PRIVACY POLICY

Welcome to NAK Agency. We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Swedish data protection laws.

​

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website.

Depending on how you use our website, we may collect the following information:

​

Information you provide directly

​

• Name

• Email address

• Telephone number

• Company name

• Billing information (if applicable)

• Any information you submit through contact forms

​

Information collected automatically

​

When you visit our website, we may automatically collect:

​

• IP address

• Browser type and version

• Device information

• Operating system

• Pages visited

• Date and time of your visit

• Referring website

• Cookies and similar technologies

We process your personal data for the following purposes:

​

• To provide and maintain our website

• To respond to inquiries

• To provide requested services

• To process purchases (if applicable)

• To improve our website and services

• To comply with legal obligations

• To protect against fraud and misuse

• To send newsletters or marketing communications (only with your consent where required)

​

Under the GDPR, we process your personal data based on one or more of the following legal grounds:

​

• Your consent

• Performance of a contract

• Compliance with legal obligations

• Legitimate interests

• Protection of vital interests (where applicable)

Our website uses cookies to improve user experience and website functionality.

​

Cookies may be used for:

​

• Essential website functionality

• Analytics

• Performance measurement

• Marketing (only where consent has been obtained)

​

You can manage or withdraw your cookie consent at any time through our cookie settings.

We do not sell your personal data.

​

We may share your data with trusted third parties, including:

​

• Website hosting providers

• Cloud service providers

• Payment processors

• Email service providers

• Analytics providers

• IT support providers

• Public authorities where required by law

​

All third-party processors are required to process your data securely and in accordance with GDPR.

We retain your personal data only for as long as necessary to:

​

• Fulfill the purposes described in this Privacy Policy

• Comply with legal obligations

• Resolve disputes

• Enforce our agreements

​

Retention periods vary depending on the type of data and applicable legal requirements.

You have the right to:

​

• Access your personal data

• Correct inaccurate data

• Request deletion ("Right to be Forgotten")

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

• Lodge a complaint with a supervisory authority

​

In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY).

We implement appropriate technical and organizational measures to protect your personal data against:

​

• Unauthorized access

• Loss

• Misuse

• Disclosure

• Alteration

• Destruction

​

However, no method of internet transmission is completely secure.

Our website is not intended for children under the age of 13 (or the applicable age under local law), and we do not knowingly collect personal data from children.

​

If you believe a child has provided us with personal data, please contact us so we can remove it.

If you have any questions regarding this Privacy Policy, your personal data, or if you wish to exercise your rights under the GDPR, please contact us:

​

We will respond to your request as soon as possible and in accordance with applicable data protection laws.