Privacy policy

Last updated: 12 October 2026

Who is responsible for your data

ZK Medicum AB, company registration number 559205-9314, is the data controller for the processing described here. If you have questions about how we handle your data, you can reach us at info@zakarios.com.

What this policy covers

This policy applies when you visit zakarios.com, send a demo request or are in contact with us as a customer or prospective customer.

If you use Zakarios as a participant or employee of an education provider, the provider is responsible for your data in the platform. We then process it on the provider's behalf under a data processing agreement. Questions about that data should be directed to your provider.

What data we process and why

When you send a demo request we process your name, your organisation, your email address, the number of participants per year, your message and which language the page was shown in. We use the data to reply to you and book a demo. The legal basis is our legitimate interest in responding to enquiries. To stop automated submissions, we use an unreadable (hashed) form of your IP address to limit the number of requests.

When you email us we process your name, your email address and what you write, so that we can reply. The legal basis is our legitimate interest in answering questions.

When you are a customer we process the name, email address, phone number and role of the customer's contact persons, as well as information about the agreement and invoicing. We need the data to perform the agreement. We keep accounting records because the Swedish Bookkeeping Act requires it.

Visitor statistics are collected with Google Analytics, but only if you click "Accept" in the cookie banner. We then process which pages you visit, approximate location (country and city), which device and browser you use and a random ID stored in a cookie. We use the statistics to understand how the site is used and to improve it. The legal basis is your consent, and you can change your mind at any time via "Cookie settings" at the bottom of the page.

Cookies and browser storage

• Your cookie choice is saved in the browser's local storage so that we don't ask again. This is necessary for the site to work and does not require consent.
• Your sign-in to Zakarios is saved in the browser so that you stay signed in. This is also necessary.
• Google Analytics sets the cookies _ga and _ga_DXXHP2XRHJ, but only after you have accepted them. They last for up to two years. If you decline or change your mind afterwards, measurement is switched off and the cookies are removed.

Who receives the data

We never sell your data. We use the following suppliers, who process data on our behalf:

• Supabase stores the database, in Ireland.
• Resend sends email from the website, from Ireland.
• Google provides our email (Google Workspace) and Google Analytics.
• Cloudflare hosts the website.

Google and Cloudflare may process data in the USA. This is done under the EU decision on the Data Privacy Framework, which both have joined, or the European Commission's standard contractual clauses.

How long we keep the data

• Demo requests: for 12 months after the last contact, unless you become a customer.
• Emails: for as long as needed to handle the matter.
• Customer data: for as long as the agreement is in force and thereafter for as long as we need it to handle any claims. Accounting records are kept for seven years under the Swedish Bookkeeping Act.
• Google Analytics: detailed data is kept for two months.

Your rights

You have the right to know what data we hold about you and to have incorrect data corrected. You can also ask us to erase data, restrict how we use it or provide it in a format that can be transferred to someone else. You can object to processing we carry out on the basis of our legitimate interest, and you can withdraw consent at any time. Email info@zakarios.com and we will help you.

If you think we are handling your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

Changes

If we change how we process personal data, we update the policy. The date at the top shows when it was last changed.