Privacy policy
Who is responsible for your personal data?
The controller is Kreshnik Kupi, who runs KupiBygg (sole trader), Carl Krooks gata 5, 252 18 Helsingborg. You can reach us at info@kupibygg.se or 070-006 48 99.
What data we collect
When you send an enquiry through the form, we receive what you write: your name, phone number, email (if you give it), town or postcode, what the job is about, what type of home it is, when you would like the job to start and your description. We also store when the enquiry was sent and how you found us, that is, the link or website you came from. If you send photos of the room by text message, WhatsApp or email, we receive those too. You do not have to fill in the form, but without your name and phone number we cannot reply to you. We never ask for your personal identity number (personnummer) in the form.
Why we process your data
- To reply to your enquiry and prepare a quote. These are steps you have asked for before a contract is entered into (Article 6(1)(b) of the General Data Protection Regulation, GDPR).
- If you hire us: to carry out the work and invoice you (Article 6(1)(b)). For the ROT tax deduction (rotavdrag) we need your personal identity number and details about your home, which we pass on to Skatteverket, the Swedish Tax Agency (Article 6(1)(b) and (c)).
- Bookkeeping: we keep invoices and supporting documents for seven years after the end of the financial year in which they were drawn up, as the Swedish Bookkeeping Act requires (Article 6(1)(c)).
- Seeing which channels bring in enquiries: we store where you came from, so that we know which profiles and links work (Article 6(1)(f), legitimate interest).
- Protection against spam: your IP address is used only to limit the number of enquiries and is stored by us for no more than one hour. Our hosting provider may keep it in its technical logs for a few days (Article 6(1)(f), legitimate interest).
How long we keep the data
If an enquiry does not lead to a job, we delete it after 12 months at the latest. We keep data that forms part of our bookkeeping for as long as the law requires.
Who may receive the data
We never sell your data. Two services are used to receive and store the enquiries:
- Cloudflare is our processor: they run the website, receive and store the form submissions and forward the email to us.
- Google: the email is received and stored in our Gmail.
Both are US companies, so the data may be transferred to the USA. Both have joined the EU–US Data Privacy Framework, which the European Commission has decided provides an adequate level of protection. Skatteverket receives the data needed for the ROT deduction.
If you choose to contact us via WhatsApp, WhatsApp's own terms also apply.
Your rights
You have the right to find out what data we hold about you (access), to have errors corrected (rectification) and to have data erased (erasure). You can also ask for the processing to be restricted, object to it and receive your data (data portability). Get in touch with us and we will help you. If you are unhappy with how we handle your data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
Cookies
The website uses no cookies and no analytics or advertising tools. We only read which link you came from, and store it if you send an enquiry.