Free Audit Call

Updated on March 4, 2026

Updated on March 4, 2026

Privacy policy

Welcome to Wira Group AB ("Wira Group," "we," "us," or "our"). We are committed to protecting your personal data and respecting your privacy rights.

Welcome to Wira Group AB ("Wira Group," "we," "us," or "our"). We are committed to protecting your personal data and respecting your privacy rights.

  1. Introduction

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website [www.wiragroup.se] or use our services.


Data Controller:
Wira Group AB
Org. nr: 559493-9281
Torshamnsgatan 27
164 40 Kista, Sweden
Email: info@wiragroup.se

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website [www.wiragroup.se] or use our services.


Data Controller:
Wira Group AB
Org. nr: 559493-9281
Torshamnsgatan 27
164 40 Kista, Sweden
Email: info@wiragroup.se

  1. What personal data we collect

We collect and process the following types of personal data:


2.1 Information You Provide Directly

When you contact us, request a consultation, or use our services, we may collect:

  • Contact information: Name, email address, phone number, company name, job title

  • Communication data: Content of messages, inquiries, feedback, and consultation requests

  • Business information: Company size, industry, technology needs, project requirements

  • Contract data: Service agreements, invoices, payment information (if you become a client)


2.2 Information Collected Automatically

When you visit our website, we automatically collect:

  • Technical data: IP address, browser type and version, device type, operating system

  • Usage data: Pages visited, time spent on pages, links clicked, referring website

  • Cookie data: See Section 8 for detailed cookie information


2.3 Information from Third Parties

We may receive information about you from:

  • Business partners: If you were referred to us by a partner or consultant

  • Public sources: Publicly available business information (company websites, LinkedIn, business registries)

We collect and process the following types of personal data:


2.1 Information You Provide Directly

When you contact us, request a consultation, or use our services, we may collect:

  • Contact information: Name, email address, phone number, company name, job title

  • Communication data: Content of messages, inquiries, feedback, and consultation requests

  • Business information: Company size, industry, technology needs, project requirements

  • Contract data: Service agreements, invoices, payment information (if you become a client)


2.2 Information Collected Automatically

When you visit our website, we automatically collect:

  • Technical data: IP address, browser type and version, device type, operating system

  • Usage data: Pages visited, time spent on pages, links clicked, referring website

  • Cookie data: See Section 8 for detailed cookie information


2.3 Information from Third Parties

We may receive information about you from:

  • Business partners: If you were referred to us by a partner or consultant

  • Public sources: Publicly available business information (company websites, LinkedIn, business registries)

  1. Legal basis for processing

We process your personal data based on the following legal grounds under GDPR Article 6:


3.1 Consent (Article 6(1)(a))

  • When you submit contact forms or consultation requests

  • When you subscribe to our newsletter or marketing communications

  • When you accept cookies (non-essential cookies)


You can withdraw consent at any time by contacting us or clicking "unsubscribe" in marketing emails.


3.2 Contract Performance (Article 6(1)(b))

  • To deliver services you've purchased (web design, marketing, automation, telecom, cybersecurity)

  • To communicate about active projects

  • To process payments and billing


3.3 Legitimate Interest (Article 6(1)(f))

  • To improve our website and user experience

  • To analyze website traffic and optimize content

  • To prevent fraud and ensure website security

  • To respond to inquiries and provide customer support

  • To send relevant business information to existing clients


3.4 Legal Obligation (Article 6(1)(c))

  • To comply with Swedish accounting laws (7-year retention of invoices)

  • To comply with tax regulations

  • To respond to legal requests from authorities

We process your personal data based on the following legal grounds under GDPR Article 6:


3.1 Consent (Article 6(1)(a))

  • When you submit contact forms or consultation requests

  • When you subscribe to our newsletter or marketing communications

  • When you accept cookies (non-essential cookies)


You can withdraw consent at any time by contacting us or clicking "unsubscribe" in marketing emails.


