Privacy Policy

Last updated: 2026-06-18

  1. Who are we?

    Agile Arts AB, corporate ID no. 559570-4627, is the data controller for the processing of personal data described here.
    Contact for questions about personal data: [email protected].

  2. What data do we collect?
    • Contact details (name, email, phone, company/role).
    • The content of messages/attachments you send us.
    • Client details related to assignments and invoicing.
    • Information related to projects, deliveries, feedback, approvals and other communication within assignments.
    • Material produced within assignments, such as film, audio, images and other media files.
    • Technical data when you contact us through our website, such as time, IP address and information needed for security and troubleshooting.

    We do not normally process sensitive personal data. If such data is nevertheless sent to us without our having asked for it, it is processed only to the extent necessary to handle the matter.

  3. Why do we process data?
    • Contract: to manage assignments, contracts, deliveries and client relationships.
    • Legitimate interest: to respond to enquiries, maintain dialogue and follow up on potential collaborations.
    • Legal obligation: to meet legal requirements, such as accounting and tax.

    Some data is necessary for us to enter into contracts, deliver our services or meet legal requirements. If such data is not provided, we may in some cases be unable to carry out the assignment.

  4. Where is the data processed and stored?
    • Email, documents and collaboration:
      We use established cloud services, primarily Microsoft 365, for email, document management and collaboration.
    • Finance and accounting:
      We use the Spiris financial system for invoicing, accounting and other financial administration.
    • Produced material:
      Material produced within assignments, such as film, audio, images and other media files, may be stored and processed in our internal systems and by external suppliers used for storage, backup, editing, review, sharing, delivery and other digital processing.
    • EU/EEA and safeguards:
      We aim to process and store personal data within the EU/EEA. If data is processed outside the EU/EEA, this is done with appropriate safeguards in accordance with the GDPR.
  5. Sharing

    We only share personal data when needed to deliver our services, work with suppliers or comply with legal requirements. Our suppliers may only process data in accordance with agreements or data protection terms. We may also share data with authorities when required by law.

  6. Retention period
    • General communication:
      We normally keep emails and other general communication for up to 12 months after the conversation has ended, unless we need to keep the information longer to manage an assignment, follow up a client relationship, defend legal claims or meet legal requirements.
    • Assignments and project material:
      Project material, such as deliveries, film, audio, images and other media, is kept for as long as needed for the assignment, follow-up, client dialogue, archiving or legal claims. If agreed with the client, material may also be kept and used as a reference or in our marketing in accordance with the agreement or another applicable legal basis.
    • Finance and accounting:
      Invoices, accounting records and other financial information are kept in accordance with the Swedish Bookkeeping Act, normally for at least 7 years after the end of the financial year to which the information relates.
    • Deletion:
      When data is no longer needed, it is deleted or anonymised, unless we are required to keep it longer by law or contract.
  7. Security

    We use appropriate technical and organisational measures to protect personal data.

  8. Your rights

    Under the GDPR, you have the right to request access, rectification, erasure, restriction and data portability, and to object to processing. These rights apply to the extent provided by applicable law. Contact us at [email protected] if you wish to exercise your rights, have questions or want to make a complaint. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).