Last updated: 17 August 2026
Click here for Swedish / Klicka här för Svenska
SVIS Service AB (“SVIS”, “we”, “us”, or “our”) respects your privacy and is committed to handling personal data responsibly and in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Swedish data protection legislation.
This Privacy Policy explains how SVIS Service AB processes personal data in connection with our website, communications, business relationships, services, and recruitment activities.
SVIS Service AB
Organisation number: 559415-5599
Sommen, Jönköpings län
Sweden
Website: https://www.svisservice.se/
Email: info.it@svisservice.se
SVIS Service AB is the data controller for personal data processed by or on behalf of SVIS where SVIS determines the purposes and means of the processing.
The personal data we process depends on your relationship with us and how you interact with SVIS.
Depending on the circumstances, this may include:
We seek to collect and process only personal data that is relevant and necessary for the applicable purpose.
We may receive personal data:
We may also receive information from publicly available sources where this is relevant and lawful, for example in connection with business contacts or professional relationships.
We may process personal data for the following purposes.
We process information necessary to respond to enquiries, communicate with prospective customers, provide information about our services and maintain business correspondence.
We process personal data where necessary to prepare quotations, enter into agreements and administer contractual relationships.
We process information necessary to plan, provide and administer consulting and other services, communicate with customers and manage ongoing assignments.
SVIS provides, among other things, backend and API development, Linux systems and DevOps, hosting and server infrastructure, automation and integrations, performance and troubleshooting, and technical and industrial consulting. The exact information required depends on the nature of the assignment.
We process information necessary for invoicing, payment administration, accounting and related financial administration.
If you contact us regarding employment or submit an application, we may process information such as your name, contact details, CV, qualifications, work history and other information that you choose to provide and that is relevant to the recruitment process.
We may process technical information where necessary to operate, maintain and secure our website, IT systems and services, including to detect, investigate and prevent security incidents, abuse or unauthorised activity.
We may process personal data where necessary to comply with obligations imposed on us by law, including accounting, tax and other applicable legal requirements.
We may process personal data where necessary for legitimate business purposes, such as managing our business relationships, protecting our property and systems, preventing fraud or misuse, establishing or defending legal claims, and maintaining the security and integrity of our services.
Depending on the circumstances, our processing of personal data may be based on one or more of the following legal bases under the GDPR:
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
The SVIS website is intentionally designed to operate with a limited number of external services.
We do not intentionally use third-party advertising trackers or behavioural profiling on the website, and the website does not intentionally load third-party web fonts.
The website may nevertheless involve the processing of technical information that is necessary to deliver, maintain and secure the service. Depending on the technical infrastructure involved, this may include information such as:
SVIS does not intentionally use such information for advertising or behavioural profiling.
Technical information may also be processed automatically by infrastructure, network or telecommunications providers involved in delivering the website. Such processing may occur outside SVIS's direct control.
The SVIS website is not intentionally designed around advertising or tracking cookies.
We may use technically necessary cookies or similar technologies where required for the operation, security or functionality of the website.
If we introduce non-essential cookies or similar technologies that require consent under applicable law, we will provide appropriate information and obtain consent where required.
The use of cookies may change as the website and its functionality develop. Where applicable, additional information will be provided through the website's cookie controls or related notices.
The SVIS website contains links to external websites, services and professional profiles, including services such as LinkedIn, Brainville, GitHub and other websites.
Following an external link means that you leave the SVIS website. Those websites are operated by their respective organisations and are subject to their own privacy policies and terms.
SVIS is not responsible for the privacy practices, content or processing of personal data carried out by external websites.
The website may also refer to software, hosting platforms, demonstrations or other projects created or operated independently by individuals who work with or provide services to SVIS. Unless explicitly stated otherwise, such projects or services are not operated by SVIS Service AB and are not covered by this Privacy Policy. The respective operators are responsible for their own data processing.
Personal data may be accessed by SVIS personnel and authorised service providers where necessary for their work or the provision of services to SVIS.
