1. Controller and scope
Overman-Green Web Systems AB is the controller for personal data processed in connection with this website and initial business enquiries addressed to us. This policy explains that processing. It is not a privacy policy for every business or asset we may acquire; those businesses may have their own controllers and privacy information.
2. Information we process
When you contact us, we may process your name, professional role and company, contact details, and the information you voluntarily include in your enquiry or subsequent correspondence. If you use the contact form, the name, email address and message you enter are delivered to us by email through our email service provider so that we can reply. Please provide only information relevant to the discussion and avoid sending sensitive personal data or unnecessary details about other individuals.
The hosting and IT infrastructure may process technical connection, device and security information, such as IP addresses, browser details and request information, to deliver and protect the website. This operational processing is distinct from the cookie-free visitor analytics described below.
Providing enquiry information is voluntary. We need sufficient contact information and context to respond; without it, we may be unable to handle your enquiry.
3. Purposes and legal bases
We use enquiry and contact information to respond to professional enquiries, assess business opportunities, manage relevant contacts and follow up discussions. We rely on our legitimate interests in conducting these activities, balanced against the rights and interests of the individuals concerned. Website operation and security also serve our legitimate interests in providing a reliable, protected website.
If you personally request steps towards entering into a contract with us, the processing necessary for those pre-contractual measures may be based on that request. This basis does not automatically apply to every employee or representative contacting us on behalf of a company.
Where an applicable legal obligation requires processing, we rely on that obligation for the relevant information and purpose. We do not treat an enquiry or a visit to the website as blanket consent to unrelated processing.
5. How long information is retained
We retain enquiry information for as long as needed to handle the enquiry, carry out relevant follow-up and manage any resulting business relationship. We consider the nature of the enquiry, the progress of discussions and whether the information remains relevant.
Information may be retained longer where required by applicable legal obligations or necessary for establishing, exercising or defending legal claims. Technical connection and security data are retained only as needed for operation and security. The separate retention periods for visitor analytics are explained below.
6. International transfers and protection
Where a service provider processes personal data outside the European Economic Area, an applicable lawful transfer mechanism is required, such as an adequacy decision or standard contractual clauses, with any additional safeguards required in the circumstances. You may contact us for information about safeguards relevant to your data.
We take account of the nature of the information and the risks when determining appropriate organisational and technical protections. No website or email system can guarantee absolute security; avoid including information that is unnecessary for an initial business discussion.
7. Your rights
Subject to the conditions in the GDPR, you may request access to your personal data, correction of inaccurate information, deletion, or restriction of processing. You may object to processing based on legitimate interests on grounds relating to your particular situation. Data portability applies where its legal conditions are met.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. We may need proportionate information to verify your identity before fulfilling a request. Use the contact option below to exercise your rights.
You have the right to complain to Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection, or another competent supervisory authority.
9. Automated decisions
The website and initial enquiry flow do not make automated decisions producing legal effects or similarly significant effects on individuals. Business enquiries are considered through human discussion rather than an automated eligibility or acquisition decision.
10. Contact and changes
Contact Overman-Green Web Systems AB for questions about this policy, information about relevant transfer safeguards, or a request concerning your personal data. Activate the email option below to display our contact address.
We may update this policy to reflect relevant changes in processing or legal requirements. The displayed update date identifies the version of this policy.