Privacy policy, Delta Akustik AB

This is a draft. The text has not been legally reviewed and does not constitute legal advice. Delta Akustik is responsible for having a lawyer review, correct and complete it before it goes live. A list of points that need particular attention appears at the end.

Data controller

Delta Akustik AB is the data controller for the processing of the personal data you provide to us. If you have questions about how we process your data, you can reach us at info@akustiker.se.

What data we collect

Data you provide yourself via the contact form: name, email, phone and a description of your enquiry.
Technical information via cookies for web analytics, but only after you have consented.

Why we process the data

Data from the contact form is processed in order to answer your enquiry and administer any resulting assignment. The legal basis is our legitimate interest in responding to your contact, or the performance of a contract.

Cookies and web analytics

The website uses necessary cookies and local storage to function, for example to remember your cookie choice and your language choice. These do not require consent.

To understand how the website is used, we may also use analytics cookies. These are enabled only if you click "Accept" in the cookie box. If you choose "Necessary only", no analytics and no tracking scripts are loaded at all. The legal basis for analytics is your consent.

The implementation follows the principle of consent before tracking (Google Consent Mode v2). Analytics and advertising storage default to "denied" and are updated only upon explicit consent. Without consent, no measurement data is sent at all, not even anonymised.

Tools we use

Google Tag Manager is used to load and control tags on the website. It sets no analytics cookies of its own, but it is loaded from Google's servers when the page opens. Technically, this means your IP address is processed by Google before you have made your cookie choice. No measurement takes place before consent.
Google Analytics 4 is used for web analytics, that is, to see which pages are visited, how visitors find us and how the website performs. It is activated only after your consent. Google Analytics does not store your full IP address.

For users within the EU/EEA, both services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as our data processor.

Recipients and transfers to third countries

When Google Analytics is used, data may be transferred to Google LLC in the United States. The transfer is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which Google LLC is certified, supplemented by the European Commission's standard contractual clauses. We do not sell your data and do not share it with other recipients for their own purposes.

Fonts and other external resources

The fonts used on this website are served from our own server. Your browser does not fetch them from Google's font servers, and no information about your visit is sent there. Apart from Google Tag Manager and, after consent, Google Analytics, the website loads no third-party resources.

Withdrawing or changing your consent

You can change or withdraw your consent at any time. At the bottom of every page there is a "Cookie settings" link. It reopens the cookie box so you can make a new choice. If you select "Necessary only", analytics is switched off immediately and no further measurement takes place. Withdrawing consent is as easy as giving it, and it does not affect the lawfulness of processing carried out beforehand.

How long we keep the data

Contact details from your enquiry are kept for as long as is needed to handle your enquiry or assignment, and thereafter only for as long as the law requires.
Analytics data in Google Analytics is kept for 14 months from the last activity, after which it is deleted automatically.
Your cookie choice is stored in your browser until you change it or clear the site data.

Your rights

You have the right to:

request access to the personal data we process about you,
request rectification of inaccurate data,
request erasure of your data,
object to or request restriction of the processing,
receive your data in a machine-readable format, data portability,
withdraw a consent you have given, without affecting the lawfulness of processing beforehand.

Contact us at info@akustiker.se and we'll help you. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), the supervisory authority in Sweden.

To be checked before publication

This list is addressed to Delta Akustik and the lawyer reviewing the text. It collects the points that cannot be settled without a legal assessment or information from Delta Akustik.

The exact statutory basis for cookie consent under Swedish law, the Electronic Communications Act, should be stated or confirmed.
The fact that Google Tag Manager loads before consent is disclosed openly above. If your lawyer concludes that this also requires consent, the loading must be moved, not merely the wording changed.
A data processing agreement with Google needs to be concluded and archived. Also verify Google's current certification under the EU-US Data Privacy Framework at the time of publication.
The legal basis for the contact form, legitimate interest or contract, should be confirmed against how you actually use the data.
Concrete retention periods for client matters and any accounting requirements need to be filled in.
Documentation of consents given is currently missing, see the separate technical description. Required under Article 7(1) GDPR.
State the full company name, registration number and postal address of the data controller.

Privacy policy