Privacy policy
How we collect, use, and protect your personal data
Last updated: March 2025
1. Introduction
Södermalm Bilservice AB ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share information about you when you visit our website or use our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish law.
2. Data controller
The data controller responsible for your personal data is: Södermalm Bilservice AB Siargatan 9, 118 27 Stockholm, Sweden Email: info@sodermalmbilservice.se Phone: 08 - 640 55 30 If you have questions about how we handle your personal data, please contact us at the address above.
3. What personal data we collect
We may collect and process the following categories of personal data: Contact information: name, email address, phone number, and postal address when you submit a contact or booking form, send us an email, or call us. Vehicle information: registration number, make, model, year, and service history when you book or use our workshop services. Communication records: emails, messages, and notes from telephone conversations related to your service request. Technical data: IP address, browser type, pages visited, and time spent on our website, collected via cookies and similar technologies (see Section 6). Payment information: invoicing details processed securely through our payment providers. We do not store full card numbers.
4. Legal basis for processing
We process your personal data on the following legal bases under GDPR Article 6: Contract performance (Art. 6(1)(b)): to fulfil a service agreement with you, such as booking and carrying out vehicle repairs or maintenance. Legitimate interests (Art. 6(1)(f)): to manage customer relationships, send service reminders, prevent fraud, and improve our website and services. Legal obligation (Art. 6(1)(c)): to comply with accounting, tax, and consumer protection requirements under Swedish law. Consent (Art. 6(1)(a)): for non-essential cookies and direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
5. How we use your data
We use your personal data to: • Book and carry out vehicle service, repair, and inspection work • Issue invoices and process payments • Send booking confirmations, service reminders, and follow-up communications • Respond to your enquiries and provide customer support • Comply with legal obligations (e.g. accounting records, warranty claims) • Improve our website functionality and user experience through anonymised analytics • Send marketing communications where you have given consent We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
6. Cookies and tracking technologies
Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help us provide and improve our services. Necessary cookies: required for the website to function correctly (e.g. session management, security). These cannot be disabled. Analytics cookies: help us understand how visitors use the site (e.g. Google Analytics). Data is anonymised where possible. Marketing cookies: used to display relevant advertisements and track campaign effectiveness. These are only placed with your explicit consent. You can manage your cookie preferences at any time via the cookie settings panel on our website, or by adjusting your browser settings. Withdrawing consent for non-essential cookies does not affect the functionality of core site features.
7. Data retention
We retain your personal data only as long as necessary for the purposes for which it was collected: Customer and service records: up to 7 years from the date of the last service, to comply with Swedish accounting law (Bokföringslagen). Marketing communications: until you withdraw consent or unsubscribe. Website analytics: aggregated data is retained for up to 26 months. Cookie consent records: up to 1 year from the date of consent. After these periods, data is securely deleted or anonymised.
8. Sharing your data
We do not sell or rent your personal data to third parties. We may share data with trusted service providers who process data on our behalf under written data processing agreements, including: • IT service providers and cloud hosting • Accounting and invoicing software • Workshop management systems • Analytics providers (e.g. Google Analytics - data may be transferred outside the EEA under Standard Contractual Clauses) We may also disclose data where required by law or to protect our legal rights.
9. Your rights under GDPR
As a data subject in the EU/EEA, you have the following rights: Right of access (Art. 15): request a copy of the personal data we hold about you. Right to rectification (Art. 16): request correction of inaccurate or incomplete data. Right to erasure (Art. 17): request deletion of your data in certain circumstances ("right to be forgotten"). Right to restriction (Art. 18): request that we restrict processing in certain circumstances. Right to data portability (Art. 20): receive your data in a structured, commonly used format. Right to object (Art. 21): object to processing based on legitimate interests or for direct marketing. Right to withdraw consent: where processing is based on consent, withdraw it at any time. To exercise your rights, contact us at info@sodermalmbilservice.se. We will respond within 30 days. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.
10. Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include access controls, encrypted connections (HTTPS), and regular security reviews. While we take all reasonable precautions, no method of transmission over the internet is completely secure.
11. Links to external websites
Our website may contain links to third-party websites (e.g. Bosch Car Service, social media platforms). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal data.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically. For significant changes, we will notify you by email where we hold your contact details.
Questions about this policy? Contact us at info@sodermalmbilservice.se or visit our contact page.