Privacy Policy
Auka Group / Dribble Digital AB
Last updated: 29 July 2026
This Privacy Policy explains how Dribble Digital AB, trading as Auka Group (“Auka”, “we”, “us” or “our”), collects and uses personal data when you visit weareauka.com, submit an enquiry, book a consultation or otherwise communicate with us through the website.
1. Who is responsible for your personal data?
Dribble Digital AB is the data controller for the processing described in this Privacy Policy.
2. Who does this policy apply to?
This policy applies to website visitors, prospective clients, client representatives and other business contacts whose personal data we process in connection with the website. It does not govern personal data that we process solely on a client’s instructions as part of services delivered to that client; in those situations, the client is normally the data controller and Auka acts as a data processor under a separate agreement.
3. Personal data we collect
Depending on how you interact with us, we may collect:
- Identity and contact data, such as your name, business email address and telephone number.
- Enquiry and booking data, such as your preferred call time, message, optional note and the information you provide about your project.
- Business data, such as your company, role and selected yearly turnover range, where provided.
- Communications data, including our correspondence with you and notes relating to your enquiry.
- Technical and usage data needed to deliver and protect the website, such as IP address, browser and device information, timestamps, requested pages, referring page and security or diagnostic logs.
Please do not submit sensitive personal data, confidential credentials or information about other individuals unless it is necessary and you are authorised to do so.
4. How we collect personal data
We collect personal data:
- directly from you when you complete a form, book a consultation, email us or otherwise communicate with us;
- automatically from your browser and device when you access the website, primarily through hosting, security and website infrastructure; and
- from a colleague or other business contact if they introduce or refer you to us.
5. Why we use personal data and our legal bases
We use personal data for the following purposes:
Responding to enquiries and arranging consultations. We use the information submitted through our forms to contact you, understand your request and arrange a call. The legal basis is taking steps at your request before entering into a contract where applicable, and otherwise our legitimate interest in responding to business enquiries.
Managing prospective and existing business relationships. We may retain correspondence, maintain contact records and follow up on an enquiry. The legal basis is our legitimate interest in business development and relationship management.
Operating, maintaining and securing the website. We process limited technical data to deliver pages and forms, prevent misuse, investigate errors and maintain security. The legal basis is our legitimate interest in providing a reliable and secure website.
Entering into and performing agreements. If an enquiry becomes an engagement, we process relevant contact and business data to negotiate, administer and perform the agreement. The legal basis is performance of a contract, taking pre-contractual steps and our legitimate interests in administering B2B agreements.
Complying with law and handling legal claims. We may process data to meet accounting, tax or other legal obligations and to establish, exercise or defend legal claims. The legal basis is compliance with a legal obligation and our legitimate interests in protecting our legal rights.
If we use consent for a separate activity, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal. We do not add you to an unrelated marketing list merely because you submit a website enquiry. Any electronic direct marketing will include a simple way to opt out and will be sent only where permitted by applicable law.
6. Whether you must provide the data
Fields marked as required in a website form must be completed for us to receive and handle that enquiry. Other fields are optional. If you do not provide the required information, we may be unable to respond, assess whether Auka is a fit or arrange the requested consultation.
7. Who receives personal data?
Personal data may be accessed or received by:
- authorised Auka personnel who need the information to handle your enquiry or business relationship;
- Vercel, Inc., which provides website hosting, content delivery and associated infrastructure;
- providers of website forms, email, cloud storage, security, customer relationship management and other business systems that we use where necessary;
- professional advisers, such as accountants, auditors, insurers and legal advisers, where necessary; and
- public authorities, courts or other parties where disclosure is required by law or necessary to protect our legal rights.
Our service providers may process personal data only for agreed purposes and under appropriate contractual and confidentiality obligations. We do not sell your personal data.
8. International data transfers
Some of our service providers are established in the United States or use infrastructure or subprocessors outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we use a lawful transfer mechanism such as an adequacy decision, participation in the EU–U.S. Data Privacy Framework where applicable, or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required.
You may contact us for more information about the safeguards relevant to your personal data.
9. How long we retain personal data
We keep personal data only for as long as needed for the relevant purpose:
- Enquiries that do not lead to an engagement are normally deleted or anonymised within 24 months after the last meaningful contact.
- Information relating to an active client relationship is retained for the duration of that relationship and afterwards for as long as reasonably necessary to administer the relationship and handle potential legal claims.
- Personal data contained in accounting records is retained for the period required by Swedish accounting law, normally seven years after the end of the relevant calendar year.
- Technical and security logs are retained for a limited period based on operational and security needs, provider settings and whether the data is needed to investigate an incident.
We may retain specific information for longer if required by law, a dispute or a legal hold. When data is no longer needed, it is deleted or anonymised.
10. Cookies and similar technologies
The website may use cookies or similar technologies that are strictly necessary to deliver, secure and operate the site. These technologies do not require consent where they are essential to a service you have requested.
Analytics, advertising or other non-essential technologies will be activated only after you have made the required consent choice. Where such technologies are used, the website’s cookie settings or cookie notice will identify the relevant providers, purposes and storage periods and allow you to change or withdraw your consent. You can also delete or block cookies through your browser settings, although this may affect essential website functions.
11. Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access is limited to people and providers who need it for their work. No online system can be guaranteed completely secure.
12. Your data protection rights
Subject to the conditions and exceptions in applicable law, you may have the right to:
- request access to your personal data and information about how it is used;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on our legitimate interests and object at any time to direct marketing;
- receive certain personal data in a structured, commonly used and machine-readable format and have it transmitted to another controller where the right to data portability applies; and
- withdraw consent at any time where processing is based on consent.
To exercise a right, email hej@weareauka.com. We may need to verify your identity before acting on a request. We will normally respond within one month, as required by the GDPR.
13. Automated decision-making
We do not use personal data collected through the website to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.
14. Complaints
If you have concerns, please contact us first so that we can try to resolve them. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or, where applicable, another competent supervisory authority. Information is available at https://www.imy.se.
15. Changes to this policy
We may update this Privacy Policy when our services, website tools or legal obligations change. The current version will be published on this page and the “Last updated” date will be revised. If a change materially affects how we process personal data, we will provide additional notice where required.
16. Contact us
For questions about this Privacy Policy or our processing of personal data, or to exercise your rights, contact: