Privacy policy

Applies from the publication date

This policy describes how Omnidrift processes personal data when you visit omnidrift.com, fill in one of our forms or are in contact with us in an assignment or collaboration.

Controller

Omnidrift AB, reg. no. 559491-1967, is the controller.
Contact: info@omnidrift.com, United Spaces, Nordenskiöldsgatan 24, 211 19 Malmö, Sweden.

When you visit the website

The website is hosted in Microsoft Azure in Sweden. When you visit it, technical data such as IP address, time and browser is processed in server logs. The purpose is to deliver the pages and protect the service against misuse. The legal basis is legitimate interest. Logs are kept for at most 30 days.

We use cookies that are needed for the site to work and to remember your cookie choice. If you consent, we also use Google Analytics to see how the site is used, for example which pages are visited. Nothing is sent to Google before you have consented. The legal basis is consent, which you can withdraw at any time through "Manage cookies" at the bottom of every page. Statistics are kept for 14 months. Google may process data outside the EU, and the transfer then relies on the EU adequacy decision (EU-US Data Privacy Framework) and standard contractual clauses. We use no advertising cookies. More in the cookie policy.

When you fill in a form

We have forms for different purposes: assignment enquiries, collaborations, the queue for Omnidrift OS and other questions.

Data we process: name, email address, organisation, possibly a phone number and what you write in the message. You do not need to give more than what we need to reply.

Purpose and legal basis:

• Assignment enquiries and the queue for Omnidrift OS: to reply and hold a dialogue ahead of a possible agreement. The legal basis is legitimate interest and steps before entering into a contract.
• Collaborations and other questions: to reply and follow up. The legal basis is legitimate interest.

How the data is handled:

• The form is sent to a service in Microsoft Azure in Sweden and stored in our customer register in Microsoft Dynamics 365 Sales, with data storage within the EU.
• You receive a confirmation by email from info@omnidrift.com.
• Internally we get a notification in Microsoft Teams that contains only the type of case, the organisation name and a link. Your name and email address exist only in the customer register.
• We plan the work in ClickUp. It holds only the organisation name and a link to the customer register, no data about you as a person. If the organisation is a sole proprietorship with your name, or the name is missing, it says only "Förfrågan" (enquiry).
• The forms and the booking are protected against spam by technical checks on our own server: a time check, a small calculation that your browser performs in the background and rules for the content. No third-party service and no cookies are used for this. The number of attempts and bookings per IP address is limited. The address is then held only in the server memory for at most one day. Blocked attempts are logged only with reason and time. The legal basis is legitimate interest.

Retention: data from an enquiry that does not lead to an assignment or collaboration is deleted automatically 12 months after the last contact.

When you book a call

Calls are booked on the website and handled in Microsoft Bookings.

Data we process: name, email address, organisation, the time you choose, possibly your role and what you write about what you want to discuss and get out of the call.

The purpose is to hold the call and prepare for it. Before the meeting we may look at public information about the organisation and your professional role, for example the organisation website and public professional profiles. We do not collect profiles automatically. The legal basis is legitimate interest. You have the right to object to the processing, see Your rights below.

• The booking is stored in Microsoft Bookings and in our calendar in Microsoft 365. The call is held in Microsoft Teams.
• The data is stored in the customer register in Microsoft Dynamics 365 Sales, in the same way as an enquiry through the form.
• No data about you is sent to AI services. Before the call, the organisation name and website may be used to search for information about the organisation. This does not apply if the organisation has your name.

Retention: the same as for enquiries through the form.

When we work together

If you become a customer or partner, we keep contact details and what is needed to carry out and follow up the assignment. The legal basis is contract and legitimate interest. Data required by the Swedish Accounting Act is kept for seven years. Other data is kept while the collaboration lasts and then for at most 24 months.

When we process personal data on behalf of a customer in an assignment, our data processing agreement with the customer applies instead.

Suppliers and transfers

We use suppliers that process data on our behalf and only on our instructions:

• Microsoft (Azure, Dynamics 365, Power Automate, Microsoft 365 with Bookings and Teams): hosting, customer register, bookings, meetings, email and notifications. Data is stored within the EU under the Microsoft EU Data Boundary.
• ClickUp: work planning. Receives only the organisation name and a link.
• Google (Google Analytics and Google Tag Manager): visitor statistics, only after consent.

If a supplier in exceptional cases processes data outside the EU, it relies on the European Commission standard contractual clauses or an adequacy decision. The current list is on the Subprocessors page.

We never sell personal data and do not use it for advertising.

AI

We use AI tools in our work. Data from the forms, the bookings and the customer register is not sent to AI services. The only thing that may be sent is the organisation name and website before a booked call. If the organisation has your name, not even that is sent.

Your rights

You have the right to know what data we hold about you and to have it corrected, erased or restricted. You can object to processing based on legitimate interest, withdraw consent and receive your data in a machine-readable format. Write to info@omnidrift.com and we will reply within one month.

If you are not satisfied with how we process your data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Changes

When the policy changes we update the date at the top. Earlier versions are kept and linked from this page.

This English version is provided for convenience. In case of dispute, the Swedish version prevails.