Privacy policy How we handle your data.

Data controller

NK Solutions (Nebi Karimi), Umeå, Sweden, reg. no. [xxxxxx-xxxx], is the data controller for the processing described here. Send questions about your data to kontakt@nksolutions.se.

What data we process

When you contact us we store what you send us: name, email address, phone number if you provide it, company name and the content of your message.

When you become a customer we also process the data needed for the assignment and invoicing, such as contact person, address and company registration number.

When you visit the website our hosting provider handles technical data such as IP address and browser in server logs, to deliver the site and protect it against abuse. We count visits with Vercel Web Analytics, which uses no cookies and does not recognise you between visits.

Why, and on what legal basis

• Answering questions and preparing quotes — legitimate interest, or steps prior to entering into a contract (Article 6(1)(f) and 6(1)(b) GDPR).
• Carrying out and invoicing assignments — performance of a contract (6(1)(b)).
• Bookkeeping — legal obligation under the Swedish Bookkeeping Act (6(1)(c)).
• Operation, security and visitor statistics for the website — legitimate interest (6(1)(f)).

How long we keep the data

Enquiries that don't lead to an assignment are deleted within twelve months. Customer data is kept for as long as the assignment lasts and then for as long as needed for support and any claims. Accounting records are kept for seven years under the Swedish Bookkeeping Act.

Who receives the data

We never sell personal data. It is handled by suppliers who help us run the business — our email service, the hosting provider Vercel and our accounting and invoicing system — and only for that purpose. Vercel is a US company; the transfer to the US relies on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

Cookies

The website uses no cookies and no third-party tracking tools. The fonts are hosted on our own server, so no data is sent to Google when you visit. That's why we don't need to ask for cookie consent.

Your rights

You have the right to know what data we hold about you, to have incorrect data corrected, to have data deleted, to restrict or object to the processing, and to receive your data in a machine-readable format. Email us and we'll help.

If you think we are handling your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

This is a translation of our Swedish privacy policy; if they differ, the Swedish version applies. Last updated 2026-09-27.