Privacy Policy

Sunnerot (Drah Verlorn AB, org. no. 559521-7059, hereinafter referred to as "Sunnerot", "we" or "us") values your privacy. This policy describes what personal data we collect, why we collect it and what rights you have.

Data controller

Drah Verlorn AB, org. no. 559521-7059, Stockholm. Email: hello@sunnerot.com

What data we collect and why

When you use the contact form on sunnerot.com we collect your name, company name, email address and the message you write. This data is processed in order to respond to your enquiry. The legal basis is legitimate interest (GDPR art. 6.1 f) — namely our interest in being able to respond to business enquiries.

If you consent to analytical cookies, we collect anonymised visit statistics via Google Analytics 4 (IP addresses are truncated and anonymised). The legal basis is your consent (GDPR art. 6.1 a).

How long we retain your data

Data from the contact form is retained for a maximum of 24 months after the most recent contact, after which it is deleted. Analytical data is deleted in accordance with Google Analytics 4 settings (maximum 14 months).

Sharing with third parties

We never sell your personal data. Data from the contact form is only forwarded to the email services used to handle business correspondence. If analytical cookies are enabled, anonymised data is shared with Google LLC in accordance with their data processing agreement (GDPR art. 28).

Your rights

You have the right at any time to request access, rectification, erasure, restriction of processing and data portability of your data. You also have the right to object to processing based on legitimate interest. Send your request to hello@sunnerot.com. We will respond within 30 days.

You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (imy.se).

Changes to this policy

In the event of material changes, the date at the top of this document will be updated. We recommend that you review the policy periodically.