Privacy Policy

Last updated: 2025-12-30

1. Introduction

Structura respects your privacy. This Privacy Policy explains how personal data is processed when you use the Structura platform.

Structura is designed for use within the public sector and professional organisations, with a strong focus on data minimisation, transparency, and accountability.

2. Data Controller and Roles

The data controller for the processing of personal data in Structura is Samlas AB, SE556763654201.

Depending on the context, Structura may act either as a data controller or as a data processor on behalf of its customers. Where Structura processes personal data as a data processor, this is governed by a separate Data Processing Agreement (DPA).

3. What Personal Data Is Processed?

Structura processes only the personal data necessary to provide the service, including:

name
email address
organisational affiliation
user identity and access permissions
technical system logs related to usage (excluding user-generated content)

Content created or uploaded within the service is controlled by the customer.

Structura is not intended for the processing of sensitive personal data.

4. Purposes of Processing

Personal data is processed in order to:

provide and administer the service
manage user accounts and access rights
enable collaboration between users
maintain security, traceability, and system operation

5. Legal Basis

Processing is based on one or more of the following legal grounds:

performance of a contract
compliance with legal obligations (e.g. accounting requirements)
legitimate interest in maintaining a secure and functional service

For public sector customers, additional legal bases may apply depending on the nature of the organisation's activities.

6. Storage and Retention

Personal data is stored only for as long as necessary for the specified purposes or as required by applicable law. Where Structura acts as a data processor, storage and deletion are carried out in accordance with the customer's instructions.

7. Disclosure of Personal Data

Personal data is not shared with third parties except:

technical sub-processors required for system operation and support
where disclosure is required by law

All sub-processors are bound by data processing agreements in accordance with GDPR requirements.

8. Transfers Outside the EU/EEA

Structura aims to ensure that all processing takes place within the EU/EEA. Where transfers outside the EU/EEA occur, approved safeguards under the GDPR are applied, such as Standard Contractual Clauses.

9. Your Rights

You have the right to:

request access to your personal data
request correction of inaccurate data
request erasure or restriction of processing
object to processing
request data portability
lodge a complaint with the relevant supervisory authority

10. Contact

Questions regarding personal data may be directed to: kontakt@structurafunding.se

Structura has an appointed Data Protection Officer (DPO).