Strictboard
UK flagENLog inRegister
Document Archive

Version-controlled archive with digital signing

Meetings & Minutes

Schedule meetings with agenda and minutes

Forum

Posts, decisions and discussions

Tasks

Assign tasks with deadlines

Contract GeneratorSnart

Generate contracts from templates

Share RegisterSnart

Digital share register with owners

New IssuanceSnart

Directed and rights issuances

Data protectionCompliance
Privacy policyCookie policySecurity policyTerms and Conditions
Board portalPricingAbout
Strictboard
UK flagEN
Strictboard

All board work in one system – secure, traceable and built for Swedish limited companies.

Product

  • Board portal
  • Overview
  • Pricing

Company

  • About
  • Contact
  • Careers

Security

  • Data protection
  • Compliance

© 2026 Strictboard. All rights reserved. Managed and hosted by Sitepulse.

Privacy policyCookie policySecurity policyTerms and Conditions

Legal

Privacy Policy

Last updated: August 27, 2026

MMG Entertainment AB (company registration number 559332-8775) (“MMG”, “we”, “us”) is the data controller for personal data processed within the services provided at www.strictboard.com (the “Service”). We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Swedish Data Protection Act (2018:218) and other applicable Swedish legislation.

1. Data Controller

MMG Entertainment AB

Company registration number: 559332-8775

Website: www.strictboard.com

Email: info@strictboard.com

2. Categories of personal data

We process the following categories of personal data:

  • Name
  • Email address
  • Phone number
  • Company information
  • National identification number
  • Payment information
  • Account information
  • Usage logs
  • IP address (transiently only, see section 11)

3. Data from external sources

To generate accurate registered address information, data may be retrieved from external registers or data providers.

Such processing occurs only when necessary to provide the Service.

4. Processing of national identification numbers

National identification numbers are considered particularly sensitive under Swedish law.

They are processed only when clearly justified and necessary for secure identification.

Processing is necessary because the Service relies on matching identification numbers to registered addresses.

  • Encryption in transit
  • Encrypted storage where technically possible
  • Access restrictions
  • Access logging
  • Role-based authorization

5. Purpose and legal basis

Performance of contract (Article 6(1)(b) GDPR)

Legal obligation (Article 6(1)(c) GDPR)

Legitimate interest (Article 6(1)(f) GDPR)

6. Data retention

Personal data is retained only as long as necessary for its purpose.

Data linked to active accounts is stored during the contract term.

Accounting data is retained for seven (7) years in accordance with Swedish law.

Logs containing identification numbers are retained for a limited period and regularly deleted.

For data you submit through the forms on the website, the retention described in section 11 applies.

7. Recipients of personal data

Address lookup data providers.

Email delivery provider, which delivers templates, replies to contact enquiries and internal notifications.

Provider hosting the newsletter subscriber list.

Public authorities when required by law.

All processors are bound by data processing agreements under Article 28 GDPR.

8. Transfers outside the EU/EEA

Where personal data is transferred outside the EU/EEA, appropriate safeguards such as adequacy decisions, Standard Contractual Clauses (SCC), or other lawful mechanisms are applied.

9. Security measures

  • TLS encryption
  • Database encryption
  • Role-based access control
  • Two-factor authentication for administrators
  • Intrusion detection
  • Regular security testing

10. Automated processing

The Service involves automated processing where registered address information is generated based on the entered identification number.

However, the processing does not constitute automated decision-making producing legal effects under Article 22 GDPR.

11. Data you provide on the website

Beyond the processing within the Service, the website collects personal data in three places. None of them requires an account with us.

Template downloads. To have a template sent to you, you provide your email address and, optionally, your name. The address is needed to deliver the document you requested — the template is attached to the email — and is also used for an internal notification to us that the template was requested. The legal basis is that the processing is necessary to carry out what you asked for (Article 6(1)(b) GDPR). The full text of every template is readable on the page without providing any details at all.

Newsletter. You can subscribe either through the form on the website or by ticking the box when you download a template. The box is optional and not pre-ticked — the template is delivered whether you tick it or not. The legal basis for these mailings is your consent (Article 6(1)(a) GDPR), which you may withdraw at any time via the unsubscribe link in every mailing.

Contact form. Name, email address and message are required; company and phone number are optional. The data is used to answer your enquiry, on the basis of our legitimate interest in responding to those who contact us (Article 6(1)(f) GDPR).

IP address. When you submit any of the forms, your IP address is read to limit the number of attempts per minute and so block automated abuse. It is used for nothing else, is held only in the working memory of the server and is never written to a database or a log. It is gone when the server restarts.

Where the data ends up. The website has no database of its own for this. The email address is passed to our processors for delivery and for the subscriber list, and the internal notification lands in our email inbox. A subscription remains until you unsubscribe. If you want your address removed from the list or the inbox, contact info@strictboard.com.

Download links. If a template is too large to attach, we send a signed link to the file instead. The link contains no personal data and stops working after 30 days.

For cookies and measurement tools on the website, see our cookie policy.

12. Communications and newsletters

We have the right to contact you via email, phone, or other registered contact details regarding matters related to the Service, your account, or the contractual relationship. This includes operational information, security notices, billing, support communications, and updates to terms. Such messages are necessary to provide the Service and cannot be opted out of while your account is active.

We also have the right to send newsletters and other information about the Service to the email address you have registered. This includes product news, new features, updates, guides, customer stories, and related offers from MMG Entertainment AB.

The legal basis for marketing communications to existing customers and users is our legitimate interest in informing them about the Service (Article 6(1)(f) GDPR), together with the existing customer relationship exemption under Section 19 of the Swedish Marketing Act (2008:486). If you have no customer relationship with us and have only subscribed to the newsletter on the website, those mailings rest on your consent as described in section 11 instead.

You may unsubscribe from marketing communications at any time via the unsubscribe link at the bottom of every newsletter or by contacting info@strictboard.com. Unsubscribing does not affect transactional or service-related messages.

13. Data subject rights

Requests may be submitted to info@strictboard.com.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

  • Access
  • Rectification
  • Erasure
  • Restriction of processing
  • Objection
  • Data portability

14. Policy updates

The latest version of this policy is always available at www.strictboard.com.