Data Privacy Policy

Last updated: September 9, 2025

At Celemi, we are committed to protecting your privacy. This policy explains how we collect, use, store, and safeguard your personal data. We comply with the EU General Data Protection Regulation (GDPR, EU 2016/679) as well as other applicable data protection laws.

1. Data Controller

Celemiab International AB (reg. no. 556401-4735) is the data controller responsible for the processing of your personal data.

Contact:
Email: privacy@celemi.com
Address: Celemiab International AB, Nordenskiöldsgatan 6, 211 19 Malmö, Sweden

2. Data We Collect

We may collect the following categories of personal data:

Contact details: name, email, phone number, employer, job title.
Communication data: information provided in forms, emails, meeting notes.
Technical data: IP address, browser type, language, device information.
Usage data: website and web application behavior, cookies, preferences.
Business data: information necessary for service delivery, invoicing, and contracts.

3. Purposes and Legal Basis

Purpose	Legal Basis
Provide services and fulfill agreements	Contract (Art. 6.1(b))
Manage customer relations, support, and communication	Legitimate interest (Art. 6.1(f))
Marketing and newsletters	Consent (Art. 6.1(a))
Website and web application analytics and improvement	Consent (cookies) and legitimate interest
Compliance with legal obligations (e.g., accounting)	Legal obligation (Art. 6.1(c))

4. Data Retention

We retain personal data only as long as necessary for each purpose:

Contract and customer data: 7 years, or as legally required by local legislation (legal/accounting requirements).
Marketing data: until consent is withdrawn or after 2 years of inactivity.
Cookies and analytics data: according to cookie settings, max 24 months.
Recruitment data: up to 2 years, with consent.

5. Sharing of Data

We do not sell your personal data. We may share data with:

Service providers (e.g., CRM systems, email services, IT hosting, analytics tools).
Business partners supporting delivery of our services.
Authorities when required by law.

All third parties are bound by contracts ensuring adequate data protection.

6. International Data Transfers

If personal data is transferred outside the EU/EEA, this will only occur:

To countries recognized by the European Commission as providing adequate protection,
or
Under Standard Contractual Clauses (SCCs) or equivalent safeguards.

7. Cookies

We use cookies for analytics, personalization, and marketing. You can manage or withdraw your consent at any time via our cookie banner or browser settings.
For details, see our Cookie Policy.

8. Your Rights

You have the right to:

Request access to your personal data (data subject access request).
Rectify incorrect or incomplete data.
Request erasure (“right to be forgotten”).
Object to processing (e.g., direct marketing).
Restrict processing.
Receive your data in a portable format (data portability).
File a complaint with the Swedish Authority for Privacy Protection (IMY).

To exercise your rights, please contact us at privacy@celemi.com.

9. Security

We protect your data with technical and organizational measures, including encryption, access controls, and incident management procedures.

10. Policy Updates

We may update this policy from time to time. The latest version will always be available on our website. Significant changes will be communicated directly to affected individuals.