Privacy policy

1. Introduction

Meksta AB ("we", "us", "our") cares about your privacy. This privacy policy describes how we collect, use and protect your personal data when you visit meksta.se or contact us. We process your data in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and supplementary national legislation.

2. Data protection principles

We follow the core principles of the GDPR:

1. Lawfulness, fairness and transparency - we are transparent about how we process your data.
2. Purpose limitation - data is collected for specific, explicit and legitimate purposes.
3. Data minimisation - we only collect what we actually need.
4. Accuracy - we keep your data up to date.
5. Storage limitation - we do not keep data longer than necessary.
6. Integrity and confidentiality - we protect data against unauthorised access and loss.

3. Processing of personal data

3.1 Quote requests and customer contact

When you send a quote request or contact us, we collect the information you provide: name, email address, phone number, vehicle information, a description of the work and any photos. These are processed in order to respond to your enquiry, provide a quote and fulfil any agreement.

Legal basis: Legitimate interest (Art. 6(1)(f)) and contract (Art. 6(1)(b)).

Retention period: 24 months after the last contact. Order and invoice data is retained in accordance with applicable accounting law (7 years under Swedish law).

3.2 Web analytics (Google Analytics 4)

If you consent to statistics cookies, we use Google Analytics 4 (GA4) to collect anonymised information about how the website is used, for example which pages are visited, session duration, device and approximate location (country/region, not exact position). IP addresses are anonymised. Data is sent to Google LLC and processed in accordance with Google's data processing agreement.

Legal basis: Consent (Art. 6(1)(a)). Never activated without your active consent.

Retention period: 14 months in GA4, then aggregated and anonymised.

3.3 Marketing (Meta pixel)

If you consent to marketing cookies, we use the Meta pixel (Facebook pixel) to build audiences and measure the results of our advertising on Meta's platforms (Facebook and Instagram). The pixel records, for example, which pages you visit and whether you send a quote request, but never the content of the form. Data is shared with Meta Platforms Ireland Ltd, which processes the data under its data processing agreement.

Legal basis: Consent (Art. 6(1)(a)). The pixel is never loaded without your active consent.

Retention period: Cookies for up to 3 months. Audience data at Meta for up to 180 days.

3.4 Google Search Console

We use Google Search Console to track how meksta.se performs in Google Search. Search Console processes aggregated search data and does not create a personal profile of individual visitors. Search Console sets no cookies on your device.

3.5 Form handling

Quote and contact forms are handled via Make.com (Celonis SE), which forwards data to our email. The data transfer is transient, and Make.com does not store form data permanently.

4. Protection of personal data

We take technical and organisational security measures to protect your data against unauthorised access, loss or destruction. The website runs on Vercel Inc.'s infrastructure with encrypted connections (HTTPS/TLS). Internal access to personal data is limited to the staff who need it to do their work.

5. Your rights

Under the GDPR you have the following rights. Contact us to exercise them:

• Right of access (Art. 15) - Request a copy of the personal data we process about you.
• Right to rectification (Art. 16) - Request that inaccurate or incomplete data be corrected.
• Right to erasure (Art. 17) - Request erasure of your data ("the right to be forgotten"), subject to legal obligations (e.g. accounting law).
• Right to restriction (Art. 18) - Request that the processing of your data be restricted during a review.
• Right to data portability (Art. 20) - Request your data in a structured, machine-readable format.
• Right to object (Art. 21) - Object to processing based on legitimate interest.
• Right to withdraw consent - Withdraw cookie consent at any time via the cookie banner in the footer. Withdrawal does not affect processing that took place beforehand.

Contact us at info@meksta.se or call 076-324 10 66. We respond within 30 days. If you believe we are processing your data incorrectly, you have the right to lodge a complaint with your local data protection authority. In Sweden this is:

The Swedish Authority for Privacy Protection (IMY)
Box 8114, 104 20 Stockholm, Sweden
www.imy.se

6. Cookies and tracking

We use cookies on meksta.se. You choose which categories you allow via our cookie banner on your first visit, and can change your choice at any time via "Cookie settings" in the footer.

Necessary cookies (always active)

Statistics cookies (require consent)

Marketing cookies (require consent)

7. Updates to this policy

We may update this privacy policy when we change how we process personal data or when legislation changes. The latest version is always available on this page. For significant changes, we publish a notice on the website.

8. Data controller

Meksta AB
Org.nr: 559461-1310
Studiovägen 1A, 135 48 Tyresö
Email: info@meksta.se
Phone: 076-324 10 66