Privacy Policy

Last updated: March 2026

1. Data Controller

Desander AB, reg. no. 559410-9075, based in Oxelosund, Sweden, is the data controller for the processing of your personal data. You can reach us at hello@desander.io.

2. Data We Collect

We collect data that you voluntarily provide to us:

Contact form: Name, email address, company name, and your message.
Email contact: Name, email address, and the content of correspondence.
Client projects: Contact details, company information, and project-related data needed to deliver our services.

3. Why We Process Your Data

Respond to inquiries — legal basis: legitimate interest.
Deliver services — legal basis: performance of contract.
Send relevant information — legal basis: legitimate interest or consent.
Accounting and invoicing — legal basis: legal obligation.

4. How Long We Store Data

Contact inquiries are stored for up to 12 months if no client relationship is established. Client data is stored for the duration of the contract plus 36 months. Accounting records are stored for 7 years in accordance with Swedish law.

5. Third-Party Sharing

We never sell your data. We may share data with:

Sub-processors who help us deliver services (e.g., cloud services, email providers).
Authorities if required by law.

All sub-processors are bound by data processing agreements.

6. Your Rights

Under GDPR, you have the right to:

Request access to your personal data.
Request correction of inaccurate data.
Request deletion of your data.
Request restriction of processing.
Object to processing based on legitimate interest.
Request data portability.

7. Cookies

This website does not use tracking cookies or third-party analytics tools. Technically necessary cookies may be used for website functionality.

8. Supervisory Authority

If you believe we are processing your data incorrectly, you have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY).

9. Changes

We may update this policy. The current version is always available on this page.