This policy describes how Dragster processes personal data when you visit our website, use our AI chat, contact us or apply for a job with us. We have tried to keep it short and concrete. Last updated: 20 October 2026.
Data controller
Dragster Kommunikation AB, corporate ID 556540-1733, is the data controller for the processing of personal data on this website. We are located at Adolf Edelsvärds gata 12 (Pråm III), 414 51 Gothenburg, and Föreningsgatan 5, 461 30 Trollhättan, Sweden. Questions about personal data can be sent to info@dragster.se.
What we process and why
When you visit the website
When you load a page, technical data such as your IP address, browser, device and time of visit is processed in server logs at our hosting provider. We use it for operation, troubleshooting and security. The legal basis is legitimate interest (keeping the website working and protected). Logs are kept for a limited time according to the hosting provider’s routines.
Videos and images
Films and some images on the website are delivered by Bunny.net (BunnyWay d.o.o., Slovenia, within the EU), including via iframe.mediadelivery.net and b-cdn.net. When a film or image loads, your IP address is sent to Bunny, which is our data processor and only processes it to deliver the content. The legal basis is legitimate interest (being able to show our content).
The AI chat on the start page
The chat is answered by an AI assistant. When you send a message, the text of the conversation, together with the page language, is transmitted to our chat server (chat.dragster.se, a server in Sweden) and forwarded to OpenAI in the USA, which generates the reply. Answers are generated automatically and may contain errors; they are not binding offers or advice, and the AI makes no decisions that affect you.
The conversation is not stored on the website – it exists in your browser while the page is open and is cleared when you leave or reload. The chat server stores only technical statistics (time, number of tokens, cost and an anonymous conversation ID) to follow up operation and cost, not the text itself and not your IP address. Your IP address is used temporarily in the server’s memory to limit the number of questions per hour and is not stored. OpenAI processes the messages to produce the reply and, according to its terms, may keep them for a limited time for abuse monitoring; they are not used to train OpenAI’s models.
Please do not enter personal data – such as names, contact details or sensitive information – in the chat. If you would like us to get in touch, use the contact form or email us. The legal basis is legitimate interest (offering an automated way to answer questions about our services).
The contact form and email
When you fill in the contact form we process your name, email address, phone number and message so that we can reply. The data is stored in the website’s database and sent to us by email. The same applies when you email us directly. The legal basis is legitimate interest in answering your enquiry, or taking steps to prepare a contract if you ask for a quote. We keep the data while the matter is open and for up to 12 months after the last contact, unless we start working together – in which case the data we need for the assignment applies.
Applications and open applications
When you apply for a job or send an open application we process your name, email address, phone number, link to a website or portfolio, the files you attach (for example a CV and cover letter) and anything else you choose to tell us. We use it to assess your application. The legal basis is legitimate interest in carrying out recruitment and, if you agree to it, your consent to keep the application longer. Without consent we delete the data no later than 6 months after the recruitment has ended; with consent we keep it for at most 24 months. You can ask us to delete it at any time. Please do not send sensitive information (for example about health or religion) unless it is necessary.
Cookies and similar technologies
We only use what is needed for the website to work: one functional cookie (wp-wpml_current_language) that remembers the language you chose. It does not require consent. We do not use web analytics, advertising cookies or social plugins that track you, and the fonts are loaded from our own server. Links to Instagram and LinkedIn are ordinary links – their terms apply only when you click through. You can always block or delete cookies in your browser. If we start using tools in future that require consent, we will ask you first and update this policy.
Who we share data with
We never sell your personal data. We only use processors that handle the data on our behalf and under agreement:
- our hosting provider (website, database and server logs)
- Bunny.net (delivery of film and images)
- the provider of our chat server
- OpenAI (the AI chat, USA)
- our email provider (when form messages and email are sent)
We may also have to disclose data if required by law or a decision by an authority.
Transfers outside the EU/EEA
When you use the AI chat, messages are transferred to OpenAI in the USA. The transfer relies on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses, together with the safeguards OpenAI describes in its terms. We do not move other personal data outside the EU/EEA.
Your rights
You have the right to:
- know what personal data we hold about you and receive a copy (access)
- have incorrect data corrected
- have your data erased, where the law gives you that right
- request that processing is restricted
- object to processing based on legitimate interest
- receive your data in a structured format (data portability), for data you provided yourself
- withdraw consent at any time
Email info@dragster.se and we will reply within one month. We may need to ask you to verify your identity. If you have concerns about how we handle your data you can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
Security
We use reasonable technical and organisational security measures to protect your personal data against unauthorised use and exposure, for example encrypted transfer (https) and limited, personal access to form submissions and applications.
Changes to this policy
We update this policy when the website or our processing changes. The latest version is always here, with the date at the top.