Privacy Policy
How Sensative AB collects, uses and protects personal data. Version 3.1, last updated 1 November 2026.
What this policy covers
This policy explains what personal data Sensative AB collects, why, and what your rights are. It covers our websites sensative.com and seatsense.se (SeatSense is a business area of Sensative AB), our webshop (shop.sensative.com), our recruitment, and — in outline — Yggio and the services built on it. The short version: we collect little, sensative.com sets no cookies, seatsense.se sets one only if you accept it, and we keep only what we need.
Who we are
Sensative AB, registration number 556922-4644, Mobilvägen 10, 223 62 Lund, Sweden. Sensative AB is the data controller for the personal data described in this policy, except where the section on Yggio says otherwise. Sensative Inc., our wholly owned subsidiary in Delaware, United States, serves customers in North America; where it processes personal data it does so on behalf of Sensative AB and under this policy. Our Data Protection Officer can be reached at dpo@sensative.com.
When you visit sensative.com
sensative.com sets no cookies and uses no analytics or tracking scripts. Fonts, images and scripts are served from our own servers. Our web server keeps standard access logs (IP address, time, page requested, browser type) for security and operation. These logs are kept for a limited period and are not used to identify visitors. Legal basis: our legitimate interest in running a secure website. If you choose a language in the language menu, your browser remembers that choice on your own device (in its local storage) so that we can offer it on other pages; it is never sent to us, and you can clear it in your browser settings. If you close the language suggestion, the browser also remembers that for the current tab, so that it does not come back on every page.
Two parts of the website involve a third party:
- Machine translation. Pages we have not translated ourselves can be read in Swedish, German, French or Spanish through Google Translate. Nothing is sent until you choose it: the page then opens on Google’s translation service, which receives your IP address and the page you are reading, and handles that data under its own privacy policy.
- Embedded videos. A few pages show a video from YouTube. We use YouTube’s privacy-enhanced mode, which sets no cookies until you play the video. Your browser still contacts YouTube (Google) to show the player, which gives Google your IP address; Google handles that data under its own privacy policy.
All product sheets download directly, without a form.
When you visit seatsense.se
seatsense.se is hosted by GitHub Pages (GitHub, Inc.). Like any web server, GitHub receives your IP address when you visit and may log it to deliver the site and protect it against abuse. Legal basis: our legitimate interest in running a secure website. GitHub is based in the United States and certified under the EU–US Data Privacy Framework. Fonts, images and videos are served from the site itself; the SeatSense product sheet downloads without a form.
Cookies, only with your consent. seatsense.se shows a cookie banner. Only if you click Accept do we use Leadfeeder, provided by Dealfront, to see which organisations visit the site: it processes your IP address, the pages you visit and the time of your visit, and matches the IP address to the organisation it belongs to. We use this to follow up with relevant information about SeatSense, business to business. Legal basis: your consent. You can withdraw it at any time through Cookie settings at the bottom of every page; that does not affect what was processed before. Dealfront processes the data on our behalf within the EU/EEA.
| Cookie | Set by | Purpose | Kept for |
|---|---|---|---|
_lfa | Leadfeeder (Dealfront) | Identifies which organisation is visiting. Only set if you accept. | 2 years |
cookie_consent | SeatSense | Remembers your cookie choice. Strictly necessary. | 1 year |
The contact form. When you use the contact form on seatsense.se, we receive your name, work e-mail, company, role, your message, and which page and language you used. We use them to answer your enquiry and follow it up. They are stored in our customer relationship system, Odoo, used by our sales team; Odoo SA processes them on our behalf within the EU/EEA. Legal basis: our legitimate interest in answering and following up business enquiries. We keep them while we are in contact about your enquiry, and at most 24 months after our last contact, unless you become a customer.
When you contact us
If you write to us — to sales, support, our press contact or any other address — we keep your message and our reply for as long as the matter is open and for a reasonable time afterwards. Our e-mail is hosted by Microsoft 365 within the EU. Business enquiries may be recorded in our customer relationship system, Odoo, within the EU/EEA. Legal basis: performance of a contract or steps before one, or our legitimate interest in answering you.
When you subscribe to our news by email
On the What’s New page you can ask for our news by e-mail: a short summary when there is a new Yggio release, a new sensor or a press release, a few times a year. We ask only for your e-mail address. You are added to the list when you submit the form, and we send you a welcome e-mail; we record the time of your sign-up as proof of consent. If an address was entered by someone else, the unsubscribe link in that first e-mail removes it at once. Legal basis: your consent, which you can withdraw at any time through the unsubscribe link at the bottom of every mailing; we then stop sending to you at once.
