Our privacy policy

Controller

Konstrukt AB, corporate identity number 556821-2459, Andra Långgatan 19, SE-413 28 Gothenburg, Sweden, is the controller for the processing of personal data on this website.

Konstrukt AB targets businesses and professionals exclusively (B2B). We do not target consumers.

Questions about the processing of personal data can be sent to info@konstrukt.se.

Your rights

Under the GDPR, you have the following rights with regard to your personal data:

• Access (Art. 15): the right to obtain confirmation as to whether or not we process personal data about you and, if so, access to that data.
• Rectification (Art. 16): the right to have inaccurate data rectified.
• Erasure (Art. 17): the right, under certain conditions, to request that your data be erased.
• Restriction (Art. 18): the right to request that the processing of your data be restricted.
• Data portability (Art. 20): the right to receive your data in a structured, commonly used and machine-readable format.
• Objection (Art. 21): the right to object to processing based on legitimate interests. You always have the right to object to your data being used for direct marketing, and we will then stop doing so.
• Withdrawal of consent (Art. 7(3)): the right to withdraw any consent you have given at any time.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe that we are processing your data incorrectly.

Why do we collect data?

Konstrukt AB collects and uses your personal data as described in this policy in order to fulfil, improve and adapt our commitments, products and services, to meet your requests, and to collect statistics about, and develop, our website. For example, if we see that many people visit a particular page, we can assume that this is what many find most interesting and adjust the content accordingly. Another example: if we see that many people click on a specific topic in our emails or download a certain type of guide, this can help us write more about that topic or adapt our service accordingly.

We also use the information for marketing purposes, to inform you about our products and services and to share guides, information and news that we, based on what we know about you, believe you may be interested in or have a need for. You can at any time ask us to change your data, to provide you with your data, or to remove you entirely from our databases. You can easily unsubscribe via a link in our emails, or email us directly to end your subscription.

What data is collected?

Depending on the situations in which you come into contact with Konstrukt AB, your personal data may fall within any of the following categories:

• Contact details, such as name, email address and phone number
• Usage information about how you use our website and our services. Such information may include IP address, type of device and browser, and information about how you interact with our website, for example which pages you visit and which buttons you click.
• Other information that we receive from you through your contact with us

Please note that personal information that makes it possible to identify you, or other sensitive information, that you share via Konstrukt AB’s public channels or via direct messages on social media may be read and collected by others.

How is the data collected?

1. Information you provide in forms and information collected through cookies

The most common way for us to receive information is that you choose to provide it in a form on this website in order to get in touch with us. We also have, for example, webinars, events, guides, case studies and other content for which we ask for certain information. You can always ask us afterwards to change your information, to provide you with your information, or to remove you entirely from our databases.

We also collect information through cookies, which are used to improve the website for the user, for example to automatically adapt a website to the visitor’s preferences and choices. A cookie is a text file that is placed and stored in your web browser, but it can also be stored physically on the device’s storage, which may be a hard drive or another storage medium.

Among other things, cookies allow our web server to recognise you and automatically retrieve the information you have previously entered, so that you do not have to enter it again. This saves time and provides better functionality and a smoother user experience.

Some of the information collected may be shared with third parties. This mainly applies to the advertising platforms we use, so that we can reach you with advertising where appropriate. This is usually retargeting, that is, advertising shown only to people who have visited our website. If we organise a webinar or event together with a partner, the information you provide when registering may be shared with that partner. This will then be stated when you register.

In order to give you the best possible information and the right experience of the website, we use a specific IT architecture in which we combine Next.js, Microsoft Clarity and Pipedrive as the main systems for automatically managing website content, contact information and mailings.

Cookies for statistics, tracking and advertising are only set if you have given your consent (see section 3 below). You can also block cookies in your browser. Most browsers accept cookies automatically, but you can change your browser settings so that cookies are refused. Below are some examples of how to do this in each browser:

• Chrome
• Safari
• Firefox
• Microsoft Edge

Please note that if you choose to block cookies, this may in some cases impair the functionality and experience of the website.

2. B2B contact based on legitimate interests

Konstrukt AB targets businesses and professionals exclusively. We may contact you in your professional capacity on the basis of legitimate interests under Article 6(1)(f) of the GDPR and in accordance with the Swedish Marketing Practices Act (marknadsföringslagen). This means that we have assessed that we have a legitimate interest in offering you our products and services in your professional capacity, and that this interest is not overridden by your interest in your data not being processed.

We only contact you at your work email address (e.g. name@company.se) and in your professional capacity. Your contact details may have been obtained from publicly available sources, such as your company’s website or LinkedIn. You can easily unsubscribe via a link in our mailings or contact us directly.

3. Statistics, tracking and advertising: consent required

Cookies for statistics, advertising and tracking (Google Analytics, Facebook Pixel, Google Ads, LinkedIn Insight Tag, Microsoft Clarity) are activated only after you have given your consent through our consent management platform (CookieYes). You can withdraw your consent at any time via the cookie settings on the website.

Data that we ourselves send from our CRM to advertising platforms, for example for advertising audiences and to measure which ads lead to deals, is not based on cookies. This is described under Zapier and LinkedIn below.

