Privacy policy

Carl Hellström is the data controller. Contact me at kontakt@carlhellstrom.se if you have questions about how your data is handled.

When you request the checklist, I store your email address and, if you provide them, your first name and company.

When you send an enquiry, I store your name, email address, company, job title and message, as well as your phone number, company size and timeframe if you provide them.

To protect the forms against abuse, I store a one-way hashed checksum of your IP address for no more than two days. The IP address itself is never stored.

The data is used to send the checklist and to respond to your enquiry. The legal basis is my legitimate interest in delivering what you have asked for and in following up on business contacts.

If you have chosen to receive insights by email, I process your email address for that purpose based on your consent. You can withdraw your consent at any time.

Data about checklist requests and enquiries is kept for no more than 24 months after the most recent contact and is then deleted automatically, unless we have started working together.

The data is stored with the database provider Supabase, and email is sent through Resend. These providers process the data on my behalf under data processing agreements. Where data is transferred outside the EU/EEA, this is done on the basis of the European Commission's standard contractual clauses or equivalent safeguards.

Calendar bookings are handled by Calendly in accordance with Calendly's own privacy policy.

You have the right to request access to, correction or erasure of your data, to object to the processing and to withdraw consent. Contact me at kontakt@carlhellstrom.se.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).