Privacy policy

Last updated: 13 October 2026

This English version is provided for convenience; the Swedish version prevails.

Data controller

Ledningsverket AB, company reg. no. 559173-2861, Stallarholmen, Sweden, is the data controller for the processing of your personal data. Contact: info@ledningsverket.se.

What data we process

Contact form. Name, company, email address, phone number (optional), which service you're interested in and what you write in your message. We also store an anonymised checksum of your IP address and your browser details to prevent misuse of the form.

Customer register. When an enquiry is followed up, we record the company, contact persons (name, role, email, phone), our dialogue with you (notes, emails sent, meetings) and the status of any engagement. We may add publicly available information about the company, such as industry and size, from public registers.

Client portal. If you're invited to our client portal, we process your email address for sign-in, sign-in times, and which documents and agreements you have opened, downloaded, commented on or marked as read.

Electronic signing. When you sign an agreement in the portal, we record your name, email address, the time, a checksum of the signed document, an anonymised checksum of your IP address and your browser details. This data serves as evidence that and when the agreement was entered into.

Purposes and legal basis

• Responding to and following up enquiries – legitimate interest in managing business contacts (Art. 6(1)(f) GDPR) and, for data you provide in the form, your consent (Art. 6(1)(a)).
• Preparing, entering into and performing engagements , including the portal and agreement management – steps taken at your request before entering into an agreement and performance of an agreement (Art. 6(1)(b)).
• Proving that an agreement was entered into and meeting bookkeeping obligations – legal obligation (Art. 6(1)(c)) under, among other things, the Swedish Bookkeeping Act, as well as a legitimate interest in being able to evidence agreements entered into.
• Security and misuse prevention – legitimate interest (Art. 6(1)(f)).

AI support in our processing

We use AI tools to help collate incoming enquiries and draft replies. Drafts are always reviewed and approved by a person before anything is sent. No automated decisions with legal effect are made about you.

The AI assistant on the home page: what you write is sent to our AI provider to generate a response and is stored anonymously (without name or email) for up to 12 months to improve the service. If you provide your email, the conversation is linked to your enquiry.

Retention period

• Your cookie choice (consent): 12 months.
• Enquiries that don't lead to an engagement: 12 months after the last contact.
• Customer register and portal: for the duration of an ongoing engagement and 24 months thereafter.
• Signed agreements, signing evidence and other records constituting accounting records: 7 years after the end of the financial year to which the record relates, under the Swedish Bookkeeping Act.
• Portal event logs (opened, downloaded, read): 24 months.

Recipients and transfers outside the EU/EEA

Your data is processed by our hosting and database providers, email delivery providers and AI providers, who act as data processors and process the data according to our instructions and data processing agreements. Some providers may process data outside the EU/EEA. Where this happens, we ensure the transfer is covered by appropriate safeguards under Chapter V of the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision. We never sell your data.

Purchase and delivery of digital services

When you purchase a digital service, we process name, email, company details, order details and the material you provide in the portal, in order to perform the agreement and meet bookkeeping requirements. Payment is handled by Stripe, which is independently the data controller for the card payment and a data processor for other payment data we receive. Order and delivery data is stored for 24 months after delivery and then deleted, except for data that the Swedish Bookkeeping Act requires us to keep longer.

Cookies and local storage

The website uses necessary cookies for it to function and, if you consent, cookies for analytics (how the site is used) and marketing. Your choice is stored for 12 months in the lv_consent cookie and can be changed via "Cookie settings" at the bottom of the page. The client portal uses necessary local storage in your browser to keep you signed in.

Your rights

You have the right to access the data we hold about you, have inaccurate data corrected, have data erased (except for data we must retain by law), restrict or object to the processing, receive your data in a machine-readable format, and withdraw any consent you've given. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Contact

Questions about how we handle personal data can be sent to info@ledningsverket.se.