Privacy policy
Information on the processing of personal data under Regulation (EU) 2016/679 (GDPR).
Data controller
BorealCert International AB — Kungsgatan 12, 111 35 Stockholm, Sweden — contacto@borealcert.com — Org. no. 559123-4567.
Data we process and purpose
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, company, email, phone, message content | Handling your quotation request or enquiry | Pre-contractual measures and legitimate interest (art. 6.1.b, 6.1.f GDPR) |
| Contact details and communication content | Attending to your communication | Legitimate interest | |
| Certification clients | Professional contact details of representatives and audited staff | Performance of the certification agreement and the body's obligations | Contract performance (art. 6.1.b GDPR) |
Retention
Quotation requests are kept for the duration of processing and a maximum of 24 months. Data arising from certification contracts is retained for the certification cycle and the periods required by the rules applicable to certification bodies.
Recipients
We do not share personal data with third parties for commercial purposes. Data may be processed by technical service providers (hosting, email) under data processing agreements pursuant to art. 28 GDPR.
Your rights
You may exercise the rights of access, rectification, erasure, restriction, portability and objection by writing to contacto@borealcert.com. You may also lodge a complaint with the Swedish supervisory authority (Integritetsskyddsmyndigheten, IMY).
Security
We apply technical and organisational measures appropriate to the nature of the data processed, including encryption in transit (HTTPS) and restricted access to client information.