Partnerly AB
Org.nr 559531-3551
1. Data controller
Partnerly AB is the controller for the processing described in this policy.
2. Data we process
Depending on how you use the website, we may process the following data:
- Contact details and the contents of your message, such as your name, email address, and information you provide through the form or by email.
- Booking details when you use Calendly, such as your name, email address, selected time, time zone, and information you provide in the booking.
- Technical data such as IP address, timestamp, browser, device, referring page, approximate country, and pages visited. This is used for operation, security, troubleshooting, and aggregated statistics.
- Your language preference, which is stored locally in your browser so the website can remember your selection.
3. Purposes and legal bases
We process data to:
- respond to enquiries, arrange meetings, and take steps before entering into a possible contract (Article 6(1)(b) GDPR),
- manage customer, candidate, and business relationships based on our legitimate interest in communicating and operating the business (Article 6(1)(f) GDPR),
- operate, protect, troubleshoot, and improve the website and produce aggregated visitor statistics (Article 6(1)(f) GDPR), and
- comply with legal obligations, such as accounting requirements (Article 6(1)(c) GDPR).
4. Service providers
We use the following providers to operate the website and manage communications. They process data within the scope of the relevant service and applicable terms:
- Vercel: hosting, delivery, security logs, and privacy-focused web analytics.
- Supabase: technical processing of the contact form through a server function.
- Resend: delivery of messages and confirmation emails.
- Google: email processing through Google Workspace and delivery of web fonts.
- Calendly: meeting scheduling when you choose to open the booking service.
5. How long data is retained
Contact and booking data is normally retained for no more than 12 months after our last contact if it does not lead to an ongoing assignment, customer relationship, or other business relationship.
Data required for contracts, legal claims, or statutory obligations may be retained for longer where required. It is then deleted or anonymised.
6. Analytics, local storage, and external links
Vercel Web Analytics is used for aggregated visitor statistics. It does not use third-party cookies for analytics or associate statistics with an identifiable visitor. The temporary visitor identifier is discarded after 24 hours.
The website uses browser local storage to remember your language choice. If you follow an external link, such as Calendly, LinkedIn, or GitHub, the external service's own terms and privacy policy apply.
7. Transfers outside the EU/EEA
Some providers may process data in countries outside the EU/EEA. Where such a transfer takes place, it must rely on a valid transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with relevant safeguards.
8. Your rights
Depending on the circumstances, you have the right to:
- access the personal data we process about you,
- request correction or deletion,
- request restriction of processing,
- object to processing based on legitimate interests, and
- receive data in a structured format where the right to data portability applies.
Contact us by email to exercise your rights. We may need to verify your identity before handling a request.
9. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, and disclosure. However, no transmission or storage method can be guaranteed to be entirely risk-free.
10. Changes to this policy
This policy may be updated when our services or legal requirements change. The latest version is always published on this page and shows the date of the most recent update.
11. Contact and complaints
Contact Partnerly AB if you have questions about the processing or wish to exercise any of your rights.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
If you are located in Denmark, you may also contact the Danish Data Protection Agency.