Privacy Policy

M4 Solution ("M4 Solution", "we", "us" or "our") is the data controller for the processing of your personal data under this policy.

• Contact: Info@m4solution.se
• Registered office: Stockholm, Sweden

We process the following categories of personal data:

• Information you submit via the contact form: name, email address, subject (optional) and the content of the message you send.
• Information you provide by email or phone: contact details and any information you choose to share when communicating with us.
• Technical data: IP address, browser type, device type, operating system, referrer, timestamps and basic log data collected automatically by our hosting provider for security and operational purposes.
• Data related to ongoing engagements: contact and business information necessary to deliver our services in business development, programming, sales and data analytics.

We do not knowingly collect special categories of personal data (Article 9 GDPR) via the website. Please do not submit such data through the contact form.

We process your personal data for the following purposes:

• Responding to enquiries and managing communication via the contact form and email. Legal basis: legitimate interest (Art. 6(1)(f)) or pre-contractual measures at your request (Art. 6(1)(b)).
• Delivering our services and fulfilling contracts with clients. Legal basis: contract (Art. 6(1)(b)).
• Invoicing, bookkeeping and accounting. Legal basis: legal obligation (Art. 6(1)(c)), in particular the Swedish Bookkeeping Act.
• Security, operation and troubleshooting of the website. Legal basis: legitimate interest (Art. 6(1)(f)) to maintain a secure and functional service.
• Protecting against abuse, fraud and spam. Legal basis: legitimate interest (Art. 6(1)(f)).

We retain personal data only for as long as necessary for the purposes above:

• Contact enquiries: up to 24 months from the last contact, after which the data is deleted or anonymised if no business relationship has arisen.
• Client data related to engagements: for the duration of the engagement and as long as there is a legal basis, for example to handle claims.
• Accounting records: seven (7) years pursuant to the Swedish Bookkeeping Act.
• Technical logs: normally up to 90 days.

We only share personal data when necessary and always with appropriate safeguards. Recipients may include:

• Accounting and auditing firms where necessary.
• Public authorities where we are required by law to disclose information.

All external providers processing personal data on our behalf do so as data processors under a written data processing agreement.

We primarily aim to use providers located within the EU/EEA. If personal data is transferred to a third country, we ensure that the transfer takes place with appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) or a valid adequacy decision.

The website only uses strictly necessary cookies and technical data required for it to function and remain secure. We do not use marketing or tracking cookies. If we introduce analytics or marketing cookies in the future, we will obtain your consent via a cookie banner.

We implement technical and organisational measures to protect your personal data against unauthorised access, loss and unlawful processing. Examples include encrypted transmission (HTTPS), access controls, logging and regular reviews of our systems and routines.

Under the GDPR you have the right to:

• Be informed about and access the personal data we process about you (subject access request).
• Request rectification of inaccurate or incomplete data.
• Request erasure ("the right to be forgotten") where there is no legal basis for continued processing.
• Request restriction of processing.
• Object to processing based on legitimate interest.
• Right to data portability for data you have provided and which is processed automatically on the basis of consent or contract.
• Withdraw consent where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal.

To exercise your rights, please contact us at Info@m4solution.se.

If you believe that we process your personal data in violation of applicable data protection legislation, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se.

We may update this privacy policy from time to time, for example following changes to our operations or applicable legislation. The current version is always published on this page with the date of the latest update.

For questions about this policy or our processing of personal data, please contact us:

Info@m4solution.se