Privacy Policy

MBH consists of two companies. The company you are in contact or do business with is the data controller for your personal data:

• MBH Maskinuthyrning AB (Reg. No. 556947-4207), Hyvelgatan 44, SE-741 71 Knivsta, Sweden – Machine Rental – lifts, scaffolding and training – and transport by truck.
• MBH Aviation Services AB (Reg. No. 556714-3697), Hyvelgatan 44, SE-741 71 Knivsta, Sweden – Construction, installation, print and escort services at Arlanda, and Aviation Services with cabin interiors and aircraft textiles.

MBH Maskinuthyrning AB is the data controller for the website mbhab.se as a whole – including mbhmaskin.se and mbhaviation.se, which redirect here – that is, server logs and settings stored in your browser. This policy applies to all departments: Machine Rental, Construction & Logistics and Aviation Services.

The companies share IT systems, including email, and have the same contact person for questions about personal data.

If you have any questions about how we process your personal data, or wish to exercise your rights, please contact our joint contact person for all departments:

Markus Andersson, website manager and contact person for personal data
markus.andersson@mbhab.se
+46 10 708 66 75

• When you contact us by form, email or phone: your name, company, email address, phone number and the content of your message, such as the machine or service your enquiry concerns.
• When you are a customer or supplier: your contact details as a contact person and information about orders, deliveries, contracts and invoices.
• For training and work at Arlanda: the information needed to deliver a training course and issue certificates, or to apply for access and escort visitors at the airport.
• When you visit the website: technical information such as your IP address, browser type and time of visit, stored in server logs to keep the website running and secure.

Please do not send sensitive personal data, such as health information, through the contact form.

• Responding to enquiries and providing quotes – legitimate interest, or steps taken prior to entering into a contract.
• Delivering rentals, services and products and managing the customer relationship – performance of a contract.
• Accounting and invoicing – legal obligation under the Swedish Accounting Act.
• Operating and securing the website, for example preventing spam and intrusion – legitimate interest.

We do not use your data for automated decision-making or profiling, and we never sell it.

We keep your data only for as long as it is needed for its purpose. Enquiries that do not lead to business are deleted once the matter is closed. Customer data is kept for the duration of the customer relationship and thereafter for as long as needed to handle any complaints or claims. Accounting records are kept for seven years, as required by the Swedish Accounting Act.

Your data is handled by the MBH employees who need it in their work. We also use suppliers that process data on our behalf (data processors), under agreements that govern how the data may be used:

• Email and office software – Microsoft 365, where messages from the contact form are received.
• Website hosting – Vercel, which hosts the website and stores server logs.
• Content management – Sanity, where we add images and text for the website. Only data about our own editors (name and email address for signing in) is processed there. Images are delivered through our own website, so your browser does not contact Sanity.
• Finance and IT – suppliers of invoicing, accounting and IT support systems.

If a matter involves more than one department, your data may be shared between the MBH companies to the extent needed to handle it.

Data may also be disclosed to public authorities or the airport operator where required by law or to grant you access at Arlanda.

We aim to process your data within the EU/EEA. Some suppliers, such as Vercel, Sanity and Microsoft, may process data in the United States. Such transfers are based on the European Commission's adequacy decision for the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.

We do not use cookies for analytics, marketing or tracking. Read more on our Cookie Settings page.

Under the General Data Protection Regulation (GDPR), you have the right to:

• know what data we process about you and receive a copy of it,
• have inaccurate data corrected,
• have your data erased when it is no longer needed, unless we are required by law to keep it,
• request that processing be restricted,
• object to processing based on legitimate interest, and
• receive data you have provided to us in a machine-readable format (data portability).

Contact us using the details above and we will help you. We respond within one month.

If you believe that we are processing your data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se (opens in a new tab).

We may update this policy, for example if we start using new services. The latest version is always available on this page.