3.2 Contract Performance (Article 6(1)(b))

  • To deliver services you've purchased (web design, marketing, automation, telecom, cybersecurity)

  • To communicate about active projects

  • To process payments and billing


3.3 Legitimate Interest (Article 6(1)(f))

  • To improve our website and user experience

  • To analyze website traffic and optimize content

  • To prevent fraud and ensure website security

  • To respond to inquiries and provide customer support

  • To send relevant business information to existing clients


3.4 Legal Obligation (Article 6(1)(c))

  • To comply with Swedish accounting laws (7-year retention of invoices)

  • To comply with tax regulations

  • To respond to legal requests from authorities

  1. How we use your personal data

We use your personal data for the following purposes:


4.1 Service Delivery

  • Provide web design, digital marketing, AI automation, telecommunications, and cybersecurity services

  • Manage projects and deliver contracted work

  • Communicate about project status and updates

  • Provide customer support and technical assistance


4.2 Business Operations

  • Process inquiries and consultation requests

  • Send quotes, proposals, and contracts

  • Process payments and manage invoicing

  • Maintain client relationships


4.3 Website Improvement

  • Analyze how visitors use our website

  • Improve website functionality and user experience

  • Fix technical issues and optimize performance


4.4 Marketing (with consent)

  • Send newsletters about our services

  • Share relevant industry insights and tips

  • Inform you about new services or offers


4.5 Legal & Security

  • Comply with legal obligations

  • Prevent fraud and security threats

  • Enforce our terms of service

We use your personal data for the following purposes:


4.1 Service Delivery

  • Provide web design, digital marketing, AI automation, telecommunications, and cybersecurity services

  • Manage projects and deliver contracted work

  • Communicate about project status and updates

  • Provide customer support and technical assistance


4.2 Business Operations

  • Process inquiries and consultation requests

  • Send quotes, proposals, and contracts

  • Process payments and manage invoicing

  • Maintain client relationships


4.3 Website Improvement

  • Analyze how visitors use our website

  • Improve website functionality and user experience

  • Fix technical issues and optimize performance


4.4 Marketing (with consent)

  • Send newsletters about our services

  • Share relevant industry insights and tips

  • Inform you about new services or offers


4.5 Legal & Security

  • Comply with legal obligations

  • Prevent fraud and security threats

  • Enforce our terms of service

  1. Who we share your data with

We do not sell, rent, or trade your personal data. We only share data with trusted third parties necessary for our operations.

We do not sell, rent, or trade your personal data. We only share data with trusted third parties necessary for our operations.

  1. International data transfers

Some of our service providers are located outside the European Economic Area (EEA), primarily in the United States.


When we transfer your data outside the EEA, we ensure adequate protection through:


  • Standard Contractual Clauses (SCCs): EU-approved contracts that require non-EU companies to protect your data

  • Adequacy decisions: Transferring only to countries deemed adequate by the EU Commission

  • Your explicit consent: When required for specific services

Some of our service providers are located outside the European Economic Area (EEA), primarily in the United States.


When we transfer your data outside the EEA, we ensure adequate protection through:


  • Standard Contractual Clauses (SCCs): EU-approved contracts that require non-EU companies to protect your data

  • Adequacy decisions: Transferring only to countries deemed adequate by the EU Commission

  • Your explicit consent: When required for specific services

  1. Changes to this policy

We may update this policy to reflect changes in our services or the law. We will notify you of significant changes.

We may update this policy to reflect changes in our services or the law. We will notify you of significant changes.

8. Cookies and tracking technologies

Our website uses cookies and similar technologies.


8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience.


8.2 Types of Cookies We Use

Essential Cookies

  • Required for website functionality

  • Session management

  • Security features

  • Legal basis: Legitimate interest (Article 6(1)(f))

Our website uses cookies and similar technologies.


8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience.


8.2 Types of Cookies We Use

Essential Cookies

  • Required for website functionality

  • Session management

  • Security features

  • Legal basis: Legitimate interest (Article 6(1)(f))

9. Your rights under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:


9.1 Right to Access (Article 15)

Request a copy of the personal data we hold about you.


