Privacy policy.

Infozone AB (hereinafter “Infozone”, “we”, “our” or “us”) processes personal data to provide and develop our services. In our privacy policy, we want to inform you about how we collect your personal data, what we use it for and for what purpose, as well as which parties we may share your data with. We also want to inform you about the legal basis on which we support the processing of your personal data and how long we plan to process your personal data. Your rights and how you can make use of them can be found further down along with our contact details.

We protect your privacy and work actively to improve our data protection work. This privacy policy has been prepared in accordance with the EU General Data Protection Regulation (EU) 2026/679 (“GDPR”) and we have tried to highlight the most relevant information for you.

Overview

To make it as easy as possible for you to find information about how we process your personal data, we have divided the information into different groups of individuals (which in the GDPR’s terminology are called categories of “registered”).

Below you will see an overview of these groups and get more specific information under the respective heading that you identify with.

  • Contact persons at customers
  • Contact persons of potential customers
  • Contact persons at suppliers and distributors
  • Website visitors
  • Contact persons at collaboration partners, brokerage firms and consultants
  • Relative of employee at Infozone
  • People who interact with Infozone via social media
  • Job seeker
  • Journalists
  • Lecturer

If you have any questions or concerns, you are most welcome to contact us. You will find our contact details at the bottom.

What personal data do we collect about you? 

We use as little personal data as possible, but if you are a contact person at one of our current customers, we may have the following information about you: Name, address, email address, title, employer and telephone number. 

For what purposes do we process your personal data and on what legal basis do we support the processing? 

We only process personal data about you in your role as a representative of one of our customers and as described below. 

  • Our marketing department has information about you if you have put yourself up as a reference for the purpose of describing customer assignments on our website and in other material. Legal basis: legitimate interest. 
  • We may also have information about you if you have registered your participation in one of our events. Legal basis: legitimate interest. 
  • We have information about you for the purpose of maintaining the contractual relationship with the company you represent, following up on sales, drawing up agreements and invoicing, and sending you relevant news. Legal basis: legitimate interest. 
  • We may publish pictures of you with information about customer cases and references in our social media channels or on the website. We only do this if we have received your express consent to do so. 

How and when do we collect your personal data? 

In connection with the conclusion of the contract with the company you represent and continuously during the contract period. We receive the data directly from you or from someone at your company. 

Which parties do we share your personal data with? 

We use various system and service providers to fully or partially process your personal data. These providers are often referred to in the GDPR context as recipients. We use the following categories of recipients to help us with certain treatments, which they carry out entirely according to our instructions (so-called personal data assistants): 

  • Server hosting 
  • Communication solutions 
  • Digital contract management 
  • Financial system 
  • CRM system 
  • Social media (publication of customer cases) 

See information further down on third country transfer. 

How long will we process your personal data? 

We only process your personal data for as long as is necessary for the specific purposes for which it was collected. This means e.g. that we retain information about you that is necessary to keep the agreements between us and the company you represent going as long as the contractual obligations remain and subsequent time in accordance with statute of limitations. If we have any data to administer your participation in an event, we save that data only as long as it is necessary to carry out the event. 

What personal data do we collect about you? 

We use as little personal data as possible, but if you are a contact person at a company that we think would be interested in our services and if you are in a position where we can expect you to make purchasing decisions, we may collect the following information about you: Name, address, email address, title, employer and telephone number. 

For what purposes do we process your personal data and on what legal basis do we support the processing? 

We only process personal data about you in your role as a representative of a potential customer to us and as described below. 

  • In order to communicate and update you about our services and other relevant news, we process your contact details. Legal basis: legitimate interest. 
  • Our marketing department has information about you and the company you represent in order to be able to invite you to various events that we organize. Legal basis: legitimate interest. 

How and when do we collect your personal data? 

We may collect your data via various public sources (e.g. your employer’s website or LinkedIn) where we believe that you and your employer are interested in our services. Otherwise, it may be that you have provided us with your contact details via one of our communication channels. 

Which parties do we share your personal data with? 

We use various system and service providers to fully or partially process your personal data. These providers are often referred to in the GDPR context as recipients. We use the following categories of recipients to help us with certain treatments, which they carry out entirely according to our instructions (so-called personal data assistants): 

  • Meeting booker 
  • Server hosting 
  • Communication solutions 
  • CRM system 

See information further down on third country transfer. 

How long will we process your personal data? 

We only process your personal data for as long as is necessary for the specific purposes for which it was collected. This means e.g. that we retain information about you as long as we believe that you and the company you represent have an interest in receiving information from us. If we have any data to administer your participation in an event, we save that data only as long as it is necessary to carry out the event.

What personal data do we collect about you? 

We use as little personal data as possible, but if you are a contact person at one of our suppliers or distributors, we may have the following information about you: Name, address, email address, title, employer and telephone number. 

For what purposes do we process your personal data and on what legal basis do we support the processing? 

We only process personal data about you in your role as a representative of one of our suppliers or distributors and as described below. 

  • In order to maintain good contact with existing (and potential) suppliers and distributors, we will process your personal data because you represent your employer and act as our point of contact. In addition to being able to handle orders of various kinds. Legal basis: legitimate interest 
  • We may also have information about you if you have registered your participation in one of our events or trainings. Legal basis: legitimate interest. 
  • Our finance department may process your contact details to manage contracts, invoices and support for purchased systems. Legal basis: legitimate interest or legal obligation. 

How and when do we collect your personal data? 

We collect your information from you in the first place, when you contact us in various ways and above all before we enter into an agreement with your employer. 

Which parties do we share your personal data with? 

We use various system and service providers to fully or partially process your personal data. These providers are often referred to in the GDPR context as recipients. We use the following categories of recipients to help us with certain treatments, which they carry out entirely according to our instructions (so-called personal data assistants): 

  • Server hosting 
  • Communication solutions 
  • Digital contract management 
  • Financial system 

See information further down on third country transfer. 

How long will we process your personal data? 

We only process your personal data for as long as is necessary for the specific purposes for which it was collected. This means e.g. that we keep information about you that is necessary to keep the agreements between us and the company you represent going as long as the contractual obligations remain. If we have any data to administer your participation in an event, we save that data only as long as it is necessary to carry out the event.

What personal data do we collect about you? 

We use as little personal data as possible, but if you interact with us on social media, we may get access to the information you have entered on the social media, such as name, picture, title, employer, and phone number as well as message text. 

For what purposes do we process your personal data and on what legal basis do we support the processing? 

The main processing of your personal data on social media is your reactions to our posts. Legal basis: legitimate interest. 

How and when do we collect your personal data? 

When you interact in various ways with our company page on social media (LinkedIn, Facebook, Youtube and Instagram), you may share your personal data with us, for example if you send us a message, comment on our posts or share something that we have published. 

Which parties do we share your personal data with? 

At the same time, the data becomes available for the social media through which the communication takes place. See their respective terms of use and privacy policy. 

How long will we process your personal data? 

We only process your personal data for as long as is necessary for the specific purposes for which it was collected, but in many cases you can control how long you want us to see your personal data on social media, through tools on the respective platform.

What personal data do we collect about you? 

We use as little personal data as possible, but if you are a contact person at one of our partners or work at a brokerage firm that we have contact with or are employed by one of our sub-consultants, we may have their information about you: Name, address, email address , title, employer and telephone number and for our sub-consultants we have CVs. 

For what purposes do we process your personal data and on what legal basis do we support the processing? 

We only process personal data about you in your role as a contact person with our partner, brokerage firm or consulting agency and as described below. 

  • In order to maintain good contact with your employer, we will process your personal data because you represent the company you work for. Furthermore, it is necessary for us to have a In addition to be able to handle orders of various kinds Legal basis: legitimate interest. 
  • We also process your personal data to continue our collaboration with the company you work for and enable lead generation and business development. Legal basis: legitimate interest. 
  • Our finance department may process your contact details to manage contracts and invoices. Legal basis: legal obligation. 
  • Our management team has information about you who perform work for one of our sub-consultants in order to administer assignments and tasks. 

How and when do we collect your personal data? 

When you contact us in various ways, we will simultaneously collect the necessary information to maintain contact, enter into agreements and carry out events. We collect the data directly from you or from someone else at the company you work for. 

Which parties do we share your personal data with? 

We use various system and service providers to fully or partially process your personal data. These providers are often referred to in the GDPR context as recipients. We use the following categories of recipients to help us with certain treatments, which they carry out entirely according to our instructions (so-called personal data assistants): 

  • Server hosting 
  • Communication solutions 
  • CRM system 
  • Financial system 

See information further down on third country transfer. 

How long will we process your personal data? 

We only process your personal data for as long as is necessary for the specific purposes for which it was collected. This means e.g. that we retain information about you that is necessary to keep the agreements between us and the company you represent running, i.e. as long as the contractual obligations remain. Furthermore, this means that we will use your data for communication purposes as long as you are the current contact person.

What personal data do we collect about you? 

We use as little personal data as possible, but if you are listed as a relative of one of our employees, we will process your name and phone number.  

For what purposes do we process your personal data and on what legal basis do we support the processing? 

To ensure a safe and secure work environment, we will process your personal data for preventive purposes should a situation arise at the workplace where we need to quickly contact a relative, e.g. in case of accident. Legal basis: legitimate interest. 

How and when do we collect your personal data? 

