Information about Almi’s processing of your personal data when you visit Almi’s website

This policy describes how Almi collects, uses, stores, and shares personal data about you when you visit and use Almi’s website.

Within the Almi Group (hereinafter Almi), Almi AB has joint controllership for personal data with its respective subsidiaries for the processing of personal data.

When we refer to you as a data subject, it means that the personal data comes directly from you, whom we handle personal data about.

Categories of personal data and examples of personal data

Categories of personal data	Examples of personal data
User-generated data	Cookies, logs
Demographic data	Date of birth, gender, marital status
Company data	Company name, organization number (personal number for sole proprietorship)
Identity data	Name, personal number, username, various types of IDs such as Customer ID, employee number or IP address, signature, passport number, protected ID
Communication	Content in emails, type of case, editorial content, meeting notes, attendance at meetings
Contact details	Address, phone number, email
Organizational information	Role, title, group affiliation
Audio and Visual material	Fotos, videos, audio records

Almi’s processing of personal 

Below is how Almi handles your personal data where the legal basis is a legitimate interest. For more information about Almi’s legitimate interest and the assessment that has been made, please contact Almi’s Data Protection Officer.

Processing	Categories of personal data processed	Purpose of processing	How personal data is collected
Electronic communication	Company data, Identity data, Communication, Contact details	Communicate electronically with Almi or within Almi (all communication via email, Teams, etc.)	You as data subject
External communication Marketing	Company data, Identity data,	Communicate who Almi is and customer cases as well as representatives for the company, as well as press releases, reports, website, social media.	You as data subject
Newsletter (application on the website)	Contact details	Send out newsletters to inform about Almi's operations and results as well as events.	You as data subject
External communication press and media	Company data, Identity data, Audio and visual material	Publication of press releases on the website	You as data subject
Service by Contact	Demographic data  Identity data, Communication Contact details	Contact with stakeholders and potential customers via email, contact forms, chat in order to answer questions in writing and thereby provide guidance on Almi's products and services. For selected subsidiaries, emails are sent to the responsible subsidiary for further handling.	You as data subject
Statistics	Identity data	To collect statistics on cases and which stakeholders contact customer service.	The data subject
Telemarketing	Company data, Identity data, Contact details Organizational information	To reach an identified target group of customers or stakeholders (e.g., potential customers), telemarketing is carried out through an external provider. The basis for conducting telemarketing is prepared from internal systems such as CRM or lists generated from public records.	Supplier Public records
Incident management	Identity data	The purpose of processing personal data for incident management is to ensure that the organization can handle and address incidents effectively, while complying with data protection legislation such as the GDPR. This involves collecting, using, and safeguarding the personal data necessary to investigate, report, and resolve security incidents.	The person reporting or collected internally
Direct marketing	Identity data Contact details	Reach out with offers and information in order to attract new customers (not newsletters).	The data subject Public records

This is how long Almi stores your personal data

Personal data in the above processing activities will be stored as long as required to fulfil the purpose of the processing.

Processing where personal data is collected with consent as the legal basis

If consent is not given for the processing of personal data, it is not possible to use the services that the processing concerns. You may at any time revoke your consent.

Processing	Categories of personal data processed	Purpose of processing	How personal data is collected	Storage time
Newsletter registration via the website	Identity data,  Contact details	Send out newsletters to inform about Almi’s operations and results as well as events.	The data subject	As long as you consent to being on the mailing list.
Website analysis	User-generated data, Identification data	To improve your use of the website as well as to obtain statistics on the usage of the website. The purpose of the analysis of the website is to enhance the user experience and to collect statistics on user patterns. This enables the optimization of the page's content and features for a more efficient and user-friendly experience.	The data subject	In accordance with the cookie policy
Network	Identity data,  Contact details, Competence data	Send information and contact you regarding the network you have registered for.	The data subject	As long as you want to be part of the network.
Direct marketing (this processing involves profiling)	Identity data, User-generated data	To be able to show offers from Almi on other pages you visit.	The data subject	In accordance with the cookie policy

Disclosure of Personal Data

Personal data may be disclosed to other suppliers and the system suppliers used by Almi. For exact information of who your personal data has been disclosed to, please contact Almi’s Data Protection Officer.