We may also use external suppliers and service providers where necessary to operate our business. Depending on the circumstances, these may include providers of:
Where a supplier or other external party processes personal data on behalf of SVIS, SVIS will implement the contractual and organisational arrangements required by applicable data protection law, including a data processing agreement where required.
We may also disclose personal data where required by law, a lawful request from a competent authority, or where necessary to establish, exercise or defend legal claims.
We aim to keep personal-data processing within the European Union/European Economic Area where reasonably practicable.
If personal data is transferred to or made available to a recipient outside the EU/EEA, SVIS will ensure that the transfer is carried out in accordance with the GDPR and that an appropriate legal transfer mechanism and safeguards are in place where required.
We retain personal data only for as long as it is necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods therefore depend on the type of information and the reason for processing.
For example, certain accounting and financial records must be retained for periods prescribed by applicable Swedish legislation.
When personal data is no longer necessary, it will be deleted, anonymised or otherwise securely disposed of where appropriate.
Subject to the conditions and limitations set out in the GDPR, you have the following rights.
You have the right to request information about whether we process personal data concerning you and, in many circumstances, to receive a copy of that data.
You have the right to request correction of inaccurate or incomplete personal data.
You may, in certain circumstances, request that we delete your personal data. This right is not absolute and does not apply where we are legally required or otherwise entitled to retain the information.
You may, in certain circumstances, request that we restrict the processing of your personal data.
You may have the right to object to processing based on our legitimate interests. You always have the right to object to the processing of your personal data for direct marketing purposes.
Where the GDPR provides this right, you may request to receive personal data that you have provided to us in a structured, commonly used and machine-readable format, or request that it be transmitted to another controller.
Where processing is based on your consent, you may withdraw that consent at any time.
Exercising a right does not necessarily mean that all processing must stop. Certain legal obligations, contractual requirements or other lawful grounds may allow or require us to continue processing particular information.
To exercise your rights or ask questions about our processing of personal data, contact:
SVIS Service AB
Email: info.it@svisservice.se
Please provide enough information for us to understand your request.
We may need to verify your identity before fulfilling a request, particularly where the request involves disclosure, modification or deletion of personal data.
We will respond without undue delay and, in general, within one month of receiving your request. Where permitted by the GDPR, this period may be extended when a request is particularly complex or when we receive a large number of requests.
SVIS implements technical and organisational security measures that are appropriate to the nature of the processing and the risks associated with it.
For systems and infrastructure under SVIS's responsibility, these measures may include appropriate access controls, secure configuration and maintenance, system updates, network and communications security, and measures to prevent, detect and respond to security incidents. The specific measures applied depend on the function of the system, the nature of the processing and the relevant risk level.
SVIS may rely on external providers, networks, internet service providers and other infrastructure that are wholly or partly outside SVIS's direct control. SVIS therefore cannot guarantee the security of systems or networks that it does not itself control.
SVIS is responsible for the security measures within its control and, where GDPR applies, for appropriately assessing the providers and services used in connection with personal-data processing.
No internet-based service or method of electronic storage or transmission can be guaranteed to be completely secure.
If SVIS becomes aware of a personal data breach for which it is responsible, SVIS will assess the incident and take appropriate measures in accordance with applicable data protection law.
Where required, we will notify the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) and, where applicable, affected individuals.
SVIS does not currently use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.
If this changes in the future, we will provide the information required by applicable data protection legislation before carrying out such processing.
If you have concerns about how SVIS processes your personal data, we encourage you to contact us first so that we can investigate and address the matter.
You also have the right to lodge a complaint with the Swedish data protection authority:
Integritetsskyddsmyndigheten (IMY)
Website: https://www.imy.se/
You may also have the right to lodge a complaint with another competent supervisory authority where applicable under the GDPR.
We may update this Privacy Policy when necessary, for example when our services, systems, business activities or applicable legislation change.
The latest version will be published on the SVIS website.
If a change materially affects how we process personal data, we will provide additional information where required by law.
Last updated: 17 August 2026