PRIVACY

Privacy notice

Kostet Consulting respects your privacy. This notice explains how information submitted through kostet.se is handled.

Information you provide

When you use the enquiry form, we process the information you choose to provide, such as your name, organisation, email address, area of interest and message.

Purpose and legal basis

The information is used to receive, evaluate and respond to enquiries about Kostet products, engineering services and potential cooperation. Processing is based on our legitimate interest in responding to relevant business and technical enquiries. Where an enquiry concerns steps requested before entering into a contract, processing may also be necessary for those pre-contractual steps.

Technical document downloads

Some detailed technical documents require brief professional contact information before download. For these requests we process the document requested, your name, organisation, email address and any optional phone number you provide. The information is used to provide the requested material and, where you have agreed in the request form, to allow Kostet Consulting to follow up regarding the relevant product, system or technical subject. Download request records are stored on the Kostet web server and a notification is delivered to Kostet Consulting by email.

Storage and email delivery

Enquiries are stored on the Kostet web server and are also delivered by email to Kostet Consulting. Email delivery is provided through our mail service provider. The destination email address used internally by the form is not published on the website.

Retention

Enquiry information is kept only for as long as reasonably necessary to handle the enquiry, maintain relevant business correspondence and meet applicable legal or administrative requirements. Information that is no longer needed is deleted.

Security and audit logs

The structured administrator audit log records limited technical information needed to operate, troubleshoot and protect kostet.se and secure.kostet.se. Records may include the source IP address, date and time, service, requested path without its query string, result code, and security-relevant events such as a form submission, encrypted-package receipt or administrator login attempt. Separately protected reverse-proxy diagnostics may also be retained under normal operating-system log rotation.

Form messages, contact details, cookies, authentication values, document filenames and encrypted document contents are not copied into the audit log. For secure document transfers, the audit record states only that an encrypted package was accepted, together with its submission reference and encrypted size.

Ordinary access records are limited to 20,000 entries per service and no more than 30 days by default. Higher-value form, upload and administrative audit records are kept separately, limited to 5,000 entries per service and no more than 180 days by default. Older records are removed automatically. These limits may be reduced when appropriate.

IP addresses may be resolved locally against an offline geolocation database to show an approximate country, region, city or network owner to an authorised administrator. No visitor IP address is sent to an external geolocation service. IP-derived locations are approximate and are not treated as a physical address or proof of a person's location.

Analytics, advertising and cookies

Kostet.se currently uses no advertising trackers, behavioural analytics or third-party marketing cookies. If this changes, this notice will be updated before such services are enabled.

Sharing of information

Information is not sold. It is shared only where necessary to operate the website and email service, respond to an enquiry, comply with legal obligations, or protect the security and integrity of our systems.

Your rights

Subject to applicable data-protection law, you may have rights to request access to personal data concerning you, correction of inaccurate data, deletion, restriction of processing, or to object to certain processing. You may also have the right to lodge a complaint with the competent data-protection authority.

Data controller and contact

Kostet Consulting is responsible for the processing described in this notice. Privacy-related requests can be sent through the contact form on this website; state clearly that the message concerns privacy or personal data.

Last updated: 17 September 2026.