How we handle your data

Schultzberg Agency is a brand operated by Schultzberg Productions AB (Company Registration No. 556907-1268), hereinafter referred to as “SA”.

Schultzberg Productions AB is the data controller responsible for processing personal data in connection with the operation of www.schultzbergagency.com, to the extent that it determines the purposes and means of such processing.

This Privacy Policy explains what personal data we may collect, how we use and protect it, the legal bases for processing, and the rights you have under applicable data protection legislation, including the General Data Protection Regulation (GDPR).

The personal data we process depends on how you interact with our website and services.

This may include:

• Contact information: Your name, email address, telephone number and other contact details you choose to provide.
• Enquiry information: The contents of messages, enquiries or other communications you send to us.
• Technical information: Information such as your IP address, browser type, device information, date and time of access, and technical log data.
• Website usage information: Information about how visitors interact with our website, where such information is collected through analytics tools or similar technologies.

We may also receive personal data through service providers or third-party platforms where this is necessary for the operation of our website or the handling of an enquiry.

We aim to collect only personal data that is relevant and necessary for the purposes described in this Privacy Policy.

We may process personal data for the following purposes:

• To respond to enquiries and communications.
• To provide information about our services and professional activities.
• To operate, maintain and administer our website.
• To monitor website performance and improve functionality and user experience.
• To maintain website security, troubleshoot technical issues and prevent misuse.
• To comply with applicable legal obligations.
• To establish, exercise or defend legal claims where necessary.

We will not process personal data for purposes that are incompatible with the purposes for which it was collected, unless permitted by applicable law.

We process personal data only where a valid legal basis applies under GDPR.

Depending on the circumstances, the legal basis may be:

• Legitimate interests: Where processing is necessary for our legitimate interests, such as responding to relevant business enquiries, maintaining website security and improving our services, provided that these interests do not override your rights and freedoms.
• Consent: Where you have freely given consent to a specific processing activity, such as the use of non-essential cookies where consent is required.
• Contract or pre-contractual measures: Where processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
• Legal obligation: Where processing is necessary to comply with a legal obligation to which we are subject.

The applicable legal basis depends on the specific processing activity. Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

Our website may use cookies and similar technologies to support its operation, remember preferences, analyse website traffic and improve functionality.

Depending on the website configuration, these technologies may collect information such as IP addresses, browser and device information, timestamps, referring pages and interactions with the website.

Strictly necessary cookies may be used where permitted by applicable law. Non-essential cookies, including analytics or marketing cookies where applicable, will only be activated after consent where required by law.

You can manage your cookie preferences through the website’s cookie settings, where available. You may also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

Where you have given consent to non-essential cookies, you may withdraw it at any time through the available cookie settings. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

The specific cookies and analytics technologies used will depend on the website’s actual configuration.

We do not sell personal data to third parties.

We may share personal data with service providers where necessary to operate and maintain our website and services. These may include:

• Website hosting and technical support providers.
• Website development and maintenance providers.
• Communication and email service providers.
• Analytics and security service providers, where applicable.

Where a service provider processes personal data on our behalf, we will ensure that appropriate contractual and data protection safeguards are in place as required by law.

Some services may process personal data as independent data controllers. In such cases, their own privacy policies and responsibilities may also apply.

We may also disclose personal data where required by law, in response to lawful requests from competent authorities, or where necessary to establish, exercise or defend legal claims.

Personal data will only be shared to the extent necessary for the relevant purpose and in accordance with applicable law.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including responding to enquiries, operating our website, maintaining security and complying with legal obligations.

Retention periods depend on the type of information, the purpose of processing and any applicable legal requirements.

When personal data is no longer necessary, it will be securely deleted or anonymised, unless continued retention is required or permitted by law.

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

These measures are intended to provide a level of security appropriate to the risks associated with the processing.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

Where a personal data breach occurs, we will assess and respond to it in accordance with applicable data protection legislation, including notifying the relevant supervisory authority and affected individuals where legally required.

Some service providers used in connection with our website or communications may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will ensure that the transfer complies with applicable data protection legislation.

Depending on the circumstances, the transfer may be based on an adequacy decision adopted by the European Commission, the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism. Additional safeguards will be implemented where required.

You may contact us using the details in Section 13 for further information about applicable safeguards relating to international data transfers.

If GDPR applies to the processing of your personal data, you may have the following rights, subject to the conditions and limitations set out in applicable law:

• Right of access: To obtain confirmation of whether we process your personal data and, where applicable, access to that data.
• Right to rectification: To request correction of inaccurate personal data or completion of incomplete data.
• Right to erasure: To request deletion of your personal data where the legal requirements are met.
• Right to restriction: To request restriction of processing in certain circumstances.
• Right to data portability: To receive personal data you have provided to us in a structured, commonly used, machine-readable format and, where the legal requirements are met, have it transmitted to another controller.
• Right to object: To object to processing based on legitimate interests on grounds relating to your particular situation. We will assess such objections in accordance with applicable law.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: To lodge a complaint with a competent data protection supervisory authority if you believe your personal data has been processed unlawfully.

These rights are not absolute and may be subject to legal exceptions.

To exercise your rights, please contact us at info@schultzberggroup.com. We may request information necessary to verify your identity before responding.

We will respond to requests within the time limits prescribed by applicable data protection law.

If you are in Sweden, you may contact the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at www.imy.se for information about your rights or to lodge a complaint.

Our website is intended primarily to provide information about our professional activities and services.

We process personal data relating to children only where there is an appropriate legal basis and in accordance with applicable data protection legislation.

If you believe that personal data relating to a child has been collected or processed through our website in circumstances that may be unlawful, please contact us at info@schultzberggroup.com. We will review the matter and take appropriate action in accordance with applicable law.

Our website may contain links to external websites or use third-party services that are not operated or controlled by SA.

We are not responsible for the privacy practices of external websites that we do not control. When you visit an external website or interact directly with a third-party service, that provider’s own privacy policy and terms may apply.

We encourage you to review the relevant privacy information before providing personal data to third parties.

If you have questions about this Privacy Policy, our processing of personal data or your rights under GDPR, or wish to exercise your rights, please contact:

Schultzberg Productions AB
Operating under the brand Schultzberg Agency
Company Registration No. 556907-1268
Email: info@schultzberggroup.com
Website: www.schultzbergagency.com

We may update this Privacy Policy from time to time to reflect changes in our website, services, data processing activities or applicable legislation.

The latest version will be published on www.schultzbergagency.com, together with the date on which it was last updated.

We encourage visitors to review this Privacy Policy periodically.