Introduction
Västkustens Konstruktionsbyrå AB (VKAB) ('we', 'our', 'us') operates the NevoSens mobile application ('App'). This Privacy Policy explains how we collect, use, store, and protect information about you when you use NevoSens.
This Policy applies to all users of NevoSens, including building managers, facility operators, technicians, and any other authorised personnel granted access by your organisation.
Who We Are
NevoSens is operated by Västkustens Konstruktionsbyrå AB (VKAB). For questions about this Privacy Policy or your data, please contact us at support@vkab.se.
Information We Collect
- Username and password credentials (passwords stored in encrypted form)
- Session tokens and authentication logs
- Device identifiers and operating system information
- Login timestamps and IP addresses
- Building names, locations, and structural configurations
- Dashboard layouts and display preferences
- Installed sensor inventories and device metadata
- Equipment settings and configuration parameters
- Environmental readings (temperature, humidity, air quality, CO₂ levels, etc.)
- Energy and utility consumption metrics
- Occupancy and motion data
- Equipment performance and operational status
- Timestamped historical data records
- Alarm type, severity, and originating device
- Timestamps and duration of alarm events
- Acknowledgement and resolution records, including the user who acted
- Configuration changes made to devices or dashboards
- Alarm acknowledgements and user responses
- In-app navigation and feature usage patterns
- Device push notification preferences
- Mobile device type, model, and operating system version
- App version and crash / error logs
- Network connection type (Wi-Fi, mobile data)
- Time zone and locale settings
How We Use Your Information
- Authenticating your identity and managing your session securely
- Displaying your buildings, sensors, dashboards, and telemetry
- Delivering real-time and historical data visualisations
- Sending alarm notifications and alert escalations
- Applying configuration changes to connected devices and systems
- Detecting unauthorised access attempts or suspicious activity
- Maintaining audit trails of configuration and alarm actions
- Investigating security incidents
- Diagnosing and resolving technical issues
- Analysing usage patterns to improve App functionality
- Developing new features relevant to building management use cases
- Meeting our obligations under applicable law
- Responding to lawful requests from regulatory or law enforcement authorities
Legal Basis for Processing (GDPR)
VKAB is established in Sweden and processes personal data in accordance with the EU General Data Protection Regulation (GDPR). Our legal bases are:
| Legal Basis | Applies When |
|---|---|
| Contract Performance | Processing necessary to provide the NevoSens service under our agreement with your organisation |
| Legitimate Interests | Security monitoring, fraud prevention, and service improvement where these do not override your rights |
| Legal Obligation | Compliance with applicable legal requirements |
| Consent | Where we rely on consent (e.g. push notifications). You may withdraw consent at any time without affecting prior processing |
Data Sharing and Disclosure
Data is shared with other users within your organisation who are granted access by your administrator.
We engage trusted third-party service providers (e.g. cloud infrastructure) bound by data processing agreements who may only process your data on our instructions.
We may disclose information if required by law, court order, or regulatory authority, or where necessary to protect the rights, property, or safety of VKAB, users, or others.
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.
Data Retention
We retain your data only for as long as necessary for the purposes described in this Policy, or as required by law.
| Data Type | Retention Period |
|---|---|
| Account & authentication data | Duration of account + 90 days after closure |
| Telemetry & sensor data | Per your organisation's data plan and contract |
| Alarm & event logs | Up to 24 months |
| User activity logs | Up to 12 months |
Your organisation may request earlier deletion subject to our contractual obligations and applicable law.
Data Security
We implement appropriate technical and organisational security measures, including:
- Encryption of data in transit (TLS) and at rest
- Role-based access controls limiting data access to authorised personnel
- Secure credential storage using industry-standard hashing
- Regular security assessments and vulnerability management
- Incident response procedures for data breaches
No system is completely secure. If you suspect unauthorised access to your account, please contact us immediately at support@vkab.se.
Your Rights
Depending on your location, you may have the following rights regarding your personal data. To exercise any right, contact us at support@vkab.se. We will respond within 30 days.
Note that some rights may be limited where your data is processed on behalf of your employer or organisation.
Push Notifications
NevoSens may send push notifications to your mobile device for alarms, warnings, and system alerts. You can manage notification preferences within the App settings or through your device's operating system notification controls.
Disabling notifications will not affect your ability to view alarms within the App.
Children's Privacy
NevoSens is designed exclusively for professional and commercial use by adults. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has provided us with personal data, please contact us at support@vkab.se.
International Data Transfers
VKAB is based in Sweden and your data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the App or by other appropriate means. The updated Policy will display a revised Effective Date.
Continued use of NevoSens after notification constitutes your acceptance of the updated Policy.
Contact Us
Questions, concerns, or requests regarding this Privacy Policy or the handling of your data?
If you are not satisfied with our response, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se, or with the data protection authority in your country of residence within the EU.