Privacy Policy

(in accordance with the GDPR, effective from 2026-05-25)

At Sticht AI (hereinafter referred to as ”Sticht AI”), we value and respect your personal privacy, and we ensure that you can feel secure regarding how your personal data is handled by us.

We are committed to protecting your personal privacy and do not collect more data than is necessary to process your order. We never sell or disclose your data to third parties without a legal basis.

Below, you will find information regarding what data about you is processed by Sticht AI, the purposes for which it is processed, how long we retain this information, and your rights.

What types of data do we process, and how do we collect it?

¤ Customer data: This refers to information about you as an individual, linked to your purchases with us—such as your name, personal identity number, address, email address, and telephone number.

¤ We collect data about you through your interactions with us—for example, when you choose to become a customer—as well as by obtaining information from external sources (such as credit checks) or through the use of cookies on our website.

In order for us to process your personal data, there must be support under applicable legislation; there must be a legal basis for the processing. For our processing of your personal data to be lawful, it must be necessary:

¤ To fulfill our commitments to you as a customer, such as in relation to sales, delivery, etc.

¤ To comply with a legal obligation incumbent upon Sticht AI, such as accounting requirements, etc.

In order to provide services and products to you, we need to process your personal data. Below, you will find information regarding the purposes for which we process your personal data, the legal basis for doing so, and how long we retain the data. The retention period varies depending on the purpose for which the data is required. We never retain data for longer than is necessary for the relevant purposes. Naturally, we will retain the data for a longer period if you so request.

Providing and fulfilling agreements regarding services and products

We process your personal data in order to provide services and products to you, fulfill agreements, and exercise our rights under such agreements. This includes, for example, identifying you as a customer, managing your orders, handling invoices and payments for services and/or products, performing credit checks, maintaining records, and addressing feedback or complaints regarding services and products.

Legal basis: performance of a contract, legal obligation.

Providing and improving our customer service

We process your personal data and your order history in order to provide high-quality customer service.

Legal basis: performance of a contract, balancing of interests (Sticht AI has a legitimate interest in maintaining high-quality customer service). Fulfilling obligations under law or other regulations, official directives, decisions, requests, or guidelines, in order to safeguard our interests.

We process your personal data to fulfill our obligations under law or other regulations, official directives, decisions, requests, or guidelines; for example, we retain documentation in accordance with the Swedish Accounting Act.

Legal basis: legal obligation

As a general rule, we retain your customer data for the purposes stated above for as long as you are a customer of ours, and for up to 24 months thereafter. However, we may retain this data for longer periods for specific purposes, such as:

¤ For invoicing and payment purposes—as part of accounting documentation or to safeguard our interests—we retain data for up to 7 years, or for the duration of any ongoing dispute.

¤ To provide and improve our service to you, we retain your data for 24 months after the contractual relationship has ended.

¤ To fulfill obligations under law or other regulations, official directives, decisions, requests, or guidelines, we retain personal data for the duration specified by law.

To subcontractors

We engage subcontractors, which means they also require certain information about you as a customer. However, these parties may not use your personal data for any purpose other than providing the service or product, or otherwise than under the terms we specify. Other recipients

We also disclose information about you to other recipients when we are required to do so by law or by a decision from a public authority.

In accordance with applicable legislation, you have a number of rights that allow you to obtain information about, and exercise control over, your personal data.

We have listed your rights below, and at the end of this document, you will find contact details for Sticht AI, which you can use if you wish to exercise your rights.

We will respond to your request without undue delay, and normally within one month. If additional time is required, or if for any reason we are unable to fulfill your request, we will inform you accordingly. We may also request further information from you if necessary to verify your identity and ensure that it is indeed you—and not someone else—seeking to access or gain control over your personal data.

You have the right to request confirmation as to whether we are processing your personal data; if so, we will inform you about how your personal data is being processed. You also have the right to obtain a copy of the data we process (by means of an extract from our records).

It is important to us that the personal data we hold about you is accurate. If the data is incorrect, you have the right to contact us and request that it be corrected. You also have the right to request that information be added if anything is missing. We will notify any parties to whom we have disclosed your data that a correction has been made. Upon request, we will also inform you of the parties to whom information regarding the correction has been disclosed.

You have the right to contact us to request the erasure of your personal data:

¤ If the data is no longer needed for the purposes for which it was collected.

¤ If the processing is based solely on your consent and you withdraw that consent.

¤ If the processing of your data has not been carried out in accordance with applicable law, or if erasure is required to fulfill a legal obligation. In some cases, however, we may be unable to comply with a request for erasure—for example, if we are legally required to retain the data. If data is erased, we will notify the parties to whom we have disclosed your information that the erasure has taken place. Upon your request, we will also inform you of the parties to whom information regarding the erasure has been disclosed.

If you have any questions or wish to exercise your rights—for example, by withdrawing your consent—please:

Contact us via email:

info@sticht.se

Sticht AI is the data controller responsible for the processing of our customers’ personal data under the Sticht AI brand. As the data controller, we determine the purposes and means of the processing.

Sticht AI

Artillerigatan 6

114 51 Stockholm

Our Data Protection Officer monitors our compliance with applicable legislation and ensures that your personal data is processed correctly. You may contact our Data Protection Officer via email:

info@sticht.se