9.2 Right to Rectification (Article 16)

Request correction of inaccurate or incomplete data.


9.3 Right to Erasure / "Right to be Forgotten" (Article 17)


Request deletion of your personal data when:

  • It's no longer necessary for the original purpose

  • You withdraw consent (where consent was the legal basis)

  • You object to processing (see below)

  • Data was processed unlawfully


Exceptions: We may refuse deletion if we have legal obligations to retain data (e.g., 7-year accounting requirement).


9.4 Right to Restriction of Processing (Article 18)

Request that we limit how we use your data when:

  • You contest the accuracy of data

  • Processing is unlawful but you don't want deletion

  • We no longer need the data, but you need it for legal claims


9.5 Right to Data Portability (Article 20)

Receive your data in a structured, commonly used format and transfer it to another controller.


9.6 Right to Object (Article 21)


Object to processing based on legitimate interest (e.g., marketing).


Direct marketing: You can object at any time by clicking "unsubscribe" or contacting us.


9.7 Right to Withdraw Consent (Article 7(3))

Where processing is based on consent, you can withdraw it at any time.


9.8 Right Not to Be Subject to Automated Decision-Making (Article 22)

We do not use automated decision-making or profiling that produces legal effects.


9.9 How to Exercise Your Rights


Contact us at:


We will respond within 30 days. If the request is complex, we may extend by 60 days and inform you.

Under the General Data Protection Regulation (GDPR), you have the following rights:


9.1 Right to Access (Article 15)

Request a copy of the personal data we hold about you.


9.2 Right to Rectification (Article 16)

Request correction of inaccurate or incomplete data.


9.3 Right to Erasure / "Right to be Forgotten" (Article 17)


Request deletion of your personal data when:

  • It's no longer necessary for the original purpose

  • You withdraw consent (where consent was the legal basis)

  • You object to processing (see below)

  • Data was processed unlawfully


Exceptions: We may refuse deletion if we have legal obligations to retain data (e.g., 7-year accounting requirement).


9.4 Right to Restriction of Processing (Article 18)

Request that we limit how we use your data when:

  • You contest the accuracy of data

  • Processing is unlawful but you don't want deletion

  • We no longer need the data, but you need it for legal claims


9.5 Right to Data Portability (Article 20)

Receive your data in a structured, commonly used format and transfer it to another controller.


9.6 Right to Object (Article 21)


Object to processing based on legitimate interest (e.g., marketing).


Direct marketing: You can object at any time by clicking "unsubscribe" or contacting us.


9.7 Right to Withdraw Consent (Article 7(3))

Where processing is based on consent, you can withdraw it at any time.


9.8 Right Not to Be Subject to Automated Decision-Making (Article 22)

We do not use automated decision-making or profiling that produces legal effects.


9.9 How to Exercise Your Rights


Contact us at:


We will respond within 30 days. If the request is complex, we may extend by 60 days and inform you.

10. Right to lodge a complaint

If you believe we are not processing your data lawfully, you have the right to lodge a complaint with the supervisory authority:


Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten - IMY)
Website: www.imy.se
Email: imy@imy.se
Phone: +46 8 657 61 00
Address: Box 8114, 104 20 Stockholm, Sweden

You can also contact your local data protection authority in any EU member state.

If you believe we are not processing your data lawfully, you have the right to lodge a complaint with the supervisory authority:


Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten - IMY)
Website: www.imy.se
Email: imy@imy.se
Phone: +46 8 657 61 00
Address: Box 8114, 104 20 Stockholm, Sweden

You can also contact your local data protection authority in any EU member state.

