EkoReno is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information in accordance with the EU General Data Protection Regulation (GDPR) and Swedish data protection law.
1. Data Controller
EkoReno AB is the data controller responsible for your personal data. If you have questions or wish to exercise your rights, contact us at:
info@ekoreno.com
2. Data We Collect
We collect and process the following categories of personal data:
- Account information: name, email address, phone number, and password (encrypted)
- Property data: house type, year of construction, heating system, area, number of residents, and other characteristics you provide for energy analysis
- Usage data: interactions with the Platform, renovation scenarios explored, and features used
- Communication data: messages exchanged through the Platform, quote requests, and support inquiries
- Technical data: IP address, browser type, device information, and cookies for service functionality
3. How We Use Your Data
We process your personal data for the following purposes:
- Providing our services: calculating energy performance, generating renovation scenarios, and estimating costs
- Facilitating contractor matching: sharing relevant (anonymised) property data with contractors for quoting purposes
- Grant eligibility: assessing your eligibility for ROT deductions and Boverket energy grants
- Communication: sending service-related notifications, project updates, and responding to your inquiries
- Improvement: analysing usage patterns to improve Platform functionality and user experience
4. Legal Basis for Processing
We process your personal data based on:
- Contract performance: processing necessary to deliver the services you have requested (Article 6(1)(b) GDPR)
- Legitimate interest: processing necessary for improving our services, preventing fraud, and ensuring platform security (Article 6(1)(f) GDPR)
- Consent: where required, for marketing communications and certain data sharing activities (Article 6(1)(a) GDPR)
5. Data Sharing
We may share your personal data with:
- Verified contractors: anonymised property data is shared when you request quotes; your personal contact details are only shared after you choose a contractor
- Service providers: trusted third-party services that help us operate the Platform (hosting, analytics, email delivery), all bound by data processing agreements
- Legal obligations: where required by Swedish law, court order, or regulatory authority
6. Data Retention
We retain your personal data only as long as necessary for the purposes described in this policy. Account data is retained while your account is active and for a reasonable period thereafter. If you request account deletion, we will erase your personal data within 30 days, except where retention is required by law (e.g., accounting records under Swedish Bookkeeping Act).
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption of data in transit and at rest, access controls, regular security assessments, and secure hosting infrastructure within the EU. However, no system is completely secure, and we cannot guarantee absolute security.
8. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate or incomplete data
- Right to erasure: request deletion of your personal data ("right to be forgotten")
- Right to restriction: request that we limit how we use your data
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interest, including profiling
9. Cookies and Tracking
We use essential cookies required for the Platform to function correctly (e.g., session management, authentication). We do not use third-party advertising cookies. Analytics cookies, where used, are configured to anonymise IP addresses and respect Do Not Track browser settings.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Platform. The updated policy will indicate the revision date at the top of this page.
11. Contact and Complaints
For any privacy-related questions or to exercise your rights, contact us at:
info@ekoreno.com
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.