Last updated: 29 September 2026
This policy explains how Veroskat AB handles personal data collected through this website, veroskat.com. It does not cover data processed in the course of client engagements, which is described in the terms provided to clients.
Who is responsible
Veroskat AB, org. nr 559358-1548, Stuxbergs gränd 2, 136 58 Vega, Sweden, is the controller of the personal data described here. Contact: administration@veroskat.com.
What we collect
When you send an enquiry through the contact form: your name, work email, company or firm name, country of establishment, whether you contact us as a firm or as a business, the topic, the description you write, the page you came from and, if present in the link you followed, campaign parameters (utm parameters and Google click identifier).
When you visit the website: anonymous, aggregated usage statistics collected without cookies (pages viewed, referring site, country, device type). These statistics do not identify you. Our hosting provider also processes technical data such as your IP address to deliver the website and protect it against abuse.
Only if you accept advertising cookies: Google Ads cookies used to measure whether a visit from one of our ads led to an enquiry. See "Cookies" below.
Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry and assessing whether we can help | Steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)), or our legitimate interest in answering business enquiries (Art. 6(1)(f)) |
| Keeping enquiries that did not lead to an engagement, to follow up and to understand where our enquiries come from | Our legitimate interest (Art. 6(1)(f)) |
| Protecting the website and the form against abuse | Our legitimate interest (Art. 6(1)(f)) |
| Measuring the results of our advertising with Google Ads cookies | Your consent (Art. 6(1)(a), and lag (2022:482) om elektronisk kommunikation, 9 kap. 28 §) |
How long we keep it
Enquiries that do not lead to an engagement are deleted 24 months after they are received. If your enquiry leads to an engagement, the data becomes part of the client relationship and is kept under the rules that apply to it, including accounting and anti-money laundering legislation.
Who receives it
We do not sell your data. It is processed on our behalf by the following providers, under data processing agreements:
- Vercel Inc. (United States): website hosting and cookieless usage statistics
- Supabase Pte. Ltd. (Singapore): database hosting, with the database located in Stockholm, Sweden
- Infomaniak Network SA (Switzerland): email
- Google Ireland Limited: advertising measurement, only if you accept advertising cookies
Vercel also processes technical and usage data about the operation of its own services as an independent controller, under its own privacy notice: https://vercel.com/legal/privacy-policy.
Transfers outside the EU/EEA
Enquiries sent through the contact form are handled by server functions running in Stockholm, Sweden, and stored in a database located in Stockholm, Sweden. Some of our providers are nevertheless established outside the EU/EEA or may access data from outside it:
- Vercel Inc. (United States) delivers the website through a global network, so connection data such as your IP address may be processed close to your location and in the United States. These transfers rely on the standard contractual clauses adopted by the European Commission (Decision (EU) 2021/914; GDPR Art. 46(2)(c)).
- Supabase Pte. Ltd. (Singapore) operates our database. The data is stored in the EU, but Supabase and its sub-processors may access it from outside the EU/EEA, for example to provide support. These transfers rely on the same standard contractual clauses (GDPR Art. 46(2)(c)).
- Infomaniak Network SA (Switzerland) provides our email. The European Commission has recognised that Switzerland ensures an adequate level of protection (Decision 2000/518/EC; GDPR Art. 45).
You can obtain a copy of the safeguards used for these transfers by emailing administration@veroskat.com.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format (GDPR Art. 15 to 21). Where processing relies on your consent, you can withdraw it at any time through "Cookie settings" at the bottom of every page (Art. 7(3)); this does not affect processing carried out before the withdrawal.
To exercise your rights, email administration@veroskat.com.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se.
Cookies
| Cookie or storage | Purpose | Duration | Consent needed |
|---|---|---|---|
veroskat_consent |
Remembers your cookie choice | 12 months | No, strictly necessary |
| Google Ads cookies | Measure whether an ad visit led to an enquiry | Set by Google | Yes |
| Session storage of campaign parameters | Keeps the campaign source of your visit until you send an enquiry | Until you close the tab | Yes |
Usage statistics are collected without cookies. No cookie other than veroskat_consent is set unless you accept.
No automated decisions
We do not make decisions about you based solely on automated processing.