Sensative AB Privacy Policy
Version 2.0 - last updated 27 September 2026
What this policy covers
This policy explains what personal data Sensative AB collects, why, and what your rights are. It covers our website (sensative.com), our webshop (shop.sensative.com), our recruitment, and - in outline - the Yggio platform and the services built on it. The short version: we collect little, we track nothing, and we keep only what we need.
Who we are
Sensative AB, registration number 556922-4644, Mobilvägen 10, 223 62 Lund, Sweden. Sensative AB is the data controller for the personal data described in this policy, except where the section on Yggio says otherwise. Our Data Protection Officer can be reached at dpo@sensative.com.
When you visit our website
Our website uses no cookies, no analytics and no tracking. Fonts and all other resources are served from our own servers, so your visit is not reported to any third party. Our web server keeps standard access logs (IP address, time, page requested, browser type) for security and operation. These logs are kept for a limited period and are not used to identify visitors.
Legal basis: our legitimate interest in running a secure website.
When you download a product sheet
When you request a product sheet on a solution page, we ask for your name, company and e-mail address. We use them to send you the sheet and, where relevant, to follow up on your interest. The form is handled by a form-processing service acting on our behalf. We keep these details for up to twelve months after our last contact with you, unless you become a customer.
Legal basis: our legitimate interest in responding to enquiries; you can object at any time by writing to dpo@sensative.com.
When you contact us
If you write to us - to sales, support, our press contact or any other address - we keep your message and our reply for as long as the matter is open and for a reasonable time afterwards. Our e-mail is hosted by Microsoft 365 within the EU.
Legal basis: performance of a contract or steps before one, or our legitimate interest in answering you.
When you buy from our webshop
To process an order we need the name, company, delivery and invoicing address, e-mail address, telephone number and, for business customers, the VAT number of the person placing it. We keep the order history for as long as you are a customer. Payment details are handled by our payment provider and are not stored by us. Invoices and accounting records are kept for seven years, as Swedish bookkeeping law requires.
Legal basis: performance of the contract, and our legal obligations.
When you apply for a job
If you apply for a position or send us an open application, we keep the application and our notes for two years after the recruitment ends, so that we can come back to you for later openings, unless you ask us to delete it sooner.
Legal basis: our legitimate interest in recruiting, and your consent to being kept on file.
Yggio and the services built on it
Yggio is our operational layer for sensors and systems. Depending on how it is delivered, our role under data protection law differs:
- On your own premises. You run Yggio yourself; the data stays with you and we process nothing, apart from what you share with us for support.
- As a service. We host Yggio for you, in the region you choose - within the EU, in the United States, or elsewhere. You are the data controller and we are your data processor under a Data Processing Agreement. Data is stored in the region you selected and is not moved without your instruction.
- Behind one of our solutions such as SeatSense, leak detection or office utilisation. The same applies: you are the controller, we are the processor. Note that our occupancy sensors detect presence, not people - SeatSense and office-utilisation data contain no personal data.
- Inside a partner's service. If you use a partner's product with Yggio behind it, the partner is your processor and we act as their sub-processor, under the same obligations.
In every case, the data that flows through Yggio belongs to the customer. How long it is kept is governed by Yggio's data-retention settings: the platform ships with sensible defaults, and we adjust them on the customer's request. We do not use it for our own purposes, and access is limited to what operating the service requires. Our standard Data Processing Agreement is available on request from legal@sensative.com.
Who we share data with
We share personal data only with suppliers who process it on our behalf and under our instructions - hosting, e-mail, the webshop platform, payment, accounting and the form service mentioned above - and with public authorities where the law requires it. If Sensative were to be sold or merged, customer records may be transferred to the new owner under the same conditions. We never sell, rent or trade personal data.
Transfers outside the EU/EEA
Data collected through our website and webshop is stored within the EU/EEA, with one exception: the form service that receives product-sheet requests is based in the United States and is used under the European Commission's Standard Contractual Clauses. Yggio as a service stores data in the region the customer chooses; a customer who chooses a region outside the EU/EEA does so under the terms of their own agreement with us.
How long we keep data
| What | How long |
|---|---|
| Web server logs | A limited period, for security |
| Product-sheet requests and other enquiries | Up to twelve months after last contact |
| Customer and order records | For the duration of the relationship, then seven years for accounting |
| Job applications | Two years after the recruitment ends |
| Data in Yggio | According to the platform's data-retention settings - sensible defaults, adjusted on the customer's request - and deleted when the agreement ends |
How we protect data
We apply technical and organisational measures appropriate to the risk: access on a need-to-know basis, encryption in transit, hardened systems, independent penetration testing of Yggio, and an information security policy that every employee follows. If a breach is likely to affect your rights, we will tell you and the supervisory authority without undue delay. Security concerns can be reported to security@sensative.com; see also security.txt.
Your rights
Under the GDPR you may ask us to tell you what personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to give you a copy in a portable format. Where we rely on your consent you may withdraw it at any time. Write to dpo@sensative.com; we may need to verify your identity first, and we answer within a month. You also have the right to complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se).
Changes to this policy
We update this policy when what we do changes. The version number and date at the top tell you which version you are reading; material changes are announced on this website before they take effect.
Contact
Sensative AB
Mobilvägen 10
223 62 Lund, Sweden
Data Protection Officer: dpo@sensative.com