Last updated: 2025-09-25

1. Introduction

This Privacy Policy describes how Pathmaker AB (”we”, ”our”, ”us”) collects, uses, shares, and protects your personal data when you visit our website or use our services. We are committed to protecting your personal integrity and ensuring compliance with the General Data Protection Regulation (EU) 2016/679 (”GDPR”) and other applicable data protection laws.

By using our website or contacting us, you consent to the processing of your personal data as described in this policy.

2. What Personal Data We Collect and Why

We collect and process personal data that you provide directly to us, as well as data collected automatically when you interact with our website.

Data you provide:

• Name, email address, phone number, company details, or other contact information submitted through forms or email.

• Messages or inquiries submitted via our contact forms or other communication channels.

Automatically collected data:

• IP address and browser/device information.

• Website usage data (e.g. clicks, page views, time spent) via tracking tools.

Purpose of processing:

• To establish or maintain business relationships.

• To respond to contact requests or other inquiries.

• To improve our website and user experience.

• To send marketing communications (only with your consent).

• To prevent spam and abuse (e.g. by collecting sender IP address).

• To fulfill legal obligations.

We only retain personal data for as long as it is necessary to fulfil the above purposes or to comply with applicable laws.

3. Legal Basis for Processing

We process your personal data on one or more of the following legal bases:

• Consent: When you have given your clear consent for us to process your data (e.g. newsletter sign-up).

• Contractual necessity: To take steps at your request before entering into a contract or to perform a contract with you.

• Legitimate interest: For business purposes such as improving our services, website functionality, and communication—provided that such interests are not overridden by your fundamental rights.

• Legal obligation: To comply with applicable laws or governmental requests.
  
  

4. Data Sharing and Transfers

We do not sell, trade, or rent personal data to third parties.

However, we may share personal data with the following categories of recipients:

• Trusted service providers acting on our behalf, such as providers of cloud infrastructure, IT systems, email marketing tools, or CRM platforms. These parties are contractually obligated to process data securely and confidentially in accordance with applicable data protection laws.

• Analytics and advertising providers, including but not limited to Google Analytics, Meta (Facebook Pixel), and LinkedIn Insight Tag, for the purpose of analyzing website traffic, user behavior, and marketing performance. These providers may collect data such as IP addresses and browsing behavior through cookies or other tracking technologies.

• Public authorities or legal entities, if we are required to disclose personal data due to legal obligations, court orders, or regulatory demands.

These third-party providers may act as independent data controllers under GDPR. We do not control how these providers use the data once collected. We strongly recommend that you review their respective privacy policies to understand how they process your information.

Where data is transferred outside the EU/EEA, we ensure adequate protection through standard contractual clauses or other legally recognized mechanisms.

5. Automated Decision-Making and Profiling

We do not engage in any fully automated decision-making that produces legal effects or similarly significant consequences for you.

However, we may use basic analytics and profiling (e.g. via Meta, Google, or LinkedIn) to evaluate how users interact with our website or digital content. This information is only used to improve our services and marketing effectiveness.

6. Contact Forms and IP Tracking

When you submit a message through a contact form on our website, the information you provide (such as name, email, and message content) is sent to us and processed for the sole purpose of responding to your inquiry and, where relevant, maintaining a business relationship.

The IP address of the sender is also collected and stored temporarily in connection with form submissions. This is done solely to prevent spam, abuse, or harassment and is not used for marketing or profiling purposes.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance the user experience, analyze traffic, and enable certain functionalities.

Types of cookies we use:

• Functional cookies: To remember login details, preferences, and user settings.

• Analytics cookies: To collect aggregated usage statistics via third-party providers (e.g. Google Analytics).

• Marketing cookies: Used by platforms such as Meta and LinkedIn to track interactions with ads and content.

Cookie retention:

• Login cookies: valid for 2 days.

• Preference/layout cookies: valid for up to 1 year.

• ”Remember Me” cookies: valid for 2 weeks.

• Editing cookies: valid for 24 hours.

• Analytics and marketing cookies: duration depends on each provider’s policy.

You can disable cookies via your browser settings. However, some features of the site may not function properly if cookies are disabled.

8. Embedded Content and External Links

Articles or pages on our site may include embedded content (e.g., videos, images, articles) from external websites. Embedded content behaves in the same way as if the user visited the external website directly.

These external websites may:

• Collect personal data.

• Use cookies or tracking technologies.

• Monitor your interaction with embedded content, including tracking if you are logged in to those external platforms.

We have no control over, and accept no responsibility for, the privacy practices, content, or policies of third-party websites. We encourage users to read the privacy policy of every website they visit.

9. Who Has Access to Your Data

Access to personal data is strictly limited to employees, consultants, or service providers who need the information to carry out their duties. All individuals with access are subject to confidentiality obligations.

We ensure that all parties who process personal data on our behalf do so in accordance with this Privacy Policy and relevant laws.

10. How We Protect Your Data

We take data security seriously and implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction.

Security measures include:

• Encrypted website traffic via SSL/TLS.

• Limited access to data based on role and responsibility.

• Secure storage environments and access controls.

• Monitoring for potential threats or breaches.

In the event of a personal data breach, we will notify affected individuals and the relevant authorities without undue delay, in accordance with GDPR Article 33 and 34.

11. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access – Obtain a copy of your personal data.

• Right to rectification – Correct inaccurate or incomplete data.

• Right to erasure – Request deletion of your data under certain conditions.

• Right to restrict processing – Limit how your data is used.

• Right to object – Object to certain processing, such as direct marketing.

• Right to data portability – Receive your data in a structured format and transmit it to another controller.

• Right to withdraw consent – Where processing is based on your consent, you can withdraw it at any time.

To exercise any of your rights, contact us at:

Email: jonas@hylten.com
We may need to verify your identity before fulfilling your request.

12. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy or to comply with applicable legal obligations.

When data is no longer required, it is securely deleted or anonymized.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The updated policy will always be available on our website, with the latest revision date indicated at the top of the page.

We encourage you to review this policy regularly to stay informed of how we protect your information.

14. Contact

If you have any questions about this Privacy Policy, our data processing practices, or your rights under applicable law, please contact:

Pathmaker AB
jonas@hylten.com