Privacy Policy

1. Introduction

Stravik Technologies AB (“we,” “our,” or “us”) operates GTME HQ (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We are committed to protecting your personal information and your right to privacy in accordance with the General Data Protection Regulation (GDPR) and Swedish data protection laws.

2. Information We Collect

Personal Information You Provide:

• Name and email address (when you sign up or contact us)
• Company information (if provided)
• Payment information (processed securely through third-party providers)
• Communication preferences
• Any information you provide in correspondence with us

Information Automatically Collected:

• IP address and browser information
• Device and operating system information
• Pages visited and time spent on our Service
• Referring website addresses
• Cookie data (see our Cookie Policy)

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our Service
• To process your transactions and send you related information
• To send you technical notices, updates, and support messages
• To respond to your comments, questions, and customer service requests
• To send you marketing communications (with your consent)
• To monitor and analyze usage patterns and trends
• To detect, prevent, and address technical issues
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal grounds:

• Contract: Processing necessary for the performance of our services
• Consent: Where you have given explicit consent (e.g., marketing emails)
• Legitimate Interests: For our business interests that don't override your rights
• Legal Obligations: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third parties that help us operate our business (e.g., payment processors, email services, analytics providers)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with any merger, sale, or acquisition
• With Your Consent: When you explicitly agree to sharing

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Generally:

• Account information: Retained while your account remains active or as needed to provide services
• Transaction records: Retained for the period required by applicable tax and accounting laws
• Marketing data: Retained until you unsubscribe or request deletion
• Analytics data: Retained for a reasonable period to analyze usage patterns

7. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at elias@gtmehq.com. We will respond to your request within the timeframe required by applicable law.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure data storage with encryption at rest
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Employee training on data protection

9. International Data Transfers

Your information may be transferred to and processed in countries other than Sweden. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Your explicit consent to the transfer

10. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email.

13. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten) if you believe we have not handled your personal data correctly.