Privacy Policy

Last updated: 23 October 2026

This policy explains how Volupe AB handles personal data when you visit volupe.com, contact us, register for an event or training, subscribe to our newsletter, use a customer account or apply for a job with us. It also explains which cookies and similar technologies we use, and the rights you have under the EU General Data Protection Regulation (GDPR).

Contents: 1. Who we are · 2. What we collect and why · 3. Cookies and similar technologies · 4. Who we share data with · 5. Transfers outside the EU/EEA · 6. How long we keep data · 7. Your rights · 8. Complaints · 9. Security · 10. Changes to this policy

1. Who we are

The controller responsible for your personal data is:

Volupe AB (Swedish company reg. no. 559134-8676)
Kobbegårdsvägen 7, 436 34 Askim, Sweden
Phone: +46 31 763 20 20
Email: support@volupe.com

Use the contact details above for any question about this policy or about how we handle your data.

2. What we collect and why

We only collect what we need for each purpose. For each activity below you will find the data, the purpose, the legal basis under the GDPR and how long we keep the data. Fields marked as required in a form are needed for us to handle your request. You are not otherwise obliged to give us any personal data.

2.1 Enquiries through our forms

This covers the contact form, the forms on our product pages and on the home page, and the “Ask us about your project” form.

Data

Name, work email, company, country, what you are interested in (for example a licence quote, demo, trial, training or technical question), whether you are already a customer, your message, and the page or product you sent the form from. The website also saves the date and time of the submission, your IP address and browser details.

Purpose

To answer your enquiry, prepare a quote, demo or trial, follow up on it and keep a record of our contact with you. We store enquiries in our customer relationship management system (Salesforce) and pass them to the Volupe colleague who covers your country.

Legal basis

When you ask for a quote, trial or similar: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). In other cases: our legitimate interest in answering and following up on business enquiries (Art. 6(1)(f)).

Retention

Up to 24 months after our last contact, unless the enquiry leads to a customer relationship.

If your enquiry concerns Siemens software, for example a licence quote, trial or technical question, we may share your contact details and your enquiry with Siemens (see section 4).

If your company is based in a country where we work with a local sales partner, currently BSIM Engineering in Italy, we pass your enquiry to that partner so they can answer you.

2.2 Webinar recordings

Data

Company, email address, phone number, preferred language and the webinar you asked for.

Purpose

To send you the recording, and to follow up on your interest in the topic.

Legal basis

Sending the recording you asked for: Art. 6(1)(b). Follow-up: our legitimate interest in following up on interest in our products (Art. 6(1)(f)). You can object to follow-up at any time.

Retention

As for enquiries (2.1).

2.3 Events, webinars and training

Data

For each participant: name, email address and company, the event or course, the number of places booked and the booking reference. For paid training we also keep the information needed to invoice your company.

Purpose

To handle your registration, send confirmations and practical information, run the event or course, invoice paid training and ask for your feedback afterwards.

Legal basis

Performance of the agreement about your participation (Art. 6(1)(b)). Invoices and accounting records: our legal obligation under the Swedish Accounting Act (Art. 6(1)(c)). Feedback and follow-up: our legitimate interest (Art. 6(1)(f)).

Retention

Registration data up to 24 months after the event. Accounting records until the end of the seventh year after the end of the financial year they belong to, as the Swedish Accounting Act requires.

For events and training that we run together with Siemens, we may share participant details with Siemens.

The booking form is protected against spam by Google reCAPTCHA (see 2.8).

2.4 Newsletter

Data

Your email address, the date and time you subscribed, and the sign-up form you used. If you gave us your name when you subscribed, also your name.

Purpose

To email you each time one of our application specialists publishes a new article on the Volupe blog. We do not share your newsletter address with Siemens or other partners, and we do not add it to our sales systems.

Legal basis

Your consent (Art. 6(1)(a)). We keep a record of when and through which form you subscribed, so that we can show that you gave it. You can withdraw your consent at any time with the unsubscribe link in every email, or by contacting us.

Retention

Until you unsubscribe. After that we keep only your email address on a suppression list, so that we do not email you again.

If someone else has subscribed your address, use the unsubscribe link in the email or write to support@volupe.com, and we will remove it.

2.5 Customer accounts

Customers can be given an account for our customer area and services such as licence hosting.

Data

First and last name, email address, username, password (stored only in encrypted form), company name, address, the services your account gives access to, and login records such as time and IP address.

Purpose

To give you access to the services, manage your account and keep it secure.

Legal basis

Performance of our agreement with you or your employer (Art. 6(1)(b)). Security and logging: our legitimate interest in protecting accounts (Art. 6(1)(f)).

Retention

While the account is active, and up to 12 months after the customer relationship ends.

2.6 When you email or call us, and business contacts

Data

Name, job title, company, contact details and what you write or tell us. This includes contact persons at customers, suppliers and partners.

Purpose

To answer questions and support cases, deliver and sell our services, and manage the relationship with your company.

Legal basis

Performance of a contract when you are the contracting party (Art. 6(1)(b)). Otherwise our legitimate interest in managing business relationships with the company you work for (Art. 6(1)(f)).

Retention

While the business relationship lasts and up to 24 months after it ends, unless a longer period is required by law.

2.7 Job applications

Data

What you send us when you apply by email to info@volupe.com: usually your CV, cover letter and contact details, plus our notes from interviews. Please do not send sensitive information, such as health data, that we have not asked for.

Purpose

To assess your application and run the recruitment.

Legal basis

Steps taken at your request before an employment contract (Art. 6(1)(b)) and our legitimate interest in finding the right candidate (Art. 6(1)(f)).

