Privacy policy

Data controller

Webrocket is a brand of Webraketen, a web agency in Gothenburg, Sweden. The same business runs webraketen.se and is the data controller for this site.

Webraketen
Gothenburg, Sweden
Email: [email protected]
Phone: +46 31 373 51 11

Which laws apply

We are established in Sweden, which is in the European Union. The EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) therefore applies to everything described on this page, wherever you are.

We also offer our services to businesses in the United Arab Emirates. The UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) applies to controllers outside the UAE that process personal data of people in the UAE. Where the PDPL applies, we follow it alongside the GDPR. Where the two differ, we apply the rule that gives you the stronger protection.

If your business is in a financial free zone with its own data protection law, such as the DIFC or ADGM, that law may also apply to you.

What we collect

When you contact us. Name, email address, phone number, company name, and whatever you write in the message. We use it to answer your enquiry and prepare a quote.

When you request a quote or become a customer. In addition: your company's legal name, billing address and UAE Tax Registration Number (TRN). We only work with VAT-registered businesses in the UAE, and we need the TRN to invoice you correctly under the reverse charge mechanism.

When you message us on WhatsApp. Your phone number, your WhatsApp profile name and the messages you send. See the WhatsApp section below.

When you visit the site. Page views, approximate location from your IP address, browser and device type, and how you move between pages. We cannot see who you are.

Bot protection. When you submit a form, Cloudflare Turnstile checks that the request comes from a person. It processes your IP address and technical information about your browser for that check.

Legal basis

• Enquiries, quotes and contracts: performance of a contract with you, or steps you ask us to take before entering into one (GDPR Article 6(1)(b)), or our legitimate interest in answering an enquiry you sent us yourself (Article 6(1)(f)). We do not need your consent to answer you.
• Invoices and accounting records: our legal obligation under Swedish accounting and VAT law (GDPR Article 6(1)(c)).
• Bot protection: our legitimate interest in keeping the forms free of spam and abuse (Article 6(1)(f)).
• Analytics cookies: your consent (Article 6(1)(a)). Without consent the visit is counted anonymously, with nothing stored on your device.

Under the PDPL, processing is permitted with your consent and in the other cases the law lists, including where processing is necessary to perform a contract you are party to or to take steps at your request before entering into one, and where it is necessary to comply with a legal obligation.

You can change your choice at any time: Cookie settings.

Retention

• Enquiries that do not become orders are deleted after 24 months.
• WhatsApp conversations that do not become orders are deleted after 24 months.
• Contracts, invoices and other records covered by the Swedish Accounting Act are kept for seven years.

Cookies

Necessary cookies are required for the site to work and are set without consent. Other cookies (PostHog, Google Analytics 4) are set only once you have accepted them. Choosing Necessary only after having accepted deletes the ones already set.

Who processes data on our behalf

We never sell your data. These providers process it on our behalf, under data processing agreements:

WhatsApp

You can chat with us on WhatsApp instead of using the form. WhatsApp is run by Meta, which processes your messages under its own terms and privacy policy and decides for itself how it does so. We only use what you send us to answer you and handle your request, under the same legal basis as an email enquiry. If you prefer that your enquiry does not pass through WhatsApp, use the form or email us.

Transfers outside your country

We are in Sweden, so personal data you send us from the UAE is transferred to the EU when you contact us. Some of the providers above process data in the United States. Those transfers rely on the EU-US Data Privacy Framework, as listed in the table.

The PDPL permits transfers outside the UAE to countries with adequate data protection legislation and in the other cases the law lists.

Your rights

Under the GDPR you can:

• Know what data we hold about you, and get a copy of it.
• Have inaccurate data corrected.
• Have data erased once we no longer need it.
• Object to processing based on legitimate interest.
• Ask for processing to be restricted.
• Receive data you gave us in a machine-readable format (portability).
• Withdraw consent at any time, without affecting what has already happened.

The PDPL gives people in the UAE corresponding rights: to obtain information about the processing, to have data transferred, to have data corrected or erased, to restrict processing, to stop processing, and to object to decisions based solely on automated processing. We do not make decisions about you based solely on automated processing.

Write to [email protected] and we will answer within a month. If you are unhappy with how we handle your data you can complain to the Swedish Authority for Privacy Protection, IMY. If you are in the UAE you can also complain to the UAE Data Office.

Changes

If we change this policy we update the date at the top. For material changes we ask for your consent again.