Only what we need.
What Ampfer AB, the company behind Leyrs, does with personal data from this site and from the platform.
What we collect
When you write to us
Your name, business email and message. It arrives as an email and stays in our inbox.
When you visit the site
The usual server log: IP address, browser, pages. No analytics or advertising scripts, and the only thing stored in your browser is that you dismissed the cookie notice.
When you use the platform
Account details, and an audit log of who did what, and when.
Where the line sits
For this site and the business contacts we speak to, we are the data controller, and this page is the account of it. For everything inside the platform we are a processor. We act on your documented instructions under GDPR Article 28, and your agreement with us governs that data rather than this page. Leyrs is operated by Ampfer AB, Skeppsbron 34, 111 30 Stockholm, Sweden.
Why we are allowed to
To run the service
The contract between us, GDPR Article 6(1)(b).
To answer you
Legitimate interest, Article 6(1)(f): talking to people who asked us to, and keeping the site standing.
To meet our obligations
Accounting, tax and lawful requests from an authority. Article 6(1)(c).
Who else sees it
Infrastructure and AI providers
AWS, Google Cloud and Microsoft Azure, in the EU by default. Anywhere else only under Standard Contractual Clauses.
Email delivery
Resend carries contact-form submissions to our inbox.
Nobody else
Only our advisers, and any authority the law obliges us to answer. We never sell personal data or share it for advertising.
What you can ask us to do
See it, fix it, delete it
A copy of what we hold, a correction, an erasure, a portable export, or an objection to how we use it. We answer within 30 days.
How long we keep it
Business contacts while the relationship is live; accounting records for the seven years Swedish law requires; customer content deleted or returned within 30 days of termination.
Complain about us
Tell us first. If we do not put it right, we are supervised by the Swedish Authority for Privacy Protection (IMY).