Legal
Data Processing
Here we detail what personal data Lagom Kod processes, for what purposes, on what legal basis, and for how long.
Last updated: 2026-03-05
Data Controller
Lagom Kod AB
Org. no.: 559564-7545
Edsberg 221, 664 94 Vålberg, Sweden
Email: hej@lagomkod.se
Register of Processing Activities
Below is each category of personal data processing carried out by Lagom Kod.
Contact Inquiries
| Purpose | Respond to inquiries via the contact form and email |
|---|---|
| Categories of data | Name, email address, phone number, message, company name |
| Legal basis | Legitimate interest (Art. 6.1 f GDPR) |
| Retention period | Up to 12 months if no client relationship is established, otherwise see "Client Projects" |
| Recipients | Form service (Formspree/Netlify), email provider |
Client Projects
| Purpose | Manage client relationships, deliver agreed services, provide support |
|---|---|
| Categories of data | Contact person (name, email, phone), company details, project documentation, communication |
| Legal basis | Performance of a contract (Art. 6.1 b GDPR) |
| Retention period | Duration of the agreement plus 24 months |
| Recipients | Project tools, hosting provider, subcontractors as per agreement |
Billing and Accounting
| Purpose | Handle payments and meet accounting requirements |
|---|---|
| Categories of data | Name, address, organization number, invoice amounts, payment history |
| Legal basis | Legal obligation — Swedish Accounting Act (Art. 6.1 c GDPR) |
| Retention period | 7 years as required by the Swedish Accounting Act (BFL 7:2) |
| Recipients | Accounting system, payment service (Stripe), auditor |
Transfers to Third Countries
We strive to process all personal data within the EU/EEA. If a service provider processes data outside the EU/EEA, we ensure adequate safeguards are in place, such as EU Standard Contractual Clauses (SCC) or an adequacy decision.
Technical and Organizational Safeguards
- HTTPS encryption on all websites
- Encrypted email communication
- Access control — role-based permissions for systems and data
- Regular backups
- Data processing agreements with all providers
Your Rights
You have the right to access, rectification, erasure, restriction, data portability, and objection. See our privacy policy for full information about your rights.
Complaints
You have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se.
Contact
Questions about our data processing are answered by:
hej@lagomkod.se