Privacy Policy

För Atom Agency AB är personlig integritet viktigt. Vi eftersträvar en hög nivå av dataskydd och följer Europaparlamentets och rådets förordning (EU) 2016/679 (GDPR) samt tillämplig svensk lagstiftning, däribland marknadsföringslagen (2008:486).

In this policy, we explain what personal data we collect, why we collect it, how long we retain it and what rights you have. You are always welcome to contact us if you have any questions. Contact details can be found at the bottom of this page.

What is personal data and what is processing of personal data?

Personal data is any data relating to a living natural person that can be directly or indirectly linked to that person. This includes not only names and social security numbers, but also photos, email addresses, IP addresses, company names and job titles. Processing of personal data encompasses everything that takes place with personal data in our CRM system or through other digital tools listed in our cookie policy, where you can refuse or accept various services. This includes collection, registration, structuring, storage, processing and transmission.

Data Controller

For the processing that takes place within Atom Agency AB’s operations, Atom Agency AB is the data controller. (556978-8671, Stora Varvsgatan 6A, 211 19, Malmö).

Contact forms and website enquiries

When you fill in a form on our website, we collect the details you choose to provide. The information is sent directly to our CRM system and is used solely to handle your enquiry and respond to you. The legal basis is legitimate interest — you have actively contacted us and we have a legitimate interest in responding to your enquiry. Data is retained for 24 months after the last contact.

Atom Mind — our newsletter

When you subscribe to our monthly newsletter Atom Mind, we collect the details you provide at sign-up. The information is used to send relevant communications about web, design and marketing. The legal basis is consent — you have actively signed up and can unsubscribe at any time via the link in each issue. We also track standard statistics such as open rates and clicks to improve the relevance of our communications. Subscribers who have not interacted with any issue for 12 months are automatically removed from the list.

CRM system and customer data

For existing customers and active business contacts, we store relevant data in our CRM system, including contact information, company details, billing information, purchase and order history, and quote requests. The legal basis is contract and legal obligation for accounting data, and legitimate interest for other business communications. Accounting data is retained for a minimum of 7 years in accordance with the Swedish Bookkeeping Act. Other data is retained for as long as the customer relationship is active and for 24 months thereafter.

Atom Access

Atom Access (access.atomagency.co) is our platform for ordering agency services via credits. The processing of personal data within Atom Access is described in a separate privacy policy available at access.atomagency.co/integritetspolicy.

What personal data do we collect about you and why?

We mainly process your name, social security number, address and contact details, bank account information for salary payments, and data you have provided about your next of kin.

Personal Data Processors

We do not share your personal data with anyone unless you have agreed to do so through our cookie solution. In such cases, your data may be shared with other digital services that require certain data to perform their services as intended. For more information, please read our cookie policy.

Tools and third parties

We use a number of digital tools to operate and improve our business. Some of these tools may process personal data. Below we describe which tools we use and why.

Communication and file storage

We use Google Workspace for internal communication and file management. Google acts as a data processor and processes data only in accordance with our instructions.

Web analytics

We use Google Analytics and Google Tag Manager to understand how visitors use our website — for example, which pages are visited and for how long. These tools are only activated if you have accepted analytics cookies.

Advertising and marketing

We use Meta Pixel and LinkedIn Insight Tag to measure the effectiveness of our advertising. These are only activated if you have accepted marketing cookies.

Automated integrations

We use Make to automate workflows between our website and our CRM system. The tool handles data solely in accordance with our instructions.

CRM and email

We use Outseta as our CRM and email system to manage customer relationships and send communications.

Cookie management

We use Cookiebot to manage cookies and consent on our website. Cookiebot ensures that no non-essential cookies are activated without your approval. Read more about how we use cookies at atomagency.co/cookies.

Third-country transfers

Several of our suppliers, including Google, Meta and LinkedIn, are US-based companies. Transfers of personal data to the US take place in accordance with the EU–US Data Privacy Framework or via standard contractual clauses (SCCs), ensuring that your data is protected to EU data protection standards.

All suppliers act as data processors. They all provide standardised data processing agreements (DPAs) that apply to all users of their services and comply with the requirements of GDPR Article 28.

Sharing of personal data

We do not share your personal data with third parties for marketing purposes without your consent. We may share data with authorities, such as the Swedish Tax Agency, when required to do so by law or official decision. When data is shared with an independently responsible controller, that party’s own privacy policy applies.

How long do we retain your personal data?

We never retain personal data longer than necessary for the respective purpose. Accounting data is retained for a minimum of 7 years in accordance with the Swedish Bookkeeping Act. Customer data in the CRM is retained for 24 months after the end of the engagement. Atom Mind subscribers are deleted after 12 months of inactivity. Data from contact forms is retained for 24 months.

Your rights

Under the GDPR, you have the right to obtain a copy of the data we hold about you, request correction of inaccurate data, and in certain cases request erasure. You also have the right to object to processing based on legitimate interest, request restriction of processing, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. Contact us at info@atomagency.se to exercise your rights — we respond within 30 days. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.

Marketing and email

We comply with the Swedish Marketing Act (2008:486) and send commercial emails only to recipients who have actively subscribed to Atom Mind, or to existing customers where the message concerns relevant services similar to those they already use. Every marketing communication always includes a clear option to unsubscribe, and we respect all such requests immediately.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. Our suppliers are carefully selected and have entered into data processing agreements with us.

Changes to the privacy policy

We may update this privacy policy from time to time. The most recent version is always available at atomagency.co. In the event of significant changes, we will notify you by email if you are a customer or subscriber.

Contact

If you have any questions or concerns about how we process your personal data, please do not hesitate to contact us. Atom Agency AB, org. no. 556978-8671, Stora Varvsgatan 6A, 211 19 Malmö.

Tel: +46 40 63 66 520
Email: info@atomagency.se