Privacy Policy
Your privacy matters to us. This policy explains what personal data Lynkrr AB collects, why we collect it, how we protect it, and the rights you have under the law.
In short
Lynkrr AB only collects the personal data we genuinely need — mainly to answer your enquiries, deliver our services, and run our website. We never sell your data. We only use analytics and advertising cookies with your consent. You can ask to access, correct or delete your data at any time, and you can contact us at info@lynkrr.se. This policy is provided in line with the EU General Data Protection Regulation (GDPR).
On this page
- 1. Who we are and how to contact us
- 2. The personal data we collect
- 3. Cookies and similar technologies
- 4. Why we use your data and our legal basis
- 5. Marketing and downloadable resources
- 6. Who we share your data with
- 7. International data transfers
- 8. How long we keep your data
- 9. How we keep your data secure
- 10. Your rights under data protection law
- 11. Children's privacy
- 12. Automated decision-making
- 13. Links to other websites
- 14. Changes to this policy
- 15. How to contact us
1. Who we are and how to contact us
This Privacy Policy describes how Lynkrr AB (“Lynkrr”, “we”, “us” or “our”) processes personal data when you visit lynkrr.se, contact us, book a consultation, or use our business services.
For the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”) and the Swedish Data Protection Act (dataskyddslagen, SFS 2018:218), Lynkrr AB is the data controllerresponsible for your personal data.
Data controller
Lynkrr AB
Organisation number: 559270-8639
Opalgatan 107, 421 62 Västra Frölunda, Sweden
Email: info@lynkrr.se
Phone: 010-185 00 01
If you have any questions about this policy or about how we handle your personal data, please contact us using the details above. We have not appointed a Data Protection Officer, as we are not legally required to do so; enquiries about data protection are handled by our management team.
2. The personal data we collect
We collect personal data in three ways:
- Data you give us directly — when you fill in a form, book a consultation, email, call or message us, request a resource, or become a client.
- Data we collect automatically — when you browse our website, through cookies and similar technologies and our server logs (see section 3).
- Data we receive from third parties — for example from our scheduling, advertising and analytics providers, or from public registers such as Bolagsverket when we carry out checks on prospective clients.
The categories of personal data we may process are:
Identity and contact data
Your name, email address, telephone number, the company you represent, and your role.
Booking and consultation data
The date and time of a meeting you book, your scheduling preferences, and any information you choose to share in the booking form when you arrange a consultation through Calendly.
Communication data
The content of emails, WhatsApp messages, contact forms and phone calls, and our notes from conversations with you.
Client and engagement data
If you become a client, the accounting, tax, financial, corporate and legal information we need to deliver our services, together with the customer due diligence information we are required by law to collect.
Marketing data
Your email address and contact preferences, your consent records, and information about which of our resources or communications you have requested or opened.
Technical and usage data
Your IP address, browser type and version, device and operating system, referring website, the pages you view, approximate location derived from your IP address, and the dates and times of your visits.
We do not intentionally collect special categories of personal data (such as data about health, religion or political opinions) through our website. Please do not send us such information unless we specifically ask for it.
3. Cookies and similar technologies
A cookie is a small text file placed on your device when you visit a website. We and our partners also use similar technologies such as pixels and tags. We use them to keep our website working, to understand how it is used, and to measure our advertising.
When you first visit our website, our cookie banner lets you accept or reject non-essential cookies. Analytics and advertising cookies are only set if you consent to them. You can change or withdraw your choice at any time through the cookie settings on our website, and you can block or delete cookies through your browser settings. The cookies we use fall into the following categories:
Category
Strictly necessary
No consent requiredPurpose
Essential for the website to load, stay secure and function correctly. These cannot be switched off.
Category
Functional
Consent requiredPurpose
Enable embedded features such as the Calendly scheduling tool on our contact page. If you do not consent, these features may not work.
Category
Analytics
Consent requiredPurpose
Help us understand how visitors use our website (for example through Google Analytics) so we can improve it. These are only set with your consent.
Category
Advertising and remarketing
Consent requiredPurpose
Set by Meta (Facebook/Instagram) and Google to measure the performance of our advertising campaigns and to show you relevant ads on other platforms. These are only set with your consent.
