Privacy Policy
Last updated 2026-08-20 · Version 1.0 · Läs på svenska
N3O Vision processes personal data when you contact us through this website. This page explains what data that is, why we process it, the legal basis we rely on, who else sees it, how long we keep it and what rights you have.
1. Who is responsible for your personal data
The controller is:
We have not appointed a data protection officer. Our core activities do not consist of processing that requires regular and systematic monitoring of data subjects on a large scale, and we do not process special categories of data on a large scale (Art. 37(1) GDPR).
2. What we collect, why, and on what legal basis
We only collect what you enter into a form or send us by email. We do not buy data from registries and we do not obtain data about you from third parties.
2.1 The contact form on the home page
| Data | Name, email address, company (optional), your message |
| Purpose | To answer your enquiry and follow up on the contact you initiated |
| Legal basis | Legitimate interests, Art. 6(1)(f) GDPR |
| Our legitimate interest | Being able to reply to someone who contacts us about our services. We consider that you reasonably expect a reply when you write to us, and that the processing does not override your rights (Art. 6(1)(f), recital 47) |
2.2 The demo form at /demo
| Data | Name, email address, company, requested agent type, message |
| Purpose | To set up and administer a demo or trial account for you |
| Legal basis | Steps taken at your request prior to entering into a contract, Art. 6(1)(b) GDPR |
2.3 The GEO audit form at /geo-audit
| Data | The web address you want audited, your email address, the package selected |
| Purpose | To deliver the free mini audit or the audit you ordered, and to get back to you with the results and any quote |
| Legal basis | Steps taken at your request prior to entering into a contract, Art. 6(1)(b) GDPR |
The audit analyses a website, not a person. If the website you submit contains personal data, that data is processed only to the extent it appears in the material we audit.
2.4 Email and other correspondence
| Data | Sender details and the content of what you write |
| Purpose | To manage our correspondence with you |
| Legal basis | Art. 6(1)(b) where there is a customer or contractual relationship, otherwise Art. 6(1)(f) (being able to answer incoming mail) |
2.5 Invoicing and accounting
| Data | Name, address and billing details, information about the purchase |
| Purpose | To perform the contract and to comply with statutory bookkeeping obligations |
| Legal basis | Art. 6(1)(b) (contract) and Art. 6(1)(c) (legal obligation under the Swedish Accounting Act, 1999:1078) |
No payment takes place on n3ovision.com; audits ordered are invoiced afterwards.
2.6 Do you have to provide the data?
No. Filling in a form is voluntary and not a statutory requirement. The fields marked with an asterisk are, however, necessary for us to be able to reply — without a name and email address we cannot get back to you, and without a web address no audit can be carried out. If you do not provide them we cannot handle your enquiry. There is no other consequence.
3. Who sees the data
We never sell your data and we do not pass it to advertising networks. Besides ourselves, it is processed by the following categories of recipients, all of them processors acting on our behalf and on our instructions:
| Provider | What they process |
|---|---|
| Vercel Inc. | Hosting and form handling — running the website and the service that receives the forms |
| Cloudflare, Inc. | Network, DNS and security — traffic to and from the website and protection against attacks |
| Resend, Inc. | Email delivery — forwards the content of the form as email |
| Google (Google Workspace) | Mailbox — stores the email we receive at info@n3ovision.com |
If the form cannot be submitted. Should the form fail to send, your own email client opens instead with the details filled in. In that case nothing passes through us until you press send yourself, and the data passes through your own email provider rather than ours.
4. Transfers to countries outside the EU/EEA
The website and the service that receives the forms run on servers within the EU (Stockholm). That does not mean the data stays within the EU/EEA. Once the form has been received, its contents are forwarded as email via Resend, Inc. and stored in our mailbox at Google. Both are US companies, so the data you submit in a form is transferred to the United States. Vercel and Cloudflare are US companies too, which means access from a third country cannot be ruled out.
Vercel, Cloudflare and Resend are certified under the EU–US Data Privacy Framework, and transfers to them rely on the European Commission's adequacy decision for that framework. To the extent a transfer is not covered by the framework, it relies on the European Commission's standard contractual clauses under Art. 46(2)(c) GDPR. You can request information about these safeguards, or a copy of them, at info@n3ovision.com.
That the servers are in the EU is verified, not assumed: we measure which region the service responds from. Should the chain change, we will update this page.
5. How long we keep the data
| Data | Retention period |
|---|---|
| Enquiries that do not lead to a contract | 12 months after your most recent contact with us, then deleted |
| Demo and trial accounts that do not become customers | 12 months after the last login or contact |
| Customer data | For the term of the contract and 24 months thereafter, to handle questions and obligations |
| Accounting records (invoices, payments) | Until the end of the seventh year following the calendar year in which the financial year ended, under the Swedish Accounting Act (1999:1078), Chapter 7, Section 2 |
| Email correspondence | 24 months after the matter is closed |
| Technical logs at the hosting platform | A short period, at most 30 days, according to the provider’s retention for our plan. We do not use them for any purpose of our own |
If you ask us to delete data sooner we will do so, unless the law requires otherwise (accounting records must be retained).
6. Your rights
You have the right to:
- know what data we hold about you and receive a copy of it (Art. 15)
- have inaccurate data corrected (Art. 16)
- have data erased when we no longer have grounds to process it (Art. 17)
- request that processing be restricted while a question is being examined (Art. 18)
- receive data you have provided in a machine-readable format and have it transmitted to someone else, where the processing is based on contract or consent (Art. 20)
- object to processing based on legitimate interests — we will then stop unless we can demonstrate compelling legitimate grounds that override yours (Art. 21)
We do not currently process any data on the basis of consent. Should we do so in future — for a newsletter, for example — you always have the right to withdraw your consent, and this does not affect processing already carried out (Art. 7(3)).
Contact us at info@n3ovision.com and we will handle your request. You will receive a reply within one month of our receiving it (Art. 12(3)).
7. If you want to complain
If you believe we process your personal data in breach of the GDPR, you have the right to lodge a complaint with the supervisory authority:
The Swedish Authority for Privacy Protection (IMY)
Box 8114, 104 20 Stockholm, Sweden
You are welcome to contact us first — but you do not have to.
8. Cookies and storage in your browser
We use no cookies for statistics, analytics or marketing. There is no Google Analytics, no Meta pixel, no Google Tag Manager and no other tracking scripts on n3ovision.com.
The only thing we store in your browser is your language preference:
| What | Description |
|---|---|
| language (localStorage) | Remembers whether you chose Swedish or English. Stored until you clear your browser |
The language preference is only stored when you switch language yourself. It is a feature you have explicitly requested and therefore does not require consent under the Swedish Electronic Communications Act (2022:482), Chapter 9, Section 28. You can clear it through your browser's settings.
Our provider Cloudflare may set a strictly necessary security cookie (__cf_bm) to distinguish humans from automated traffic. It is not used to track you across websites.
9. Automated decision-making
We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).
10. Changes to this policy
If our processing changes or we change provider, we update this page and change the date at the top. We also notify affected customers of material changes.
11. Contact
Questions about this policy or about your data: info@n3ovision.com