GDPR Privacy Notice

Controller: Sansa Group AB, Stockholm, Sweden (Sansavision division). Contact: privacy@sansavision.com.

Lawful bases

• Contract / pre-contract (Art. 6(1)(b)) — responding to consulting requests.
• Legitimate interests (Art. 6(1)(f)) — security, operations, aggregated improvement.
• Consent (Art. 6(1)(a)) — optional analytics/marketing; withdraw anytime.
• Legal obligation (Art. 6(1)(c)) — accounting and compliance.

Your rights (Art. 12–22)

Access, rectification, erasure, restriction, portability, objection to legitimate-interest processing, and human review of solely automated decisions (we don't make any). We respond within one month.

Processors & transfers

Cloudflare (EU/US, DPA + SCCs), email delivery and analytics sub-processors under contract. List available on request. Data minimised; encryption in transit and at rest.

Complaints

Contact us first — we aim to resolve in days. You may also complain to Integritetsskyddsmyndigheten (IMY, Sweden) or your local authority.