International transfers

Some of our suppliers are based outside the EU/EEA, primarily in the United States. This applies, among others, to Google, Meta (Facebook), LinkedIn, Microsoft, Slack and Zapier. Transfers to the United States take place on the basis of the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses (SCCs). You can read more about each supplier’s data protection measures on their respective websites.

Our webinar platform, Contrast, instead stores the data on servers within the EU/EEA, in Ireland. No transfer outside the EU/EEA takes place for that service.

Which systems process the data?

Pipedrive is used to manage contact details and form submissions. It stores information that you have chosen to provide via forms on the website, or that we have identified on the basis of legitimate interests. Name, job title, phone number and email address are stored in order to manage leads and communication.

Contrast is used as the platform for our webinars. Data in Contrast is processed only in connection with your registration for a webinar: name, email address, company and, where applicable, job title and phone number. The data is used to give you access to the broadcast and to send you reminders. It is kept for a period after the webinar, so that you can also access the recording afterwards.

Neon is the database we use to temporarily store information that you provide in a form on the website. Data in Neon is processed only if you have filled in a form. It is stored there for a limited time, as a backup in case something goes wrong in the connection to our CRM system (Pipedrive) or other systems.

Slack is used internally by our team to receive a notification when someone has filled in a form on the website. The notification may contain name, email address and company. Sometimes it also contains a link to the contact in Pipedrive. The data is handled internally only and is not shared further from Slack.

Apollo is used for prospecting and for identifying potential customers on the basis of legitimate interests. Data that may be processed includes name, job title, company and email address from publicly available sources.

Zapier is used to connect our systems automatically, for example to transfer data from ad forms on Facebook, Instagram and LinkedIn to Pipedrive and to update advertising audiences. The name, email address and phone number of contact persons in an ongoing business dialogue may be sent to Meta and Google to create advertising audiences. The platforms convert the data into a hash before it is matched against user accounts. This is done on the basis of legitimate interests, and you can object at any time by contacting us. How we use LinkedIn is described below.

Google Tag Manager is used to manage and deploy tracking scripts on the website. Among other things, Google Analytics, Google Ads, Facebook Pixel and LinkedIn Insight Tag are activated via Google Tag Manager.

Google Analytics (GA4) is used to collect statistics on how our website is used. It mainly collects data about page views, session duration and type of device and browser that does not directly identify you, together with cookie information that you have chosen to share with Google. Google Analytics is activated only after your consent.

Google Ads is used to reach the right people through Google’s advertising network. Data about website visits is used for remarketing and conversion tracking via Google DoubleClick cookies.

Facebook Pixel is used to measure the effectiveness of advertising on Facebook and Instagram and to show targeted ads to visitors to our website. Data about page visits and conversion events is shared with Meta Platforms.

LinkedIn is used for advertising and to measure its results. This happens in four ways:

• Insight Tag: activated only after your consent. Data about page visits and IP address is shared with LinkedIn in order to show ads to visitors and to measure conversions.
• Conversions API: if you have consented to tracking and fill in a form on the website, we may send the same event to LinkedIn from our server. We may also report later stages of a business dialogue, for example a meeting that has taken place or an agreement, for contact persons in our CRM. This is done on the basis of legitimate interests.
• Audiences: we may send the name and website address of companies that we are in a business dialogue with or want to reach, and the name, email address and company of contact persons in an ongoing business dialogue, in order to show ads to them.
• Lead forms: if you fill in a form in an ad on LinkedIn, we receive the information you have provided, for example name, email address, company and job title. It is entered into Pipedrive, and our team may receive a notification in Slack. The information is used to follow up on your request.

Before email addresses are sent to LinkedIn, they are converted into a hash, a one-way code that cannot be converted back into the email address. You can object at any time to your data being used for advertising on LinkedIn by contacting us. We will then remove you from our audiences.

Microsoft Clarity is used to improve the website through behavioural analytics, heatmaps and session recordings. Microsoft Clarity is activated only after your consent. For more information, see the Microsoft Privacy Statement.

Vercel Analytics is used to collect anonymised performance and visitor statistics for our website. No data that identifies you personally is stored.

CookieYes is used as a consent management platform (CMP) to ensure that cookies and tracking are activated only after your consent, in accordance with the GDPR.

How long does Konstrukt AB keep personal data?

If you have initiated contact with us yourself (for example by downloading whitepapers or registering for an event), we will store your contact details until either you or Konstrukt AB, for whatever reason, wishes to end the contact. The easiest way for you to do this is to get in touch with us. If we have initiated the contact, your data is stored for as long as we believe there is a mutual interest in or need for this. We regularly review our database and remove contacts who do not show any interest when contacted, for example by no longer opening the emails sent to them.

Information security

Konstrukt AB takes information security seriously, and we are committed to ensuring that your personal data is processed securely. We handle all information in accordance with established security standards and procedures in order to protect it against unauthorised access, alteration, disclosure and destruction.

Changes and additions to this privacy policy

This privacy policy may be changed in the future, for example in the event of other changes or changes in legislation. We therefore recommend that you read this privacy policy regularly, so that you stay up to date with the latest version.

Questions about this privacy policy?

If you have questions or comments regarding Konstrukt AB’s privacy policy or how we handle information, if you would like us to tell you what data we hold about you, or if you want to update or delete your data from our database, please contact us at info@konstrukt.se or magnus@konstrukt.se.