Privacy policy
How we handle your data
Last updated: 2026-09-08
This policy describes how VER&IT AB processes personal data when you visit sverigesmotstandskraft.se, sign up for mailings or take the self-assessment. We collect as little as possible and never sell your data.
Data controller
The data controller is VER&IT AB, company registration number 556985-1206, Nygatan 71, SE-462 32 Vänersborg, Sweden. For data protection matters you can reach us at info@verit.se.
What data we collect and when
When you sign up for mailings, either via the form on the start page or after the self-assessment, we store your first name and email address. Nothing more.
When you unlock the Toolbox you enter a first name and an email address. We send a link to confirm that the address is yours, and once you have clicked it we store your first name and email address to give you access to templates and tools and to send the occasional mailing when the tools and templates are updated or a new book is released. Nothing more.
When you take the self-assessment your answers are calculated directly in your browser. They are not sent anywhere and are not stored by us, as long as you only view the result. If you choose to receive a summary in your inbox, your answers are sent as one maturity level per requirement area, together with your first name and email address.
When you suggest a link for the Swedish link directory you send an address, the name of the page and a line about why it is worth following. None of that is information about you. You may also leave your email address, but it is optional and only needed if you want a reply. It is used for nothing else, and it is deleted as soon as we have decided on the suggestion, whether or not we added the link.
Visitor analytics. To understand how the site is used we collect anonymous, aggregated statistics with Matomo Analytics, cookie-free and with anonymised IP addresses. The tool runs on our own server within the EU, sets no cookies and truncates your IP address. We also record certain events, such as a guide being completed or a template being downloaded, but never who did it. The statistics do not identify you as an individual. If you have Do Not Track enabled in your browser, you are not measured at all.
Server logs. When you visit the site, the web server, hosted on infrastructure at Elastx in Stockholm, may temporarily log technical information such as IP address, time and browser type. This is needed for operations, troubleshooting and security.
Contact details for people in a professional or elected role
Beyond the data you provide yourself via the website, we process, to a limited extent, contact details for people who in their professional or elected role work with matters that our books and tools concern, for example senior officials and elected representatives in the public sector as well as decision-makers in essential services.
What data this covers. Name, position or role, organisation and work contact details for email and, where applicable, telephone. We process no data about private life and never collect private contact details on our own initiative.
Where the data comes from. The data is taken from public sources, primarily the organisations' own websites and registers of elected representatives, or is given to us by the organisation itself in response to a request.
Why we process it. The purpose is occasional informational mailings about books, tools and talks with a clear connection to the recipient's role and area of responsibility, and the administration of such mailings.
Legal basis. The processing is carried out on the basis of legitimate interest under Article 6(1)(f) of the General Data Protection Regulation. Our legitimate interest is to be able to inform people who are professionally responsible for information and cyber security matters about relevant professional literature and knowledge support. We have assessed that the processing has limited impact on the data subject, since it concerns work-related data, is done sparingly and always with a simple way to opt out.
How long the data is kept. The data is erased no later than twelve months after collection unless it has been updated from the same type of source before then. If you object to the processing it ceases immediately, and your address is instead added to a suppression list whose sole purpose is to prevent future mailings to you.
Your rights. You have the right to object at any time to processing for direct marketing, and it then ceases without exception. You also have the right to request access to, rectification of or erasure of your data, and to lodge a complaint with the Swedish Authority for Privacy Protection (IMY). The easiest way to object is to reply to a mailing or email us.
Data controller. VER&IT AB, company registration number 556985-1206, Nygatan 71, SE-462 32 Vänersborg, Sweden, info@verit.se.
Why we process the data and on what legal basis
We process your first name and email address to send the self-assessment, give you access to the Toolbox and send the occasional mailing about the book, about new books and when the tools and templates are updated. The legal basis is your consent, which you give when you sign up or unlock the Toolbox. Anonymous visitor analytics and server logs for operations and security are processed on the basis of our legitimate interest in running and protecting a working website.
How long we keep the data
We keep your first name and email address for as long as you want to receive mailings. If you unsubscribe we delete them. An email address left with a link suggestion is deleted once the suggestion has been decided. Server logs are kept for up to twelve months and are then purged. Anonymous statistics contain no personal data.
Who handles the data
We run the mailing list and its storage ourselves and use no external email service. The site is hosted on infrastructure at Elastx in Stockholm, which is ISO 27001 certified and keeps data within Sweden and the EEA. Mailings are handled by our own mail server within the EU and the EEA. The infrastructure providers are data processors for the hosting and only process data on our behalf and under contract. We do not disclose your data to anyone else, beyond what the law requires.
If you buy the book
The purchase is made at Publit Sweden AB, company registration number 556758-3595, who run the shop, take the payment and ship the book. Publit is the data controller for the details you give at checkout and processes them under their own privacy policy. VER&IT AB never receives your name, your address or your payment details, only an aggregated statement of the number of copies sold. What applies to the purchase is set out in the terms of purchase.
Cookies and storage in your browser
The site uses no cookies for marketing or tracking. The visitor analytics are cookie-free, which is why there is no cookie consent banner.
The site does however store a few things locally in your browser, in what is called localStorage. None of it is sent to us and none of it identifies you. You can clear it at any time by clearing site data for sverigesmotstandskraft.se in your browser.
| What | Why | How long |
|---|---|---|
| Your language choice | So the language banner does not return once you have chosen | Until you clear it |
| Your ticks in a guide | So you can pause and continue where you left off | Until you clear it, or until the guide changes substantially |
| The toolbox key | So you do not have to request a new link on every visit | 30 days |
The ticks in a guide never leave your browser. They therefore do not follow you to your phone or another computer, and we cannot see them.
The exception is the purchase page. There the Publit shop is shown in a frame from webshop.publit.com, and it sets the cookies the basket needs in order to work. They are set only when you visit the purchase page, they do not follow you to any other page on the site, and they are used neither for marketing nor for analytics.
Transfers to third countries
All processing takes place within the EU and the EEA. We do not transfer your personal data to countries outside the EU or the EEA.
Automated decision-making
We use no automated decision-making and no profiling. The self-assessment result is calculated in your own browser and is a simplified snapshot, not an assessment of you as a person.
Security
We protect your data with technical and organisational measures, and limit access to those who need it to handle the mailings.
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- know what data we hold about you (access),
- have inaccurate data corrected,
- have your data erased,
- request that processing be restricted,
- object to processing based on legitimate interest,
- receive your data in a machine-readable format (data portability),
- withdraw your consent at any time, without affecting the processing that took place before you withdrew it.
To exercise a right, contact us at info@verit.se. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY), the supervisory authority, via imy.se.
Unsubscribing
Every mailing contains an unsubscribe link. Unsubscribing is simple and requires no explanation. You can also email us and we will remove you.
Changes to this policy
We may update this policy, for example when we choose an email service or add analytics. The latest version is always available on this page, with the date at the top.