Privacy Policy

Last updated: 11 July 2025

1. Introduction

Welcome to Sensorbee AB ("Sensorbee", "we", "our", "us"). We design, manufacture and provide hardware and software solutions that monitor environmental pollutants. Protecting your privacy and your personal data is a fundamental part of our commitment to you. This Privacy Policy explains how we collect, use, disclose and safeguard personal data when you interact with our products, services, websites, mobile applications, and cloud platforms (collectively, the “Services”).

This Policy is drafted in accordance with the EU General Data Protection Regulation 2016/679 ("GDPR"), the Swedish Data Protection Act (2018:218), and other applicable data‑protection legislation. Where a local-language version differs, the Swedish version shall prevail.

2. Data Controller

The data controller responsible for your personal data is:

Sensorbee AB
Jägarvallsvägen 8B
584 22 Linköping
Sweden
Org. No. 556999‑1234 (example)
E‑mail: privacy@sensorbee.com
Tel: +46 (0)13 123 456

3. What Personal Data We Collect

The data we collect depends on how you use our Services:

ContextCategories of Personal DataTypical Examples

Website & App AccountsIdentification, contact and log‑in dataName, e‑mail, phone, encrypted password, preferred language

Device & Sensor OperationDevice identifiers, geolocation, environmental readingsDevice serial number, firmware version, GPS coordinates, air‑quality metrics

Support & SalesCommunication records, order and billing dataSupport tickets, purchase history, invoices

MarketingPreference and interaction dataNewsletter opens, product‑interest tags

RecruitmentCV information, assessment resultsWork history, education, references

We do not intentionally seek to collect “special categories” of personal data (Article 9 GDPR) unless required by law or explicitly provided by you.

4. How and Why We Use Your Data (Purposes & Legal Bases)

PurposeLegal Basis (Art. 6 GDPR)Legitimate Interests (if applicable)

Provide, maintain and monitor our ServicesPerformance of a contract (Art. 6 (1)(b))—

Improve products, develop new features, and ensure qualityLegitimate interest (Art. 6 (1)(f))Optimising and safeguarding sensor accuracy and platform stability

Customer support and warranty processingPerformance of a contract—

Marketing our products (e‑mail newsletters, webinars)Consent (Art. 6 (1)(a)) or legitimate interest (existing‑customer marketing)Growing our business in a balanced way

Comply with legal obligations (e.g., tax, accounting, export control)Legal obligation (Art. 6 (1)(c))—

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

5. Retention Periods

We retain personal data only for as long as necessary:

Account data: Stored for the life of the account and deleted or anonymised within 30 days of closure.
Device log data: Aggregated after 12 months; raw logs deleted within 24 months.
Financial records: Kept for 7 years in accordance with Swedish accounting law.
Marketing consents: Retained until you opt‑out or after 24 months of inactivity.

Back‑ups may persist for an additional 30 days before automated deletion.

6. Data Sharing and Recipients

We share data only when necessary:

Service providers: Cloud hosting, payment processors, shipping partners, CRM, analytics. All are bound by data‑processing agreements under Art. 28 GDPR.
Affiliates & distributors: Where needed to fulfil your contract or support your devices.
Public authorities: When required by law, court order or to protect our rights.

We do not sell personal data.

7. International Data Transfers

Sensorbee primarily stores data in the European Economic Area (EEA). Where transfers outside the EEA occur (e.g., to US‑based service providers), we implement one of the following safeguards:

Adequacy decisions of the European Commission; or
Standard Contractual Clauses (SCCs) approved by the Commission; and
Supplementary technical and organisational measures where required.

8. Security Measures

We take appropriate technical and organisational measures to protect personal data, including:

End‑to‑end encryption of data in transit (TLS 1.3) and at rest (AES‑256).
Role‑based access controls and least‑privilege principles.
Regular penetration testing and vulnerability management.
Continuous monitoring, incident‑response plan, and ISO 27001‑aligned policies.

9. Your Rights

Under GDPR you have the right to:

Access – Obtain confirmation and a copy of your personal data.
Rectification – Correct inaccurate or incomplete data.
Erasure – Request deletion ("right to be forgotten").
Restriction – Limit how we process your data.
Portability – Receive data in a structured, commonly used format.
Objection – Object to processing based on legitimate interest or direct marketing.
Withdraw consent – At any time, where processing relies on consent.

To exercise these rights, contact us at privacy@sensorbee.com. You also have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), the Swedish data‑protection authority.

10. Cookies and Similar Technologies

Our websites and apps use cookies, SDKs and similar technologies to:

Enable core functionality (session cookies)
Gather analytics to improve user experience
Remember your preferences

Where legally required, we request your consent via our cookie banner. You can revoke consent or manage cookies through your browser settings.

11. Automated Decision‑Making

We do not use your personal data to make decisions based solely on automated processing that produce legal or similarly significant effects (Art. 22 GDPR).

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via e‑mail or through the Services. The latest version is always available at sensorbee.com/privacy.

13. Contact Us

If you have questions or concerns, please contact our Data Protection Officer (DPO):
Sensorbee AB
Jägarvallsvägen 8B · 584 22 Linköping · Sweden
E‑mail: policy@sensorbee.com
Tel: +46 13 390 95 37