Legal Disclosures & Governance

2.1 Data Controller

WebVeloraLab, registered at 392 31 SKOGSLIDEN 56 KALMAR, Sweden, acts as the data controller for all personal information collected through this website. For privacy-related inquiries, contact [email protected].

2.2 Data We Collect

We collect the following categories of personal data when you interact with our platform:

• · Contact information (name, email address, phone number) submitted via our contact forms
• · Project specifications and business requirements voluntarily provided
• · Technical metadata including IP address, browser type, and session duration via essential cookies

2.3 Purpose of Processing

Personal data is processed exclusively for: (a) responding to project inquiries and delivering quoted services, (b) fulfilling contractual obligations under Statements of Work, (c) complying with Swedish and EU tax and accounting regulations, and (d) ensuring platform security through essential cookie telemetry.

2.4 Legal Basis

Processing is conducted under Article 6(1)(b) of the GDPR (performance of a contract) and Article 6(1)(f) (legitimate interest in platform security). Where consent is required, it is obtained explicitly before data collection.

2.5 Data Retention

Contact form submissions are retained for 24 months from the date of submission. Project-related data is retained for the duration of the active engagement plus 6 years in accordance with Swedish bookkeeping legislation (Bokföringslagen). Session cookies expire upon browser closure; persistent cookies expire after 12 months.

2.6 Data Sharing

WebVeloraLab does not sell, rent, or distribute personal information to third-party data brokers. Data may be shared with: (a) hosting infrastructure providers operating within the EU/EEA under Data Processing Agreements, (b) payment processors solely for transaction completion, and (c) tax authorities as required by applicable law.

2.7 Your Rights

Under the GDPR and the Swedish Personuppgiftslag (2018:218), you have the right to: access your personal data, request rectification of inaccurate data, request erasure ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise any right, contact [email protected]. We will respond within 30 days.

2.8 International Transfers

All personal data is stored on EU-hosted infrastructure. Should any processing occur outside the EU/EEA, we ensure appropriate safeguards through Standard Contractual Clauses (SCCs) or adequacy decisions in compliance with Chapter V of the GDPR.

2.9 Data Security

We implement industry-standard technical and organizational measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits to protect personal data against unauthorized access, alteration, or destruction.

2.10 Supervisory Authority

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY): Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm, Sweden.

3.1 Scope of Agreement

All digital services, software deliverables, and engineering advisory packages provided by WebVeloraLab are governed by explicitly contracted Statements of Work (SOW) executed between the Client and WebVeloraLab. These Terms of Service apply to all interactions with this website and the services offered herein.

3.2 Service Delivery

WebVeloraLab commits to delivering services in accordance with the specifications, timelines, and milestones defined in the applicable Statement of Work. Project timelines commence upon receipt of the initial deposit and signed SOW. Delays caused by the Client in providing required materials or feedback may result in adjusted delivery schedules.

3.3 Payment Terms

Invoices are payable within 14 days of issuance unless otherwise specified in the SOW. A 50% deposit is required before project commencement. The remaining balance is due upon project completion and delivery. Late payments incur a statutory interest rate of Riksbanken's reference rate plus 8% in accordance with Swedish Räntelagen (1975:635).

3.4 Intellectual Property

Upon complete settlement of all agreed commercial invoices, WebVeloraLab assigns all worldwide intellectual property rights in the client-specific software deliverables, design tokens, and digital assets directly to the Client. WebVeloraLab retains the right to display non-confidential project work in its portfolio unless otherwise agreed in writing.

3.5 Limitation of Liability

WebVeloraLab's total aggregate liability under any SOW shall not exceed the total fees paid by the Client for the specific service giving rise to the claim. WebVeloraLab shall not be liable for indirect, incidental, consequential, or punitive damages, including but not limited to loss of profits, data, or business opportunities.

3.6 Termination

Either party may terminate a project with 14 days written notice. In the event of termination by the Client, all work completed up to the date of termination shall be paid for at the agreed rate. WebVeloraLab reserves the right to terminate immediately if the Client breaches material terms of the SOW or these Terms of Service.

3.7 Governing Law

These Terms of Service and all SOWs executed under WebVeloraLab shall be governed by and construed in accordance with the laws of Sweden. Any disputes shall be resolved by the courts of Kalmar, Sweden, unless otherwise agreed in writing.

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function efficiently and to provide information to website operators.

4.2 Cookies We Use

WebVeloraLab uses only strictly necessary cookies:

• · Cookie Consent Cookie: Stores your cookie preference (accepted/dismissed) using localStorage. This ensures the cookie banner is not re-displayed on subsequent visits.
• · Session Security Cookie: Essential for maintaining secure browsing sessions and preventing cross-site request forgery (CSRF) attacks.

4.3 Third-Party Cookies

WebVeloraLab does not use analytics, advertising, or tracking cookies from third parties. The Google Maps iframe embedded on our Contact page may set its own cookies in accordance with Google's Privacy Policy. We have no control over these cookies.

4.4 Managing Cookies

You can control and manage cookies through your browser settings. Disabling essential cookies may impair the functionality of this website. Most browsers allow you to block or delete cookies through their settings menu.

5.1 Deposit Refunds

The initial 50% deposit is fully refundable if the Client cancels the project before any work has commenced. Once work has begun, the deposit becomes non-refundable as it covers resource allocation, initial scoping, and project setup costs.

5.2 Completed Milestones

Payments for completed and delivered milestones are non-refundable. Each milestone delivery is considered accepted unless the Client provides written notice of material non-conformity within 7 days of delivery.

5.3 Hosting & Retainer Refunds

Monthly hosting and maintenance retainer fees are billed in advance and are non-refundable for the current billing period. Clients may cancel their retainer with 30 days written notice, effective at the end of the current billing cycle.

5.4 Dispute Resolution

Refund requests must be submitted in writing to [email protected] within 14 days of the relevant invoice date. WebVeloraLab will review all refund requests within 5 business days and respond with a resolution. Disputes that cannot be resolved amicably shall be submitted to the Swedish National Board for Consumer Disputations (Allmänna Reklamationsnämnden).

5.5 Exceptional Circumstances

In the event that WebVeloraLab is unable to deliver the agreed services due to circumstances within its control, the Client shall be entitled to a full refund of all payments made for undelivered work. This does not apply to delays caused by force majeure events, including but not limited to natural disasters, pandemics, government actions, or infrastructure failures beyond our reasonable control.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. WebVeloraLab does not sell personal information as defined under the CCPA.

California residents have the right to: know what personal information is collected, request deletion of personal information, opt-out of the sale of personal information (which we do not engage in), and not be discriminated against for exercising CCPA rights.

To exercise any CCPA right, contact [email protected] with the subject line "CCPA Request." We will verify your identity and respond within 45 days as required by the CCPA.