Cookie Policy

Effective Date: 14.09.2026

In this Cookie Policy, “Accesa”, “we”, “us” or “our” means Accesa AB and AITS (Accesa Romania), where they jointly determine the purposes and essential means of processing personal data through or in connection with cookies and similar storage and access technologies used on this website.

We are committed to protecting the privacy of visitors to this website and to handling any personal data processed through cookies in accordance with Regulation (EU) 2016/679 (EU GDPR), the Swedish Act (2018:218) with Supplementary Provisions to the EU General Data Protection Regulation and the Swedish Electronic Communications Act (2022:482), each as amended. The core principles of personal data processing — lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability (Article 5 EU GDPR) — underlie how we design and operate this website.

1. Who We Are and Who Is Responsible for the Cookies on this Website

Regarding this website, Accesa AB and AITS operate as joint controllers under Article 26 EU GDPR where they jointly determine the purposes and essential means of processing personal data through or in connection with cookies and similar storage and access technologies. Each entity is responsible for compliance according to its role in choosing, implementing or operating those technologies.

The main points of the joint-controller arrangement and the allocation of responsibilities are explained in Section 2 below.

Who we are

Contact us

Accesa AB is a company incorporated under the laws of Sweden and part of the Accesa group.

Accesa AB is the Swedish-facing operator of the website and is responsible for the Swedish-facing business content and local visitor relationship.

Postal address: PO Box 162 85, 103 25 Stockholm, Sweden.

Email:hello@accesa.se

AITS is Accesa IT Systems SRL, a company incorporated under the laws of Romania, with registered office at Constanta 12, Platinia Office, 400158 Cluj-Napoca, Romania.

AITS manages and supports this website, including the implementation of cookies and similar technologies.

Joint controller Accesa IT Systems SRL - reachable through the Accesa AB contact details above as part of the joint-controller arrangement or directly to the dpo@accesa.eu.

2. Joint Controllers — Essence of the Arrangement

Article 26(2) EU GDPR requires us to make available to you the essence of the joint-controller arrangement. In summary:

Accesa AB is the Swedish-facing party. It operates the website as the Swedish-facing business presence, determines the local content and visitor communications, and is your local point of contact.
AITS manages and materially supports the technical operation and security of the website, including hosting, deployment, form and cookie implementation, technical support and incident management.
Accesa AB and AITS jointly decide which cookies and similar technologies are used and why, and coordinate compliance with applicable data-protection and electronic-communications requirements.

The Contact identified in Section 1 is the central contact point for both joint controllers. You may exercise your data-protection rights against either controller.

3. What are Cookies and Similar Technologies?

About Cookies

Cookies are small text files that a website places on your device while you browse. Your web browser stores them, and you can view or delete them at any time through your browser settings.

The cookies on our Website

Our website currently uses only strictly necessary cookies — cookies needed to operate and secure the website and to support the cookie-information interface. We do not use cookies for advertising, marketing, tracking or analytics, and we do not use them to build a profile of you.

Because these cookies are strictly necessary for the functions described in this Cookie Policy, your consent is not required for them. We still provide a cookie notice so that you know which cookies are used and why.

If we introduce any non-essential cookies in the future, they will not be set unless any consent required by applicable Swedish law has first been obtained.

4. Why We Use Cookies and How We Do It Legally?

Our website uses cookies only to:

keep the site working and available;
keep the site secure and protect it against misuse; and
remember the setting or acknowledgement you make through the cookie-information interface.

The cookies we use and the data involve

We use these cookies for two purposes.

The first is security — to protect our website and forms against attacks and misuse and to verify that requests and actions on the website are legitimate.
The second is to remember the setting or acknowledgement made through the cookie-information interface.

The table below shows each cookie in detail. All cookies are strictly necessary and under the Swedish Electronic Communications Act (2022:482), consent is not required where storage of or access to information on your device is necessary to provide a service expressly requested by you.

Where the information processed through these cookies constitutes personal data, we rely on our legitimate interests under Article 6(1)(f) EU GDPR in operating and securing the website, preventing misuse, and respecting and remembering the setting or acknowledgement you make through the cookie-information interface.

We do not rely on your consent for these strictly necessary cookies.

Cookie Name

Purpose & Usage

Data Collected

Type & Duration

Host

_aConsent

Remembers the setting or acknowledgement made through the cookie-information interface so that the website can remember it.

The setting or acknowledgement made through the cookie-information interface.

First-Party

Strictly necessary

Duration - 6 months

Our website

Our website currently uses only strictly necessary cookies — for security and to remember the setting or acknowledgement made through the cookie-information interface.

These cookies are active automatically because they are necessary to operate and secure the website or to support the cookie-information interface. They cannot be switched off through the cookie management tool.

You can still remove them through your browser settings, though some website functions, including forms and security features, may not work properly without them. We show a short cookie banner, so you know these cookies are in use.

The _aConsent cookie remembers the setting or acknowledgement made through the cookie-information interface so that you are not asked again on every visit. You can reopen the interface at any time using the cookie settings button.

6. Managing Cookies

Through our cookie tool

You can open our cookie management tool at any time using the cookie settings button on the website.

Because we currently use only strictly necessary cookies, there are no optional cookies to switch on or off.

Through your browser

You can view, delete or block cookies through your browser settings. If you block the strictly necessary cookies used by our website, some functions, including forms and security features, may not work properly.

7. How Long Cookies Stay on Your Device?

Our security cookies are session cookies — they expire when your browsing session ends and are not stored between visits.

The _aConsent cookie that records your setting or acknowledgement through the cookie-information interface stays on your device for 6 months, so we can remember it and avoid asking you again on every visit. You can delete it at any time through your browser settings.

Cookie data may be accessed by:

Accesa AB and AITS, as the joint controllers responsible for the website; and
service providers that support the hosting, maintenance or security of the website, where access is necessary to provide those services.

We may also disclose cookie data to public authorities where required by law.

9. International data transfer

Personal data processed through cookies may be accessed by AITS in Romania and by service providers that support the hosting, maintenance or security of the website. Romania is within the European Economic Area (EEA), so access by AITS in Romania does not constitute a transfer of personal data outside the EEA.

Where personal data is transferred outside the EEA, we will ensure that the transfer is covered by an applicable European Commission adequacy decision or by appropriate safeguards under the EU GDPR, such as the European Commission’s Standard Contractual Clauses. You can contact us for further information about the safeguards applicable to any international transfer.

10. Your Rights

You have the following rights over your personal data under the EU GDPR and applicable Swedish data-protection law, and we will help you exercise them.

Right to be informed	To know how your personal data is collected and used — the purposes, who processes it, and how long it is kept.
Right of access	You can ask whether we process your data, obtain details about the processing, and receive a copy of your data.
Right to rectification	You can ask to correct inaccurate or incomplete data we hold about you.
Right to erasure (Right to be forgotten)	You can ask us to delete your data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected.
Right to object	Where we process your data on the basis of legitimate interests, you have the right to object to that processing.
Right to restrict processing	In certain circumstances you can ask us to restrict the processing of your data.
Right to data portability	You have the right to receive certain data in a structured, commonly used, machine-readable format, and to have it transferred to another controller where technically feasible. This right applies to certain automated processing based on consent or a contract. It does not apply to the cookie processing described in this Policy, which is based on legitimate interests.
Right to withdraw your consent at any time	Where we rely on your consent, you can withdraw it at any time. Withdrawal does not affect processing carried out before you withdrew it. This right does not apply to the current strictly necessary cookie processing because we do not rely on consent for it.
Rights in relation to automated decision-making	You have rights and safeguards in relation to significant decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects. We do not use these cookies for automated decision-making or profiling.

How to exercise your rights

Contact us at the contact details provided in Section 1. We will respond without undue delay and within one month. If your request is complex or you have made several, we may extend this by up to two further months — we will tell you within one month if so, and why.

Limits

Some rights apply only in certain situations and may be subject to exceptions or restrictions under applicable law. If we cannot meet your request in full, we will explain why.

Complaints

If you consider that our processing of your personal data infringes the EU GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection:

Integritetsskyddsmyndigheten — IMY at https://www.imy.se/en/about-us/contact-us/.

The Swedish Post and Telecom Authority (Post- och telestyrelsen — PTS - https://pts.se/en) supervises compliance with the Swedish rules on cookies and similar technologies under the Swedish Electronic Communications Act (2022:482).

We may update this Cookie Policy from time to time to reflect changes in our privacy practices or legal obligations.

When we make material changes to this Cookie Policy, or where we intend to use your personal data for a new purpose, we will update this Cookie Policy and, where required, bring the change to your attention before the new processing starts.