Privacy Policy

Elemtech AB (559435-4572) is the data controller for personal data collected through norrpoint.se.

Address: Glöstorps Röseväg 13, 417 45 Göteborg

Privacy contact: info@norrpoint.se

We may collect the following categories of personal data:

• Contact details: name, work email, company name
• Project information: product interest, message content you submit via quote forms
• Technical data: IP address, browser type, pages visited (only if you consent to analytics cookies)
• Cookie preferences: your consent choices stored locally and in a first-party cookie

We process personal data for the following purposes:

• Responding to quote and sales inquiries — legal basis: pre-contractual measures (GDPR Art. 6(1)(b)) and legitimate interest in handling B2B sales requests (Art. 6(1)(f))
• Sending product updates and marketing communications — legal basis: your consent (Art. 6(1)(a)); only if you opt in separately on the quote form
• Website analytics — legal basis: your consent via cookie banner (Art. 6(1)(a))
• Embedded video content (YouTube) — legal basis: your consent via cookie banner (Art. 6(1)(a))
• Operating and securing the website — legal basis: legitimate interest (Art. 6(1)(f))

We use trusted service providers who process data on our behalf under data processing agreements:

• Vercel — website hosting and infrastructure (USA/EU)
• Resend — transactional email delivery for quote requests (USA)
• Google / YouTube — embedded product videos when you consent to external media (USA)
• HubSpot — CRM and marketing automation when you consent to marketing cookies (USA)
• Google Analytics — website usage statistics when you consent to analytics cookies (USA)

Some processors are located outside the EU/EEA, primarily in the United States. Transfers are safeguarded through the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework where applicable.

We retain personal data only as long as necessary:

• Quote inquiries: 24 months from last contact
• Marketing contacts: until you withdraw consent
• Server and access logs: as described by our hosting provider (Vercel)

Under GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise your rights, contact info@norrpoint.se. We respond within 30 days.

You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se or your local supervisory authority.

We apply appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS) and access controls for internal systems.

We may update this policy when our processing activities change. Material changes will be reflected on this page with an updated effective date.