Privacy Policy & GDPR Subset AB

Introduction

This privacy policy describes how Subset (hereinafter “we”) processes personal data in accordance with the EU General Data Protection Regulation (GDPR). We value your privacy and ensure that your data is handled lawfully and transparently.

Personal Data We Collect

We collect the following personal data:

  • Email Adress
  • Name and Surname

Purpose of Processing

We use personal data to:

Handle inquiries or contact requests made via the website.

Legal Basis

Processing is based on:

Your explicit consent when you voluntarily provide your details (e.g., when subscribing to a newsletter).
Our legitimate interest in responding to your inquiries, where applicable.

Storage and Security


Your data is stored for as long as necessary for the stated purpose, or until you withdraw your consent, but for no longer than 2 years after your last interaction.
We use encryption and other security measures to protect your data against unauthorized access.

Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request rectification, erasure, or restriction of processing.
  • Withdraw your consent at any time (this does not affect the lawfulness of processing based on consent before its withdrawal).
  • Object to processing based on legitimate interests.
  • Request data portability.

    To exercise your rights, contact us at gdpr@subset.se

Data Sharing


We do not share your personal data with third parties, except:

Service providers that manage email dispatch (e.g., Exchange) under data processing agreements.
Where required by law or upon lawful request from authorities.

Contact

For questions about this policy or your data, contact us:
Email: gdpr@subset.se
Address: Subset AB, Kabyssgatan 4D, 12030 Stockholm