OJCO’s privacy policy

Applies to OJCO Secure IT
Company registration number: 556520-6199

About this translation: This English version is provided for convenience. If there is any difference in interpretation, the Swedish privacy policy is the authoritative version.

1. General information

This policy describes how OJCO Secure IT, company registration number 556520-6199, Kastellgatan 2, 254 66 Helsingborg, Sweden, email integritet@ojco.se (“OJCO”, “we”), collects, uses, discloses and stores personal data.

It applies when OJCO provides services and products, handles customer-service matters and other contacts, and when you visit the website. We process personal data in accordance with applicable data-protection law.

2. Data controller

OJCO Secure IT is the data controller for OJCO’s processing of personal data and is responsible for ensuring that processing complies with applicable law.

3. When and what data we process

We may process information when you visit our website, contact us, use support, attend an event, make a booking or purchase, or subscribe to communications. Depending on the relationship, this may include name, contact details, company, role, billing and payment information, order history, areas of interest, newsletter interactions, IP address, browser and device data, pages visited and links clicked.

Personal data may be stored in our CRM, invoicing, email and document-management systems.

4. Website and AI assistant

OJCO uses Vercel Pro to host and technically deliver the website. Technical information such as IP address, time, requested page, browser and device information may be processed to deliver and protect the site and prevent errors and misuse.

The website includes an optional AI assistant using the OpenAI API. When you use it, message content, the current session history, a temporary session identifier, current page and technical information are processed to answer questions, provide information about OJCO’s services and protect the feature from misuse.

The processing is based on OJCO’s legitimate interest in providing a functional and secure website and relevant information. OpenAI and Vercel process customer data on OJCO’s behalf under applicable data-processing agreements.

OJCO does not store chat conversations in its own permanent database, and API storage of generated answers is disabled. Limited technical processing and security logging may still occur at the providers. Data may be processed outside the EU/EEA, including in the United States, using applicable safeguards such as the European Commission’s standard contractual clauses or an adequacy decision.

Do not enter passwords, national identification numbers, sensitive personal data, trade secrets or information about active security incidents in the chat. AI-generated answers can be incorrect and do not replace professional assessment.

5. Why we process personal data

Purposes may include delivering contracts and support, administering customer relationships and accounts, invoicing and bookkeeping, communicating relevant information and offers, improving services and the website, analysing usage, preventing fraud and technical misuse, and meeting legal obligations.

6. Legal bases

Depending on the purpose, processing is based on performance of a contract, consent, legitimate interests or a legal obligation. You may withdraw consent at any time. Withdrawal does not affect processing already carried out lawfully.

7. Retention and recipients

We keep personal data only for as long as needed for the stated purpose or to meet legal requirements such as accounting rules. Data may be disclosed to group companies, service providers and partners where needed to deliver services, operate systems or comply with law. OJCO does not sell personal data.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction and data portability, and object to processing based on legitimate interests or for direct marketing. You may also withdraw consent and lodge a complaint with the relevant supervisory authority.

9. Contact

For questions about this policy, our processing or your rights, contact: