Privacy Policy
Last updated: April 10, 2026
Kümmerling Bil AB (reg. no. 556579-9821), operating VEMORA, is the data controller for the processing of your personal data. We value your privacy and process your data in accordance with the EU General Data Protection Regulation (GDPR) and Swedish law.
1. What data do we collect?
We collect the following personal data: • Contact details: name, email address, phone number • Vehicle details: registration number, mileage, condition, photos • Identification: personal identity number (for completed deals, for ownership transfer) • Payment details: bank account number, clearing number, Swish number • Credit details: information about any outstanding debt on the vehicle • Address details: street address, postal code, city • Technical data: IP address, browser type, pages visited
2. Why do we process your data?
We process your data to: • Conduct valuation and make offers on your car • Manage the deal: agreement, payment, transport, ownership transfer • Communicate with you via SMS, email and portal • Fulfill legal obligations (accounting, tax legislation) • Improve our service and user experience
3. Legal basis
We process your data based on: • Contract: to fulfill our commitment to you • Legitimate interest: to improve the service and communicate with potential sellers • Legal obligation: for accounting and tax purposes • Consent: for personal identity numbers and sensitive data
4. How is your data protected?
Sensitive data such as personal identity numbers, bank account numbers and clearing numbers are encrypted with AES-256-GCM. All data transfers use HTTPS. Access to personal data is logged and restricted to authorized personnel.
5. How long do we store data?
• Leads that don't result in a deal: deleted after 12 months • Completed deals: stored for 7 years (Swedish Bookkeeping Act requirement) • Personal identity numbers: deleted as soon as ownership transfer is complete, no later than 3 months after the deal • Technical data: stored for 30 days
6. Who do we share data with?
We share your data with: • Transport companies: address and contact details for pickup • Credit institutions: to settle any outstanding debt • Swedish Transport Agency: for ownership transfer • Azure (Microsoft): hosting and data storage within the EU • Twilio: for SMS delivery (data centers within EU/US with adequate safeguards) We never sell your personal data to third parties.
7. Your rights
Under the GDPR, you have the right to: • Access your personal data • Rectify inaccurate data • Request deletion of your data • Restrict processing • Object to processing • Receive your data in a machine-readable format (data portability) Contact us at {email} to exercise your rights.
8. Cookies
We use necessary cookies for the service to function (e.g. login and OTP verification). We do not use tracking cookies without your consent.
9. Supervisory authority
If you believe we process your personal data in violation of the GDPR, you have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
Questions about how we handle your data? Contact us at privacy@vemora.se.