Privacy policy

1. Data controller

Tillväxtstöd Sverige AB (company no. 556748-4539) is the data controller for the processing of your personal data. You can contact us by email at kontakt@tillvaxtstod.se or by post at Kungsgatan 12, 111 35 Stockholm, Sweden.

2. Which personal data do we collect?

We collect the following data when you use our services or contact us:

• Contact details: name, email address, phone number
• Company information: registration number, industry, revenue, number of employees
• Communication: messages you send us
• Technical information: IP address and browser information (collected via server logs and HTTP headers)

3. Why do we process your data?

We process your personal data to respond to enquiries, provide advice, assess eligibility for business grants, manage the customer relationship and improve our services.

4. Who do we share data with?

We share your personal data with the following processors that help us deliver the service:

• Salesforce: data you submit via our forms is stored in our CRM system.
• Resend: sends email confirmations and messages from the contact form.
• Vercel: hosting and server logs for the website.
• Sanity: content management for the website's texts and images.
• Bolagsverket: we call their API to fetch company names based on the registration number you enter.

All processors are bound by data processing agreements. When data is transferred outside the EU/EEA we secure the level of protection through standard contractual clauses or other approved mechanisms.

5. Legal basis for processing

We process your personal data based on your consent, our agreement with you, or our legitimate interest in improving our services.

6. How long do we keep your data?

We store your personal data only for as long as is necessary for the purpose it was collected for, or as long as we have a legal basis or statutory obligation to do so. Contact us if you want to know how long we process your data in a specific case.

7. Cookies

Our website uses cookies to improve your experience. You can manage your cookie settings via our cookie banner.

8. Complaints

If you believe we are processing your personal data incorrectly you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

9. GDPR

The GDPR (General Data Protection Regulation) is the EU's data protection regulation which came into force on 25 May 2018. It gives you as an individual the right to know which personal data we hold about you, how it is processed, and the ability to request changes or erasure.

You have the following rights when we process your personal data:

• Right of access: request a copy of the data we hold about you.
• Right to rectification: have incorrect or incomplete data corrected.
• Right to erasure: request that we erase your data, also known as the right to be forgotten.
• Right to restriction: request that processing is paused while a question is investigated.
• Right to data portability: receive your data in a machine-readable format.
• Right to object: object to processing based on legitimate interest.
• Right to withdraw consent: when processing is based on consent you can withdraw it at any time.

We strive to keep all processing within the EU/EEA. If data needs to be transferred outside this area we ensure the level of protection matches the GDPR through standard contractual clauses or other approved mechanisms. We do not use automated decisions that have legal effect on you.

We have taken appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access.

Contact us at kontakt@tillvaxtstod.se if you want to exercise any of your rights. We will respond to your request within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.