Skip to main content
KRNBRR

Legal

Privacy Policy

This Privacy Policy explains how Kronborr collects, uses, shares and protects personal data when you visit kronborr.com, send us an enquiry or do business with us, and what rights you have under the EU General Data Protection Regulation (GDPR).

Last updated 1 January 2026

1. Who Is Responsible for Your Data

The controller of your personal data is Kronborr AB, 1320 Smith St, Logansport, IN 46947, United States ("Kronborr", "we", "us"). For any question about this policy or your personal data, contact us at privacy@kronborr.com.

2. Scope

This policy covers personal data we process through this website, through quote and contact enquiries, and in the course of our business relationships with customers, suppliers and partners. It applies to individuals, including people who contact us on behalf of a company.

3. Personal Data We Collect

Data You Give Us

  • Identity and contact details: name, job title, company, email address, phone number and country.
  • Enquiry details: the products, quantities, project or rig location, dates and messages you include in a quote or contact request, and any files or drawings you send us by email.
  • Business correspondence: emails and other communication with us, including quotes, orders, invoices and delivery information.
  • Compliance information: information needed to screen customers, end users and destinations under export control and sanctions rules, such as company ownership and end-use statements.

Data Collected Automatically

  • Technical data processed by our hosting and security provider when you load a page, such as IP address, browser type, the page requested and the time of the request. This is used to deliver the website and protect it from abuse.
  • Bot protection signals: when you submit a form, our bot protection service (Cloudflare Turnstile) assesses browser and interaction signals to tell humans from automated traffic.
  • Aggregated visit statistics: we use a privacy-first analytics service that does not use cookies or identify individual visitors. We see totals, such as page views and referring sites, not who you are.

We do not use advertising cookies, tracking pixels or social media plug-ins. See our Cookie Policy for details.

4. Why We Use Your Data and Our Legal Bases

  • To answer enquiries and prepare quotes. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR), or our legitimate interest in responding to business enquiries (Article 6(1)(f)) when you contact us on behalf of a company.
  • To perform contracts: process orders, arrange delivery, provide support and handle warranty claims. Legal basis: performance of a contract (Article 6(1)(b)) or our legitimate interest in managing the contract with your employer (Article 6(1)(f)).
  • To meet legal obligations, including bookkeeping, tax, and export control and sanctions rules. Legal basis: legal obligation (Article 6(1)(c)).
  • To screen customers and transactions for export control and sanctions risk beyond what the law strictly requires. Legal basis: our legitimate interest in conducting business lawfully and responsibly (Article 6(1)(f)).
  • To keep the website secure and working, prevent fraud and abuse, and understand overall use. Legal basis: our legitimate interest in operating a secure and useful website (Article 6(1)(f)).
  • To send news or marketing emails. Legal basis: your consent (Article 6(1)(a)), or our legitimate interest in contacting existing business customers about similar products, with a simple way to opt out every time.
  • To establish, exercise or defend legal claims. Legal basis: legitimate interest (Article 6(1)(f)).

Where we rely on legitimate interests, we have weighed our interests against your rights and freedoms. You can ask us for more information about this assessment.

5. Who We Share Your Data With

We do not sell personal data. We share it only where needed for the purposes above:

  • Service providers acting on our behalf (processors), under data processing agreements: Cloudflare, Inc. (website hosting, security, bot protection and analytics); Resend (delivery of form emails); our email and office software provider (business email, documents and calendars); and our accounting and ERP provider (quotations, orders, invoicing and bookkeeping).
  • Logistics providers, freight forwarders and customs agents, when we deliver goods to you.
  • Professional advisers such as lawyers, auditors and insurers, under duties of confidentiality.
  • Authorities, such as the Swedish Tax Agency, customs and the Inspectorate of Strategic Products, where the law requires it.
  • A buyer or successor of all or part of our business, under the same protections as in this policy.

6. Transfers Outside the EU and EEA

Some of our service providers, or their sub-processors, may process data outside the European Union and European Economic Area, including in the United States. Where this happens, we make sure an appropriate safeguard is in place: an adequacy decision of the European Commission (including the EU-US Data Privacy Framework for certified providers) or the European Commission's Standard Contractual Clauses, together with supplementary measures where needed. You can ask us for a copy of the relevant safeguards.

7. How Long We Keep Your Data

  • Enquiries that do not lead to business: up to 24 months after our last contact, then deleted.
  • Customer and supplier records: for the duration of the business relationship and up to 3 years after, to handle follow-up questions, warranty and claims.
  • Accounting records, such as invoices: 7 years after the end of the calendar year in which the financial year ended, as required by the Swedish Bookkeeping Act (bokföringslagen).
  • Export control and sanctions screening records: for the period required by the applicable rules, and at least as long as the related accounting records.
  • Technical logs held by our hosting provider: for short periods set by that provider for security and operations.

Form submissions on this website are sent to us by email and are not stored in a database on the website itself.

8. How We Protect Your Data

We use appropriate technical and organisational measures, including encrypted connections (HTTPS) for the whole website, bot protection and input validation on forms, access controls on our systems, multi-factor authentication on business accounts, and contractual commitments from our service providers.

9. Your Rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you and receive a copy.
  • Have inaccurate data corrected and incomplete data completed.
  • Have your data erased, where there is no longer a lawful reason for us to keep it.
  • Restrict our processing in certain situations, for example while a correction is checked.
  • Receive data you gave us in a structured, machine-readable format and have it transferred (data portability).
  • Object to processing based on our legitimate interests, and object at any time to direct marketing.
  • Withdraw consent at any time, where processing is based on consent, without affecting processing that took place before.

To exercise your rights, email privacy@kronborr.com. We will reply within one month, and may need to confirm your identity first. Exercising your rights is free of charge.

10. Automated Decisions

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our bot protection service only decides whether a form submission appears to come from a person.

11. Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect data from anyone under 16.

12. Complaints

If you believe we handle your personal data unlawfully, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se, or with the supervisory authority in the EU country where you live or work.

13. Changes to This Policy

We may update this policy when our processing or the law changes. The date of the latest version is shown on this page. If we make significant changes, we will make them clear on the website.