Privacy Policy

Raekta respects your privacy. This Privacy Policy explains how we process personal data when you visit our website, submit information through our website forms, or otherwise communicate with us.

1. Who We Are

1.1 Raekta AB is the data controller for the processing of personal data described in this Privacy Policy.

1.2 This Privacy Policy applies to visitors to the Raekta corporate website and to individuals who contact or otherwise communicate with Raekta.

1.3 This Privacy Policy applies to the Raekta corporate website. It does not govern the processing of data within Raekta products or customer deployments, which may be subject to separate agreements and privacy documentation.

Contact: info@raekta.com

Registered office: Luleå, Sweden

2. Personal Data We Process

We may process the following categories of personal data:

2.1 Form submissions and communications

When you contact us through our website form, by email, or through another communication channel, we may process information such as:

• your name;

• email address;

• company or organization;

• job title or role;

• the content of your message; and

• any other information you choose to provide.

2.2 Business relationship information

If you communicate with us regarding a potential or existing business relationship, partnership, customer engagement or other professional matter, we may process information relating to that relationship, including your role, organization and relevant correspondence.

2.3 Technical and security information

Limited technical information may be processed by our website, hosting and infrastructure providers as necessary to deliver, operate and protect the website. Depending on the circumstances, this may include information such as IP addresses, browser or device information, and request, diagnostic or security logs.

3. Why We Process Personal Data

We process personal data for the following purposes:

3.1 Responding to inquiries

To receive, assess and respond to inquiries submitted through our website form, email or other communication channels.

3.2 Business relationships

To evaluate, establish and manage potential or existing customer relationships, partnerships and other professional relationships.

3.3 Operating and protecting our website

To operate, maintain, secure and troubleshoot our website and related systems.

3.4 Legal and regulatory purposes

To comply with applicable legal obligations and, where necessary, to establish, exercise or defend legal claims.

4. Legal Bases for Processing

Depending on the circumstances, we rely on one or more of the following legal bases under applicable data protection law:

4.1 Legitimate interests

We may process personal data where necessary for our legitimate interests in operating our business, communicating with professional contacts, responding to inquiries, developing business relationships and maintaining the security of our website and systems.

Where we rely on legitimate interests, we consider those interests against the rights and interests of the individuals concerned.

4.2 Steps prior to entering into a contract

Where you contact us in relation to a potential agreement, we may process personal data where necessary to take steps at your request before entering into a contract.

4.3 Legal obligations

We may process personal data where necessary to comply with an obligation under applicable law.

4.4 Consent

Where we specifically ask for consent for a particular processing activity, you may withdraw that consent at any time.

5. Website Forms

5.1 Our website is built and hosted using Framer. We use Framer's native form functionality to receive inquiries submitted through the website.

5.2 Information submitted through a website form is processed by Framer on our behalf in order to transmit and handle the submission. Under Framer's current Data Processing Addendum, Framer acts as processor and its customer acts as controller in relation to such processing.

5.3 Information submitted through a form is used only for the purposes described in this Privacy Policy, such as responding to your inquiry and evaluating a potential business relationship.

5.4 You should not submit sensitive personal data or other confidential information through the website form unless it is necessary for your inquiry.

6. Analytics and Cookies

6.1 We use Framer Analytics to understand aggregate traffic and use of our website.

6.2 Framer states that its built-in analytics does not use cookies or generate persistent identifiers and that the analytics data made available to website owners is anonymized and cannot be traced back to an individual.

6.3 We currently do not use non-essential cookies for advertising, cross-site tracking or similar purposes.

6.4 If we introduce technologies in the future that require consent under applicable law, we will provide appropriate information and obtain consent before such technologies are used where required.

7. Sharing of Personal Data

7.1 We do not sell personal data.

7.2 We may share or make personal data available to service providers that help us operate our website and business, including providers of website hosting, forms, email, IT and infrastructure services.

7.3 These service providers may process personal data only as necessary to provide their services to us and subject to applicable contractual and legal safeguards.

7.4 We may also disclose personal data where required by applicable law, regulation, court order or other binding legal process, or where necessary to establish, exercise or defend legal claims.

8. International Transfers

Some of our service providers or their subprocessors may process personal data outside the European Union or European Economic Area.

Where personal data is transferred to a country that does not benefit from an applicable adequacy decision, we use or rely on appropriate safeguards as required by applicable data protection law, such as the European Commission's Standard Contractual Clauses or another legally recognized transfer mechanism.

Framer's current Data Processing Addendum provides for applicable cross-border transfer mechanisms, including Standard Contractual Clauses where required.

9. Data Retention

9.1 We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

9.2 General inquiries and related correspondence that do not develop into an ongoing business relationship will normally be retained for no longer than 24 months after the last meaningful interaction, unless there is a reason to delete the information earlier or retain it for longer.

9.3 Where an inquiry develops into a customer, partner or other business relationship, relevant information may be retained for the duration of that relationship and afterwards for as long as reasonably necessary to meet contractual, legal, accounting or other legitimate business requirements.

9.4 We may retain information for a longer period where necessary to comply with applicable law or to establish, exercise or defend legal claims.

10. Security

10.1 We take appropriate technical and organizational measures designed to protect personal data against unauthorized or unlawful access, alteration, disclosure, loss or misuse.

10.2 While we take reasonable measures to protect personal data, no method of electronic transmission or storage can be guaranteed to be completely secure.

11. Your Rights

Under the GDPR and other applicable data protection law, you may have the right to:

• request access to personal data we process about you;

• request correction of inaccurate or incomplete personal data;

• request deletion of your personal data;

• request restriction of processing;

• object to processing based on legitimate interests;

• receive certain personal data in a portable format where the right to data portability applies; and

• withdraw consent at any time where processing is based on consent.

These rights are subject to the conditions and limitations set out in applicable law. IMY confirms these as among the rights available to individuals under the GDPR.

To exercise any of these rights, contact us at info@raekta.com.

12. Complaints

If you have concerns about how we process your personal data, we encourage you to contact us first so that we can address your concerns.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In Sweden, the supervisory authority is:

Integritetsskyddsmyndigheten (IMY) — Swedish Authority for Privacy Protection

13. Automated Decision-Making

We do not use personal data collected through this website to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, our operations, service providers or applicable legal requirements.

The current version will be published on this page.

Last updated: 14 September 2026