Legal
Privacy Policy
Last updated: June 2026
What information we collect
We collect personal data that you choose to share with us, as well as limited technical data generated when you visit our website. This includes:
- Contact form submissions: name, email address, company, topic and the content of your message.
- Website usage data: aggregated information about how visitors interact with our pages, such as pages viewed, referring source, device type and approximate location.
- Cookies: small text files stored in your browser to support basic site functionality, measure usage and, where you have consented, support marketing activities. See our Cookie Policy for details.
Why we collect it
We collect personal data to respond to enquiries submitted through our contact form, to operate and improve the website, to understand how our content is used, and to communicate with prospects and customers about our products and services.
How the information is used
- To reply to questions and requests sent to us.
- To provide information about aCurve®, EnvoMap® and related services.
- To maintain, secure and improve the website.
- To produce aggregated statistics about website usage.
- To plan future marketing activities, only where we have a valid legal basis.
Legal basis for processing
- Consent — for non-essential cookies and marketing communications.
- Legitimate interest — for responding to enquiries, securing the website and producing aggregated usage statistics.
- Contract — where processing is necessary to deliver a service you have requested.
- Legal obligation — where we are required by law to retain or disclose certain information.
How long data may be stored
We keep personal data only for as long as needed for the purpose it was collected, or as required by law. Contact enquiries are typically retained for up to 24 months after our last interaction. Aggregated and anonymised data may be retained for longer.
Third-party services that may process data
To operate the website and our business we use a limited number of trusted third-party providers. These may include:
- Website hosting and form delivery infrastructure.
- Analytics services used to understand website usage.
- CRM and email tools used to manage customer communication.
These providers act as data processors on our behalf and are only permitted to use the data for the purposes we have agreed.
Your rights under GDPR
If you are located in the EU/EEA you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data.
- Request restriction of processing.
- Object to processing based on legitimate interest.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
Contact
For privacy-related questions, please contact us at info@gemit.se.