Privacy Policy

1. Who we are (data controller)

The data controller responsible for your personal data is:

Ramletech
Org. no. 559480-1754
Sättingsvägen 26, 433 46 Partille, Sweden
Email: august.ramle@ramletech.com
Phone: +46 72 743 52 11

When an organisation uses Opimeet under a subscription, that organisation is the controller of the meeting data its members generate, and Ramletech acts as a processor on its behalf under a data processing agreement. For visitors to our website, Ramletech is the controller.

2. What personal data we collect

We collect only what we need for the purposes described below.

We do not knowingly collect special categories of data (such as health or political opinions), and the service is not intended for children.

3. Why we collect it & our legal basis

Under the GDPR we must have a lawful basis for every use of your data:

4. How long we keep it

We keep personal data only as long as we need it for the purpose it was collected:

• Contact enquiries — kept while we handle your request and for up to 12 months afterwards, then deleted.
• Account data — kept for as long as your account is active, and deleted within 90 days after the account is closed.
• Meeting data, transcriptions and survey responses — kept while your account is active or for the retention period your organisation configures, and deleted on request or on account closure.
• Server & security logs — kept for up to 90 days.
• Invoicing & accounting records — kept for as long as Swedish law requires (currently seven years).

Residual copies in encrypted backups are removed within 90 days as backups rotate.

5. Where it is stored

Your data is stored on servers located within the EU/EEA. Our website and email are hosted by a European provider with data centres in the EU. Data is encrypted in transit (HTTPS/TLS). If any processor we use operates outside the EEA, we only transfer data where appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.

For organisations with stricter data-residency, security or compliance requirements, Opimeet can be deployed on-premises on request — hosted within your own infrastructure or private cloud. In that setup your meeting data never leaves your environment and you keep full control over where it is stored. Contact us to discuss an on-premises deployment.

6. Who has access & our subprocessors

Access to personal data inside Ramletech is limited to the people who need it to run and support the service, and is protected by authentication and access controls. We never sell your data.

We use a small number of trusted subprocessors to deliver the service:

We keep an up-to-date list of subprocessors and will provide it, including the specific providers and locations, on request at august.ramle@ramletech.com.

7. Your rights under the GDPR

You have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — where we rely on consent, at any time.
• Lodge a complaint — with your supervisory authority. In Sweden this is the Swedish Authority for Privacy Protection (IMY), imy.se.

8. How to request access or deletion

To access, correct, export or delete your data — or to exercise any other right above — email us at august.ramle@ramletech.com with the subject “Privacy request”. Tell us what you would like to do and, if you have an account, the email address linked to it so we can verify your identity.

We respond to every request within one month. There is no charge for exercising your rights. If your organisation manages your Opimeet account, we may forward your request to them as the controller of that data.

9. Cookies

Our marketing website does not use advertising or tracking cookies and does not profile visitors. The Opimeet application uses only the strictly necessary cookies required to keep you signed in and secure. Because these are essential to the service, they do not require consent.

10. Changes to this policy

We may update this policy as the service evolves or the law changes. We will revise the “Last updated” date above and, for significant changes, notify account holders by email. Please check back from time to time.

11. Contact for privacy questions

For any question about this policy or how we handle your data, contact us: