The data controller is:

Sofie Thune
Trading as: Sofie Thune
Business form: Sole trader registered in Sweden
Email: sofie@thune.se
Postal address: Glimmerstigen 19, 791 56 Falun, Sweden

In this Privacy Policy, “I”, “me” and “my” refer to Sofie Thune.

When you contact me through the website or by email, I may collect:

• your name;

• your email address;

• your telephone number, if provided;

• the company or organisation you represent;

• information about your proposed project, assignment or event;

• the contents of your message and subsequent correspondence;

• any other information you choose to provide.

Please do not include sensitive personal data unless it is strictly necessary for your enquiry.

When you visit the website, Squarespace may also process limited technical information, such as your IP address, browser and device information, pages visited and information needed to operate and protect the website.

I process your personal data in order to:

• receive and respond to enquiries;

• provide information about my services;

• prepare quotations or proposals;

• discuss and administer potential or confirmed assignments;

• communicate with clients and potential clients;

• issue invoices and comply with accounting, tax and other legal obligations;

• maintain the functionality and security of the website;

• establish, exercise or defend legal claims where necessary.

The legal basis for the processing may be:

• taking steps at your request before entering into a contract;

• performing a contract;

• complying with a legal obligation; or

• my legitimate interest in responding to enquiries, operating my business and maintaining a secure website.

You are not legally required to provide personal data. However, I may be unable to respond to your enquiry if you do not provide sufficient contact and project information.

This website is built and hosted on Squarespace.

Squarespace provides the website infrastructure, hosting, security and contact-form functionality. Information submitted through the contact form may be stored in my Squarespace account and sent to the email address connected to the form.

Squarespace uses cookies and similar technologies that are necessary to operate and secure the website. These may support:

• website security and spam prevention;

• navigation and page loading;

• contact-form functionality;

• performance and load balancing;

• remembering privacy or cookie choices.

Squarespace may also provide basic website statistics. Where non-essential cookies require consent, they will only be activated after you have made a choice through the website’s cookie banner or settings.

I do not use cookies for advertising, behavioural tracking or personalised marketing.

You can manage cookies through your browser settings. Disabling necessary cookies may affect how the website functions.

Your personal data may be processed by service providers that support my website, communications and business administration, including:

• Squarespace and its relevant service providers;

• my email provider;

• IT, security or website maintenance providers;

• accounting or professional advisers;

• public authorities or courts where disclosure is required by law.

These recipients only receive access to personal data where necessary for their services, legal obligations or the protection of legal rights.

I do not sell your personal data.

Squarespace, my email provider or another service provider may process personal data outside the European Union or European Economic Area.

Where this occurs, the transfer will be based on a lawful transfer mechanism, such as an adequacy decision, approved standard contractual clauses or another safeguard permitted under applicable data-protection law.

I retain personal data only for as long as necessary.

As a general rule:

• enquiries that do not result in an assignment are retained for up to 12 months after the last communication;

• information relating to a confirmed assignment may be retained for the duration of the assignment and for a reasonable period afterwards;

• accounting records are retained for the period required by Swedish law;

• information needed for legal claims may be retained for as long as the relevant claim may be brought;

• technical and security information is retained according to the relevant service provider’s settings and only for as long as necessary.

When personal data is no longer needed, it will be deleted or anonymised.

Depending on the circumstances, you may have the right to:

• request access to your personal data;

• request that inaccurate information is corrected;

• request deletion of your personal data;

• request that processing is restricted;

• object to processing based on legitimate interests;

• request data portability where applicable;

• withdraw consent where processing is based on consent.

These rights are not absolute and may be limited where continued processing is required or permitted by law.

To exercise your rights, contact me at sofie@thune.se. I may need to verify your identity before responding.

Please contact me if you have questions or concerns about how I process your personal data.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection:

Integritetsskyddsmyndigheten — IMY

Further information is available on IMY’s official website.

I take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration and disclosure.

However, no website or method of electronic communication can be guaranteed to be completely secure.

I may update this Privacy Policy if my services, website settings, service providers or legal obligations change.

The latest version will always be published on this page.

For questions about this Privacy Policy or my processing of personal data, please contact:

Sofie Thune
Trading as: Sofie Thune
Email: sofie@thune.se
Postal address: Glimmerstigen 19, 791 56 Falun, Sweden