Privacy & cookies

Who is responsible

Olleu AB · Sweden
Organisation number: 559345-1031
Svärdsliljegatan 8 A, 722 27 Västerås, Sweden

Olleu AB is the controller of the personal data used by CitaExpress. Privacy contact options.

What we collect and why

Your account email and a password hash provide secure account access. Names, document details, contact details, search preferences and appointment references let us carry out the appointment services you request. We store booking progress, outcomes, notification history and support reports to recover interrupted work and help with problems.

We process service information to perform our agreement with you, and limited technical and security information for our legitimate interests in operating and protecting the service. We also retain information where required by applicable law. We do not sell personal data or use it for advertising profiles.

Optional email connection

If you connect Gmail, Google asks you to authorise mailbox access. We use that access to find appointment-related messages and verification details, and sending access only if granted. The current connection can grant broader inbox permission than a single message; access is not limited by Google to appointment emails. Tokens and stored identity details are encrypted in our database. You can disconnect in Settings or revoke access in your Google account. Connecting Gmail is not required to create a CitaExpress account.

Who receives information

We submit the details needed for your chosen procedure to the official appointment portal. Hostinger provides hosting, Cloudflare provides domain/DNS infrastructure, and Google provides email connectivity where enabled. Service email may be sent through our connected Google mailbox. These providers process relevant technical or service information; their processing locations may include countries outside the EEA under their applicable transfer arrangements.

Automated searches follow the dates and permissions you set. They do not decide your nationality application or your eligibility for a public service. You remain responsible for reviewing the official requirements.

Retention and your choices

We retain account and appointment records while they are needed to provide your workspace, resolve unfinished bookings and handle support. Pausing a search does not delete its records. You can ask us to access, correct, export or delete your data, or restrict or object to processing where applicable. Deletion requests are handled manually, subject to unfinished actions and legal retention obligations; rotating backups can retain a copy until expiry.

You may complain to your local data-protection authority, including Spain’s AEPD or Sweden’s IMY. AEPD · IMY

Cookies and website technology

The public website sets no analytics or advertising cookies and loads its fonts locally. The app uses a necessary, secure session cookie for login and request protection. Hosting providers may process basic connection information to deliver and protect the service. We do not run advertising trackers on this website.