data are required to provide services; others are optional:

Mandatory: name, email, delivery address – without these we cannot deliver products or invoices
Optional: survey responses; marketing preferences – you may opt out at any time without affecting core services

If you withhold name, address or email, we cannot process your order, issue invoices or respond to support requests.

Recipients and Third Parties

We share data only with entities needed to perform our services:

Payment processors and accountants for invoicing
Email and newsletter platforms for marketing communications
Analytics providers under your cookie consent
Support partners under GDPR-compliant Data Processing Agreements

For details on cookies and consent management, see our Cookie Policy.

Third-Party Categories & DPAS: Analytics providers under consent (Google Analytics); Email platform (Mailchimp & Odoo).

International Transfers

Some service providers (analytics; email platforms) are based in the US. We safeguard transfers under EU Standard Contractual Clauses and additional encryption measures.

Data Retention

We retain your data according to these periods:

Invoices and contracts: 7 years (Swedish bookkeeping requirement)
Active customer records: while you remain a customer
Marketing prospects: up to 2 years after last consent or interaction

Data that are no longer necessary are securely deleted or anonymized.

Your Rights

Under the GDPR you have the right to:

Access your data (registry extract)
Correct inaccurate or incomplete information
Request deletion when data are no longer necessary or unlawfully processed
Restrict processing while disputing accuracy
Object to processing based on our legitimate interests
Withdraw consent for marketing at any time
Lodge a complaint with the Swedish Authority for Privacy Protection (Datainspektionen, www.imy.se)

To exercise these rights, email us at info@sparvembedded.com.

Automated Processing

We do not engage in profiling or automated decision-making that produces legal or similarly significant effects.

Contact and Version History

For questions about this policy or to update your data, contact info@sparvembedded.com.

Last updated: October 13, 2025

Version 2.0