YOUR PERSONAL DATA
Privacy notice
Updated 18 October 2026
1. Who is responsible?
KMD Management AB is the controller responsible for personal data handled for the Komplion website and enquiries described in this notice. Komplion is the name of the product.
For privacy questions or to exercise your rights, contact: contact@komplion.com.
2. What this notice covers
This notice covers the Komplion website and direct enquiries, including early-access discussions. It does not describe the processing of customer records inside the SaaS platform. Platform privacy information and, where applicable, a data processing agreement will address that processing separately.
3. Information we use and why
When you email us, we receive your email address, any name, role and organisation you provide, your message and the correspondence needed to respond. We use this information to answer questions, arrange requested demonstrations and follow up on the conversation you initiated.
The legal basis is our legitimate interest in responding to business enquiries and developing relevant business relationships (Article 6(1)(f) GDPR). We limit the use to what you can reasonably expect from that contact. Providing information is voluntary, but without contact details and enough context we may be unable to answer.
If you make a data protection request, we use the information needed to identify and respond to it to meet our legal obligations under GDPR (Article 6(1)(c)). Please do not send sensitive personal data or confidential customer records in a general enquiry.
4. Email contact, cookies and hosting
The early-access page links to contact@komplion.com. Clicking the email link opens your email application; information reaches us only when you send the email. There is no website submission form or enquiry database.
The website code does not set cookies or use advertising pixels, analytics scripts or browser storage. Fonts and product images are served with the site. Vercel Inc. provides website hosting and content delivery.
Vercel may process IP addresses, request URLs, browser information, timestamps and security-related logs to deliver the website, diagnose faults and prevent abuse. Our legal basis for necessary website operation and security is our legitimate interest in providing a reliable, secure website (Article 6(1)(f) GDPR).
5. Who may receive information
People working on Komplion may access enquiries where needed to handle them. We use Google Workspace for email, so Google and its relevant service providers process correspondence as part of that service. Vercel processes website delivery and access data.
Information may also be disclosed to professional advisers or authorities where necessary to address a legal matter or meet a legal obligation. Enquiry details are not sold or used to create advertising audiences.
For Vercel hosting, Vercel’s Data Processing Addendum describes its processor role for customer data and its separate controller role for certain service-generated and account data. We will verify the agreement’s application to KMD Management AB and the selected services before launch.
6. Processing outside the EU/EEA
Google Workspace and Vercel use international infrastructure and service providers. Vercel uses a global content delivery network. Personal data may therefore be processed outside the EU/EEA, including in the United States. We do not represent the website as EU-only hosting.
Transfers require a valid GDPR mechanism, such as an applicable adequacy decision or the European Commission’s standard contractual clauses with any necessary supplementary safeguards. The applicable provider agreements and transfer arrangements must be verified before public launch. Contact us for information about the safeguards relevant to your enquiry.
7. How long we keep information
Our retention period for ordinary enquiries is 90 days from the last substantive contact. We then delete the enquiry correspondence and associated contact details from our active enquiry records. This is a retention rule, not a claim that automatic deletion has already been configured in every provider system.
If a conversation becomes a customer relationship, the information needed for that relationship will be covered by the relevant service information. We may retain only the information necessary to meet a specific legal obligation or establish, exercise or defend a legal claim for as long as that reason applies. Provider backup, security and access-log retention is separate from the 90-day enquiry period and must be confirmed before launch.
8. Your rights
You can ask for access to your personal data and correction of inaccurate information. Depending on the circumstances, you can request deletion or restriction of processing, and data portability where the legal conditions are met. You can object to processing based on legitimate interests because of your particular situation. You can always object to use of your data for direct marketing.
Email contact@komplion.com to make a request. We may need proportionate information to verify your identity. We normally respond within one month; if an extension is permitted because of complexity or the number of requests, we explain it within that first month.
You can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), or with the competent supervisory authority where you live or work. imy.se.
9. Automated decisions and changes
The website does not make decisions about you with legal or similarly significant effects using solely automated processing. Product screenshots contain fictional example data.
We will revise this notice when the website’s functions, providers or responsible company change. The latest update date appears at the top. Any move to a future Komplion company will be reflected in updated controller information.