AquaLabs Privacy Policy
This policy explains how AquaLabs Nordic, org. no. 811010-0511, Birger Velinders Väg 2A, 268 31 Svalöv, Sweden (“AquaLabs”) handles personal data. We follow the EU General Data Protection Regulation (GDPR).
1. Two roles
- Controller for data about our own customers’ contact people, website visitors and support contacts.
- Processor for the data our customers put into AquaLabs Virtual Desktop and Smart Data Systems, such as their own customers, vehicles, work orders and invoices. For that data the workshop is the controller, and our Data Processing Agreement applies.
2. Data we handle as controller
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Name, email, phone, company of customer contacts | Deliver the Service, support, billing | Contract (Art. 6.1.b) | While the customer relationship lasts + 12 months |
| Login and security logs | Keep accounts secure | Legitimate interest (Art. 6.1.f) | Up to 12 months |
| Billing records | Bookkeeping | Legal obligation (Art. 6.1.c) | 7 years (Swedish Bookkeeping Act) |
| Emails you send us | Answer you | Legitimate interest (Art. 6.1.f) | Up to 24 months after the case closes |
We do not sell personal data and do not use it for advertising.
3. Where data is stored
The Service’s databases run in the EU (Supabase, Stockholm region). Some providers we use are based in the United States; when data leaves the EU/EEA we rely on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. The current list of providers is in our Data Processing Agreement.
4. Automated reading
The Service uses automated reading, including AI, to extract lines and prices from supplier invoices. It supports people’s work; it makes no decisions about individuals with legal or similarly significant effects. Documents are read through Anthropic’s commercial API; under Anthropic’s commercial terms, this content is not used to train AI models.
5. Your rights
You can ask for access to your data, correction, deletion, restriction, data portability, and object to processing based on legitimate interest. Write to admin@aqualabs.se; we answer within one month. If your data is in a workshop’s account, we pass your request to that workshop, as it is the controller.
You can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se) or the authority where you live, such as Datatilsynet in Denmark.
6. Cookies
The Service uses only the cookies and local storage it needs to keep you signed in and remember your settings. The aqualabs.se website uses only essential session and functional cookies necessary for site operation and security.
7. Security
Access is limited per company account, data is encrypted in transit, and issued invoices and audit logs cannot be changed after the fact.
8. Changes
We will post changes on this page and notify customers of material changes.
9. Contact
AquaLabs Nordic · Birger Velinders Väg 2A, 268 31 Svalöv, Sweden · admin@aqualabs.se