Privacy Policy

PHINLinc AB is the data controller responsible for the processing of personal data described in this Privacy Policy.

PHINLinc AB
Organisation number: 559594-7515
Uppsala, Sweden
Email: contact@phinlinc.com

We may collect personal data that you provide directly to us, including:

• Name
• Email address
• Company or organisation
• Information included in messages or enquiries sent to us
• Other information you voluntarily provide when contacting us

When you visit our website, certain technical information may also be processed automatically, such as IP address, browser information, device information and technical logs necessary to operate and secure the website.

We process personal data for purposes including:

• Responding to enquiries and messages
• Communicating with potential and existing clients, partners and other contacts
• Providing information about our services
• Managing potential or existing business relationships
• Operating, maintaining and securing our website
• Preventing misuse, fraud or security incidents
• Complying with applicable legal obligations

Depending on the circumstances, we process personal data on one or more of the following legal bases:

Legitimate interests – where processing is necessary for our legitimate business interests, such as responding to enquiries, maintaining business relationships and securing our website.

Steps prior to entering into or performance of a contract – where you contact us regarding a potential assignment, service or business relationship.

Legal obligation – where we are required to process or retain information under applicable law.

Where processing is based on legitimate interests, we consider our interests against your rights and interests before processing your personal data.

If you contact us through our website, the information you submit is used to receive and respond to your enquiry.

We use third-party service providers, including Resend, to facilitate email communication and the delivery of messages submitted through our website.

You should avoid submitting sensitive personal information through the contact form unless it is necessary for your enquiry.

We may use trusted third-party service providers to operate our website and communications infrastructure.

These may include:

• Netlify – website hosting and infrastructure
• Resend – email delivery and communication infrastructure

These providers may process personal data on our behalf where necessary to provide their services.

We do not sell your personal data.

Some of our service providers operate or process information outside the European Union or European Economic Area, including in the United States.

Where personal data is transferred outside the EU/EEA, we take steps to ensure that an appropriate level of protection is provided in accordance with applicable data protection law, including through recognised transfer mechanisms such as adequacy decisions or the European Commission’s Standard Contractual Clauses where applicable.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.

Information contained in general enquiries will normally be retained only for as long as necessary to handle the enquiry and any subsequent business relationship.

Information may be retained for longer where required by law or where necessary to establish, exercise or defend legal claims.

We do not intentionally use advertising or marketing cookies on this website unless otherwise stated.

The website and its hosting infrastructure may use technically necessary functionality or similar technologies required for security, performance or operation of the website.

If we introduce analytics, advertising or other technologies that require consent, we will update this Privacy Policy and implement appropriate consent mechanisms where required.

Under applicable data protection law, including the General Data Protection Regulation (GDPR), you may have the right to:

• Request access to your personal data
• Request correction of inaccurate personal data
• Request deletion of your personal data
• Request restriction of processing
• Object to certain processing
• Request data portability where applicable
• Withdraw consent where processing is based on consent

These rights are subject to certain legal conditions and exceptions.

To exercise your rights, contact us at contact@phinlinc.com.

We may need to verify your identity before fulfilling certain requests.

If you believe that we have processed your personal data in violation of applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

In Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY).

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of external websites. We recommend reviewing their respective privacy policies when visiting them.

We may update this Privacy Policy from time to time to reflect changes to our services, technology or legal requirements.

The latest version will always be available on this page, together with the date it was last updated.

For questions regarding this Privacy Policy or our processing of personal data, contact:

PHINLinc AB
Uppsala, Sweden
contact@phinlinc.com