How we handle information.

Who is responsible?

Invox AB, registration number 559547-8867, Hässleholm, Sweden, is responsible for processing personal data for this website, its enquiries and our business contacts. Contact hej@personalrummet.se about your data.

A customer's own staff room

When a company becomes a customer, staff log in with their own accounts in their company's staff room. Employees see their own results and managers see their team. Each company is kept separate from other customers. The database is hosted by Cloudflare within the EU. The staff room has no AI features and sends no data to OpenAI.

The customer company decides the purpose, the roles and how long information is kept. We process the data on the customer's behalf and sign a data processing agreement when one is needed. Login with the company's own accounts (SSO) is not available yet.

When you contact us

The form sends the name, email, company, phone number, number of workplaces, topics and message you choose to provide. Name and email are required so we can reply. We use the information to handle the enquiry and any subsequent business relationship, based on our legitimate interest in answering business enquiries. Submitting the form does not subscribe you to newsletters.

Business contacts

When we contact a company, we use the name, role and work address that the company has published itself. The purpose is to propose working together. The legal basis is legitimate interest. Reply no or email hej@personalrummet.se and we will stop and delete the details.

Website statistics

We use Umami to measure visits, referring pages, device types and interactions such as opening the demo or sending an enquiry. We do not send form contents, names or email addresses as analytics events. Umami's tracking script does not use cookies. Our statistics installation has no automatic expiry, so statistics remain until manually deleted. The purpose is to understand and improve the website, based on our legitimate interest.

Personalised company pages

On pages under /for/ we also record which company page was opened, when, device type, country and city derived from the connection. These records expire after 180 days and help us follow up on a business proposal. They do not establish which individual opened the page. This processing is based on our legitimate interest in following up business proposals. Contact us if you object.

Providers for the website

Cloudflare serves the website and stores company-page opening records. Resend sends form enquiries and Loopia handles incoming email. Umami is hosted on Vercel. Fonts are loaded from Google Fonts, which receives technical connection information when they are fetched. These providers may process data outside the EU, so for the website we do not promise that all processing takes place in Europe. Contact us for provider and transfer information before sending sensitive material.

Retention of enquiries

Enquiries are stored as email while needed for the conversation and any resulting customer relationship. Retention is reviewed manually, not by an automatic deletion timer. Information that must be kept for accounting or other legal obligations is handled separately. You can ask us to review or delete an enquiry that is no longer needed.

The open demo

The demo with the example chain Alvéns Möbler uses fictional employees and stores. Actions under an example identity may be visible to other visitors, so use made-up details and not real employee or customer information. The demo can store quiz results, reading events, questions, feedback and submitted reports, and some choices are stored on your device.

Questions to the demo feature Fråga personalrummet (ask the staff room) and text to be translated are sent to OpenAI to produce the answer. This applies only to the open demo, not to a customer's staff room. The demo does not show how access is set up for a customer.

Your rights

You can ask for access, correction or deletion and, where applicable, restriction or data portability. You can also object to processing based on legitimate interests. Contact hej@personalrummet.se. We assess each request under the applicable rules. You may complain to the Swedish Authority for Privacy Protection, IMY.