Who is responsible?
Nordisk Drönarteknik AB is responsible for personal data submitted through this website. Current contact details are available on the contact page.
Information we process
We process your name, phone number, email address, address or location, postal code, preferred date and description. Depending on the service, this may include property, construction project or aerial photography details. Images are optional.
Technical information is used to protect the form. A pseudonymised identifier derived from an IP address limits submission attempts. The hosting provider may process operational and security logs.
Purpose and legal basis
We use this information to answer questions, assess feasibility, prepare a quote and take steps at your request before a contract. For business representatives, processing is based on our legitimate interest in handling the business enquiry. Preventing misuse is based on our legitimate interest in a secure service.
Acknowledging this policy is not consent to marketing. Form details are not used for automated marketing campaigns.
Images and data minimisation
Upload only relevant images. Avoid identity numbers, sensitive information and images of people. Images are checked, re-encoded and stored privately. Embedded image metadata is removed during re-encoding. No permanent public image links are created.
Recipients and service providers
The person responsible at the company can access the enquiry. Supabase provides database and private image storage, Resend provides email and Vercel hosts the website. We do not sell personal data.
Providers may process information outside the EU/EEA. Such transfers must be covered by applicable safeguards, such as adequacy decisions or standard contractual clauses. Contact us for current information about providers and safeguards.
Retention
Enquiries in the website system and their images are normally deleted after 12 months. Incomplete submissions and temporary original images are deleted after approximately 24 hours at the next maintenance run. Attempt counters apply for ten minutes and are deleted during maintenance.
Information required for a contract, legal obligation or legal claim may need to be retained separately for longer. Email enquiries are also covered by the company retention routine. Backups and operational logs follow provider agreements and retention policies.
Your rights
You may request access, rectification, erasure or restriction. You may object to processing based on legitimate interests and, in some circumstances, request data portability. Rights can be limited by other legal obligations.
Use the contact page to exercise your rights. We may need to verify your identity. You may lodge a complaint with the Swedish Authority for Privacy Protection, IMY.
Cookies, analytics and updates
The initial website does not use marketing cookies or visitor analytics. Information will be updated if tools are added, and consent will be obtained when required. Any additional spam-check service will be described before activation.
This policy is updated when our processing changes. Include your enquiry reference when contacting us and avoid sending sensitive personal data through the form.
Contact us about your data · Swedish Authority for Privacy Protection (IMY)