Privacy and personal data
This explains how information is handled when you visit the website or contact us. Updated 4 October 2026.
Data controller
DSP Tjänster AB, organisation number 556881-2662, Fjärdholmsgränd 9A, is responsible for the processing described here. Contact Vincent@dspab.se or +46700370022 with questions or to exercise your rights.
Contact enquiries and legal basis
We use your name, email address, chosen service area and message to answer your enquiry. A phone number is optional. Roofing enquiries also require a town or city and a service; accounting enquiries may include an optional company name. Information is emailed to vincent@dspab.se through one.com. Only the intended recipient has access to DSP’s enquiry emails.
When you are an individual requesting steps before a possible contract, the basis is Article 6(1)(b) GDPR. Other correspondence, including enquiries from a business representative, relies on our legitimate interest in answering enquiries (Article 6(1)(f)). You may object to processing based on legitimate interests. Submitting the form does not place an order or conclude a contract.
These details are needed to answer your enquiry; without contact information we cannot reply. You may instead call or email us. Do not submit identity numbers, payroll records, accounting documents, health information or other sensitive information. The website has no file uploads.
Website operation and protection
Vercel delivers the website and processes technical information such as IP addresses, requested URLs, timestamps and browser information for operation and security. The form’s own protection uses temporary hashed IP keys and random form tickets to limit repeated attempts and spam. The basis is our legitimate interest in keeping the website secure and available (Article 6(1)(f)).
The application has no enquiry database and does not log message content, customer email addresses or raw IP addresses. It does not make automated decisions with legal or similarly significant effects, or use profiling for marketing.
Retention and deletion
According to DSP’s stated routine, enquiry emails are deleted after reading or kept for no longer than one month. This applies to incoming enquiries; any subsequent processing under a separate customer contract needs to be described separately.
Form content is handled temporarily in server memory during transmission. Rate-limit keys expire after ten minutes and form tickets after no more than thirty minutes. They are not stored in a database. The ticket is held temporarily in the page’s memory only.
[INFORMATION TO COMPLETE] Vercel’s log retention and one.com’s deletion of copies, deleted items and backups must be confirmed against DSP’s account settings and provider terms. The email routine does not mean provider backups are automatically deleted at the same time.
Providers and international transfers
Vercel provides hosting and server functions. one.com provides email delivery and the recipient’s mailbox. DSP’s server functions are configured for Stockholm. Provider operations, support and subprocessors may still involve processing outside the EU/EEA.
[INFORMATION TO COMPLETE] DSP must confirm data processing agreements, relevant countries, subprocessors and safeguards for any international transfers. We do not state that a particular agreement or transfer mechanism has been approved before it has been checked.
Your rights
You may request access, correction and deletion and, where applicable, restriction and data portability. You may object to processing based on legitimate interests. Contact Vincent@dspab.se and provide only the information needed to locate your enquiry. We may need to verify your identity in a proportionate way.
You may complain to the Swedish Authority for Privacy Protection (IMY). If future processing relies on consent, you may withdraw it without affecting earlier lawful processing. The current contact forms do not require consent to personal data processing.
Cookies and language
The website application uses no analytics tools, advertising pixels or external embeds. Language follows the page address: Swedish on regular addresses and English under /en. We do not save new language choices in cookies or local storage. An old language cookie may remain in older browser sessions; cookie settings let you remove it.