Privacy Policy

Last updated: 26 June 2026

1. Data Controller

Riprogeose AB (org. nr 559284-7316) is the data controller for personal data collected through this website and in connection with our architectural services.

Address: Kungsportsavenyen 21, 411 36 Göteborg, Sweden
Email: [email protected]
Phone: +46 31 708 42 16

2. Legal Basis and Purpose

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Swedish Data Protection Act (2018:218). Processing is based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): Contact form submissions, cookie preferences, and marketing communications where applicable.
• Contract (Art. 6(1)(b) GDPR): Processing necessary to deliver architectural services, issue invoices, and manage client relationships.
• Legitimate interest (Art. 6(1)(f) GDPR): Website security, fraud prevention, and improvement of our services, balanced against your rights and freedoms.
• Legal obligation (Art. 6(1)(c) GDPR): Accounting records and tax compliance under Swedish law.

3. Categories of Personal Data

We may collect and process the following categories of data:

• Identity data: name, title
• Contact data: email address, telephone number, postal address
• Project data: site location, project brief, budget information, correspondence
• Technical data: IP address, browser type, device information, cookie identifiers
• Financial data: billing address, payment records (processed via secure third-party providers)

4. Sources of Data

We collect data directly from you when you submit our contact form, email us, visit our studio, or enter into a service agreement. Technical data is collected automatically when you browse this website, subject to your cookie preferences.

5. Recipients and Transfers

Personal data may be shared with:

• IT service providers hosting this website (within the EU/EEA)
• Accounting and legal advisors bound by confidentiality obligations
• Swedish authorities when required by law

We do not transfer personal data outside the EU/EEA unless adequate safeguards are in place as required by Chapter V of the GDPR.

6. Retention Periods

• Contact enquiries: 24 months from last correspondence, unless a client relationship is established
• Client project files: 10 years from project completion (professional and legal requirements)
• Accounting records: 7 years per the Swedish Accounting Act (Bokföringslagen)
• Cookie consent records: 12 months
• Website analytics (if consented): 14 months

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion where no lawful basis for retention exists
• Right to restriction — request limited processing in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest or for direct marketing
• Right to withdraw consent — at any time, without affecting prior lawful processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on data subjects.

9. Security Measures

We implement appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and staff confidentiality agreements.

10. Cookies

Our use of cookies is described in our Cookie Policy. Non-essential cookies are only placed after you provide consent via the cookie banner (stored under the key riprogeose_life_consent in your browser's local storage).

11. Supervisory Authority

If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten — IMY):

IMY · Box 8114 · 104 20 Stockholm · www.imy.se

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our practices. Material changes will be communicated on this page with an updated date. We encourage you to review this policy periodically.