Steelpool wordmark

Privacy Policy

Last updated: 5 June 2026

SteelPool Sweden AB is the data controller for the processing of personal data described in this privacy policy. In this privacy policy, we explain which type of personal data we store and how we process it. This privacy policy applies to: https://www.steelpool.se.

Personal data we process

We process the following categories of personal data:

  • Basic information: name.
  • Contact information: email address.
  • Customer activity: reading and action history from websites or electronic communication that we send out, and technical information about the devices you use.
  • Attachments: files you choose to send to us via the contact form.
  • Cookies: see our information about cookies further down in this document.

Personal data is usually collected directly from you or generated in connection with your use of our services and products.

How we use personal data

Delivery of services/contract

We use your personal data to fulfill our agreements with you, that is, when you have ordered a product or service from us. The legal basis for processing personal data for this purpose is that the processing is necessary to perform a contract with you.

Customer relationship management

We use your personal data to manage our customer relationship with you. This may include customer service and handling requests. The legal basis for processing personal data for this purpose is that the processing is necessary to perform a contract with you.

Analysis, business development and service improvement

We work continuously to develop and improve our services and products. A large part of this work involves analyzing different forms of personal data, for example customer activity and account/profile information where applicable. The legal basis for processing personal data for this purpose is our legitimate interest.

Customized user experience

We adapt user experience and communication to your customer relationship and use personal data for this purpose. The legal basis for processing personal data for this purpose is our legitimate interest.

Sales and marketing

We use personal data in connection with sales and marketing of our products and services, for example through email communication from us. The legal basis for processing personal data for this purpose is our legitimate interest. You can object to parts of this processing, for example by opting out of receiving emails from us. In addition, we may ask for your consent to use your personal data for profiling, where we infer your interests and needs based on your personal data. The purpose of profiling is to make our marketing more relevant.

System monitoring and troubleshooting

We monitor our systems for errors and issues. Parts of these processes involve storage and processing of personal data. The legal basis for processing personal data for this purpose is our legitimate interest.

Security, fraud detection and criminal activity

We process personal data in our work to protect our users and ourselves against fraud, misuse and criminal activity. The legal basis for processing personal data for this purpose is our legitimate interest.

Compliance with legal obligations

In some cases, we are required to process personal data due to other legal obligations. The legal basis for processing personal data for this purpose is that the processing is necessary to comply with a legal obligation to which we are subject.

Recipients and processors

We share personal data with the following third-party recipients and processors in order to operate our website and services:

Google Analytics

Web analytics service provided by Google LLC. Processes anonymized usage data to help us understand how visitors interact with our website.

Google Tag Manager

Tag management service provided by Google LLC. Manages the loading of tracking scripts on our website based on your consent preferences.

Meta (Facebook/Instagram)

Advertising platform provided by Meta Platforms, Inc. Processes data for conversion tracking and targeted advertising when you have consented to analytics cookies.

Umami Analytics

Privacy-focused, cookie-free web analytics hosted within the EU by Bitberry AB. Umami does not use cookies, does not collect personal data such as IP addresses, and does not track visitors across websites. All usage statistics are fully anonymous.

Cloudflare Turnstile

Bot protection service provided by Cloudflare, Inc. Processes technical data to verify that form submissions come from real users, not automated bots.

Retention periods

We do not keep personal data longer than necessary for the purposes described in this privacy policy. The following retention periods apply:

  • Contact form submissions: 12 months after the inquiry has been resolved.
  • Analytics and cookie data: up to 26 months from collection, or until consent is withdrawn.
  • Marketing data: until you unsubscribe or withdraw consent, plus 3 months for suppression list purposes.
  • Data retained for legal obligations (e.g. accounting records under the Swedish Bookkeeping Act): 7 years from the end of the financial year.
  • Contract-related data: for the duration of the contract plus 36 months thereafter.

International transfers of personal data

Some of the third-party services we use are operated by companies based outside the EU/EEA. This means that personal data may be transferred to countries outside the EU/EEA. We ensure that appropriate safeguards are in place for all such transfers:

  • Google LLC (Google Analytics, Google Tag Manager): Data may be transferred to the United States. Google is certified under the EU-US Data Privacy Framework, which provides an adequate level of protection. Standard Contractual Clauses (SCCs) are also in place as a supplementary safeguard.
  • Meta Platforms, Inc. (Facebook Pixel): Data may be transferred to the United States. Meta is certified under the EU-US Data Privacy Framework. Standard Contractual Clauses (SCCs) are also in place as a supplementary safeguard.
  • Cloudflare, Inc. (Turnstile): Technical data may be processed in the United States. Cloudflare is certified under the EU-US Data Privacy Framework and uses Standard Contractual Clauses (SCCs).
  • Umami Analytics: Hosted within the EU by Bitberry AB. Umami does not use cookies or collect personal data, so no international transfer of personal data occurs.

Your rights

If you want to exercise any of your rights, contact us at torbjorn.frantsi@steelpool.se.

Right of access

You can request a copy of all data we process about you. Contact the email address above to exercise your right of access.

Right to rectification

You have the right to request correction or completion of inaccurate or misleading data.

Right to erasure

You have the right to have your personal data deleted. You can request that we delete data about you at any time. Please note that information we are required to keep due to other legal obligations (for example accounting law) will not be deleted.

Right to restriction of processing

In some situations, you can also request that we restrict the processing of data about you.

Right to object

If we process data about you on the basis of legitimate interest, you have the right to object to our processing of data about you.

Right to data portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format. Contact the email address above to receive your personal data.

Right to withdraw consent

Where we process personal data based on your consent (for example, profiling for marketing purposes or the use of non-essential cookies), you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. You can withdraw cookie consent via the cookie settings on our website, or contact us at torbjorn.frantsi@steelpool.se for other consent withdrawals.

Right to lodge a complaint

We hope you will let us know if you believe we do not comply with applicable data protection rules. You can also lodge a complaint regarding our processing of personal data with Integritetsskyddsmyndigheten (IMY).

Cookie policy

We use cookies on this website. Our cookie policy describes how cookies are used on https://www.steelpool.se and for which purposes.

Read Cookie Policy