Last updated: 26 June 2026
1. Data Controller
Inchifluid AB (org.nr 559301-8472) is the data controller for personal data collected through inchifluid.bond and our business operations.
Contact: Stortorget 12, 211 22 Malmö, Sweden
Email: [email protected]
Phone: +46 40 612 84 37
2. What Data We Collect
We may collect the following categories of personal data:
- Contact information: name, email address, phone number, company name — when you submit an enquiry form or contact us directly.
- Project information: details you provide about your lighting project, including address and budget range.
- Technical data: IP address, browser type, device information and pages visited — collected via cookies with your consent.
- Employment data: CV, portfolio and application materials submitted for career opportunities.
3. Legal Basis for Processing
Under the EU General Data Protection Regulation (GDPR) and the Swedish Personal Data Act, we process data on the following bases:
- Contract (Art. 6(1)(b)): to respond to enquiries and deliver lighting design services.
- Legitimate interest (Art. 6(1)(f)): to improve our website and services, and for limited business communication.
- Consent (Art. 6(1)(a)): for non-essential cookies, analytics and marketing communications.
- Legal obligation (Art. 6(1)(c)): to comply with Swedish accounting and tax law.
4. How We Use Your Data
We use personal data to:
- Respond to project enquiries and provide quotations (in SEK)
- Deliver contracted lighting design services
- Process job applications
- Analyse website usage (with consent) to improve user experience
- Comply with legal and regulatory requirements
5. Data Retention
Enquiry data is retained for 24 months unless a business relationship is established. Client project data is retained for seven years per Swedish accounting requirements. Cookie consent records are stored locally in your browser under the key inchifluid_bond_consent. Application data is retained for 12 months.
6. Data Sharing
We do not sell personal data. We may share data with:
- Sub-processors providing hosting, email or analytics services (bound by GDPR-compliant agreements)
- Professional advisers (accountants, legal counsel) where required
- Authorities when legally obligated
7. International Transfers
Data is primarily processed within the EU/EEA. Any transfer outside the EEA is protected by Standard Contractual Clauses or an adequacy decision.
8. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data ("right to be forgotten") where applicable
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (without affecting prior lawful processing)
- Lodge a complaint with Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection, at imy.se
To exercise your rights, contact us at [email protected]. We respond within 30 days.
9. Cookies
We use cookies as described in our Cookie Policy. You can manage preferences via the cookie banner or by clearing the inchifluid_bond_consent entry in your browser storage.
10. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction.
11. Changes
We may update this policy periodically. Material changes will be posted on this page with an updated date.