GDPR — Your Data Rights
Last updated: 27 July 2026
1. Overview
Caseboard is based in Sweden, an EU member state, so the General Data Protection Regulation (GDPR) applies to how we process personal data — regardless of where you or your clients are located. This page summarizes your rights under GDPR. For what we collect and why, see our Privacy Policy.
2. Legal basis for processing
- Contract — processing needed to provide the Caseboard service you've signed up for.
- Legitimate interest — improving the product and keeping it secure.
- Consent — where applicable, such as optional marketing emails.
3. Your rights
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data, subject to any legal retention requirements.
- Restriction — ask us to limit how we use your data.
- Portability — request your data in a portable format.
- Objection — object to processing based on legitimate interest.
4. How to exercise your rights
Email hello@caseboard.space with your request. We'll respond within the timeframes required by GDPR.
5. International transfers
Some of our subprocessors (including OpenAI, Google, and Stripe) are based outside the EU/EEA. Where personal data is transferred to them, we rely on standard contractual clauses or equivalent safeguards recognized under GDPR.
6. Supervisory authority
If you believe we haven't handled your data properly, you have the right to lodge a complaint with Sweden's data protection authority, Integritetsskyddsmyndigheten (IMY), or with the supervisory authority in your own EU member state.
7. Contact
For any data protection question, email hello@caseboard.space.