We collect your contact details (name and phone number) from our employees in connection with their employment with us. 

Which parties do we share your personal data with? 

We use various system and service providers to fully or partially process your personal data. These providers are often referred to in the GDPR context as recipients. We use the following categories of recipients to help us with certain treatments, which they carry out entirely according to our instructions (so-called personal data assistants): 

  • HR system / business system 

See information further down on third country transfer. 

How long will we process your personal data? 

We will save the data only as long as necessary or until we are notified that the data needs to be updated.

What personal data do we collect about you? 

The information that you provide to us in connection with your application is the information that we will process. Having said that, we would like to urge you not to provide sensitive personal data or your full social security number in the application, as this is information that we do not request or need to process your application. In general, it is common for us to process the following types of personal data: name, date of birth, address, telephone number, email address, title, employer, interests and other experiences. 

For what purposes do we process your personal data and on what legal basis do we support the processing? 

We only process personal data about you in your role as a job seeker with us and as described below. 

  • In order to evaluate your application and suitability for a position with us and to invite you to a possible interview, we will process your personal data. Legal basis: legitimate interest. 
  • In addition, we need to process your data in order to offer employment and conclude employment contracts. Legal basis: contract. 
  • If we have received a spontaneous application, we will process the personal data included in it to assess whether we can offer you an interview, keep in touch and see if we can have a suitable position for you in the future. Legal basis: consent. If you are of interest in a recruitment process, further processing will take place based on our legitimate interest. 

How and when do we collect your personal data? 

We collect your information in connection with your submitting it to us, either through an application for an advertised position or a spontaneous application that you submit via email, our website or LinkedIn. 

Which parties do we share your personal data with? 

We use various system and service providers to fully or partially process your personal data. These providers are often referred to in the GDPR context as recipients. We use the following categories of recipients to help us with certain treatments, which they carry out entirely according to our instructions (so-called personal data assistants): 

  • Social Media 
  • Server hosting 
  • Communication solutions 

See information further down on third country transfer. 

How long will we process your personal data? 

We will save the data only as long as necessary. This means that if you have participated in a recruitment process but have not been offered a job, we will process your personal data for 2 years after the end of the recruitment process in which you participated, supported by discrimination protection for recruitment. If you have submitted a spontaneous application, we will process it until you withdraw your consent, and at most for 5 years.

What personal data do we collect about you? 

We use as little personal data as possible, but when you visit our website and approve our use of so-called cookies (see more information in our cookie policy), we can collect some information about you or if you fill in and submit forms on the website. The types of data that we may therefore process are the following: name, address, email address, title, employer and phone number as well as any information in free text fields. 

For what purposes do we process your personal data and on what legal basis do we support the processing? 

We only process personal data about you in connection with a visit to our website, as described below. 

  • We have information about how you move around our website in order to improve and develop our website so that we present the most important and relevant content to our website visitors. Legal basis: consent. 
  • We process the information you provide in the form you submit to us via the website in order to be able to answer your questions and provide information about relevant services. Legal basis: legitimate interest. 

How and when do we collect your personal data? 

When you visit our website and agree to our use of cookies, we will collect information about your visit to our website in order to improve and develop our website. In addition, we collect data directly from you when you submit one of the forms we have on the website. 

Which parties do we share your personal data with? 

We use various system and service providers to fully or partially process your personal data. These providers are often referred to in the GDPR context as recipients. We use the following categories of recipients to help us with certain treatments, which they carry out entirely according to our instructions (so-called personal data assistants): 

  • Server hosting 
  • Communication solutions 
  • CRM system 
  • Analysis tools 

See information further down on third country transfer. 

How long will we process your personal data? 

We only process your personal data for as long as is necessary for the specific purposes for which it was collected. This means e.g. that if you withdraw your consent, we will stop processing your data for that purpose. We will process the data that we process to provide feedback on the form you submitted as long as we have contact and you show interest in our services.

What personal data do we collect about you? 

We use as little personal information as possible, but if you are a journalist with whom we have dialogue, we may have the following information about you: name, telephone number, address, email address, title and employer/publication. 

For what purposes do we process your personal data and on what legal basis do we support the processing? 

We only process personal data about you in your role as a journalist for the purpose of communicating with you and conveying specific and relevant news about us. Legal basis: legitimate interest. 

How and when do we collect your personal data? 

Either we collect your contact details from public and public sources or you contact us as a journalist and then we collect your contact details in connection with our initial communication. 

Which parties do we share your personal data with? 

We use various system and service providers to fully or partially process your personal data. These providers are often referred to in the GDPR context as recipients. We use the following categories of recipients to help us with certain treatments, which they carry out entirely according to our instructions (so-called personal data assistants): 

  • Communication tools 

See information further down on third country transfer. 

