Legal
Privacy policy
Last updated 12 September 2026
Who is responsible for your data
Business Gateway AB is the controller for the personal data described here. Write to info@businessgateway.se with any question about this policy or to exercise the rights below.
To be completed before launch: registered company number and postal address.
What this site collects
This site has one form, behind the “Book a demo” and “Contact us” buttons. It asks for your company name, your name, your email address, and optionally your phone number. Nothing else on the site collects personal data: there is no analytics, no tracking, no advertising, and the site sets no cookies.
Why we use it, and on what basis
We use what you submit to answer you and to discuss whether our Peppol service fits your platform. The legal basis is our legitimate interest in responding to an enquiry you sent us, and, where the conversation moves towards an agreement, steps taken at your request before entering into a contract.
We do not use your details for newsletters or unrelated marketing, and we do not sell or share them with anyone for their own purposes.
Who processes it for us
The site is hosted by Vercel, which processes the technical request data needed to serve a web page, including IP addresses in server logs. The form is delivered by email through Resend. Both act as processors on our instructions. They are US companies, so a transfer outside the EU/EEA takes place; it relies on the European Commission’s standard contractual clauses.
How long we keep it
An enquiry that does not lead to a business relationship is deleted within 12 months. If we become customer and supplier, your contact details are kept for the life of that relationship and then as long as accounting law requires.
Your rights
You can ask for a copy of the personal data we hold about you, ask us to correct it or delete it, ask us to restrict how we use it, and object to our use of it. Ask at info@businessgateway.se. If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY), which supervises us.
Documents sent through the service
This policy covers the website. Business documents that customers exchange through the Peppol service — invoices, orders and the rest — are handled under the agreement with that customer, where the customer is the controller and Business Gateway AB is the processor. The data protection terms of that agreement govern them, not this page.
Changes
When this policy changes, the date at the top changes with it. Material changes will be described here rather than made quietly.