Privacy policy

Introduction

This Privacy Policy explains how we collect and process personal data ("data") relating to visitors of barriar.eu (the "Website") — including procurement, medical, logistics and training staff in the armed forces and emergency services, researchers, and press — and anyone who contacts us, requests a field trial, documentation or samples, or otherwise gets in touch.

For the purposes of applicable data protection legislation, Disruptive Materials AB, corporate reg. no. 556934-1224, or as the case may be, companies from the same company group ("Disruptive Materials", "we", "us", "our"), is the controller of your personal data and determines how and why it is processed.

Should you have any questions regarding our processing of personal data, please contact us at barriar@disruptivematerials.com or refer to the contact details at the end of this Privacy Policy.

Further Information

For further information about this policy, you can contact our data protection officer at dataskyddsombud@disruptivematerials.com.

How We Collect Data

We collect your personal data:

• Through your use of the Website.
• When you contact us through the contact form or by email — for example to request a field trial, ask about procurement and pricing, request technical documentation or samples, or as press.
• When you interact with us at events, exhibitions or meetings.

Data collected during a field trial of Barriär in your unit — participants' feedback and any other trial records — is governed by the written trial agreement with your organisation, not by this Privacy Policy.

What Data We Collect

We do not collect more information than we need to fulfill the purposes described below.

Depending on how you interact with us, we may process:

• Contact and enquiry details — such as your name, work email address, organisation, role, country, the topic of your enquiry, and the content of your message.
• Request details — such as the unit, timing and scope of a field trial you ask about, or the documentation or samples you request, and any information you provide to help us respond.
• Technical and usage data — such as your IP address, browser and device type, the page you sent a message from, pages visited, and how you use the Website (see "Cookies" below). When you send a message we store a one-way hash of your IP address for the day, to recognise spam; the address itself is not kept.

Why We Process Your Data and Our Legal Basis

To respond to your enquiries and requests ("Communication purposes"). The legal basis is our legitimate interest in answering you and managing our relationship with you, or steps taken at your request prior to entering into an agreement — for example a field trial or a supply agreement. We send a confirmation email when we receive your message and may follow up on a request you made. The data is stored no longer than necessary for this purpose.

To operate, secure, and improve the Website. The legal basis is our legitimate interest in running an effective and secure website.

To comply with legal obligations. Where transactions or correspondence give rise to obligations under, for example, the Swedish Accounting Act (Sw. bokföringslagen) or other applicable legislation, the legal basis is compliance with a legal obligation. The data is stored as long as required by law.

To establish, exercise, or defend legal claims ("Legal rights"). The legal basis is our legitimate interest in doing so. Relevant information may be kept for up to 10 years in accordance with the Swedish Statute of Limitations Act (Sw. preskriptionslagen).

We do not send newsletters or marketing email from the Website, and we do not use your data for advertising.

How We Share Your Data

We do not sell your data to any third party. However, we may share information with suppliers who perform services on our behalf — for example, website hosting, storage of form submissions, email delivery, content management, and analytics. Such suppliers may only process the data in accordance with our instructions and under data processing agreements.

We may also disclose or share your data with:

• Auditors and professional advisors.
• A third party where necessary to comply with a legal obligation, whether by law or contract.

We strive to process all your data inside the EU/EEA. However, some of our IT providers operate in the United States — for example Google (through the use of Google Analytics). When personal data is shared with these providers, we put forth reasonable efforts to ensure the level of protection is equivalent to that applicable in the EU/EEA, through the providers' certification under the EU-U.S. Data Privacy Framework and/or the use of the European Commission's Standard Contractual Clauses, in accordance with applicable data protection legislation.

How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes described above, or as required by law (for example, accounting records are kept for seven years under Swedish law). Enquiry and request data is kept for as long as needed to handle your request and a reasonable period afterwards.

How We Protect Your Data

We use a range of technical and organizational measures to protect your data from unauthorized access, use, loss, change, or deletion in accordance with applicable data protection legislation. Such measures include, but are not limited to, physical controls, encryption, eligibility restrictions, and internal policies.

Your Rights

In accordance with applicable data protection legislation, you have the right to request access to, rectification, or erasure of your personal data, or restriction of its processing. You also have the right to object to processing, the right to data portability, and the right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details below.

You also have the right to lodge a complaint regarding our processing of your data with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, Sweden. You can also contact the data protection authority in the Member State of your domicile or place of work.

Cookies

The Website uses cookies and similar storage on your device. A cookie is a small text file that a website requests to save on your device. Necessary storage — such as your answer to the cookie banner — is always active, so we do not ask you again on every visit.

With your consent, we use Google Analytics to collect information about how the Website is used — such as the number of visitors, pages visited and time on the site — with IP addresses anonymised. We do not use marketing or advertising cookies.

You can manage or withdraw your consent at any time through "Cookie preferences" in the footer of the Website, or through your browser settings. The "Help" section of most browsers explains how to prevent your browser from accepting new cookies or how to be notified when you receive one.

Changes to This Privacy Policy

We reserve the right to make changes to this Privacy Policy from time to time. The current version is always available on this page. If substantial changes are made, we will inform you by email, provided we have your email address, or, if reasonably possible, in some other manner.

How to Contact Us

Please do not hesitate to contact us if you have any questions about this Privacy Policy or the processing of your data, or if you would like to exercise any of your rights.

You can contact us at: Disruptive Materials AB, corporate registration number 556934-1224, Virdings allé 32B, 754 50 Uppsala, Sweden, or by email at barriar@disruptivematerials.com.

You can contact our data protection officer at +46 (0)73-812 87 03 or dataskyddsombud@disruptivematerials.com.