1. General
1.1 This privacy policy describes how Karlholm Logistics AB ("Karlholm Logistics", "we") collects, uses, discloses and stores personal data.
1.2 It applies to personal data collected through this website (karlholm-logistics.com), enquiries, customer meetings and events. Our Swedish website at karlholm-logistics.se has its own privacy policy, which also describes the cookies used there.
1.3 You should always feel safe when giving us your personal data. This policy explains how we handle data in line with the EU General Data Protection Regulation (GDPR).
2. Controller and contact
2.1 Karlholm Logistics AB is the controller of the personal data described here and is responsible for ensuring that processing complies with applicable law.
2.2 Data protection contact: Andreas Högberg, Karlholm Logistics AB, Lancashirevägen 30, SE-819 40 Karlholmsbruk, Sweden. Phone +46 294 400 40, email info@karlholm-logistics.se.
3. What we collect and why
3.1 We collect personal data that you give us – for example when you fill in the contact form, send us an email, book a meeting, order services or share details at a customer meeting.
3.2 We use the data to carry out what you have asked for (such as answering an enquiry or preparing a proposal) and to comply with legal obligations.
| Purpose | Legal basis | Personal data | Retention |
|---|---|---|---|
| Answering an enquiry sent through the contact form or by email | Steps at your request before entering into a contract, or our legitimate interest in answering business enquiries | Name, company, email, phone number, country, message | Until no longer needed for the purpose, at most 24 months after your last contact with us unless the law requires longer |
| Meetings booked through our booking link | As above | Name, email and the details you enter in Google Calendar's booking form | As above |
| Customer meetings and events | As above | Name, company, email, phone number | As above |
| Delivering the website securely | Our legitimate interest in operating a secure website | Technical data such as IP address, browser and time of request in server logs | Kept by our hosting provider for a limited period for security and troubleshooting |
| Visitor statistics (Ahrefs Web Analytics) | Our legitimate interest in understanding how the website is used and improving it | Pages visited, referring website, browser, device type and approximate country, collected without cookies | Used only as aggregated statistics |
3.3 We do not knowingly collect personal data from children.
4. Cookies
4.1 This English website does not use advertising or other non-essential cookies, and therefore does not show a cookie banner. We measure visits with Ahrefs Web Analytics, which works without cookies and does not store anything on your device. If we introduce non-essential cookies in the future, we will ask for your consent first and update this policy.
4.2 The meeting booking link opens Google Calendar, which is subject to Google's own privacy policy and cookies.
5. Service providers
5.1 To run our business we use a small number of service providers that process personal data on our behalf, under data processing agreements:
- Website hosting – Vercel Inc. hosts this website and processes technical request data.
- Website statistics – Ahrefs Pte. Ltd. (Singapore) provides Ahrefs Web Analytics, our cookieless visitor statistics.
- Email delivery of the contact form – messages sent through the form are delivered to our inbox by an email delivery service.
- Email – Google Workspace (Google Ireland Ltd.) for our email.
- Accounting and invoicing – Fortnox AB, Växjö, Sweden, for customers.
5.2 Some providers are based in, or may transfer data to, countries outside the EU/EEA (for example the United States). In those cases we make sure appropriate safeguards are in place, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
5.3 We do not sell your personal data or share it with other third parties unless you have given us explicit permission or we are required to by law.
6. Your rights
6.1 Under the GDPR you have the right to:
- access the personal data we hold about you
- rectification of inaccurate or incomplete data
- erasure of your data when it is no longer needed, unless we are required to keep it – for example under accounting legislation
- restriction of processing, for example while the accuracy of data is being checked
- object to processing based on our legitimate interest, and to direct marketing at any time
- data portability where the processing is based on a contract or consent
6.2 Contact us at info@karlholm-logistics.se to exercise your rights. We will correct, anonymise, erase or complete data that is found to be incorrect, incomplete or misleading.
6.3 If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or the data protection authority in the EU country where you live.
7. Changes
We may update this policy. The date at the top of the page shows when it was last changed.