GDPR document

Privacy policy

How M2 Bygg Team AB collects, processes and protects your personal data.

Effective from 1 January 2025 Updated June 2025 M2 Bygg Team AB

1 Data controller

M2 Bygg Team AB is the data controller for the processing of your personal data.

M2 Bygg Team AB
Lillhagsvägen 88, 442 43 Hisings Backa
031-96 88 88 · 0732-40 50 26 info@m2team.se

2 What data do we collect?

We collect personal data that you provide voluntarily when you contact us, request a quote or hire us.

Type
Examples
Source
Contact details
Name, telephone, email
Quote form, telephone
Address details
Property address and town
Quote request
Project details
Description, images
Form, email
Payment information
Invoicing details, ROT
On conclusion of a deal
Communication
Email, SMS
Ongoing contact

We also collect technical information when you visit m2team.se: anonymised IP address, browser type, pages visited and referring website.


3 Why do we process your data?

Purpose
Description
Quotes and customer contact
Answering enquiries, booking inspections and keeping in touch during the project.
Carrying out assignments
Delivering ordered services and coordinating with subcontractors.
Invoicing
Creating invoices, handling payments and ROT applications.
Bookkeeping
Meeting the requirements of the Swedish Bookkeeping Act and tax legislation.
Web analytics
Understanding how the website is used (anonymised statistics).

4 Legal basis

We process your personal data on the basis of the following legal grounds (GDPR Article 6):

  • Contract (Art. 6.1.b) – carrying out ordered work and invoicing.
  • Legal obligation (Art. 6.1.c) – the Bookkeeping Act and tax legislation.
  • Legitimate interest (Art. 6.1.f) – web analytics and marketing to existing customers.
  • Consent (Art. 6.1.a) – for cookies and direct marketing.

5 How long is the data kept?

Category
Retention period
Basis
Customer data (quote not accepted)
12 months
Legitimate interest
Customer data (completed assignment)
3 years after completion
Guarantee/complaints
Accounting records
7 years
Bookkeeping Act
ROT documentation
7 years
Tax legislation
Web analytics data
14 months
GA4 standard

6 Do we share data with third parties?

We never sell your data. Your personal data is never shared with advertising companies or similar parties.

We may share data with: subcontractors (bound by confidentiality agreements), the Swedish Tax Agency (ROT applications), Google Analytics (anonymised statistics) and accounting software.


7 Newsletter and marketing

If you sign up for our newsletter (via the form in the footer of m2team.se), we process your email address and, if you provide it, your name in order to send newsletters with tips, project examples and offers.

Question
Answer
Legal basis
Consent (GDPR Art. 6.1.a) — you actively choose to tick a consent box when signing up.
Double confirmation
Your subscription is activated only when you click the confirmation link in the email you receive after signing up.
What we store
Email address, name (if provided), the time and IP address of both the sign-up and the confirmation, and the exact consent text you approved.
Retention period
Until you unsubscribe. If you never confirm your sign-up, it is deleted automatically after 30 days.
Unsubscribing
Every mailing contains a link to unsubscribe with one click — no account or login is required.

We never share your email address with third parties for marketing purposes. You can at any time request a copy of, or deletion of, the data we hold about you as a subscriber by contacting info@m2team.se.


8 Cookies and tracking

Type
Purpose
Storage
Necessary cookies
Basic functioning of the website
Session
Analytics cookies (GA4)
Anonymous visitor statistics
14 months
Marketing cookies
Not used
–

9 Your rights

Right
Means that you can
Access
Request a copy of the data we hold about you.
Rectification
Request that incorrect data be corrected.
Erasure
Request that data be deleted if there is no legal basis.
Restriction
Request restricted processing during an investigation.
Data portability
Obtain your data in a machine-readable format.
Objection
Object to processing based on legitimate interest.

Send your request to info@m2team.se. We reply within 30 days. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.


10 Security

  • HTTPS encryption across the entire website
  • Restricted access – authorised staff only
  • Encrypted email where necessary
  • Regular security reviews

11 Contact

Do you have questions about how we process personal data? Contact us:

M2 Bygg Team AB
Lillhagsvägen 88, 442 43 Hisings Backa
031-96 88 88 · 0732-40 50 26 info@m2team.se

This policy is effective from 1 January 2025. © 2026 M2 Bygg Team AB.