Legal
Privacy policy.
How we process personal data when you visit paragraf.co or contact us – and the rights you have.
Who is responsible
Paragraf Intelligence Aktiebolag (company registration number 556947-8273), Karlavägen 20, 114 31 Stockholm, Sweden, is the controller for the personal data described here. You can reach us through the contact form or by post to the address above.
This policy covers our website and our contact with prospective customers and partners. When our customers use the Paragraf platform, we process their data on their behalf as a processor under a data processing agreement – that processing is described in the agreement, not here.
What we collect
- When you contact us: name, work email, organisation, role, phone number (if you give it), your message and the topic you choose.
- When we talk or meet: what you tell us about your organisation and needs, and our correspondence with you.
- When you visit the website: technical data our servers need to deliver the page securely, such as IP address, browser type and time of the request.
We do not use advertising trackers, and we do not sell personal data.
Why we process it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your request, booking a walkthrough and sending the security pack | Legitimate interest (Art. 6(1)(f)), or steps before entering into a contract (Art. 6(1)(b)) |
| Following up with relevant information about Paragraf after you have been in touch | Legitimate interest (Art. 6(1)(f)). You can object at any time. |
| Keeping the website secure and working | Legitimate interest (Art. 6(1)(f)) |
| Meeting legal obligations, such as accounting rules | Legal obligation (Art. 6(1)(c)) |
How long we keep it
We keep contact details and correspondence for as long as needed to handle your request and follow up, and no longer than 24 months after our last contact, unless you become a customer or the law requires us to keep it longer. Technical server logs are deleted after a short period.
Who we share it with
We use service providers for hosting, email and customer relationship management. They process data only on our instructions and under a data processing agreement. We primarily use providers within the EU/EEA. If a provider processes data outside the EU/EEA, we make sure there is a valid transfer mechanism, such as the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
Your rights
You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to our processing, and to data portability. Where processing is based on consent, you can withdraw it at any time. Contact us and we will answer within one month.
If you are unhappy with how we process your data, you can complain to the Swedish Authority for Privacy Protection (IMY) or the supervisory authority where you live or work.
Cookies
Read how we use cookies and similar technology in our cookie policy.
Changes
We update this policy when our processing changes. The date at the top shows the latest version.