Integritetspolicy

1. Data Controller

POISE AB (org.nr 559043-3228), Brunnsgatan 9, 172 68 Sundbyberg, Sweden is the data controller for personal data processed through this website. Contact: info@poise.se

2. Data We Collect

We collect only the minimum data necessary:

• Contact form: Name, email address, and message content
• Analytics: Anonymised page views with hashed IP addresses (rotated daily). No cookies.
• Server logs: Standard web server logs retained for 30 days
• Client portal: Email and authentication details for portal users

3. How We Use Your Data

• Responding to your enquiries and providing requested services
• Improving our website through aggregated, anonymised analytics
• Maintaining security and preventing abuse
• Fulfilling legal obligations

4. Legal Basis for Processing

• Consent: Contact form submissions
• Legitimate interest: Analytics and security monitoring
• Contractual necessity: Client portal accounts and service delivery

5. Data Storage

All data is stored within the European Union. We do not transfer personal data outside the EU/EEA. Our hosting infrastructure is located in Sweden and the EU.

6. Data Retention

• Contact form messages: 12 months
• Analytics data: 12 months (aggregated, anonymised)
• Server logs: 30 days
• Client accounts: Duration of service agreement plus 12 months

7. Data Sharing

We do not sell, trade, or rent personal data. Data may be shared with:

• EU-based hosting providers (infrastructure only)
• Swedish authorities when required by law

8. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access your personal data (Article 15)
• Rectify inaccurate data (Article 16)
• Erase your data (Article 17)
• Restrict processing (Article 18)
• Data portability (Article 20)
• Object to processing (Article 21)
• Withdraw consent at any time

To exercise these rights, contact info@poise.se. We will respond within 30 days.

9. Cookies and Tracking

This website does not use tracking cookies. We use only essential technical storage (theme preference in localStorage). No third-party analytics, advertising, or social media trackers are present.

10. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS), at rest where applicable, and strict access controls.

11. Supervisory Authority

You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): www.imy.se

12. Changes to This Policy

We may update this privacy policy. Changes will be posted on this page with an updated revision date. Significant changes will be communicated via email to affected users.