Privacy policy

Who we are

Done Sweden AB (“Done”, “we”) is a company based in Stockholm, Sweden. We provide an installation platform and installation services for EV chargers, home batteries, heat pumps, and related green technology. Done Sweden AB is the data controller for the processing described in this policy. You can reach us about anything privacy-related at malin@done.green.

This policy covers two contexts: this marketing website (done.green) and the Done platform, the software and services we provide to deliver installations. They process very different amounts of data, so we describe them separately.

What we process

On this website

The website is deliberately minimal. As on any website, the servers that deliver its pages, fonts, and images receive your IP address and basic browser details when a page loads. Some of these servers are run by third parties: our hosting provider, and Simple Icons (cdn.simpleicons.org) and VectorLogoZone (www.vectorlogo.zone), which serve some of the integration logos. Beyond that, we process personal data here only when you give it to us: if you email us or book a meeting through the Google Calendar link on our contact page, we receive the contact details and message you send (typically name, email address, company, and what you wrote). If you choose a language with the language switcher, the site sets a cookie that remembers your choice (English or Swedish) so pages can be shown in that language; it contains nothing that identifies you. We do not run analytics or advertising trackers on this site. See our cookie notice for the full picture.

On the Done platform

When an installation is delivered through Done, we process the data needed to deliver it. Depending on your role (customer, installer, or reseller user), this includes:

• Account data: name, email address, phone number, company affiliation, and login credentials.
• Order and job data: the installation address, the products ordered, photos of the installation site (for example your electrical cabinet), scheduling details, quotes, and approvals. Photos you submit in the pre-installation check are analyzed automatically to identify electrical components (such as meter and fuse box) and flag likely extra work before a visit; messages in the in-app chat are also analyzed automatically to gauge urgency and route them appropriately. This analysis supports, and does not replace, human decisions.
• Communication data: messages, photos, documents, and call metadata from the in-app chat and calls used to coordinate the installation.
• Documentation and financial data: installation reports, compliance documentation, invoices, payout records, and where applicable the data required for Swedish tax deductions (such as ROT or the green technology deduction).

Why we process it, and on what legal basis

• Performing the contract. Most platform processing happens because it is necessary to deliver the installation you are part of: matching an installer, scheduling, communicating, quoting, documenting, and invoicing.
• Legitimate interest. We process some data based on our legitimate interests: responding when you contact us, securing and improving the platform, preventing fraud and abuse, and reasonable business-to-business communication. You can object to processing based on legitimate interest at any time.
• Legal obligations. Some processing is required by law, most notably Swedish bookkeeping legislation, which obliges us to retain accounting records such as invoices, and tax rules connected to deduction handling and reporting.

Who we share data with

The parties to your installation. Coordinating an installation means the people involved can see what they need to do their part: the customer, the installer, and the reseller see job-relevant data such as the installation address, site photos, schedules, messages in the shared job conversation, quotes, and documentation.

Service providers (processors). We use service providers to run our services, under data processing agreements: cloud infrastructure (Google Cloud, with data hosted in the EU), and providers for communication delivery (such as SMS, email, and push notifications) and invoicing and payments. They process data on our instructions and not for their own purposes.

Authorities. We share data with authorities when the law requires it, for example with the Swedish Tax Agency (Skatteverket) in connection with deduction handling.

We do not sell personal data.

How long we keep data

We keep personal data as long as it is needed for the purposes above: for the duration of the installation and the contractual relationship, and afterwards as long as needed to handle warranty, service history, and potential claims. Data that forms part of our accounting records is retained for the period required by the Swedish Bookkeeping Act, currently seven years. When data is no longer needed, we delete or anonymize it.

Your rights

Under the GDPR you have the right to:

• Request access to the personal data we hold about you
• Have inaccurate data corrected
• Have data erased, where no legal obligation requires us to keep it
• Restrict or object to certain processing, including processing based on legitimate interest
• Receive data you have provided to us in a portable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email malin@done.green. If you believe we are processing your data unlawfully, you also have the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), at imy.se.

International transfers

We store and process data primarily within the EU/EEA. Where a service provider involves a transfer of personal data outside the EU/EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or the European Commission's standard contractual clauses, together with any additional measures needed.

Changes to this policy

We update this policy when our processing or the law changes. The date at the top shows when it was last revised. For significant changes affecting platform users, we will inform you through the platform or by email.

Contact

For questions about this policy or how we handle your data, contact Done Sweden AB, Stockholm, at malin@done.green.