Privacy policy

Last updated: October 20, 2025

Gösta Jacobsson & Co AB (“we”, “our”, “us”) values your privacy. This Privacy and GDPR Policy explains how we collect, use, store, and protect your personal data when you visit our website or otherwise interact with us.

1. Data Controller

Gösta Jacobsson & Co AB

Organisation number: 556250-2913

Address: Stora Åvägen 21, 436 34 Askim

Email: info@gjab.se

Phone: 031 – 703 55 80

We are responsible for the processing of your personal data in accordance with the EU General
Data Protection Regulation (GDPR) and applicable Swedish legislation.

2. Personal Data We Collect

We collect personal data that you provide directly to us, for example when you:

• Contact us via email, phone, or website form
• Request a quote or place an order
• Subscribe to newsletters or updates

The types of personal data we may collect include:

• Name
• Email address
• Telephone number
• Company name
• Address
• IP address and website usage data (e.g., through cookies and analytics tools)

3. Purpose of Processing

We process your personal data to:

• Respond to inquiries and provide customer service
• Handle orders, deliveries, and invoicing
• Fulfil legal obligations (such as accounting)
• Improve our website, products, and services
• Send relevant information or newsletters (only with your explicit consent)

4. Legal Bases for Processing

Our processing of personal data is based on the following legal grounds:

• Performance of a contract – when data is necessary to fulfil an order or service agreement
• Consent – when you explicitly agree to receive marketing or newsletters
• Legal obligation – for compliance with Swedish or EU law, e.g. bookkeeping
• Legitimate interest – for communication, service improvement, and maintaining customer relationships

5. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected:

• Customer data: up to 7 years (in accordance with the Swedish Accounting Act)
• Inquiries: up to 12 months
• Newsletter subscriptions: until you unsubscribe

After these periods, your data will be securely deleted or anonymised.

6. Sharing of Personal Data

We never sell your personal data to third parties.

However, we may share your data with:

• Suppliers and service providers (e.g. IT systems, transport partners, or payment
  processors) to fulfil our obligations
• Public authorities, when required by law

All third parties are bound by data processing agreements (DPAs) to ensure that your data is handled securely and in compliance with GDPR.

7. International Transfers

We primarily process and store data within the EU/EEA.

If personal data is transferred outside the EU/EEA, we ensure adequate protection through:

• EU Commission adequacy decisions, or
• Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Your Rights

Under GDPR, you have the following rights:

• Access – request a copy of your personal data
• Rectification – correct inaccurate or incomplete data
• Erasure – request deletion of your data (“right to be forgotten”)
• Restriction – limit how your data is processed
• Objection – object to processing based on legitimate interests
• Data portability – request to transfer your data to another controller
• Withdraw consent – at any time, for processing based on consent

To exercise your rights, contact us at info@gjab.se.

If you believe we have processed your data unlawfully, you have the right to file a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): https://www.imy.se

9. Cookies

Our website uses cookies to improve the user experience and analyse web traffic.

You can manage or disable cookies in your browser settings.

For more details, please refer to our [Cookie Policy].

10. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

Examples include:

• SSL encryption for all web traffic
• Firewalls and secure networks
• Restricted access to personal data
• Regular backups and security reviews

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website.

If we make significant, we will notify you by email or a prominent notice on our
homepage.