Privacy Policy
How Byggkomposit processes personal data and how you exercise your rights.
This privacy policy describes how Byggkomposit processes personal data when you contact us, request a quotation, become a customer, subscribe to our newsletter or use the website.
Byggkomposit processes personal data only for clearly stated purposes and does not keep it for longer than is necessary or than follows from law and contract.
1. Data controller
Byggkomposit Sverige AB, company registration number 559599-6850, Eksjöhult 1, SE-590 53 Ulrika, Sweden is the controller for the processing described in this policy. The same company operates the website, issues quotations, enters into customer contracts and invoices customers.
- For privacy matters: Contact us
- Telephone: +46 (0)13-17 77 88
2. Personal data we may process
Depending on how you are in contact with us, we may process:
- name
- job title
- company and organisation
- email address
- telephone number
- invoicing and delivery details
- the content of enquiries and correspondence
- quotation, order and project related information
- drawings, images and documents you send to us
- newsletter subscription details
- technical log data required for security and operation
We do not process more data than is needed for each purpose.
Please do not send sensitive personal data, protected personal details or security-classified information through web forms or ordinary email. Contact us first if a project requires special information handling.
3. Purposes and legal bases
| Processing | Purpose | Legal basis |
|---|---|---|
| General enquiries | To answer questions and handle initial business contact. | Legitimate interest. |
| Quotation requests | To assess requirements and prepare product proposals, technical documentation and quotations. | Steps prior to contract, or legitimate interest depending on who the individual represents. |
| Order, delivery and customer administration | To administer orders, delivery, communication and the contractual relationship. | Contract and legitimate interest. |
| Invoicing and accounting | To meet accounting, tax and reporting requirements. | Legal obligation. |
| Newsletter | To send product news, technical information, project content and other relevant marketing communication. | Consent. |
| Website security and operation | To prevent misuse, handle technical faults and maintain secure operation. | Legitimate interest. |
We do not rely on consent for processing that is necessary for quotations, orders, delivery or invoicing.
4. Newsletter
For the newsletter we process:
- email address
- first name, if provided
- company, if provided
- time of sign-up
- time of confirmation
- subscription status
- delivery status
- unsubscription
- whether a mailing has been opened and which links were clicked
The subscription is activated through double opt-in, which means it must be confirmed via a link in an email. The subscription can be cancelled at any time using the link in every mailing.
Our mailings include measurement of opens and clicks linked to the individual mailing. The data is used to follow up whether the information is relevant and to troubleshoot deliveries. If you prefer that your opens and clicks are not recorded, please contact us.
5. Automated decision-making
Byggkomposit does not use automated decision-making with legal or similarly significant effects for the data subject.
6. Retention periods
| Data | Retention period |
|---|---|
| General enquiry that does not proceed | 12 months after the contact has ended. |
| Quotation that does not lead to an order | 24 months after the most recent relevant activity. |
| Customer, order and contract data | For the duration of the contractual relationship and thereafter for as long as the data is needed for warranty, claims, documentation or legal obligations. |
| Project documentation and drawings | For the duration of the project and thereafter for the agreed documentation, claims or warranty period. |
| Accounting records | For the period required by applicable accounting rules. |
| Newsletter data | Until the subscription is cancelled. |
| Record of unsubscription | For as long as needed to ensure that no new mailings are sent without a new sign-up. |
| Security and technical logs | No more than 90 days, unless a longer period is needed to investigate a security incident. |
| Spam and abuse logs | 30–90 days. |
7. Suppliers and processors
We use external suppliers for services such as web operation, data storage, email, newsletters, customer administration, accounting and delivery.
Suppliers may only process personal data for the services they perform for us and in accordance with agreed instructions. Contact us if you would like to know more about which suppliers process data for a particular purpose.
8. Dura Composites
Where a product question or a project requires the manufacturer's involvement, relevant contact and project details may be shared with Dura Composites.
We share only the data needed to handle the product question, prepare technical documentation, issue a quotation or complete the delivery.
9. Your rights
Under the GDPR you have the right to:
- be informed about how your data is processed
- request a copy of your data
- have inaccurate data corrected
- request erasure where the legal conditions are met
- request restriction of processing
- object to processing based on legitimate interest
- withdraw consent, for example for the newsletter
- request data portability where applicable
- lodge a complaint with the supervisory authority
Contact us to exercise your rights. Some rights may be limited, for example where accounting or other legislation requires us to retain data. Complaints may be submitted to the Swedish Authority for Privacy Protection (IMY).
10. Security
We use technical and organisational security measures to protect personal data against unauthorised access, loss, alteration and unlawful processing.
11. Cookies
Information about cookies and similar technologies, and how you change or withdraw your consent, is set out in our cookie policy.
12. Changes to this policy
We may update this policy when our operations, services or the applicable legislation change.
Last updated: 2026-08-06