General Privacy Policy for Vaja AB

Last updated on October 6, 2025

Vaja AB and its subsidiaries (“we”, “us”, or “our”) are committed to protecting your privacy. This Privacy Policy describes how we collect, process, and protect your personal data when you interact with us, use our products and services, or visit our website.

Thank you for choosing us!

Who are we?

Vaja AB and its subsidiaries (“we”, “us”, or “our”) provide solar tracking systems and related solutions. Vaja AB is the data controller for the personal data collected from you when you use our products and services or interact with our website.

If you have questions about this Privacy Policy or how we process your personal data, you can contact us at info@vaja.net.

What personal data do we collect?

We collect personal data in connection with your use of our services. The types of data we collect include:

• Contact details: such as name, address, email address, and phone number.
• Technical information: device ID, IP address, and data related to your interaction with our products.
• User data: information about how you use our devices and services, including settings, preferences, and feedback.
  

Collection of data from third-party sources

In addition to the personal data you provide yourself, we may collect information from third-party sources to improve our services or provide a more personalized user experience. For example, if you interact with us via social media or other platforms, we may collect personal data from those services in accordance with your privacy settings there.

Why do we process your personal data?

We process personal data to deliver, maintain, and improve our products and services, as well as to fulfill legal obligations. Specifically, we may process your data for:

• Service delivery: to ensure that our products and services function correctly and meet your needs.
• Product improvement: to analyze usage and improve our products and customer experiences.
• Marketing: to send marketing materials when you have provided consent.
• Legal compliance: to fulfill legal obligations and protect our interests in cases such as fraud prevention and security.

Legal basis for processing: We process personal data based on the following legal grounds:

• Contract: processing that is necessary to fulfill our agreements with you.
• Consent: where you have explicitly given consent, particularly for sensitive data.
• Legitimate interest: for example, to prevent fraud, ensure network and data security, and improve our services. We always balance our interests against your rights.
• Legal obligation: when the law requires us to process data, such as for regulatory compliance.
  

Sharing and transferring personal data

We may share personal data with trusted third parties to support our operations, including:

• Service providers: partners who help us operate and improve our products and services.
• Companies within the Vaja Group: for administrative purposes and customer support.
• Authorities: in the event of legal requirements or to defend legal claims.

We may transfer personal data outside the European Economic Area (EEA) only when an adequate level of protection is ensured, for example through standard contractual clauses, which guarantee the same level of protection as within the EEA.

Use of sub-processors

To deliver our services efficiently and securely, Vaja engages certain trusted third parties (“sub-processors”) who process personal data on our behalf. These support functions such as product development, technical support, cybersecurity, sales, finance, marketing, and internal functions like HR and IT.

We ensure that all sub-processors are contractually bound to meet the requirements of the GDPR and other applicable privacy laws. When personal data is transferred outside the EU/EEA, we implement appropriate safeguards, such as standard contractual clauses.

How long do we keep your data?

We retain personal data only as long as necessary for the purposes stated in this Privacy Policy, taking into account legal, regulatory, and contractual obligations. Examples:

• Account information: retained as long as the account is active and thereafter for a period to fulfill legal requirements.
• When data is no longer needed, we delete or anonymize it in accordance with data protection regulations.
  

Your rights

You may wish to exercise your right to receive information about yourself or to correct, update, or delete information. Some of these rights may be subject to exceptions or limitations under local legislation. Your rights vary depending on your location.

Under the EU General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: to request access to the personal data we hold about you.
• Right to rectification: to request the correction of inaccurate or incomplete data.
• Right to erasure: to request the deletion of your personal data under certain circumstances.
• Right to restriction: to request that processing be restricted in specific situations.
• Right to data portability: to request a copy of your data in a structured, commonly used format.
• Right to object: to object to processing in certain cases, such as direct marketing.

To exercise any of these rights, please contact us at info@vaja.net.

You can also contact the relevant supervisory authority for more information.

Data Security

We prioritize the security of your personal data. To prevent unauthorized access, loss, or misuse, we use technical and organizational security measures such as encryption, access controls, and secure servers. These measures are continuously evaluated to meet new security requirements.

Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process data. In the event of significant changes, we will inform you through appropriate channels, such as email, website updates, or in-app notifications.

For users of our software applications, information about important updates will usually appear in patch notes or release notes in connection with an update. We encourage you to regularly review these and this Privacy Policy.

Contact

If you have questions or concerns about how we use your personal data, you can contact us via:

Website: www.vaja.net

Email: info@vaja.net

Mailing address: Falugatan 3, 113 32, Stockholm, Sweden
Attn: Data Privacy Team