Privacy Policy

Who Is Responsible for Your Personal Data?

Wegerstedt Studio AB, company registration number 559583-4895, is the data controller for the processing described in this Privacy Policy.

Questions about personal data or requests to exercise data protection rights may be sent to victor@wegerstedt.studio.

Personal Data We Process

Wegerstedt Studio primarily processes personal data about contact persons at clients, prospective clients, suppliers and business partners, as well as individuals who contact the company or visit the website.

Depending on the relationship and the engagement, this may include:

• name, job title, company and contact details;
• enquiries, correspondence and other communications;
• information in quotations, contracts, project materials, approvals, invoices and payment records;
• materials supplied or created as part of an engagement that contain personal data; and
• technical information such as IP address, browser information, requested URL and log data.

Personal data is normally obtained directly from the individual or from the company or organisation they represent. Limited professional contact information may also be obtained from public registers, company websites and other publicly available sources. Technical information may be collected when the website is visited.

Please do not provide special categories of personal data unless this is necessary for the engagement and has been agreed in advance.

Why We Process Personal Data

Wegerstedt Studio processes personal data for the following purposes and on the following lawful bases:

• Enquiries, quotations and business relationships: To respond to enquiries, prepare quotations, plan engagements and communicate with clients and prospective clients. This is normally based on Wegerstedt Studio’s legitimate interest in establishing and managing business relationships. Where the individual is a party to the contract, processing may instead be necessary to take steps before entering into or to perform that contract.
• Engagements and administration: To perform, document and follow up engagements and manage approvals, deliveries and payments. This is based on performance of a contract or, where the client is a company or organisation, Wegerstedt Studio’s legitimate interest in performing the engagement and communicating with its representatives.
• Legal obligations: To comply with accounting, tax and other legal requirements.
• Legal claims: To establish, exercise or defend legal claims, based on Wegerstedt Studio’s legitimate interest in protecting its legal rights.
• Security and operation: To maintain secure and functioning websites, email services and business systems, based on Wegerstedt Studio’s legitimate interest in protecting and operating its technical environment.

Contacting Wegerstedt Studio is voluntary. However, certain information may be required to prepare a quotation, enter into or perform a contract, complete an engagement, issue an invoice or comply with the law. Without that information, Wegerstedt Studio may be unable to provide the relevant service.

Who May Receive Personal Data?

Personal data may be shared with service providers used for web hosting and email, accounting and invoicing, banking and payments, data storage, IT support and other services necessary to operate the business or perform an engagement. It may also be disclosed to public authorities, professional advisers and external suppliers where necessary or required by law.

Service providers that process personal data on behalf of Wegerstedt Studio may only do so under contract and in accordance with documented instructions. Some recipients, such as banks and public authorities, process personal data as independent data controllers under the rules applicable to their activities.

Wegerstedt Studio does not sell personal data.

Transfers outside the EU/EEA

Wegerstedt Studio aims to use services that process personal data within the EU/EEA. If personal data is transferred outside the EU/EEA, the transfer will be based on a lawful mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required.

Information about the safeguards used for a particular transfer may be requested by emailing victor@wegerstedt.studio.

How Long We Keep Personal Data

Personal data is kept only for as long as necessary for the relevant purpose and is then deleted or anonymised, unless a longer period is required by law or necessary for legal claims.

As a general guide:

• enquiries that do not lead to an engagement are normally kept for no more than twelve months after the most recent contact;
• client, contract and project information is kept during the engagement and afterwards for as long as necessary to administer and document the relationship or protect legal rights;
• project files and final materials may be archived for longer where necessary to document completed work, agreed rights and the scope of an engagement;
• accounting information is kept for the period required by Swedish accounting law; and
• technical logs are kept only for as long as needed for operation, troubleshooting and security.

Retention periods may be extended where a legal claim is ongoing or the law otherwise requires it.

Your Rights

Depending on the circumstances, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing and data portability. You may also have the right to object to processing based on legitimate interests and to withdraw consent where processing is based on consent.

These rights are not absolute. Wegerstedt Studio may need to retain or continue processing certain information, for example to comply with a legal obligation or to establish, exercise or defend legal claims.

Requests may be sent to victor@wegerstedt.studio. Additional information may be requested where necessary to verify the identity of the person making the request.

Website Data and Cookies

Wegerstedt Studio’s website does not currently use analytics tools, contact forms or cookies for marketing or analytics. When the website is visited, the hosting provider processes technical information in server and security logs for operation, troubleshooting and protection against misuse.

The hosting provider’s security systems may use a temporary cookie if an automated browser check is required to protect the website. This cookie is not used by Wegerstedt Studio for analytics or marketing.

If new website functions introduce additional processing of personal data or non-essential cookies, this Privacy Policy will be updated and consent will be obtained where required.

Other Information about the Processing

Wegerstedt Studio takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure. Access is limited to those who need the information, and the measures are adapted to the nature of the data and the risks involved.

For some engagements, Wegerstedt Studio may process personal data solely on a client’s documented instructions. In that situation, the client is the data controller, Wegerstedt Studio is the data processor and the processing is governed by a separate data processing agreement. Requests concerning such data will normally be referred to the client.

Wegerstedt Studio does not use personal data for decisions based solely on automated processing that produce legal or similarly significant effects for an individual.

Complaints and Changes to This Policy

If you believe that personal data has been processed in breach of data protection law, you may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or another competent supervisory authority in the EU/EEA. Information about IMY is available at imy.se. You are also welcome to contact Wegerstedt Studio first, without this affecting your right to complain to a supervisory authority.

This Privacy Policy may be updated when the business, the processing of personal data or applicable rules change. The current version is published at wegerstedt.studio/privacy and identified by its version date. Material changes will be communicated in an appropriate manner.