Our website also loads fonts from Google Fonts. When it does, your browser contacts Google’s servers, which receive your IP address so the fonts can be delivered. You can opt out of personalised Google advertising at adssettings.google.com and manage Meta ad preferences in your Facebook or Instagram account settings.
4. Why we use your data and our legal basis
We only process your personal data when the law allows us to. In most cases we rely on one of the following legal bases under Article 6 of the GDPR: performance of a contract, compliance with a legal obligation, your consent, or our legitimate interests (provided these are not overridden by your rights). The table below sets out what we do and why.
Purpose
Responding to your enquiries and arranging consultations
Data used
Identity, contact, booking and communication data
Legal basis
Our legitimate interest in responding to and managing requests from prospective clients; and, where your enquiry is a step towards entering into a contract, the taking of pre-contractual steps at your request.
Purpose
Providing our services to clients
Data used
Identity, contact, client and engagement data
Legal basis
Performance of the contract between you (or your company) and Lynkrr AB.
Purpose
Meeting our legal and regulatory obligations
Data used
Client, engagement and accounting data
Legal basis
Compliance with a legal obligation, including the Swedish Bookkeeping Act (bokföringslagen), tax legislation, and the Swedish Money Laundering Act (lagen om åtgärder mot penningtvätt).
Purpose
Operating, securing and maintaining our website
Data used
Technical and usage data, strictly necessary cookies
Legal basis
Our legitimate interest in keeping our website available, secure and working correctly, and in protecting it against fraud and misuse.
Purpose
Analytics, advertising and remarketing
Data used
Technical and usage data, cookie and pixel identifiers
Legal basis
Your consent, given through our cookie banner. You can withdraw it at any time.
Purpose
Sending marketing communications and delivering downloadable resources
Data used
Identity, contact and marketing data
Legal basis
Your consent. For existing clients, we may also rely on our legitimate interest in marketing similar services, where permitted by law.
Purpose
Establishing, exercising or defending legal claims
Data used
Any of the data categories above, as relevant
Legal basis
Our legitimate interest in protecting our legal rights, and, where applicable, compliance with a legal obligation.
Where we rely on our legitimate interests, we have carried out a balancing assessment to make sure our interests do not override your rights and freedoms. You can ask us for more information about this assessment at any time.
5. Marketing communications and downloadable resources
From time to time we may offer free downloadable resources — such as guides, templates or checklists — and we may send newsletters or other marketing communications about our services.
If you ask to download a resource or sign up for our communications, we will ask for your email address and your explicit consent to contact you. We will tell you clearly what you are signing up for. Every marketing email we send includes an easy way to unsubscribe, and you can withdraw your consent at any time by clicking that link or emailing us at info@lynkrr.se. Withdrawing your consent does not affect any communications we sent before you withdrew it.
We do not sell, rent or trade your contact details, and we do not share them with third parties for their own marketing.
6. Who we share your data with
We treat your personal data as confidential. We do not sell it. We share it only in the following limited circumstances:
- Service providers (processors) who help us run our business and website and who process personal data on our behalf, under a written data processing agreement and only on our instructions. These currently include:
- Vercel Inc. — website hosting and infrastructure.
- Calendly LLC — consultation scheduling and booking.
- Google (Google Ireland Limited / Google LLC) — website fonts and, subject to your consent, analytics and advertising.
- Meta Platforms Ireland Limited — subject to your consent, advertising and campaign measurement.
- The email, communication and customer-management tools we use to correspond with you and manage our relationship.
- Professional advisers — such as our own auditors, lawyers, banks and insurers — where this is necessary and proportionate.
- Public authorities — such as Skatteverket, Bolagsverket, courts and regulators — where we are required to do so by law, including under our accounting and anti-money-laundering obligations.
- A buyer or successor — if Lynkrr AB is involved in a merger, acquisition or sale of assets, in which case your data may be transferred subject to the protections in this policy.
7. International data transfers
We aim to keep your personal data within the European Economic Area (EEA). However, some of our service providers — including Vercel, Calendly, Google and Meta — are based in, or process data in, the United States.
