Privacy policy

1. Who is responsible for your data

The data controller is ArkivNord AB, Svartensgatan 10, Stockholm 116 20 (“ArkivNord”, “we”). Contact us about anything in this policy at info@arkivnord.com.

2. What this policy covers

We process personal data about:

• visitors to the website (sections 3 and 4);
• people who order a sales list or an e-mailed segment snapshot (section 5);
• people who create an account by signing in (section 6);
• people who appear in the public company registers we publish, such as board members, CEOs and sole traders (section 7).

3. Cookies and browser storage

We set no cookies unless you sign in. Signing in sets a cookie that keeps you signed in, plus short-lived security cookies during the sign-in itself. We also keep a few settings in your browser’s local storage, and load one optional statistics service only if you allow it. You can change your choice at any time under “Privacy settings” at the bottom of every page.

4. Visiting the website

When you load a page, our hosting provider receives technical data that every browser sends, such as IP address, browser type, the page requested and the time. We use it only to deliver the site, keep it secure and prevent abuse. Server logs are deleted after 30 days. Legal basis: our legitimate interest in running a secure service (GDPR Art. 6(1)(f)).

5. Orders and e-mailed reports

When you order a sales list, we process your e-mail address, the filters you chose and your IP address (to prevent abuse), so that we can deliver the list. We keep the order record until you ask us to delete it. The file and its download link are deleted after 35 days.

When you ask us to e-mail a segment snapshot, we use your e-mail address only to send it and do not store it. The report file is deleted after 7 days.

Legal basis: performance of a contract, or steps you asked us to take (Art. 6(1)(b)). We do not use your e-mail address for marketing.

6. Your account

You can create an account by signing in with Google or Microsoft. An account is optional: the rest of the site works without one. We never see your password. When you sign in, the provider sends us your name, e-mail address and an account ID. We keep only what we need to run your account: the account ID and when the account was created and last used. Your name and e-mail address are kept in your sign-in cookie to show who is signed in, and are stored by us only if you use a feature that needs them (for example e-mails you ask for). Legal basis: performance of a contract (Art. 6(1)(b)).

• What you save. Signed-in features let you keep your work for later, for example saved searches and filters, comparison groups, or companies and industries you want to follow. Whatever you save is linked to your account. Other users can’t see it unless you choose to share it (for example with a link). Because it can reveal your business interests, we use it only to provide those features to you. We do not sell it or use it for advertising.
• Where it is stored. In the EU, with our hosting provider (see section 8).
• How long we keep it. For as long as you have an account. We do not delete inactive accounts automatically.
• Your control. You can download everything saved with your account, or delete the account, at any time from your account page. Deleting the account removes it and everything saved with it from the service. Backup copies are overwritten within 7 days.
• Sign-in providers. Google and Microsoft handle the sign-in under their own privacy policies, and they learn that you signed in to ArkivNord.
• E-mails. If we send you e-mails about things you follow, they are part of the service, and every one has an unsubscribe link. We only send marketing e-mails if you have separately agreed to them.

7. People in the company registers

ArkivNord republishes information from public company registers: Bolagsverket and SCB (Sweden), Brønnøysundregistrene (Norway) and Erhvervsstyrelsen / CVR (Denmark). Some of it is personal data, such as the names and roles of board members and executives, and details of sole traders. We did not collect this data from you directly.

• Purpose. Making public company information easy to search, for business research, credit and supplier checks, and sales prospecting.
• Legal basis. Our legitimate interest, and the public’s interest in transparency about companies (Art. 6(1)(f)). The information is already public, it concerns people’s business roles, and the law requires it to be published. We limit what we show to what is useful for company research.
• Limits. For example, Swedish sole traders’ personal identity numbers are masked in downloads.
• How long. We update the information from the registers regularly and keep it while it is part of a company’s public record.
• Your choices. You can object to this processing at any time. We then stop unless our reasons clearly outweigh your interests. If something is wrong at the source, it needs to be corrected in the register; we pick up the correction on our next update. Contact us as described in section 9.

8. Who we share data with

We use these service providers, bound by data-processing agreements:

• Amazon Web Services (hosting, database and e-mail delivery), in the EU (Sweden);
• Cloudflare (usage statistics, only if you opt in);
• our e-mail provider, for messages you send us.

If you sign in, Google or Microsoft takes part in the sign-in. They act as independent controllers for your account with them.

Some of these companies are based in the US. Where data leaves the EU/EEA, the transfer relies on the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses.

We never sell personal data.

9. Your rights

You have the right to access, correct and delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time (this does not affect processing before the withdrawal). Write to info@arkivnord.com. We answer within one month.

You can also complain to a data protection authority, for example where you live or work: Integritetsskyddsmyndigheten (IMY) in Sweden, Datatilsynet in Norway or Datatilsynet in Denmark.

10. Changes to this policy

We update this page when our processing changes, and ask for your consent again if we add a new optional purpose.