Privacy policy

We take your privacy seriously. This policy explains what personal data armsec collects when you visit armsec.se, contact us or use our customer portal, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR).

Who is responsible

armsec, Stockholm, Sweden, is the controller for the personal data described here. For questions about privacy, contact us at hello@armsec.se.

What we collect and why

When you visit the website

Our servers log technical information such as IP address, browser type, the page requested and the time of the request. We use it to keep the website secure and running, for example to detect attacks and troubleshoot errors. The legal basis is our legitimate interest in protecting the website. Logs are kept for a limited time and then deleted.

Analytics, only with your consent

If you accept analytics cookies, we use Google Analytics to understand how the website is used, such as which pages are visited and how visitors find us. IP addresses are anonymised. The legal basis is your consent, which you can withdraw at any time under Cookie settings at the bottom of every page. If you decline, Google Analytics is not loaded at all. Read more in our cookie policy.

When you contact us

When you email or call us, we process your name, contact details and what you write to us, in order to answer your question and, if relevant, prepare an offer. The legal basis is our legitimate interest in handling enquiries, or steps prior to entering into a contract. We keep the correspondence as long as it is needed for the purpose, and no longer than required by law.

Customers and the customer portal

For customers we process contact details for the people we work with, and login information for the customer portal. The legal basis is the performance of our contract. Accounting records are kept for as long as Swedish law requires. When we process personal data on behalf of a customer as part of an assignment, this is governed by a data processing agreement with that customer.

Who we share data with

We do not sell personal data. We share it only with suppliers who help us run our business, such as hosting, email and, if you have consented, Google for analytics. They may only process the data on our instructions. Our website and customer portal are hosted in the EU. Google may transfer data to the United States; such transfers are covered by the EU-US Data Privacy Framework and the EU Commission's standard contractual clauses.

How we protect your data

Security is what we do. Personal data is protected with encryption in transit, access control, two-factor authentication for the customer portal, logging and regular updates. Only people who need the data for their work have access to it.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have incorrect data corrected
• have your data deleted, when it is no longer needed or you withdraw your consent
• restrict or object to our processing
• receive your data in a portable format, where applicable
• withdraw your consent at any time

Contact us at hello@armsec.se to use your rights. If you are not satisfied with how we handle your personal data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Changes to this policy

We may update this policy. The date at the top shows when it was last changed.