Privacy policy
How we handle your data
Last updated: 2026-05-31
This policy describes how VER&IT AB processes personal data when you visit sverigesmotstandskraft.se, sign up for mailings or take the self-assessment. We collect as little as possible and never sell your data.
Data controller
The data controller is VER&IT AB, company registration number 556985-1206, Nygatan 71, SE-462 32 Vänersborg, Sweden. For data protection matters you can reach us at info@verit.se.
What data we collect and when
When you sign up for mailings, either via the form on the start page or after the self-assessment, we store your first name and email address. Nothing more.
When you unlock the Toolbox you enter a first name and an email address. We send a link to confirm that the address is yours, and once you have clicked it we store your first name and email address to give you access to templates and tools and to send the occasional mailing when the tools and templates are updated or a new book is released. Nothing more.
When you take the self-assessment your answers are calculated directly in your browser. They are not sent anywhere and are not stored by us, as long as you only view the result. If you choose to receive a summary in your inbox, your answers are sent as one maturity level per requirement area, together with your first name and email address.
Visitor analytics. To understand how the site is used we collect anonymous, aggregated statistics with Matomo Analytics, cookie-free and with anonymised IP addresses. The statistics do not identify you as an individual.
Server logs. When you visit the site, the web server, hosted on infrastructure at Elastx in Stockholm, may temporarily log technical information such as IP address, time and browser type. This is needed for operations, troubleshooting and security.
Why we process the data and on what legal basis
We process your first name and email address to send the self-assessment, give you access to the Toolbox and send the occasional mailing about the book, about new books and when the tools and templates are updated. The legal basis is your consent, which you give when you sign up or unlock the Toolbox. Anonymous visitor analytics and server logs for operations and security are processed on the basis of our legitimate interest in running and protecting a working website.
How long we keep the data
We keep your first name and email address for as long as you want to receive mailings. If you unsubscribe we delete them. Server logs are kept for up to twelve months and are then purged. Anonymous statistics contain no personal data.
Who handles the data
We run the mailing list and its storage ourselves and use no external email service. The site is hosted on infrastructure at Elastx in Stockholm, which is ISO 27001 certified and keeps data within Sweden and the EEA. Mailings are handled by our own mail server within the EU and the EEA. The infrastructure providers are data processors for the hosting and only process data on our behalf and under contract. We do not disclose your data to anyone else, beyond what the law requires.
Cookies
The site uses no cookies for marketing or tracking. The visitor analytics are cookie-free, which is why there is no cookie consent banner.
Transfers to third countries
All processing takes place within the EU and the EEA. We do not transfer your personal data to countries outside the EU or the EEA.
Automated decision-making
We use no automated decision-making and no profiling. The self-assessment result is calculated in your own browser and is a simplified snapshot, not an assessment of you as a person.
Security
We protect your data with technical and organisational measures, and limit access to those who need it to handle the mailings.
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- know what data we hold about you (access),
- have inaccurate data corrected,
- have your data erased,
- request that processing be restricted,
- object to processing based on legitimate interest,
- receive your data in a machine-readable format (data portability),
- withdraw your consent at any time, without affecting the processing that took place before you withdrew it.
To exercise a right, contact us at info@verit.se. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY), the supervisory authority, via imy.se.
Unsubscribing
Every mailing contains an unsubscribe link. Unsubscribing is simple and requires no explanation. You can also email us and we will remove you.
Changes to this policy
We may update this policy, for example when we choose an email service or add analytics. The latest version is always available on this page, with the date at the top.