Privacy policy

Who is responsible for your data?

Rosskompetens AB is the data controller. You can reach us through the contact page.

What we store

• Contact details: name, email and phone number.
• Address where we clean.
• Bookings and invoices: service, time, price and payment.
• Access: door codes and similar details, which are stored encrypted.
• Personal identity number, if you use the RUT deduction.
• Company details, if you book as a business: company name, organisation number and reference.
• Account: your settings and your password, stored in hashed form, if you create an account.
• Messages you send us through the contact form.

Why we process your data

• To carry out the cleaning and invoice it. The legal basis is our contract with you.
• To claim the RUT deduction and comply with the Swedish Bookkeeping Act. The legal basis is legal obligation.
• To answer questions and ask for a review after the cleaning. The legal basis is our legitimate interest.
• To send tips and offers, if you have chosen this on My pages. The legal basis is your consent, which you can withdraw there at any time.

Personal identity number and RUT

Your personal identity number is only used to claim the RUT deduction from the Swedish Tax Agency (Skatteverket). It is stored encrypted and never shown in full after you have entered it. Every time someone at our company reads it, this is logged.

Who can access your data

We never sell your data. We only share it with those needed to deliver the service:

• The Swedish Tax Agency, for the RUT deduction.
• STRATO, which runs our servers in Germany and sends our email.
• Cloudflare, which stores our backups within the EU.

The map on the contact page comes from Google Maps. It only loads if you choose to show it, and Google then receives your IP address.

Our visitor statistics are cookie-free and cannot be linked to you. Read more in our cookie policy.

How long we keep your data

• Invoices and RUT records: 7 years under the Swedish Bookkeeping Act. After that, your encrypted personal identity number is removed too.
• Account and customer details: until you delete your account. Your name, contact details and addresses are then removed, while the invoices remain for the bookkeeping period.
• Sent emails: 90 days.
• Quotes that didn't become a booking: one year after they expired.
• Backups: 30 days. Data you have deleted can therefore remain in a backup for that long.

Your rights

You have the right to know what data we hold about you, have errors corrected, have data deleted, restrict the processing, object to it and receive your data.

If you have an account you can export your data or delete the account yourself on My pages. Otherwise, contact us.

If you think we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY).

Changes

We update this page when we change how we handle personal data. The date at the top shows when it last changed.