Privacy Policy

1. Data Controller

• Business Name: expatas – a service by FM-NetSec Nordic Enskild firma
• Owner: Franz Matthies
• Address: Sikforsvägen 33, 712 34 Hällefors, Sweden
• Email: hello@expatas.se

2. What Data We Collect

We may collect and process the following personal data:

• Name
• Email address
• Phone number (if provided)
• Business information (e.g. company name, organization number)
• Financial and accounting-related data (provided by you)
• Communication data (emails, messages)
• Technical data (IP address, browser type, usage data)

3. How We Collect Data

We collect data when you:

• contact us via email or forms
• book a meeting via Calendly
• use our services
• visit our website (via cookies and analytics tools)

4. Purpose of Processing

Your data is processed for the following purposes:

• providing accounting and administrative services
• managing client relationships
• complying with legal obligations (e.g. accounting laws, tax reporting to Skatteverket)
• scheduling and communication
• improving our website and services

5. Legal Basis

We process personal data based on:

• Contractual necessity (to provide services)
• Legal obligations (e.g. bookkeeping laws in Sweden)
• Legitimate interest (business operations, communication)
• Consent (for analytics and optional services where required)

6. Data Sharing

We may share your data with trusted third parties only when necessary:

• Fortnox (accounting system)
• Calendly (appointment scheduling)
• Google Analytics (website analytics)
• IT and hosting providers

All third parties process data in accordance with GDPR and applicable data protection laws.

7. Data Storage & Retention

We store personal data only as long as necessary:

• Client and accounting data: according to Swedish legal retention requirements (typically 7 years)
• Communication data: as long as relevant to the business relationship
• Analytics data: according to tool-specific retention settings

8. Data Transfers Outside the EU

Some service providers (e.g. Google, Calendly) may process data outside the EU/EEA. In such cases, appropriate safeguards (e.g. Standard Contractual Clauses) are used to ensure data protection compliance.

9. Your Rights

Under GDPR, you have the right to:

• access your personal data
• request correction of inaccurate data
• request deletion ("right to be forgotten")
• restrict processing
• object to processing
• request data portability

To exercise your rights, contact: hello@expatas.se

10. Cookies & Analytics

We use cookies and analytics tools (e.g. Google Analytics) to understand website usage and improve our services. Where required, we will ask for your consent before using non-essential cookies.

11. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. The latest version will always be available on this website.

13. Contact

If you have any questions regarding this Privacy Policy or data protection:

Email: hello@expatas.se