Privacy Policy

1. Introduction

Nordic Riser AB ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our advisory services.

This policy is designed to comply with the EU General Data Protection Regulation (GDPR) and Swedish data protection laws.

2. Data Controller

Nordic Riser AB
Stockholm, Sweden
Email: info@nordicriser.com

Nordic Riser AB is the data controller responsible for your personal information collected through our website and services.

3. Information We Collect

3.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

Contact Information: Name, email address, phone number, postal address
Business Information: Company name, position, business objectives, investment plans
Communication Data: Information contained in emails, forms, and other correspondence
Advisory Request Information: Details about your business establishment or relocation needs

3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

Technical Data: IP address, browser type, operating system, device information
Usage Data: Pages visited, time spent on pages, navigation paths
Cookies: Small data files stored on your device (see our Cookie Policy below)

4. How We Use Your Information

We process your personal data for the following purposes:

Purpose	Legal Basis (GDPR)
Providing advisory services and responding to inquiries	Contract performance / Legitimate interest
Communicating with you about our services	Contract performance / Consent
Improving our website and services	Legitimate interest
Compliance with legal obligations	Legal obligation
Coordinating with third-party professionals (legal, accounting, immigration)	Contract performance / Legitimate interest

We will NOT:

Sell or rent your personal information to third parties
Use your information for purposes incompatible with those stated
Process your data without a lawful basis under GDPR

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers and Professional Partners

Legal Counsel: Lawyers and immigration specialists as needed for your case
Accounting Firms: For business establishment and tax compliance matters
Technology Providers: Email hosting, website hosting, and communication tools

All third parties are required to maintain appropriate security measures and process your data only as instructed by us.

5.2 Legal Requirements

We may disclose your information when required by law, regulation, legal process, or governmental request.

5.3 International Transfers

We primarily process data within the EU/EEA. If data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encrypted email communication for sensitive information
Secure servers and data storage systems
Access controls and authentication procedures
Regular security assessments and updates
Employee training on data protection

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations:

Client Data: Duration of engagement plus 7 years (Swedish accounting law requirements)
Inquiry Data: 2 years from last contact (unless engagement proceeds)
Website Analytics: 26 months maximum
Marketing Consent: Until consent is withdrawn

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right of Access

Request copies of your personal data

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure ("Right to be Forgotten")

Request deletion of your data in certain circumstances

Right to Restrict Processing

Request limitation on how we use your data

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Object

Object to processing based on legitimate interests or direct marketing

Right to Withdraw Consent

Withdraw consent for processing at any time (where consent is the legal basis)

Right to Lodge a Complaint

File a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten - IMY)

To exercise any of these rights, please contact us at: info@nordicriser.com

We will respond to your request within one month, as required by GDPR.

9. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies. Currently, our website is a static information site with minimal tracking. If we implement analytics or other tracking in the future, we will:

Obtain your consent before setting non-essential cookies
Provide detailed information about cookie types and purposes
Allow you to manage your cookie preferences

You can control cookies through your browser settings and delete cookies at any time.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Updating the "Last Updated" date at the top of this policy
Sending an email notification (for significant changes)
Posting a notice on our website

12. Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Swedish Data Protection Authority:

Integritetsskyddsmyndigheten (IMY)
Box 8114
104 20 Stockholm, Sweden
Phone: +46 8 657 61 00
Website: www.imy.se