11. Data security

We implement appropriate technical and organizational measures to protect your personal data:


11.1 Security Measures

  • Encryption: Data transmitted via HTTPS (SSL/TLS)

  • Access controls: Limited access to personal data (need-to-know basis)

  • Secure hosting: Industry-standard cloud hosting with security certifications

  • Regular backups: Secure, encrypted backups

  • Security monitoring: Regular security audits and updates


11.2 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify the Swedish Data Protection Authority (IMY) within 72 hours

  • Notify affected individuals without undue delay

  • Take immediate steps to mitigate harm

We implement appropriate technical and organizational measures to protect your personal data:


11.1 Security Measures

  • Encryption: Data transmitted via HTTPS (SSL/TLS)

  • Access controls: Limited access to personal data (need-to-know basis)

  • Secure hosting: Industry-standard cloud hosting with security certifications

  • Regular backups: Secure, encrypted backups

  • Security monitoring: Regular security audits and updates


11.2 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify the Swedish Data Protection Authority (IMY) within 72 hours

  • Notify affected individuals without undue delay

  • Take immediate steps to mitigate harm

12. Children's privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children.

If we become aware that we have collected data from a child without parental consent, we will delete it immediately.

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children.

If we become aware that we have collected data from a child without parental consent, we will delete it immediately.

  1. Changes to this privacy/policy

We may update this Privacy Policy from time to time to reflect:

  • Changes in our practices

  • Legal or regulatory requirements

  • New services or features


When we make changes:

  • We will update the "Last updated" date at the top

  • For material changes, we will notify you via email (if we have your email) or a prominent notice on our website

  • Continued use of our website after changes constitutes acceptance


We recommend reviewing this policy periodically.

We may update this Privacy Policy from time to time to reflect:

  • Changes in our practices

  • Legal or regulatory requirements

  • New services or features


When we make changes:

  • We will update the "Last updated" date at the top

  • For material changes, we will notify you via email (if we have your email) or a prominent notice on our website

  • Continued use of our website after changes constitutes acceptance


We recommend reviewing this policy periodically.

  1. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:


Data Controller:
Wira Group AB
Torshamnsgatan 27
164 40 Kista, Sweden

Email: info@wiragroup.se
Website: www.wiragroup.se

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:


Data Controller:
Wira Group AB
Torshamnsgatan 27
164 40 Kista, Sweden

Email: info@wiragroup.se
Website: www.wiragroup.se

  1. Definitions

  • GDPR: General Data Protection Regulation (EU) 2016/679

  • Personal Data: Any information relating to an identified or identifiable natural person

  • Data Controller: The entity that determines the purposes and means of processing personal data (Wira Group AB)

  • Data Processor: An entity that processes personal data on behalf of the controller (our service providers)

  • Processing: Any operation performed on personal data (collection, storage, use, disclosure, deletion)

  • EEA: European Economic Area (EU member states + Iceland, Liechtenstein, Norway)

  • GDPR: General Data Protection Regulation (EU) 2016/679

  • Personal Data: Any information relating to an identified or identifiable natural person

  • Data Controller: The entity that determines the purposes and means of processing personal data (Wira Group AB)

  • Data Processor: An entity that processes personal data on behalf of the controller (our service providers)

  • Processing: Any operation performed on personal data (collection, storage, use, disclosure, deletion)

  • EEA: European Economic Area (EU member states + Iceland, Liechtenstein, Norway)

This Privacy Policy complies with:

  • GDPR (Regulation EU 2016/679)

  • Swedish Data Protection Act (2018:218)

  • Electronic Communications Act (2022:482)

  • ePrivacy Directive (2002/58/EC)

This Privacy Policy complies with:

  • GDPR (Regulation EU 2016/679)

  • Swedish Data Protection Act (2018:218)

  • Electronic Communications Act (2022:482)

  • ePrivacy Directive (2002/58/EC)

Ready to simplify your tech?

Stop managing five different vendors. Get everything from one expert partner.

Book a free consultation and see how we can consolidate your tech stack.

Book Free Consultation

Ready to simplify your tech?

Stop managing five different vendors. Get everything from one expert partner.

Book a free consultation and see how we can consolidate your tech stack.

Book Free Consultation

Ready to simplify your tech?

Stop managing five different vendors. Get everything from one expert partner.

Book a free consultation and see how we can consolidate your tech stack.

Book Free Consultation