When accepting cookies for statistics and marketing, Almi shares your personal data with Google, Meta, Bing, and LinkedIn, who are independently controller for their processing of personal data. For information on their processing of personal data, please refer to the respective company’s website.

Your personal data is stored within the EU, but in several cases, Almi has an IT system supplier that is either a parent and/or subsidiary company in countries outside the EU (third countries) and/or subcontractors in third countries. This may result in the transfer of your personal data. When transferring personal data to third countries, this is done based on the EU Commission’s adequacy decisions or standard contractual clauses.

Updates of this information
This information may be updated, and significant changes will be indicated here. 

2024-07-02: Restructuring and clarification regarding processing, legal basis, where personal data is obtained from, and to whom it may be disclosed.

2025-04-29: Clarified purposes and added new and deleted inactive processing activities.

Protection of Personal Data
We have taken appropriate administrative, technical, organizational, and physical security measures to protect the data we have about you from loss, misuse, unauthorized access, disclosure, alteration, and destruction.

Your Rights according to GDPR
As a data subject, you have the following rights regarding the personal data Almi holds about you:

 

Request Access to Your Personal Data
You have the right to access the personal data that Almi holds about you. This is also known as the right to a personal data extract. This means you have the right to request a copy of all personal data that Almi processes about you. This copy should be provided without delay and no later than one month after the request has been received.

Request rectification of Incorrect or Incomplete Personal Data
If personal data is incorrect or incomplete, you have the right to request rectification of the data, with the limitations specified by law or other regulations.

Request erasure
You have the right to contact Almi and request that personal data about you be deleted in the following cases. Deletion should be done without undue delay.

• If the personal data is no longer needed to fulfil the purposes for which it was collected
• You withdraw your consent on which the processing is based and there is no other legal basis for the processing
• You object to the processing
• The personal data has been processed unlawfully
• Personal data must be deleted to comply with a legal obligation
   

Restriction of Personal Data Processing
You have the right to request that Almi restrict its processing if it is unclear if and when Almi must delete your personal data. Restriction means that Almi, except for storage, may only process your personal data with your consent, to establish, exercise, or defend legal claims, or to protect someone else’s rights. You can use the right to restriction in the following cases.

• You dispute the accuracy of the personal data and Almi should investigate whether the personal data should be corrected
• You do not want Almi to delete your personal data
• Processing is unlawful, and you oppose the deletion of the personal data and instead request a restriction on its use
• Almi no longer needs the personal data, but you need it to establish, exercise, or defend legal claims
• You have objected to the processing and Almi is investigating your objection, but a decision has not yet been made
   

Object to Processing Based on Almi’s Legitimate Interest
You have the right to object at any time to processing if the processing is based on Almi’s legitimate interest, i.e., the legal basis for the processing is a balance of interests. For Almi to continue processing the personal data after receiving an objection, Almi must demonstrate compelling reasons that Almi’s interest outweighs your interests, rights, and freedoms. Alternatively, Almi must prove that the processing is for the establishment, exercise, or defence of legal claims.

You always have the right to object to direct marketing.

Data Portability
If processing is based on consent or contract and the processing is automated, i.e., using technology without human assistance, and you have provided personal data in a commonly used, machine-readable format, you have the right to transfer this data to another data controller.

Withdraw Your Consent
For processing based on consent, you have the right to withdraw your consent at any time. This means that Almi may no longer process your personal data for the purpose.

Contact Almi or the Swedish Supervisory Authority
For questions, exercising your rights, or other data protection matters that you want to discuss with Almi, you can contact dataskyddsombud@almi.se or write a letter to Almi AB, Dataskyddsombud, Box 70396, 107 24 Stockholm. You can also file a complaint about Almi’s processing of personal data by contacting the Swedish Supervisory Authority IMY by sending an email to imy@imy.se or writing a letter to Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm.

Other Processing and Where to Find Information
Almi may handle more personal data about you for other purposes. Below is a description of where you can find more information.

Area	Where to Find Information about Almi’s Processing of Personal Data
Recruitment or spontaneous application	Via Almi’s recruitment system where you submit an application.
Credit application or other services related to Almi Företagspartner’s operations	On the website.
Contact or investment with Almi Invest related to Almi Invest’s operations	On the website.
Supplier services	In the contract.
Employment	Upon signing the contract and ongoing during employment.
Whistleblowing	On the whistleblowing website.
Event registration	Upon registration for the specific event.