Data controller
This English translation is provided for information only. The Swedish version of the privacy policy is legally binding.
dronespotr.se is the data controller for the processing described here, under the EU General Data Protection Regulation (GDPR).
- Data controller: dronespotr.se
- Email for questions about personal data: info@dronespotr.se
What data we store
- Account: name, email address, role (client or operator) and when the account was created and last used. You log in with a link sent to your email, so we do not store a password.
- Jobs you describe: name, email, phone and company (the last two are optional), service, region, preferred timing, budget and the description of the job.
- Operator profile: name or company name, title, profile text, profile picture and portfolio images, services, regions, hourly rate, experience, operator ID, drone licence, insurance company and the insurance's period of validity.
- Messages and quotes: what you and the other party write in the message threads, quotes with price, content and date, and when a job was booked, completed and confirmed. Reviews you leave after a job (an overall rating, ratings for communication, quality and price, and a comment) are shown on the operator's profile, without your name.
- Login and security: IP address and browser for each login, and the web server's logs (IP address, time and which page was requested).
- Email notifications: a log of which operators have received an email about a job, so that we can follow up on the matching and troubleshoot.
The data comes from you. When you describe a job, we create an account with the email address you enter, so that you can follow replies and quotes. If you had a profile on the old dronespotr.se, we have transferred what is needed for it: name, email, profile text, images, services and regions.
Do not include sensitive data, such as information about health, or national ID numbers in job descriptions and messages. We do not need them.
Why we process the data
| Purpose | Legal basis |
|---|---|
| Connecting clients and operators: matching, notifications, messages, quotes and booking | Contract (Article 6(1)(b)) |
| Showing operator profiles publicly. The operator decides whether the profile is visible. | Contract (Article 6(1)(b)) |
| Login links and emails about your account and your jobs | Contract (Article 6(1)(b)) |
| Reviewing operators' qualifications and insurance | Legitimate interest in a trustworthy marketplace (Article 6(1)(f)) |
| Security, protection against abuse and troubleshooting | Legitimate interest (Article 6(1)(f)) |
| Handling complaints, disputes and legal claims | Legitimate interest (Article 6(1)(f)) |
We make no automated decisions about you. The matching only determines which operators are notified first (those close to the job and verified). All operators who match can see the job and reply to it.
We do not send newsletters or advertising. The emails you receive are about your account and your jobs.
Who sees your data
- Visitors to the site see published operator profiles without names: services, regions, experience, qualifications, portfolio images, reviews and whether the profile is verified. Logged-in users also see the name, title, profile text, profile picture and hourly rate. Never email, phone or address.
- Operators who match a job see the service, location, timing, budget and description. In a message thread, the operator also sees your name and company. Email and phone are shown to both parties only once the job is booked, and contact details written in messages before booking are hidden automatically.
- We who run dronespotr.se can access the data for support, for reviewing operators and for resolving disputes. We only read message threads when this is needed for one of those purposes.
- Our suppliers (data processors): Inleed in Sweden runs the server and the database. Resend sends the site's emails, such as login links and notifications, and then receives the recipient's email address and the content of the email. An AI provider within the EU writes draft job descriptions, quotes and messages when someone asks for one; the notes you have written and, depending on where, the chosen service and place, the job's description and preferred time, the operator's experience and qualifications or the thread's latest messages are sent, but never names or contact details, and the data is not used to train its models. Suppliers may only use the data to provide the service on our behalf.
- Authorities, if required by law.
We never sell personal data and we do not share it with advertisers. Fonts, images and video are delivered from our own server, so nothing is loaded from Google or other third parties when you visit the site.
Where the data is stored
The data is stored and processed in Sweden, with two exceptions: AI drafts are processed by a provider within the EU, and emails the site sends are stored by Resend in the United States. Resend is certified under the EU–US Data Privacy Framework, and the transfer is also protected by the European Commission's standard contractual clauses in Resend's data processing agreement.
How long we keep the data
| Data | How long |
|---|---|
| Account and operator profile | Until you close your account |
| Open jobs | Shown to operators for 60 days, after that only to you |
| Messages and jobs | Until you close your account. Your messages are then deleted, and your name and contact details are removed from the other party's threads. |
| Login links | A short time, and they can only be used once |
| Logins with IP address and browser | Until you log out, at most 30 days |
| Web server logs | At most 30 days |
| Backups | Overwritten after at most 30 days. Data you delete may remain in a backup for that long. |
| Completed jobs (service, description, price and date) | Remain in the other party's history even when you close your account, but without your name and contact details |
Your rights
- Get a copy of your data (Article 15) and take it with you in a machine-readable format (Article 20). Download it yourself under My account → My data.
- Correct data that is wrong (Article 16). You change your profile under My profile.
- Delete your data (Article 17). You close your account yourself under My data.
- Restrict the processing (Article 18) and object to processing based on legitimate interest (Article 21).
- Complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or to the data protection authority in your country.
Want something else, or need help? Email info@dronespotr.se and we will reply within one month.
Cookies and local storage
dronespotr.se does not use cookies for statistics, advertising or tracking. This is everything we store in your browser:
| Name | Why | How long |
|---|---|---|
| __Secure-better-auth.session_token (cookie) | Keeps you logged in. Only set when you log in. | Until you log out, at most 30 days |
| dronespotr:cookie-info (local storage) | Remembers that you have closed the cookie notice. | Until you clear your browser |
Both are needed for the service to work as you expect, and this kind of storage does not require consent under the Swedish Electronic Communications Act. That is why there is nothing to decline in the notice shown on your first visit. It is information, not a question.
Security
All traffic is encrypted (HTTPS). You log in with one-time links, so there are no passwords that can leak, and the links are only stored in hashed form. Contact details are hidden before booking, the forms are protected against automated submissions, and only we who run the service can access the database.
AI and the EU AI Act
When you ask for an AI draft, the AI provider processes the data described under Our suppliers. The writing help is assessed as limited risk under the EU AI Act (Regulation (EU) 2024/1689): it makes no decisions about you and is not used for profiling. How it works, what is sent and where the limits are is described on the AI transparency page.
Changes
When the service changes, we update the policy. The date at the top shows when it was last changed. We announce major changes by email.