Data Protection Notice

This privacy notice applies to Bra Bullerplank i Sverige AB and the provision of electronic services.

In this privacy notice/privacy policy, we explain why we process your personal data and what your rights are in relation to the processing of your personal data when you visit our websites, contact us or use our products.

We respect your privacy and undertake to protect personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Data Protection Act.

This privacy notice was last updated on 30 June 2025.

1. Data controller

Bra Bullerplank i Sverige AB (hereinafter “we”, “us” or “Bra Bullerplank”)
Company registration number: 556998-4155
Vikdalsvägen 50
Nacka
Sweden

Telephone number:
+46 8 716 19 20

Website:
https://www.nnbgroup.se

David Bodin (david@nnbgroup.se) acts as the contact person for the data controller.

2. Name of the register

Bra Bullerplank’s customer and user register (hereinafter the “Register”).

3. Purpose and scope of the processing of personal data

We collect, store and process personal data in our Register only for the purposes that we have defined in advance, and we always ensure that we have a lawful basis for storing and processing personal data.

The personal data in our Register is primarily used to provide products and services, communicate with customers, plan and develop our business, manage, maintain and develop customer relationships, and improve user experiences. In terms of improving user experiences, this primarily means maintaining and developing the websites in order to ensure that they function properly (you can find more information about cookies further down in this document).

Personal data is processed on the basis of your consent, the fulfilment of an order and the resulting contract, compliance with legal obligations (such as accounting and taxation), and our legitimate interests.

When it comes to marketing our products or providing other information about our company, the processing of personal data is based on our legitimate interest in promoting our business and maintaining customer relationships.

The processing of personal data is based on our legitimate interest in maintaining customer relationships and acquiring new customers.

In connection with contact requests made through various social media channels, such as Facebook, or via email, text messages and the WhatsApp communications tool, we undertake not to process any sensitive data through the various social media channels.

When, as a user of various social media channels, you have accepted the terms of use for the relevant channel and use that channel, you are the data controller. We are not responsible for your personal information held by a registered user of one or more social media channels and therefore do not undertake to protect such information.

4. The information we collect

On our website, we may need to collect personal information when certain functions are used. We process the following categories of personal data in our Register for the purposes referred to in section 3 above:

5. Who we share the information we collect with

Forms

The information submitted via any of our forms is not shared with any third party. Only a small number of people have been entrusted with reading and processing the information that visitors submit via the website.

When a user submits information, the data entered is transmitted over an encrypted connection between the browser and the website (HTTPS). The website then encrypts the information and stores it. The information stored by the website can only be read by those who have been provided with a login and an additional password for decryption.

Google Analytics

We use Google Analytics to compile statistics about our visitors. Google Analytics creates a profile of the visitor by collecting anonymous information, such as which browser is being used and the type of hardware on which the browser is being used.

When you visit the website, information is transferred to Google, which processes the information as an independent data controller. Data about website visitors is transferred to Google, which processes the data as the data controller for its own purposes. Google may also combine the data with its other information about the visitor. For indirect identification, Google uses the visitor’s unique identifier (IP address) to identify users, but it is also possible to link this IP address directly to an individual, for example when logging in to a Google account.

Please note that when you are logged in to a Google account, Google collects even more unique identifiers about you, such as identifiers that identify your device, information about the browser or application you use, advertising identifiers for Android or iOS mobile users, language preferences, your network of friends and your most popular YouTube videos.

Google uses data collected about website visitors for at least the following purposes:

• determining location (country, city, network owned by a company or community)
• visitors’ behaviour on the website
• visitors’ interests on the website
• remarketing and advertising.

In connection with remarketing, Google supplements your IP address with information based on its use, which Google uses to classify the user based on factors including location, address and age. You can find Google’s privacy policy and terms of service at https://policies.google.com/privacy?hl=sv

Blocking cookies: Customers can block the use of cookies by changing their browser settings. Blocking the use of cookies may affect the functionality of our services.

Clearing cookies: Registered users can clear cookies from their browser settings. By clearing cookies regularly, users change the set of data used to create a profile of the user. However, clearing cookies does not stop data collection completely; instead, it resets the profile based on previous behavioural data.

LinkedIn Insight Tag

We use the LinkedIn Insight Tag to collect statistics about our visitors and target our marketing.

No personally identifiable information is collected by the LinkedIn Insight Tag.

Read LinkedIn’s Privacy Policy and Terms of Service to find out how they use the information we share with them.

Google reCAPTCHA

We use Google reCAPTCHA to assess whether our visitors are human. This is to prevent bots from sending spam through our forms. This means that Google’s Privacy Policy and Terms of Service apply.

Other

Any transfer of your personal data to third parties is based on written agreements that ensure that your personal data is protected. We disclose personal data to authorities in accordance with the legal obligations imposed on us.

We do not process personal data outside the EU/EEA.

6. How long we store the information collected

The information collected via the website’s forms is stored on the website for at least one (1) year. Otherwise, your data is retained for as long as necessary for the purpose for which it was collected or as required by law. It is therefore not always possible to define the retention period in advance.

However, we may be required to retain certain personal data belonging to our customers in order to comply with the Swedish Accounting Act or other mandatory legislation, even after the customer or user relationship, or any other legal basis for processing personal data, has ended.

7. Users have full control over their information

Users have full control over their information. This means that, for example, you have the right at any time to request details of the information we hold about you. You also have the right to request that the information be erased.

As a general rule, exercising your rights as a data subject is free of charge. However, we reserve the right to charge a reasonable fee if the request is repetitive or manifestly unfounded or excessive.

If you wish to exercise your rights as a data subject, you can contact info@nnbgroup.se.

8. How we protect the information collected

By implementing organisational and technical measures, we ensure that your data is secure in all respects, protected against unauthorised processing, and not destroyed, erased, altered or unlawfully transferred. The software that powers the website is continuously updated to address security vulnerabilities that emerge over time. Traffic between the visitor’s web browser and our server is encrypted.

People who process personal data are subject to a duty of confidentiality and secrecy. The data is stored in databases protected by usernames and passwords, as well as technically protected by a firewall.

9. Contact

Enquiries concerning this data protection notice/privacy policy may be sent to the person named at the beginning of this document.