Privacy policy
This page explains how Granitbruket collects and processes personal data when you contact us or send a quote request, in accordance with the General Data Protection Regulation (GDPR).
Data controller
The controller responsible for the processing of personal data on this website is Granitbruket (full legal company name and registration number to be completed). If you have questions about how we handle your data, you can reach us at info@granitbruket.se.
What data we collect
We collect the data you provide yourself when you send a quote request or otherwise contact us:
- Name and company
- Email address and phone number
- Message and technical specification (stone type, product, dimensions and volume)
- Uploaded drawings and files
In addition, we collect technical data about your visit – such as IP address, device and page views – via Google Analytics 4. This statistical data is only collected if you consent in our cookie banner.
Why we process the data and legal basis
We process the data to respond to your enquiry, provide a quote and manage business communication with your company. The legal basis for the processing is:
- Legitimate interest (Article 6(1)(f)) – to answer enquiries and maintain business relationships between companies.
- Steps prior to entering a contract (Article 6(1)(b)) – to prepare a quote and fulfil an order at your request.
- Consent (Article 6(1)(a)) – for web statistics via Google Analytics 4, which is activated only after your consent.
Retention period
Quote requests and related correspondence are kept for as long as the business relationship is active, and for a period thereafter to follow up on recurring projects. Documentation that constitutes accounting records is retained for seven years under the Swedish Bookkeeping Act where applicable. Uploaded drawings are deleted when they are no longer needed to prepare or fulfil a quote.
Recipients and processors
When you send an enquiry, it reaches us as a notification via email and Telegram so that the right person can respond quickly. To operate the website, email and notifications we use technical suppliers that process data on our behalf as data processors, governed by data processing agreements. We never sell your data and do not share it for third-party marketing.
Transfers to third countries
Our production is located in Ukraine. Part of the communication around your enquiry may therefore be processed in Ukraine, which is a country outside the EU/EEA (a third country). Where such a transfer takes place, we carry it out with appropriate safeguards under Chapter V of the GDPR (to be completed).
Your rights
Under the GDPR you have the right to:
- request access to the data we process about you
- have inaccurate data corrected
- have data erased
- request restriction of the processing
- object to processing based on legitimate interest
- obtain and move data you have provided (data portability)
- withdraw a given consent at any time
To exercise any of these rights, contact us at info@granitbruket.se. If you believe we process your personal data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
Cookies
The website uses necessary cookies required for the site to function, as well as statistics cookies for Google Analytics 4. Statistics cookies are set only after you have given consent in the cookie banner. You can change or withdraw your choice at any time via the cookie banner settings.
Contact
If you have questions about this privacy policy or about how we process personal data, you are welcome to contact us at info@granitbruket.se.
Last updated: