Privacy policy for the MilDef website

Date of publication: 08-09-2026

MilDef, MilDef Group AB, organisation number 556893-5414, Box 22079, 250 22 Helsingborg, (“we”, “us”) processes personal data in connection with your use of mildef.com (the “Website”) and when you interact with us through the Website. 

In this privacy policy, we explain how we process your personal data if you: 

1. 1. Visit or use our Website, including when information about your device and use of the Website is collected. 

2. 2. Submit a form through our Website, for example to contact our sales team, submit a support ticket, make an RMA request, or submit a CRA report. 

3. 3. Register your interest in or request a meeting in connection with an event or other activity through the Website. 

4. 4. Download or request access to content or materials, where we ask you to provide personal data in connection with the request. 

5. 5. Otherwise provide personal data to us through the Website. 

This privacy policy also describes what rights you have when we process your personal data, and how you can exercise these rights. 

1. About processing of personal data

 Personal data means any information that can be directly or indirectly linked to a natural person. Examples of personal data are: name, e-mail address, telephone number and IP address. Processing of personal data means any operation which is performed on personal data – such as collecting, creating, analyzing, sharing, and deleting personal data. 

Processing of personal data shall be in accordance with applicable data protection laws, such as the EU Data Protection Regulation (2016/679, “GDPR”) as well as national adaptations of this regulatory framework. 

A data controller is the entity that decides for which purposes personal data will be processed, and how the processing will be executed. The data controller can use a data processor. A data processor is an entity that is only allowed to process personal data on behalf of and as instructed by the data controller, and may not use the personal data for its own purposes. 

We, MilDef Group AB, organisation number 556893-5414, Box 22079, 250 22 Helsingborg, are the data controller when we process your personal data as described in this Privacy policy.

2. What personal data do we process? 

• Device information – If you visit our Website, we may collect information about your device and your use of the Website, such as IP address, browser type and version, session behaviour, traffic source, screen resolution, preferred language, geographic location, and operating system. 

• Technical and statistical data – If you visit our Website, we may collect technical and statistical data about your use of the Website, such as information about which URLs or pages you visit and your activity on the Website. 

• Communications data – We may collect and store your communications with us, including any information you provide when contacting or interacting with us through the Website, such as through contact, support, RMA, CRA and event forms. 

• Contact and identification details – Such as your name, email address, telephone number, company or organisation, country, physical or delivery address, and other contact information you provide to us. 

• Product and support information – Such as product name, product code, serial number, information about where a product is used, deployed or sold, and information relating to product issues, incidents or vulnerabilities. 

• Whistleblower report information – We may process personal data contained in or relating to whistleblower reports submitted through our external whistleblower channel, including information about the reported matter and individuals involved. Whistleblower reports may be submitted anonymously. 

3. Where do we receive your personal data from?

• From the Website – If you visit our Website, we may collect technical and statistical information about how you use the Website, as well as information from your device. 

• Directly from you – Most of the personal data we process in connection with your interactions with the Website is provided directly by you, for example when you contact us, submit a support or RMA request, submit a CRA report, register your interest in an event, request a meeting or otherwise provide information through the Website. You can choose not to provide certain personal data. However, some personal data may be necessary for us to process your request or provide the information or service you have requested. 

4. For what purposes do we process your personal data? 

Protect and enforce our rights, interests and the interests of others, for example in connection with legal claims.  

Affected individuals: Individuals whose personal data is relevant to the legal matter. 

Categories of personal data used: Any of the categories of personal data listed above may be used for this purpose, where relevant. 

Share your personal data with other recipients, for the purposes mentioned in Section 5 below. 

Affected individuals: Varies depending on the purpose of the sharing, see Section 5 below. 

Categories of personal data used: Any of the categories of personal data listed above may be used for this purpose, where relevant. 

Collect information about your use of the Career Site, using cookies and other tracking technologies, as described in our Cookie Policy. 

Affected individuals: Website visitors 

Categories of personal data used: Device information; Technical and statistical data. 

Maintain, develop, test, and otherwise ensure the security  and functionality of the Website. 

Affected individuals: Website visitors. 

Categories of personal data used: Device information; Technical and statistical data. 

Analyse how the Website and its content are used and is performing,  to produce statistics and improve the Website and its performance. 

Affected individuals: Website visitors. 

Categories of personal data used: Device information; Technical and statistical data. 

Respond to enquiries and requests submitted through the Website. 

Affected individuals: Individuals who contact us or submit a request through the Website. 

Categories of personal data used: Contact and identification details; Communications data. 

Provide customer support and handle support, warranty and RMA requests. 

Affected individuals: Individuals who contact us in connection with support, warranty or RMA services. 

Categories of personal data used: Contact and identification details; Communications data; Product and support information. 

Receive, assess and handle CRA reports relating to product issues, incidents and vulnerabilities. 

Affected individuals: Individuals who submit a CRA report or whose personal data is included in a CRA report. 

Categories of personal data used: Contact and identification details; Communications data; Product and support information. 

Receive and handle whistleblower reports. 

Affected individuals: Individuals who submit a whistleblower report and individuals whose personal data is included in or otherwise relevant to a whistleblower report. 

Categories of personal data used: Contact and identification details; Communications data; and other personal data provided in or in connection with a whistleblower report. 

Manage event-related enquiries, registrations and meeting requests. 

Affected individuals: Individuals who register their interest in an event, request a meeting or otherwise interact with us in connection with an event. 

Categories of personal data used: Contact and identification details; Communications data. 

Provide access to requested content and materials. 

Affected individuals: Individuals who request or download content or materials where personal data is required. 

Categories of personal data used: Contact and identification details; Communications data. 

5. Whom do we share your personal data with? 

Our service providers. We may share your personal data with suppliers and service providers that help us operate our Website and provide related services. 

Our group companies. We may share your personal data with other companies within the MilDef Group where necessary to respond to your request, provide support or otherwise fulfil the purposes described in this privacy policy. 

Companies providing cookies on the Website. If you consent to it, cookies may be set by companies other than us. These companies may process data collected through the cookies in accordance with their own privacy policies. You can find information about the cookies used on our Website and the companies providing them in our Cookie Policy. 

Our whistleblower service provider. Whistleblower reports submitted through our external reporting channel are received and handled by our whistleblower service provider, 2Secure. Reports may be submitted anonymously. Information from a report may subsequently be shared with designated persons within MilDef where necessary to assess and handle the reported matter. 

To authorities and other public actors – when we are required to do so. We may share your personal data with authorities and other public actors when we have a legal obligation to do so. 

To parties involved in legal proceedings. If needed to protect or defend our rights, we may share your personal data with public authorities or other parties involved in potential or existing legal proceedings. 

Mergers and acquisitions etc. In connection with a potential merger, sale of company assets, financing, or acquisition of all or part of our business by another company, we may share your personal data with other parties involved in the process. 

6. On what legal bases do we process your personal data? 

In order for us to lawfully process your personal data, we need to have a legal basis in accordance with GDPR article 6.  

When we process your personal data for the purposes described in this Privacy Policy, the legal basis we rely on is that the processing is necessary for our legitimate interest in operating and improving our Website, responding to enquiries and requests, providing customer support and managing our business relationships. We have concluded that we have a legitimate interest in being able to perform the personal data processing for this purpose; that the processing is necessary to achieve that purpose; and that our interest outweighs your right not to have your data processed for this purpose. 

You can contact us for more information about how this assessment was made. See Section 9 and 10 below for our contact information. 

 We process your personal data based on your consent when we use certain cookies on the Website. For more information about the cookies we use, please see our Cookie Policy. Section 9 below provides more information about your right to withdraw your consent.

7. When do we transfer your personal data outside of the EU/EEA, and how do we protect it then? 

We always strive to process your personal data within the EU/EEA area. 

However, some of our service providers process your personal data outside of the EU/EEA. We also use suppliers whose parent company, or whose subcontractor’s parent company, is based outside the EU/EEA. In these cases, we have taken into account the risk that the personal data may be disclosed to countries outside the EU/EEA, for example because of an authority request. 

In cases where another recipient of your personal data (as described in Section 5 above) is based outside the EU/EEA, this will also mean that your personal data is transferred outside the EU/EEA. 

When we, or one of our suppliers, transfer your personal data outside the EU/EEA, we will ensure that a safeguard recognized by the GDPR is used to enable the transfer. We use the following safeguards: 

• A decision by the EU Commission that the country outside of the EU/EEA to which your personal data is transferred has an adequate level of protection, which corresponds to the level of protection afforded by the GDPR. In particular, we rely on the EU Commission’s adequacy decision for the US via the so-called EU-US Data Privacy Framework, and the adequacy decision for the UK. 

• Entering into the EU Commission’s standard clauses with the recipient of the personal data outside the EU/EEA. This means that the recipient guarantees that the level of protection for your personal data afforded by the GDPR still applies, and that your rights are still protected. 

When your personal data is transferred outside the EU/EEA, we also implement appropriate technical and organizational safeguards, to protect the personal data in case of a disclosure. Exactly which protective measures we implement depends on what is technically feasible, and sufficiently effective, for the particular transfer. 

If you want more information about the cases in which your personal data is transferred outside the EU/EEA, you can contact us using the contact details in Section 9 and 10 below. 

8. For how long do we keep your personal data? 

We will process your personal data only for as long as is necessary to fulfill the purposes as mentioned in this policy and to comply with our legal obligations. The retention periods for cookies are set out in our Cookie Policy.  

9. What rights do you have, and how can you exercise them?

In this section, you will find information about the rights you have when we process your personal data. As described below, some of the rights only come into play when we process your personal data under a particular legal basis.If you want to exercise any of the rights listed here, please contact us directly at privacy@mildef.com. 

Right to be informed 

You have the right to be informed about how we process your personal data.  

 We provide you with such information through this privacy policy, through updates on our Website (see also Section 11 below), and by answering any questions you may have for us. 

Right to access your personal data. 

You have the right to know if we process personal data about you, and to receive a copy of the data we process about you. In connection with receiving the copy of your data, you will also receive information about how we process your personal data. 

Right to access and to request a transfer of your personal data to another recipient (“data portability”). 

You can request a copy of the personal data relating to you that we process for the performance of a contract with you, or based on your consent, in a structured, commonly used, machine-readable format. This will allow you to use this data somewhere else, for example to transfer it to another recipient. If technically feasible, you also have the right to request that we transfer your data directly to another recipient. 

Right to have your personal data deleted (“right to be forgotten”). 

In some cases, you have the right to have us delete personal data about you. This is for example the case if it’s no longer necessary for us to process the data for the purpose for which we collected it; if you withdraw your consent; if you have objected to the processing and there are no legitimate, overriding justifications for the processing. (For the separate right to object, see below.) 

Right to object against our processing of your personal data. 

You have the right to object to processing of your personal data which is based on our legitimate interest, by referencing your personal circumstances. 

Right to restrict processing. 

If you believe that the personal data we process about you is inaccurate, that our processing is unlawful, or that we don’t need the information for a specific purpose, you have the right to request that we restrict the processing of such personal data. If you object to our processing, as described just above, you can also request us to restrict processing of that personal data while we make our assessment of your request. 

When our processing of your personal data is restricted, we will (with the exception of storage) only process the data with your consent or for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons relating to an important public interest. 

Right to rectification. 

You have the right to request that we rectify inaccurate information, and that we complete information about you that you consider incomplete. 

Right to withdraw your consent. 

When we process your personal data based on your consent, you have the right to withdraw that consent at any time. If you do so, we will stop processing your data for the purposes you’ve withdrawn your consent for. However, it doesn’t affect the lawfulness of processing that was based on your consent before it was withdrawn. 

Right to raise a complaint. 

If you have complaints about our processing of your personal data, you can raise a complaint with the data protection authority in Sweden. You can find their contact details here. 

You can also lodge a complaint with your national data protection authority, which you can find listed here if you are based in the EU. If you are based in the UK, you can lodge a complaint with the Information Commissioner’s Office, here. 

10. Where can you turn with comments or questions?

If you want to get in touch with us to exercise your rights, or if you have any questions, comments or concerns about how we handle your personal data, you can reach us by sending an email to privacy@mildef.com. 

11. Updates to this Privacy policy 

We update this privacy policy when necessary – for example, because we start processing your personal data in a new way, because we want to make the information even clearer to you, or if it’s necessary to do so in order to comply with applicable data protection laws. 

We encourage you to regularly check this page for any changes. You can always check the top of this page to see when this privacy policy was last updated.