Privacy policy

Last updated: 21 September 2026.

Data controller

Brahem i Göteborg AB, company registration number 559014-5883, is the data controller for the processing described in this policy. We comply with the General Data Protection Regulation (GDPR) and the Swedish Data Protection Act (2018:218).

• Address: Backa Bergögata 14, 422 46 Hisings Backa
• Phone: +46 709 888 888
• Email: [email protected]

What data we process and why

When you contact us

Data: name, email address, phone number, the content of your message and the language you used on the website. We receive them when you fill in the contact form, email or call us.

• Purpose: to answer your enquiry, provide a quote and communicate with you about a possible assignment.
• Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in being able to answer enquiries (Article 6(1)(f)).

If your enquiry leads to an assignment

Data: contact, address and invoicing details as well as details about the property and the assignment.

• Purpose: to perform the contract, invoice and meet legal requirements, such as accounting and warranty obligations.
• Legal basis: performance of a contract (Article 6(1)(b)) and legal obligation (Article 6(1)(c)).

Security and spam protection

Data: IP address, browser details, the time of the request and technical signals showing that a form is submitted by a human. The data is handled by our provider Cloudflare and is not stored by us.

• Purpose: to deliver the website and protect it and the contact form against abuse and spam.
• Legal basis: legitimate interest in a secure website (Article 6(1)(f)).

Visitor statistics

Data: which pages are visited, approximate location and type of device, in aggregated form. We use Cloudflare Web Analytics, which works without cookies.

• Purpose: to understand how the website is used so that we can improve it.
• Legal basis: legitimate interest (Article 6(1)(f)).

We do not use your data for marketing, we do not sell it, and we do not make automated decisions or carry out profiling.

Do I have to provide data?

Name, email address, phone number and message are mandatory in the contact form. Without them we cannot answer your enquiry. You decide what you write in the message, so please avoid providing sensitive data, for example health information.

Who we share data with

We use providers that process data on our behalf under data processing agreements. They may not use the data for their own purposes.

• Cloudflare, Inc.: hosting of the website, security, the spam protection Cloudflare Turnstile and visitor statistics.
• Resend: sends your message from the contact form to our email.
• One.com A/S (Denmark): provides our email, where your messages are received.
• In an assignment, data may be passed to our accountant, and to authorities when we are legally required to do so.

Transfers outside the EU/EEA

Cloudflare and Resend are US companies, so data may be transferred to the United States. The transfer is based on the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses, together with the technical and organisational safeguards the providers apply. Your message is sent via Resend's EU region. If you would like to know more about the safeguards, please contact us.

How long we keep the data

• Enquiries that do not lead to an assignment: deleted 12 months after the last contact.
• Customer and assignment data: for as long as the assignment and warranty obligations last. Accounting records are kept for 7 years under the Swedish Bookkeeping Act.
• Technical logs: kept by our providers for a short time under their routines. We do not store any logs of our own about visitors.
• Visitor statistics: aggregated and contains no personal data.

Cookies and local storage

We do not set any cookies on the website and do not use any advertising or tracking tools, such as Google Analytics, Facebook pixel or remarketing.

The website stores two functional items in your browser that do not leave your device: your language choice (Swedish or English), which is kept until you clear your browser data, and the fact that the intro has already been shown, which disappears when you close the tab. They are needed for the website to work the way you chose and therefore do not require consent. The spam protection Cloudflare Turnstile may use technical methods in the browser to tell humans from bots. Read more at Cloudflare.

Your rights

You have the right to:

• access the data we hold about you (register extract)
• have inaccurate data corrected
• have data erased when it is no longer needed
• restrict the processing of your data
• object to processing based on legitimate interest
• receive your data in a machine-readable format (data portability), when the processing is based on a contract

Contact us at [email protected] if you want to exercise your rights. We reply without undue delay and within one month at the latest, free of charge. To protect your data we may need to verify your identity.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Security

The website uses an encrypted connection (https). We limit access to the data to those who need it to answer your enquiry.

Changes to this policy

We may update this policy. The latest version is always on this page, with the date at the top. In the event of any discrepancy between the language versions, the Swedish version prevails.

Contact us

Brahem i Göteborg AB, company registration number 559014-5883, Backa Bergögata 14, 422 46 Hisings Backa.

• Phone: +46 709 888 888
• Email: [email protected]