Legal information
Privacy Policy & Terms of Use
Last updated: May 2026
Privacy Policy
Data controller
Avavik Nordic AB (reg.no 559587-8967) is the data controller for the processing of personal data described in this policy. Contact us at kontakt@avavik.com with any questions about your data.
What data do we process?
Website visitors
With your consent we collect anonymised statistics on how the site is used via our own analytics solution, Umami, which we self-host at stats.avavik.com. The statistics include pages visited, approximate device information (browser, operating system, screen size) and a session hash that is not traceable between sessions. No cookies are used for this purpose and no data is sent to third parties.
With your explicit consent we may also record sessions — that is, capture mouse movements, clicks and scroll behaviour — in order to improve the user experience. Form fields and passwords are never recorded.
Registered companies
We process the following data about companies that register an account with us:
- Company name and registration number
- Email address and phone number
- Address
- Password (stored as a cryptographic hash — never in plain text)
- Logo and cover image (if uploaded)
- Company description
- Selected service categories, coverage municipalities, availability schedule and pricing
Legal basis
| Processing | Legal basis |
|---|---|
| Account data for registered companies | Performance of a contract (the service agreement with Avavik) |
| Anonymised visitor statistics (Umami) | Legitimate interest |
| Session recording | Consent |
Retention periods
- Company data is kept for as long as the account is active. On deregistration the data is deleted within 30 days.
- Access tokens (JWT) are valid for 15 minutes.
- Refresh tokens are valid for 30 days and are deleted on logout or after expiry.
- Anonymised visitor statistics are kept without a time limit in our own analytics database.
Do we share data with third parties?
No. Avavik does not sell, rent or share personal data with third parties for marketing purposes. The analytics solution (Umami) and session recording are run by us on our own infrastructure. No data is transferred outside the EU/EEA.
Your rights
Under the GDPR (General Data Protection Regulation) you have the following rights regarding your personal data:
Access
Request a copy of the data we hold about you.
Rectification
Request that incorrect data be corrected.
Erasure
Request that your data be deleted ("the right to be forgotten").
Restriction
Request that processing be restricted while a complaint is investigated.
Data portability
Receive your data in a machine-readable format.
Withdrawal
Withdraw your consent at any time without affecting prior lawful processing.
Contact us at kontakt@avavik.com to exercise your rights. We respond within 30 days. You always have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Terms of Use for companies
1. The service
2. Registration and approval
3. Your responsibility
- Information about your company (registration number, contact details, services) is correct and kept up to date.
- Uploaded images and text do not infringe copyright or third-party rights.
- Your business is conducted in accordance with applicable laws and regulations.
- Login credentials are stored securely and not shared with unauthorised persons.