Whenever we transfer personal data outside the EEA, we make sure it is protected by an appropriate safeguard recognised under the GDPR. This means the recipient is either certified under the EU–US Data Privacy Framework, or the transfer is governed by the European Commission’s Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for a copy of the relevant safeguards by contacting us.
8. How long we keep your data
We keep your personal data only for as long as we need it for the purposes set out in this policy, or for as long as the law requires. When we no longer need it, we securely delete or anonymise it. Our main retention periods are:
Data
Enquiries that do not lead to an engagement
Retention
Up to 12 months after our last contact, after which they are deleted or anonymised.
Data
Client engagement and accounting records
Retention
Retained for the duration of the engagement and for 7 years after the end of the financial year to which they relate, as required by the Swedish Bookkeeping Act.
Data
Customer due diligence (anti-money-laundering) records
Retention
Retained for 5 years after the business relationship ends, as required by the Swedish Money Laundering Act.
Data
Marketing data and consent records
Retention
Until you withdraw your consent or unsubscribe, and in any event reviewed after a prolonged period of inactivity.
Data
Website technical data, server logs and cookies
Retention
Kept for a limited period for security and diagnostic purposes; cookies expire according to the lifespan set out in our cookie banner.
9. How we keep your data secure
We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against loss, misuse, unauthorised access, disclosure or alteration. These measures include encrypted connections (HTTPS), access controls that limit who within Lynkrr can see your data, confidentiality obligations for everyone who works with us, and the careful selection of service providers who can demonstrate adequate security.
No method of transmission over the internet is ever completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Swedish Authority for Privacy Protection, and you where required, in accordance with the GDPR.
10. Your rights under data protection law
Data protection law gives you a number of rights over your personal data. Subject to the conditions and exceptions in the law, you have the right to:
Right to
Access
Ask for a copy of the personal data we hold about you and information about how we use it.
Right to
Rectification
Ask us to correct personal data that is inaccurate or incomplete.
Right to
Erasure
Ask us to delete your personal data where there is no longer a valid reason for us to keep it.
Right to
Restriction
Ask us to limit how we use your personal data in certain circumstances.
Right to
Portability
Ask us to provide the personal data you gave us in a structured, commonly used, machine-readable format.
Right to
Object
Object to processing based on our legitimate interests, and object to direct marketing at any time.
Right to
Withdraw consent
Withdraw any consent you have given us at any time, without affecting processing carried out before withdrawal.
To exercise any of these rights, please email us at info@lynkrr.se. We will respond within one month. We may need to verify your identity before acting on your request. Exercising your rights is free of charge, unless your request is clearly unfounded or excessive.
If you believe we have not handled your personal data correctly, we would like the chance to put it right, so please contact us first. You also have the right to lodge a complaint with the Swedish supervisory authority:
Supervisory authority
Integritetsskyddsmyndigheten (the Swedish Authority for Privacy Protection, “IMY”)
Box 8114, 104 20 Stockholm, Sweden
Email: imy@imy.se
Phone: 08-657 61 00
Website: www.imy.se
11. Children’s privacy
Our website and services are intended for businesses and professionals, not for children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Automated decision-making and profiling
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Our advertising partners may use profiling to show you relevant ads, but this only happens with your consent, and you can withdraw that consent at any time as described in section 3.
13. Links to other websites and services
Our website may contain links to other websites and embedded tools that are not operated by us. This policy does not apply to those third-party sites and services. We encourage you to read the privacy policy of every website and service you visit.
14. Changes to this privacy policy
We may update this policy from time to time to reflect changes in our practices, our services, or the law. When we do, we will update the “Last updated” date at the top of this page. If the changes are significant, we will take reasonable steps to let you know. We encourage you to review this page periodically.
15. How to contact us
If you have any questions, requests or concerns about this Privacy Policy or about how we handle your personal data, please get in touch:
- By email: info@lynkrr.se
- By phone: 010-185 00 01
- By post: Lynkrr AB, Opalgatan 107, 421 62 Västra Frölunda, Sweden
Questions about your data?
We are happy to explain anything in this policy. Reach out and we will get back to you.