Version 2.0, 5 October 2026. This policy describes how Qryo Sverige AB processes personal data. It applies to our websites (qryo.se, qryo.dk, qryo.fi and qryo.info), our ads and forms, the customer portal and all contact with us.
Qryo Sverige AB, company registration number 559073-1088, Thorildsgatan 1, 411 25 Göteborg, Sweden.
Questions about personal data: info@qryo.se.
We serve businesses. Data that a clinic itself enters about its clients in the customer portal is processed on the clinic's behalf and is not covered by this policy.
| Purpose | Legal basis | Retention period |
|---|---|---|
| Answering questions, sending product sheets and other information you have asked for, booking meetings and demonstrations, providing quotes | Legitimate interest and steps prior to entering into a contract | Up to 24 months after the most recent contact |
| Carrying out purchases, delivery, installation, training, service and warranty, and giving access to the customer portal | Contract | The contract term, the warranty or service period and then up to 24 months |
| Handling claims and complaints | Contract and legitimate interest | Up to 36 months after the case is closed |
| Invoicing and accounting | Legal obligation | 7 years after the end of the financial year |
| Marketing to businesses: newsletters, mailings and follow-up, including to businesses we have found in public sources | Legitimate interest, consent where required by law | Up to 24 months after the most recent activity, or until you object |
| Recording, transcribing and summarising calls for documentation, follow-up and quality | Legitimate interest | Up to 12 months |
| Advertising on Facebook and Instagram: showing ads to businesses similar to our customers, reaching existing customers and measuring which ads lead to meetings and deals | Legitimate interest, consent for cookies | Up to 24 months, or until you object |
| Statistics and improving the websites | Consent (cookies) | According to the cookie settings |
| Operations, troubleshooting and security | Legitimate interest | Normally 6 to 12 months |
Where we rely on legitimate interest, we have weighed our interest in reaching and serving businesses in aesthetics and beauty against your interest in the protection of your data. We only process work-related contact details, and you can object at any time.
Ads and Meta. If you submit a form in one of our ads, we may tell Meta in encrypted form (hashed) whether the contact led to a meeting or a deal, so that the ads are shown to the right businesses. We may also show ads to existing customers by uploading encrypted contact details, which Meta matches and then deletes. Meta also processes data for its own purposes in accordance with Meta's privacy policy.
We share data with suppliers that process it on our behalf and with parties needed to fulfil contracts or legal requirements. Data processing agreements are in place where required, and access is limited to what is necessary.
Several of the suppliers above operate in the United States. Transfers are based on the European Commission's decision on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses, with supplementary safeguards where needed.
Our websites use necessary cookies and, with your consent, cookies for statistics and marketing, including the Meta pixel and Google Analytics. You make and change your choices in the cookie banner. More information is available in our cookie policy.
You have the right to know what data we hold about you (access), to have errors corrected, to have data erased when it is no longer needed or lacks a legal basis, to restrict processing, to move data you have provided to us under a contract, and to object to processing based on legitimate interest, such as marketing. If you object to marketing, we stop immediately. If you have given consent, you can withdraw it at any time.
Contact us at info@qryo.se. We respond without undue delay and within one month at the latest.
You also have the right to lodge a complaint with a supervisory authority: the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), the Norwegian Data Protection Authority (Datatilsynet), the Danish Data Protection Agency (Datatilsynet) or the Office of the Data Protection Ombudsman in Finland (Tietosuojavaltuutetun toimisto).
We may sort and prioritise enquiries automatically based on, for example, which machine the enquiry concerns and public company information. This is used so that the right salesperson contacts you, and it never leads to decisions that have legal effects or affect you in a similar way.
We update this policy when our processing changes. The latest version is always available here, with the date and version number at the top.