Privacy policy

1. Who is responsible for your data

Geocadia Group AB (organisation number 559420-2664), Barnhusgatan 20, 111 23 Stockholm, Sweden, is the data controller for the personal data processed through our websites, geocadiagroup.com and geocadia.se.

For questions about your data or to use your rights, email privacy@geocadia.se.

2. What we collect and why

When you visit the website. Google Firebase Hosting serves our website. As with any website, your browser's requests show technical information, including your IP address. Google processes it to deliver the pages and protect the service against abuse.

We do not use analytics, advertising or tracking cookies. Display choices, such as the Human or Agent view, may be remembered in your own browser and are not sent to us.

When you send an enquiry through the contact form. We need your first name and email address. Everything else is optional:

• your last name, company and phone number;
• the property address, postcode and city;
• the heated floor area, annual heat demand, current heat source and timing;
• the kind of help you are interested in;
• your message.

We use this to answer you and to assess your property or project. Please do not include sensitive personal information.

Our legal basis is our legitimate interest in responding to business enquiries, or steps you ask us to take before a possible contract.

To stop spam and abuse, the form keeps a coded value derived from your IP address for up to seven days. It is not stored with your enquiry.

When you email us, for example with a job application or as a possible supplier, we process your message and any attachments in order to reply.

Our legal basis is our legitimate interest. For job applications, it is the steps before a possible employment contract.

3. Who sees your data

Only authorised Geocadia staff who handle sales, recruitment or supplier contacts.

We use these service providers, who process data on our behalf under data processing agreements:

• Google hosts the website and stores enquiries. Enquiries are kept in Google's data centre region in Finland.
• Microsoft provides our company email.

We do not sell your data or use it for advertising.

4. Transfers outside the EU

Enquiries are stored in the EU. Google and Microsoft may process data outside the EU/EEA, for example for support or security. Where they do, the transfer is protected by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

5. How long we keep it

• Enquiries: deleted 12 months after our last meaningful contact, or sooner when no longer needed. If you become a customer, your records follow our contractual and accounting obligations.
• Job applications: deleted 24 months after the recruitment closes, unless you agree that we keep them longer.
• Spam and abuse protection: seven days.
• Technical hosting logs: kept by Google for a limited period, as described in Google's Firebase privacy information.

6. Your rights

You have the right to:

• access the personal data we hold about you;
• have it corrected or deleted;
• restrict or object to how we use it;
• receive it in a portable format, where that applies.

Email privacy@geocadia.se and we will reply within one month.

You can also complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY): www.imy.se.

7. How we protect it

Access is limited to authorised staff. Our providers encrypt data in transit and at rest. Your browser has no direct access to our enquiry database.

8. Changes

We update this policy when our processing changes. If we ever add visitor statistics, they will only run with your consent, and this page will say so first.