Desarus is responsible for the personal data processed through this website and contact form.
Last updated:
Privacy Policy
This policy explains how Desarus handles personal data when you visit the website, contact us, request a quote or work with us on a project. We only collect information that is relevant for communication, delivery, security and legal obligations.
We mainly process contact details, messages, project information and basic technical data needed to run and protect the site.
You can request access, correction, deletion, restriction, portability, objection or withdrawal of consent where the law allows.
Who is responsible for your data?
Desarus is the data controller for personal data collected through this website, including the contact form and direct email communication. If you contact us on behalf of a company, we may also process your details as part of business communication with that company.
- Controller
- Desarus
- desarus.norr@gmail.com
What personal data we collect
The exact information depends on how you use the website and how you choose to contact us.
- Contact form and email: name, email address, company name, subject, message content and any details you choose to include.
- Project and client communication: requirements, files, feedback, technical context, meeting notes, offers, invoices and delivery information when relevant.
- Technical website data: IP address, browser type, device information, requested pages, timestamps, error logs and security events generated when the site is used.
- Cookie and preference data: language choice, cookie consent choice and necessary security or form-protection cookies.
Please do not send sensitive personal data through the contact form unless we specifically ask for it and it is necessary for the matter.
Why we process personal data and legal bases
We process personal data only when we have a lawful basis under data protection rules.
- To answer questions, requests and quote inquiries. Legal basis: legitimate interest and, when relevant, steps before entering into a contract.
- To plan, deliver, maintain and improve agreed services. Legal basis: contract or legitimate interest in business-to-business communication.
- To keep the website, forms and systems secure, prevent misuse and troubleshoot errors. Legal basis: legitimate interest.
- To meet accounting, tax, legal claim and authority requirements. Legal basis: legal obligation or legitimate interest.
- To remember non-essential cookie choices if such features are introduced. Legal basis: consent.
Who can receive personal data
We do not sell personal data. We may share necessary information with trusted service providers that help us host the website, deliver email, provide technical tools, maintain security, manage administration or comply with legal obligations. These providers may only use the data for the agreed purpose.
Some external providers, such as font or CDN services, may process technical request data outside Sweden or the EU/EEA. Where a transfer outside the EU/EEA is relevant, we aim to use providers with appropriate safeguards, such as adequacy decisions or standard contractual clauses.
How long we keep data
We keep personal data only for as long as needed for the purpose, unless a longer period is required by law or necessary to handle a dispute.
- Contact inquiries are normally kept for up to 12 months after the last communication if they do not become an active client matter.
- Client and project records are kept during the assignment and afterwards for support, documentation, accounting and legal claim needs.
- Security and technical logs are normally kept for a limited period, often up to 90 days, unless longer retention is needed to investigate misuse or errors.
- Cookie and preference storage follows the periods listed in the Cookie Policy.
Your privacy rights
Depending on the situation and legal basis, you may have the following rights under the GDPR:
- Access: request confirmation and a copy of personal data we process about you.
- Correction: ask us to correct inaccurate or incomplete information.
- Deletion: ask us to delete data when it is no longer needed or when the law requires deletion.
- Restriction: ask us to limit processing in certain situations.
- Portability: receive data you provided to us in a structured format when the right applies.
- Objection: object to processing based on legitimate interest, including direct marketing if it is ever used.
- Withdrawal: withdraw consent at any time when processing is based on consent.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe your data has been handled incorrectly.
Security, children and automated decisions
We use reasonable technical and organisational measures to protect personal data, including limited access, secure development practices and attention to website and form security.
Children
Our services and website are not directed to children, and we do not knowingly collect personal data from children through the website.
Automated decisions
We do not use personal data from this website for automated decisions that produce legal or similarly significant effects.
Contact and updates
Contact us if you have questions about this policy, want to exercise a privacy right or want to know more about how your information is handled.
desarus.norr@gmail.comWe may update this policy when our website, services, providers or legal requirements change. The latest version will always be published on this page.