The mailings are sent through Brevo (Brevo SAS, Paris), which processes the list on our behalf within the EU. Like most e-mail services, Brevo notes whether a mailing was opened and which links were clicked; we use that only to see what interests our readers as a whole, not to follow individuals. Links in the mailings go through our own subdomain em.sensative.com.
When you buy from our webshop
To process an order we need the name, company, delivery and invoicing address, e-mail address, telephone number and, for business customers, the VAT number of the person placing it. We keep the order history for as long as you are a customer. Payment details are handled by our payment provider and are not stored by us. Invoices and accounting records are kept for seven years, as Swedish bookkeeping law requires. Legal basis: performance of the contract, and our legal obligations.
When you apply for a job
If you apply for a position or send us an open application, we keep the application and our notes for two years after the recruitment ends, so that we can come back to you for later openings, unless you ask us to delete it sooner. Legal basis: our legitimate interest in recruiting, and your consent to being kept on file.
Yggio and the services built on it
Yggio is our operational layer for sensors and systems. Depending on how it is delivered, our role under data protection law differs:
- On your own premises. You run Yggio yourself; the data stays with you and we process nothing, apart from what you share with us for support.
- As a service. We host Yggio for you, in the region you choose — within the EU, in the United States, or elsewhere. You are the data controller and we are your data processor under a Data Processing Agreement. Data is stored in the region you selected and is not moved without your instruction.
- Behind one of our solutions such as SeatSense, leak detection or office utilisation. The same applies: you are the controller, we are the processor. Note that our occupancy sensors detect presence, not people — SeatSense and office-utilisation data contain no personal data.
- Inside a partner’s service. If you use a partner’s product with Yggio behind it, the partner is your processor and we act as their sub-processor, under the same obligations.
In every case, the data that flows through Yggio belongs to the customer. How long it is kept is governed by Yggio’s data-retention settings: the platform ships with sensible defaults, and we adjust them on the customer’s request. We do not use it for our own purposes, and access is limited to what operating the service requires. Our standard Data Processing Addendum is published in the Yggio documentation, together with our other agreements; questions go to legal@sensative.com.
Who we share data with
We share personal data only with suppliers who process it on our behalf and under our instructions — hosting (including GitHub for seatsense.se), e-mail, our news mailings (Brevo), our customer relationship system (Odoo), the webshop platform, payment and accounting, and — only if you accept the cookie on seatsense.se — Dealfront for Leadfeeder — and with public authorities where the law requires it. If Sensative were to be sold or merged, customer records may be transferred to the new owner under the same conditions. We never sell, rent or trade personal data.
Transfers outside the EU/EEA
Data collected through our websites and webshop is stored within the EU/EEA. The one exception is the web hosting of seatsense.se: GitHub, Inc. is based in the United States and certified under the EU–US Data Privacy Framework. Yggio as a service stores data in the region the customer chooses; a customer who chooses a region outside the EU/EEA does so under the terms of their own agreement with us.
How long we keep data
- Web server logs: a limited period, for security
- Enquiries through the seatsense.se contact form: at most 24 months after last contact, unless you become a customer
- Other enquiries: for as long as the matter is open and a reasonable time afterwards
- News by e-mail: your address and the time of sign-up for as long as you are subscribed; when you unsubscribe, the address is kept only on the suppression list so that we do not write to you again
- Leadfeeder on seatsense.se (only with consent): the cookie up to 2 years, visit data 12 months
- Customer and order records: for the duration of the relationship, then seven years for accounting
- Job applications: two years after the recruitment ends
- Data in Yggio: according to the platform’s data-retention settings — sensible defaults, adjusted on the customer’s request — and deleted when the agreement ends
How we protect data
We apply technical and organisational measures appropriate to the risk: access on a need-to-know basis, encryption in transit, hardened systems, independent penetration testing of Yggio, and an information security policy that every employee follows. If a breach is likely to affect your rights, we will tell you and the supervisory authority without undue delay. Security concerns can be reported to security@sensative.com; see also security.txt.
Your rights
Under the GDPR you may ask us to tell you what personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to give you a copy in a portable format. Where we rely on your consent you may withdraw it at any time. Write to dpo@sensative.com; we may need to verify your identity first, and we answer within a month. You also have the right to complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se).
Changes to this policy
We update this policy when what we do changes. The version number and date at the top tell you which version you are reading; material changes are announced on this website before they take effect.
Contact
Sensative AB
Mobilvägen 10
223 62 Lund, Sweden
Data Protection Officer: dpo@sensative.com