Last updated:
Data controller
Lexiora Group AB, company registration number 559596-3603, with its registered office in Ljusdal, is responsible for the personal data it processes in connection with the website and its contact with you.
Postal address: c/o Ulrika Andersson, Grangatan 16, 827 35 Ljusdal, Sweden. VAT number: SE559596360301. The contact person is Ulrika Andersson. You can reach us at info@lexiora.se or +46 70 2424588.
When you visit the website
The website consists of static pages and has no login or customer database. We use Cloudflare to deliver the content and protect the website. This involves processing technical information such as your IP address, the requested web address, the time of the request and browser information.
We do not use visitor analytics, advertising or tracking for marketing. Our cookie policy explains the language preference that can be saved in your browser.
When you contact us
You choose what information you send. An enquiry may include your name, company, email address, phone number, selected subject and message. Please avoid sensitive personal data and information that is not needed for your enquiry.
The contact form does not submit your details to a form service or database. It prepares an email in your email application. Your details are passed to email services and Lexiora only when you send that email. You can also contact us directly by email or phone.
We use the information you provide to answer your enquiry and manage subsequent customer communication. Email is used to follow up an existing dialogue. The website has no connection to a CRM system.
Purposes and legal bases
We rely on legitimate interests under Article 6(1)(f) of the GDPR to answer voluntary business enquiries and manage customer communication. Our interest is to participate in the business dialogue you initiate or take part in and follow up questions about our services.
The technical delivery and security of the website also rely on legitimate interests. Our interest is to display the information you request and prevent errors and misuse. Processing is limited to what is needed for these purposes. You have the right to object to processing based on legitimate interests.
When we handle a request to exercise your data protection rights, we process the information needed to meet our legal obligations under the GDPR, relying on Article 6(1)(c).
You do not have to consent to marketing to contact us. Sending an enquiry is not treated as general consent to other uses of your information.
How long information is needed
We keep only information needed to handle your enquiry and subsequent customer communication. Once the matter is closed and the information is no longer needed for the customer relationship, it is deleted. You can also contact us to request erasure.
Information may need to be kept longer where required by law or necessary to establish, exercise or defend legal claims. In that case, its use is limited to that purpose.
Technical information held by the hosting provider is processed for as long as needed to deliver the service and maintain its security under the provider’s data protection terms. The website has no visitor register of its own.
Suppliers and other recipients
Cloudflare provides website hosting and technical protection. Microsoft 365 handles our email. These providers and their subprocessors may therefore process information for their respective services. Your own email providers also process any email you choose to send.
Authorised people handling customer communication or technical operations may access information to the extent required for their task. Information may also be disclosed where required by law. We do not sell your personal data or use an external form service on the website.
The providers’ data protection terms describe their processing, subprocessors and safeguards:
Processing outside the EU/EEA
Cloudflare and Microsoft are international providers. Using their services may involve processing personal data outside the EU/EEA, including in the United States.
The providers’ data protection terms contain the European Commission’s Standard Contractual Clauses as safeguards for international transfers covered by those clauses. They are available in the agreements linked above. Contact info@lexiora.se for further information about the applicable safeguards or a copy of them.
Your rights
Contact info@lexiora.se to exercise your rights. Depending on the processing and the conditions in the GDPR, you have the right to:
- Access your personal data and information about how it is processed.
- Have inaccurate information corrected and incomplete information completed.
- Request erasure or restriction of processing where the relevant conditions are met.
- Object to processing based on legitimate interests, and always to direct marketing.
- Receive information in a structured format where the right to data portability applies.
- Withdraw consent where processing relies on consent, without affecting earlier lawful processing.
Responses and complaints
Requests to exercise your rights should generally be answered within one month. This period may be extended in circumstances allowed by the GDPR, in which case you must be informed. We may request information needed to verify your identity.
You can complain to the Swedish Authority for Privacy Protection, IMY, or another competent supervisory authority. You do not have to contact us first.
Voluntary information and automated decisions
You choose whether to contact us and what information to send. Without contact details and a description of your enquiry, we cannot respond. The website has no functionality for profiling visitors or making automated decisions about them.