Privacy Policy

AT Interactive Design AB, company registration number (org.nr) 559556-4393, Born Furnvägen 6, 795 92 Rättvik, Sweden, is the data controller for the processing for which we ourselves determine the purposes and means, for example the processing linked to your SAEFUR account and the operation of the service.

You can contact us with questions about privacy and personal data at info@saefur.com.

In some situations we process personal data on behalf of a company that uses SAEFUR. In those cases, the next section applies.

A company that uses SAEFUR may register and process personal data about, for example, customers, contact persons, employees, and other individuals involved in the company’s business or projects.

When the company determines why and how such personal data is to be processed, the company is the data controller and AT Interactive Design AB processes the data on the company’s behalf as a data processor.

This means, among other things, that questions about such personal data may primarily need to be directed to the company that registered or is responsible for the data.

Data processing agreements are entered into where required under applicable data protection legislation. Contact us at info@saefur.com if you have questions.

The data we process depends on how you use SAEFUR.

We process personal data when it is necessary to:

• provide, administer, and develop SAEFUR,
• create and administer user accounts,
• verify identity and enable secure login and signing,
• manage customers, projects, quotes, agreements, and other information the user chooses to process in the service,
• enable invoicing, payments, and financial follow-up,
• fulfill legal obligations, for example under bookkeeping legislation,
• protect SAEFUR, our users, and their information against unauthorized access, misuse, and other security threats,
• send necessary communication about the service, for example invitations, notifications about quotes and invoices, and information for password resets.

Depending on the situation, the processing is based on it being necessary to perform a contract, to fulfill a legal obligation, or to satisfy a legitimate interest, for example our interest in providing a secure and functioning service.

When we process personal data as a data processor, the processing takes place according to instructions from the company that is the data controller.

We do not sell personal data and do not use personal data in SAEFUR for third-party advertising.

To provide the service, we use a limited number of external providers. These include, among others:

Stripe for card payments and related payment services. Companies that receive payments through SAEFUR are connected to Stripe, and the payment goes to the receiving company’s own connected Stripe account. SAEFUR does not store the customer’s card details.

Resend for sending transaction-related emails, for example invitations and other system messages.

Idura for BankID-based identification and signing.

Personal data is transferred to these providers electronically through the technical integrations required for each respective service. The transfer is limited to the data needed for the purpose at hand and takes place over protected connections and in accordance with applicable security requirements.

The providers’ role under data protection legislation may differ depending on which processing they carry out. Where a provider processes personal data on our behalf, the processing is governed by the agreements and data protection terms required under applicable legislation.

SAEFUR does not use external services for advertising or behavior-based tracking of users.

SAEFUR’s own database and the files stored directly in the service, for example photographs and documents, are located on servers in Sweden.

Certain external providers may process personal data in other countries. Where personal data is transferred outside the EU/EEA, the transfer will take place in accordance with the GDPR and with applicable safeguards, for example an adequacy decision or the European Commission’s standard contractual clauses where required.

SAEFUR only uses cookies and similar technology that are needed for the service’s basic function and security.

This includes, among other things, technology to keep a user logged in and a short-lived security cookie used in connection with logging in with a passkey.

We do not use cookies for advertising or behavior-based tracking.

We keep personal data for as long as it is needed for the purposes for which it was collected, or for as long as we are required to retain it by law.

Bookkeeping material, for example invoices and certain payment information, is kept for the period required under Swedish bookkeeping legislation.

Other data is normally kept for as long as the account, the customer relationship, or the relevant project needs to remain, and thereafter for as long as required for, for example, security, legal claims, or other legitimate obligations.

When data is no longer needed, it is deleted or anonymized in accordance with our applicable routines and legal obligations.

We work with technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, and misuse.

This includes, among other things, encrypted communication, protected storage of passwords, access controls, rate limiting of repeated login attempts, and logging of security-related and financially significant events.

No digital service can guarantee complete security, but we work continuously to maintain protection appropriate to the information and the risks the processing involves.

Where AT Interactive Design AB is the data controller, you have, to the extent provided by the GDPR, the right to:

• obtain information about how your personal data is processed and request access to it,
• request that inaccurate or incomplete data be corrected,
• request that personal data be erased,
• request that the processing be restricted,
• object to certain processing based on legitimate interest,
• in certain cases, receive your personal data in a structured, commonly used, and machine-readable format.

These rights are not absolute. For example, we may be required to retain certain data under bookkeeping legislation or other law.

Contact info@saefur.com if you wish to exercise any of your rights.

If the data was registered by a company using SAEFUR and AT Interactive Design AB only processes it as a data processor, your request should normally be directed to the company that is the data controller.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) if you consider that personal data is being processed in violation of data protection legislation.

SAEFUR is a service for businesses, professional users, and their customers, and is not designed as a service for children.

The service is not intended to be used by individuals under 18 years of age as independent users.

We may update this privacy policy as SAEFUR evolves, as our processing of personal data changes, or as legislation and other requirements change.

The current version is always available on this page. The date at the top shows when the policy was last updated.

If a change is material, we will inform you of it in an appropriate manner.

AT Interactive Design AB
Org.nr 559556-4393
Born Furnvägen 6
795 92 Rättvik
Sweden

Email: info@saefur.com