1. Data Controller
Hykmann Global Business Solutions AB (org. no. XXXXXX-XXXX), Stockholm, Sweden ("Hykmann", "we") is the data controller for personal data collected via this website.
Contact our Data Protection Officer: privacy@hykmann.com
2. Personal Data We Collect
- Contact inquiries: name, company, email, phone, country, service interest, message.
- Career applications: name, email, phone, role, experience, CV/resume, cover letter.
- Newsletter: email address.
- Technical data: anonymized analytics only (no third-party trackers).
3. Legal Basis for Processing
- Consent (Art. 6(1)(a) GDPR) — explicit consent captured via checkbox for contact, career and newsletter forms.
- Legitimate interest (Art. 6(1)(f)) — responding to your business inquiry.
- Pre-contractual measures (Art. 6(1)(b)) — evaluating job applications.
4. Purpose & Retention
- Contact inquiries: retained for 24 months from last contact.
- Career applications and CVs: retained for 12 months, then automatically purged unless you're offered a role.
- Newsletter data: retained until you unsubscribe.
- GDPR audit logs: retained for 36 months to demonstrate compliance.
5. Security & Storage
All data is stored on encrypted infrastructure within the EU/EEA. Resume files are stored in encrypted-at-rest object storage (AES-256, Cloudflare R2 EU region). Access is limited to authorized Hykmann personnel via multi-factor authentication and audit logging.
6. Data Sharing & International Transfers
We do not sell your data. Data is shared only with:
- Cloudflare R2 (EU region) — encrypted file storage.
- Resend (US) — transactional email delivery under EU Standard Contractual Clauses (SCCs).
- MongoDB Atlas (EU region) — primary database.
All transfers outside the EEA are protected by SCCs and appropriate technical safeguards.
7. Your GDPR Rights
Right to Access
Get a copy of all data we hold about you in machine-readable JSON format.
Right to Rectification
Correct inaccurate personal data by emailing privacy@hykmann.com.
Right to Erasure
Delete all your data permanently — self-service via our Data Request page.
Right to Object
Object to processing for direct marketing or based on legitimate interests.
Right to Portability
Export your data in structured, machine-readable format at any time.
Right to Restriction
Restrict processing while we verify accuracy or resolve objections.
Exercise these rights instantly at /data-request or by emailing privacy@hykmann.com. We respond within 30 days.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY): imy.se.
8. Cookies
We use only strictly necessary cookies. No third-party trackers, advertising cookies or fingerprinting. You'll see a consent banner on your first visit.
9. Changes
We'll notify you of material changes to this policy via banner and email (for subscribers). Continued use of our services after changes constitutes acceptance.