Privacy policy

1. Data Controller

Coffee Brain AB is the data controller for personal data processed through this website. We are responsible for ensuring that your data is handled in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR).

2. What We Collect

We may collect the following types of personal data when you use our website:

• Contact information (name, email address) when you fill in a contact form or request a demo
• Usage data (IP address, browser type, pages visited, time on site) collected automatically via cookies and analytics tools
• Communication history if you correspond with us by email

3. How We Use Your Data

We use the collected data for the following purposes:

• To respond to your enquiries and provide requested information about Coffee Brain
• To improve our website and services based on how visitors use the site
• To send relevant marketing communications, where you have given your consent
• To comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

• Legitimate interest — for website analytics and improving our services
• Contract performance — when processing is necessary to fulfil an agreement with you
• Consent — for marketing emails and non-essential cookies; you may withdraw consent at any time
• Legal obligation — where we are required by law to process your data

5. Third-Party Services

We use the following third-party services that may process your personal data on our behalf:

• Google Analytics 4 — website traffic analysis (data stored in EU when configured with data residency settings)
• Google Ads — advertising and conversion tracking
• Cookiebot — cookie consent management
• Vimeo — embedded video content

These providers act as data processors under GDPR. Please refer to their respective privacy policies for information about how they handle your data.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions are retained for up to 24 months. Analytics data is retained in accordance with the settings of the respective analytics tool. You may request deletion of your data at any time.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data (“right to be forgotten”)
• Right to restriction — to request that we limit how we use your data
• Right to data portability — to receive your data in a machine-readable format
• Right to object — to object to processing based on legitimate interest or for direct marketing
• Right to withdraw consent — where processing is based on consent, you may withdraw at any time

To exercise any of these rights, please contact us at the address below. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at www.imy.se.

8. Cookies

Our website uses cookies. Cookies are small text files stored on your device that help us provide and improve our services. You can manage your cookie preferences at any time via our cookie consent banner. The full list of cookies used on this website is maintained below and updated automatically by Cookiebot:

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Coffee Brain AB
Email: info@coffeebrain.io