Privacy Policy

Last updated: November 2026

This Privacy Policy describes how Defilade Europe AB, corporate identity number 559551-3887, Stockholm, Sweden (“Defilade”, “we”, “our” or “us”), processes personal data in connection with this website (the “Site”). Defilade is the controller of the personal data described below. Personal data is processed in accordance with the EU General Data Protection Regulation (the “GDPR”) and applicable Swedish data protection legislation.

1. Personal Data We Process

We process the following categories of personal data:

• Enquiries: name, organisation, email address, the subject of your enquiry and the content of your message, when you use the contact form or email us.

• Subscriptions and waiting lists: your email address, when you sign up for updates or for early access to a report.

• Technical data: information such as IP address, browser type, device information and pages visited, collected through cookies and similar technologies when you use the Site.

2. Purposes and Legal Bases

• To respond to and follow up on enquiries, on the basis of our legitimate interest in communicating with persons who contact us (Article 6(1)(f) GDPR).

• To send updates, report notifications and waiting-list communications that you have requested, on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time by using the unsubscribe link in each message or by contacting us.

• To operate, secure and improve the Site, on the basis of our legitimate interest in providing a functioning and secure website, and, where required, your consent to non-essential cookies.

• To comply with legal obligations, such as accounting and record-keeping requirements (Article 6(1)(c) GDPR).

3. Cookies

The Site uses cookies that are necessary for it to function. Non-essential cookies, such as analytics cookies, are used only if you accept them in the cookie banner. You may change your choices at any time through the cookie settings on the Site or in your browser.

4. Recipients and Processors

We do not sell personal data. Personal data may be shared with service providers that process it on our behalf, such as providers of website hosting, forms and email campaigns (Squarespace), email and office software (Google Workspace) and website translation (Weglot). Such providers act as processors under data processing agreements and may only process personal data in accordance with our instructions. Personal data may also be disclosed where required by law or by a public authority.

5. Transfers Outside the EU/EEA

Some of our service providers may process personal data outside the EU/EEA, including in the United States. In such cases, we ensure that the transfer is subject to appropriate safeguards, such as an adequacy decision, including the EU–US Data Privacy Framework, or the European Commission’s standard contractual clauses.

6. Retention

• Enquiries are retained for as long as necessary to handle the enquiry and any follow-up, and for no longer than 24 months after the most recent contact, unless a business relationship is established.

• Subscription and waiting-list data is retained until you unsubscribe or withdraw your consent.

• Personal data that we are required to keep by law is retained for the period required by law.

7. Your Rights

Subject to the conditions of the GDPR, you have the right to request access to, rectification or erasure of your personal data, to request restriction of processing, to object to processing based on our legitimate interests, and to receive your personal data in a structured, machine-readable format (data portability). Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact us at info@defilade.se. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se.

8. Changes to this Policy

We may update this Privacy Policy from time to time. The date of the most recent revision is stated above. Material changes will be communicated on the Site.

9. Contact

Questions regarding this Privacy Policy may be directed to Defilade Europe AB, corporate identity number 559551-3887, Stockholm, Sweden, at info@defilade.se.

Our Terms of Use also apply to your use of the Site.