Privacy Notice

1. Introduction

Information relating to an identified or identifiable natural person constitutes personal data. ART25 Consulting AB 559498-3891 may process such personal data as both data controller and data processor, depending on the context and purpose for which the personal data is processed. This privacy policy provides information about the processing as a data controller of personal data on users of this website and contact persons at potential and existing customers, suppliers and other business partners.

As ART25 Consulting AB acknowledges that keeping your personal information private is important to you and an ongoing responsibility for us, we reserve the right to change the contents of this Privacy Policy at any time and without prior notice to you. The latest version of the Privacy Policy will be posted here. Please be encouraged to read updated versions when made available. periodic reminders maybe sent with information regarding updates in our Privacy Policy to those who opts-in for updates of this nature.

This Privacy Policy was updated on 16 August 2024.

2. Collecting and processing of personal data

The personal data we process is collected directly from you or your employer/company.

We only process the personal data stated below, and only for the purposes described. We do not process sensitive personal data (personal data of special categories). We only use personal data for the purpose the data was collected for. If we rely on legitimate interests as the legal basis for our processing, we have concluded that those interests are not overridden by your rights and freedoms.

We evaluate the necessity and accuracy of the personal data on a regular basis and aim to ensure that incorrect and unnecessary personal data are corrected or deleted. Access to the data is restricted to personnel with appropriate authorization and a clear need to use that data.

Customer relationships provision of services

  • If you, as a contact person for a new potential customer, contact us on your own initiative, we will process the contact information you register, such as name, company/employer name and information, email, phone number and other information you submit to contact you

    • The legal basis for such processing is GDPR Article 6.1.a (consent) and 6.1.f (legitimate interest). It is voluntary for you to provide us with such personal data.

  • When you, as a contact person for your employer/company, register as a new customer in our website, we process your name, company/employer name and information, email, phone number and other information you submit into forms, download etc.

    • The legal basis for this processing is GDPR Article 6.1.b (performance of a contract), 6.1.c (necessary for compliance with a legal obligation such as accounting, tax) and 6.1.f (legitimate interest).

  • When performing our services, we may process personal data on employees of our customers and their suppliers and business partners. Such personal data may include name, company/employer name and information, email, phone number and other information you submit into forms, downloads etc., username, feedback and message history, visit to our website, whether you receive, open and read emails from us and other data necessary for maintaining the customer relationship.

    • The legal basis for such processing of personal data is GDPR Article 6.1.b (performance of a contract), letter 6.1.c (necessary for compliance with a legal obligation, such as accounting, tax) and 6.1.f (legitimate interest).

We store the above mentioned personal data for five years or shorter if the purpose of the processing ceases to exist earlier.

Supplier and other business partner relationships

  • If you are a contact person of a potential or existing supplier or business partner of ART25 Consulting, we may process your name, company/employer name and information, email, phone number, any customer support correspondence and other data related to the supply of products/services to negotiate and enter into supplier/collaboration/partner contracts, and to fulfill our obligations under, and manage, such contracts.

    • The legal basis for this processing is GDPR Article 6.1.b (performance of a contract) and 6.1.f (legitimate interest).

We store the above mentioned personal data for five years or shorter if the purpose of the processing ceases to exist earlier.

 

Evaluation of our services and website

  • To evaluate and improve our products, services and communication (content offers, emails, etc.), we may process visit to our website and data you submit into forms, downloads etc., whether you receive, open and read emails from us, and other data we obtain through customer analysis and surveys.

    • The legal basis for this processing is GDPR Article 6.1.A (consent) and letter f (legitimate interest).

We store such personal data for five years or shorter if the purpose of the processing ceases to exist earlier.

Newsletters and webinars

  • To provide information related to our products and services, for example by newsletters and direct marketing, we process personal data such as name, email address, phone number, IP address, company/employer name and information

    • If you show interest in ART25 consulting services, we may send an email in order to discuss a possible business opportunity.

    • The legal basis for such processing is Article 6.1.A (consent), and 6.1.F (legitimate interest) for targeted advertising for existing customers.

 

We store such personal data for five years or shorter if the purpose of the processing ceases to exist earlier.

You can opt-out of receiving marketing communications at any time.

3. Sharing of personal data

Personal data will only be shared with other third parties when it is necessary to provide our services. We may use third parties to work on our behalf as data processors, and we will share only the necessary information in these circumstances in accordance with written data processing agreements entered into with each such party. We will not disclose your data to any third parties for the purpose of marketing or such third parties’ own purposes.

4. Transfer of personal data

Personal data may be transferred outside the EEA to our service providers.

Other transfers of personal data outside EEA are either made to a country that is deemed to provide a sufficient level of privacy protection by the European Commission or by using a valid transfer basis such as the EU Standard Contractual Clauses. If necessary, we will implement appropriate safeguards to ensure that the personal data has the same level of protection as in the EEA.

5. Security Measures and Safeguards.

We will maintain the Security Measures and the safeguards set out here. We may change or update the Security Measures or safeguards but will not do so in a way that adversely affects the security of Your Controlled Data. For question about the hosting service please contact privacy@squarespace.com.

that process Your Controlled Data and cause Squarespace to breach any of Squarespace’s obligations under this DPA, solely to the extent that Squarespace would be liable under the Agreement if the act or omission was Squarespace’s own. 

6. Your rights

Under applicable data protection laws, you have numerous rights related to the personal data. You have the right to:

  • Access the processed personal data;

  • require rectification of inaccurate personal data;

  • obtain the erasure of personal data (however, please note that certain personal data is strictly necessary in order to achieve the purposes defined in this Privacy Policy and may also be required to be retained by applicable laws, thus, you may not delete such personal data);

  • obtain restriction of processing;

  • receive the personal data, which you have provided to Art25 Consulting in a structured, commonly used and machine-readable format and have the right to transmit those data to another

  • controller without hindrance from Art25 Consulting

  • object to the processing of your data where Art25 Consulting is relying on its legitimate interests as the legal ground for processing (e-g., you may object to your personal data being used for marketing purposes at any time);

  • ask Art25 Consulting to restrict processing personal data for a period if data is inaccurate or there is a dispute about whether or not your interests override Art25 Consulting legitimate grounds for processing data; and

  • the right to withdraw any consent you have given.

You may exercise these rights by sending a written request to

If you believe that Art25 Consulting has not complied with applicable data protection laws when processing your personal data, you can lodge a complaint with a supervisory authority. In Sweden, the relevant supervisory authority is Integritetsskyddsmyndigheten | IMY