Retention

Up to 24 months after the recruitment has ended, so that we can respond to any legal claims under the Swedish Discrimination Act. We keep your application longer only if you agree to it.

2.8 Running and protecting the website

Data

IP address, browser and device details, the pages you request and the time of each request. These are recorded in our hosting provider’s server logs and by our website firewall. On event and training booking pages, Google reCAPTCHA analyses your browser and how you interact with the page to tell people from bots.

Purpose

To deliver the website, keep it secure, stop spam and abuse, and fix errors.

Legal basis

Our legitimate interest in a secure and working website (Art. 6(1)(f)).

Retention

Server and security logs are deleted automatically after a limited period. reCAPTCHA data is processed by Google under its own terms.

Some fonts and icons on the website are loaded from Google Fonts and the Font Awesome network. When a page loads, your browser connects to these services, which receive your IP address.

2.9 Statistics

Plausible Analytics gives us visitor statistics without cookies. It does not store your IP address or any identifier that follows you between days, and its data is stored in the EU. Legal basis: our legitimate interest in understanding how the website is used (Art. 6(1)(f)).

Google Analytics 4 (loaded through Google Tag Manager) gives us more detailed statistics. It sets cookies only if you accept the “Analytics” category. We use Google Consent Mode: if you decline, Google’s tags may still send basic signals without cookies or identifiers, which Google uses to model aggregate statistics. Legal basis: your consent (Art. 6(1)(a)). Google Analytics data is kept for up to 14 months.

2.10 Marketing and business insight

We use the following services only if you accept the “Advertisement” category in Cookie settings. Legal basis: your consent (Art. 6(1)(a)).

• Google Ads: measures whether our ads lead to visits and enquiries, and lets us show ads to people who have visited our website.
• LinkedIn Insight Tag: measures our LinkedIn campaigns and gives us aggregated, anonymous statistics about visitors’ professional profiles.
• Leadinfo: identifies which company a visit comes from, based on the IP address, and shows us which pages were visited. If you are a sole trader, this can identify you personally. Leadinfo can also record how you scroll and click on our pages (session recording).
• Salesloft: if you have received an email from us through Salesloft, links your later visits to our website to that contact, so that our sales team can follow up.

2.11 Videos and social media

Videos on the website are played through SmartVideo (Swarmify) and YouTube. YouTube sets cookies only if you accept the relevant categories in Cookie settings.

Links to our pages on LinkedIn, Facebook and Instagram are ordinary links. Nothing is sent to these platforms until you click them. When you visit our pages on these platforms, their own privacy policies apply. For the statistics the platforms give us about our pages, we and the platform are joint controllers.

3. Cookies and similar technologies

Cookies are small text files that a website stores in your browser. Similar technologies, such as local storage, work in the same way. Under the Swedish Electronic Communications Act, we ask for your consent before we store or read anything that is not strictly necessary.

Your choices

When you first visit the website, a banner from our consent tool, CookieYes, lets you accept or reject each category. You can change or withdraw your consent at any time in Cookie settings. The same link is in the footer of every page. Cookie settings also lists every cookie we use, with its duration, based on our latest scan. Your choice is stored in the cookie cookieyes-consent for up to 12 months. You can also delete cookies in your browser settings.

Categories

Downloads from the website use the session cookie __wpdm_client (Download Manager) to deliver the file.

4. Who we share data with

We do not sell personal data. We share it only with the following recipients, and only as far as needed for the purposes above. Suppliers that process data on our behalf (processors) may use it only on our instructions and under a data processing agreement.

When we share data with Siemens, the legal basis is the same as for the original purpose. If you ask for a quote, trial or licence, it is taking steps before a contract or performing a contract (Art. 6(1)(b)). Otherwise it is our legitimate interest in selling and supporting Siemens software (Art. 6(1)(f)).

We may also disclose personal data to authorities when the law requires it, to our auditors and legal advisers, and to a buyer or investor if all or part of our business is sold or restructured. In that case the data stays protected by this policy.

5. Transfers outside the EU/EEA

Some of the recipients above process data outside the EU/EEA. We transfer data only when one of the following safeguards applies:

• an adequacy decision by the European Commission, for the United Kingdom, Israel, or US companies certified under the EU–US Data Privacy Framework; or
• the European Commission’s standard contractual clauses, together with any additional measures that are needed.

Contact us if you would like more information about the safeguard used for a specific transfer.

6. How long we keep data

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy of it;
• have incorrect data corrected;
• have your data erased, for example when we no longer need it or you withdraw your consent, unless we must keep it by law;
• restrict our use of your data while a question about it is being resolved;
• object to processing based on our legitimate interest. You can always object to direct marketing, and we will then stop;
• data portability: receive data you have given us, which we process on the basis of consent or contract, in a machine-readable format, or have it sent to another company;
• withdraw your consent at any time. This does not affect processing that took place before you withdrew it.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

To use your rights, email support@volupe.com. We answer within one month. If a request is complex, we may extend this by up to two further months, and we will tell you why. We may ask you to confirm your identity.

8. Complaints

If you are unhappy with how we handle your data, please contact us first and we will try to resolve it. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, www.imy.se, or with the data protection authority in the EU/EEA country where you live or work.

9. Security

We protect personal data with technical and organisational measures that match the risk. These include encrypted connections (HTTPS), access only for staff who need the data, strong authentication, security updates, a website firewall and data processing agreements with our suppliers.

The website is meant for professionals and is not directed at children.

10. Changes to this policy

We update this policy when our processing changes. The date at the top shows when it was last updated. If a change is significant, we will make that clear on the website or tell you directly.