Privacy notice

How BOCC Sverige AB handles personal data on reddibo.com and in the Reddibo service.

1 · Who we are

BOCC Sverige AB is responsible for the personal data described in this notice. Reddibo is the service we provide.

BOCC Sverige AB, organisation number 556482-5130
Rådmansgatan 19, 114 25 Stockholm
lena@reddibo.se

Two different roles. For this website and for enquiries you send us, we are the controller — we decide what is collected and why. For the personal data an organization records inside the Reddibo service, the organization is the controller and we are the processor: we handle that data on the organization's instructions, under a data processing agreement, and we do not use it for our own purposes. This website includes a link to log in to the Reddibo service. Once you log in, your use of the service is covered by the data processing agreement between your organization and BOCC Sverige AB, not by this website's privacy notice.

2 · What the website collects

This website is hosted by Squarespace, which automatically collects standard technical information when you visit — such as your browser, device, and IP address — in order to operate and secure the site. This may include loading fonts or other standard website resources through Squarespace's platform. See Squarespace's own privacy policy for details of how they process this data.

We use only cookies that are necessary for the website to function, such as remembering your language choice. We do not use cookies for analytics, advertising, or marketing.

The site is available in multiple languages through Weglot, which processes your page requests to provide the translation.

3 · When you contact us

The contact form, and email.

If you submit the contact form, we collect your full name, your email address and anything you write in the free-text field. If you email us directly, we receive whatever you choose to include.

We use this to answer your enquiry, to arrange a demonstration, and to follow up on it. We provide the information to Squarespace, our website host, so that they can operate the form on our behalf.

We keep enquiries for 24 months from your last contact with us, after which they are deleted. If your enquiry leads to a customer relationship, we retain your data for as long as needed for that relationship and as required by law — see Section 1 for how data is handled once you're a Reddibo customer.

4 · Why we may process your data

The legal grounds.

Legitimate interests — to run and secure the website, and to respond to enquiries about our services.
Consent — for any marketing email you have asked to receive. You may withdraw consent at any time.
Contract — where we process data in order to enter into or perform an agreement with you or your organization.
Legal obligation — where we are required to keep records, for example under accounting law.

5 · Who else processes the data

Our suppliers, and where they are.

Squarespace — website hosting and the contact form. Squarespace is based in the United States.
Weglot — translation of the website into other languages. Weglot is based in France (EU).
Microsoft Azure — hosting of the Reddibo service and customer data, in [ Azure region ].
[ Email provider ] — handling of email correspondence.

Transfers outside the EU/EEA. Squarespace, based in the United States, relies on the European Commission's standard contractual clauses to transfer personal data from the EU/EEA. No other current supplier processes data outside the EU/EEA.

We do not sell personal data, and we do not share it with third parties for their own marketing.

6 · Your rights

What you can ask us to do.

Under the GDPR you have the right to:

access your personal data and be told how it is processed
have inaccurate data corrected
have data erased in certain circumstances
have processing restricted
receive your data in a structured, commonly used and machine-readable format
object to processing for certain purposes
withdraw consent at any time, where processing is based on consent

To exercise any of these, write to lena@reddibo.se. We will respond within one month.

If you are an employee of an organization using Reddibo, please contact your organization first. The organization is the controller for that data, and we act on its instructions.

7 · Security

How the data is protected.

We have taken technical and organisational measures to protect personal data against unauthorised access, loss and destruction. These include strong passwords and authentication, regular security reviews and risk assessments, and access to personal data limited according to authorisation.

If a personal data breach occurs, we will report it to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) without undue delay and, where required, within 72 hours, and inform those affected where the law requires it.

8 · Complaints

If you are not satisfied.

You are welcome to contact us first, at lena@reddibo.se. You also have the right to lodge a complaint with the supervisory authority: Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, imy@imy.se.

9 · Changes

We may update this notice. The current version is always published here, with the date it was last changed.

Last updated: October 1, 2026.