How long will we process your personal data? 

We only process your personal data for as long as is necessary for the specific purposes for which it was collected. This means e.g. that we keep your contact details for as long as we believe you have an interest in receiving information and news from us.

What personal data do we collect about you? 

We use as little personal data as possible, but if you are a lecturer that we want to invite to our events, we will process your name, address, email address, title, employer and phone number. 

For what purposes do we process your personal data and on what legal basis do we support the processing? 

We only process personal data about you in your role as lecturer for the purpose of communicating with you and organizing lectures/training. Legal basis: legitimate interest. 

How and when do we collect your personal data? 

We may collect your contact details from public and public sources or you contact us as a lecturer and then we collect your contact details in connection with initial communication. 

Which parties do we share your personal data with? 

We use various system and service providers to fully or partially process your personal data. These providers are often referred to in the GDPR context as recipients. We use the following categories of recipients to help us with certain treatments, which they carry out entirely according to our instructions (so-called personal data assistants): 

  • Communication solutions 
  • Server hosting 
  • Social Media 
  • CRM system 

See information further down on third country transfer. 

How long will we process your personal data? 

We only process your personal data for as long as is necessary for the specific purposes for which it was collected. This means that we will process your personal data to administer, market and carry out various types of events. When the event is completed, we will keep your contact details to be able to maintain contact and invite you again, this as long as we judge that you have an interest in participating as a lecturer. 

Transfer of personal data to third countries 

When we transfer your personal data to a supplier, collaboration partner or other actor, we do so for the purpose of getting help to carry out certain processing activities. When such a recipient is in the so-called third country (a country outside the EU/EEA), we ensure extra carefully which recipients we use and which security measures they can offer so that you feel safe in how we process your personal data. 

For all these transfers, we ensure that so-called Standard Contractual Clauses (SCCs) have been concluded, or that the corresponding approved transfer mechanism is in place in accordance with Chapter V of the GDPR. This is to ensure, to the greatest extent possible, that the data is processed as securely as if the recipient had been within the EU/EEA. Despite this, we would like to draw your attention to the fact that national legislation in the receiving countries (e.g. USA) may in some cases allow their authorities to access the data through their security legislation.

Your rights

As described in the introduction, our privacy policy, in order not to make it unnecessarily long and complicated, contains only the treatments that are most common and which can be assumed to affect you the most. If you want a detailed account of what specific information we have about you, you can always use your right of access, described below, or ask us a question. 

The right of access 

You have the right to request a so-called register extract, i.e. a copy of the personal data about you that we process. In it, we make it clear what personal data we have about you, why we need it, where we got the data from and, where applicable, which categories of recipients may have access to it. An important detail in this context is that we can sometimes deny you the right of access, for one or more specific data, for example if your data cannot be distinguished from data about another individual (whose privacy we must also protect) – but then we will always explain that a task is missing and why. 

The right to rectification 

You have the right to request correction of the personal data processed about you if these are incorrect and you also have the right to request that we supplement incomplete personal data. 

The right to erasure 

You have the right to request that your personal data be deleted, if the processing of the personal data e.g. is no longer necessary for the purpose for which they are processed, is based on your consent and you revoke it, or is processed in an illegal manner. Deletion, however, does not apply to the personal data that we are obliged to preserve according to a legal obligation or that we need to process in order to establish, enforce or defend legal claims. 

The right to object to and/or restrict processing of your personal data: 

You have the right to object to or limit processing of your personal data. For example, you can limit processing of you temporarily if you believe that the personal data was/are incorrect – which then gives us time to investigate. You also have the right to specifically object to processing described below: 

  • Legitimate interest 

You have the right to object to processing of your personal data based on legitimate interest (also called balancing of interests). This means that we then only have the right to continue processing your personal data if we can demonstrate that our legitimate interest outweighs your interest in ending the processing and your rights. This is only applicable to the personal data processing that we carry out based on the legal basis of legitimate interest. 

  • Direct marketing 

If your personal data is processed to send direct marketing, you have the right to object and then we will stop processing your data for that purpose. 

The right to data portability: If the processing is based on consent or agreement and if technically possible, you have the right to data portability, meaning that we help you transfer the personal data to you, or the person you choose, in a machine-readable format. This only applies to the data that is in a structured format and that you yourself have provided to us. 

If you want to use any of your rights, you are most welcome to contact us at  

Contact details for the supervisory authority 

You also have the right to file a complaint with the supervisory authority, if you feel that we have somehow processed your data in violation of the GDPR. In Sweden, the Integritetsskyddsmyndigheten (IMY) is the supervisory authority. You can find their contact details here: https://www.imy.se/kontakta-oss/ 

However, we would like you to give us the chance to correct any mistakes first.