Website information
Privacy Policy
This policy explains how we handle personal data when you visit our website, contact us about our services or ask to receive updates. It also explains your choices and how to reach us.
Last updated
At a glance
- We use the information you provide to respond to your request and manage our business relationship.
- Newsletter signup is optional. You can withdraw consent or object to direct marketing at any time.
- Google Analytics, Albacross and LinkedIn are optional. Choose analytics and marketing separately in Cookie settings, and change or withdraw either choice at any time.
- For privacy questions or requests, contact info@nemely.com.
Who is responsible
Nemely AB is responsible for the personal data described in this website policy. You can contact us at info@nemely.com, call +46 8 518 316 00, or write to Nemely AB, Drottninggatan 33, 111 51 Stockholm, Sweden.
This policy covers our website and our own business communications. When we process personal data inside a customer’s CRM or other systems on that customer’s instructions, the customer determines the purpose of that processing. The customer’s privacy information and our applicable data-processing agreement govern that activity. Product-specific services may provide additional privacy information.
Information we handle
- Enquiries: your name, work email address, company, selected area of interest and message. You may also choose to provide a phone number or other relevant details.
- Business correspondence: communications, meeting arrangements and information needed to manage the request or our relationship with your organization.
- Newsletter requests: your email address and the signup or marketing preference you provide.
- Guide and report requests: your name, email address, optional company, the requested resource, the originating article and the request date and time. Downloading a resource does not subscribe you to marketing emails.
- Submission records: the form used, the originating website page and the submission date and time.
- Technical information: your browser must send network information, including an IP address, to connect to the website. Server or security services may process technical request data needed to deliver and protect the service.
- Optional website tools: when you allow analytics, Google Analytics 4 receives page and session activity, browser/device information, approximate location and cookie identifiers. When you allow marketing, Albacross receives IP address, IP-based location, visited URLs including query strings, the referring website, cookie identifiers and domain information from form fields. This supports company identification and business marketing. Browser identifiers and information about sole traders can be personal data.
- LinkedIn Insight Tag: after marketing consent, LinkedIn receives website visit and interaction data, including URLs, IP address, device/browser information and identifiers, which it may associate with a LinkedIn account.
We primarily receive information directly from you. In a business relationship, a colleague or your organization may also give us your work contact details or include you in correspondence. Where we obtain your data from another source, we provide the additional information required for that processing.
Please include only information relevant to your request. Avoid sending sensitive personal information, passwords, identity documents or confidential customer records through the general enquiry form.
Why we use personal data
| Purpose | Information used | Legal basis |
|---|---|---|
| Provide a guide or report you request | Name, email address, optional company and resource request details | Our legitimate interest in providing requested business information and managing the related request. Newsletter signup remains a separate choice. |
| Respond to enquiries, demo requests and meeting requests | Contact details, company, interest and message | Our legitimate interest in answering requests and developing relevant business relationships. |
| Manage customer, supplier and other business relationships | Work contact details and business correspondence | Our legitimate interest in communicating with the people who represent those organizations and delivering our services. If you contract with us personally, necessary processing may instead be based on that contract or steps you request before it. |
| Send a newsletter or email updates you requested | Email address and your signup or marketing choice | Your consent. Providing consent is optional and separate from sending an enquiry. |
| Understand website usage and improve our pages with Google Analytics 4 | Page usage, browser/device information and analytics browser/session identifiers | Your consent. Analytics is optional and can be rejected or disabled through Cookie settings. |
| Identify visiting companies and support business-to-business marketing with Albacross | IP address, approximate location, page and referrer addresses, form-field domain information and cookie identifiers, combined with company information | Your consent. Albacross is optional and can be rejected or disabled through Cookie settings. |
| LinkedIn audience insights, website audiences, retargeting and conversion measurement | Website visits and interactions, device/network information and advertising identifiers | Your consent. LinkedIn is optional and can be rejected or disabled through Marketing in Cookie settings. |
| Operate the website and prevent misuse | Necessary technical request and security information | Our legitimate interest in making the website available and protecting it and its users. |
| Meet applicable legal duties and manage legal claims | Relevant business records and correspondence | A legal obligation where the law requires the record; otherwise our legitimate interest in establishing, exercising or defending legal claims. |
Fields marked as required on a form are needed to handle that request. If you do not provide them, the form cannot be submitted; you can contact us by email or phone instead. Optional fields and marketing choices are not a condition of receiving an answer.
Who may receive information
Access is limited to people who need the information for the relevant purpose. Depending on your request, recipients may include Nemely staff, service providers supporting website hosting, business email, CRM, IT support or newsletter administration, and professional advisers. When you allow analytics, Google receives website measurement information. When you allow marketing, Albacross Nordic AB receives information used for company-level visitor identification and business-to-business marketing. Albacross states that its database may be used for targeted advertising towards companies and that data may be transferred to third-party data service providers for that purpose. LinkedIn also receives website advertising data when you allow marketing. Authorities or other parties may receive relevant information where disclosure is legally required or necessary to address a legal claim.
Albacross also acts as a controller for its own service improvement. Its privacy information explains that processing and how to exercise your rights with Albacross. Our Cookie Policy describes the tracking data, provider purposes and controls in more detail.
LinkedIn Ireland Unlimited Company is the LinkedIn controller for people in the EU/EEA and Switzerland. LinkedIn describes US storage of Insight Tag data, removal of directly identifying information within seven days, and deletion of the remaining pseudonymous data within 180 days. Its privacy information explains its uses and your controls.
Where a supplier processes personal data on our behalf, it must do so under our instructions and the data-protection terms required by law. Contact us if you need more detail about the recipient categories involved in your request.
If handling your information involves access from, or a transfer to, a country outside the EU/EEA, the transfer must have a lawful basis under GDPR Chapter V. This may be a European Commission adequacy decision or appropriate safeguards, such as Standard Contractual Clauses with any necessary supplementary measures. You can ask us which countries and safeguards apply to your information and how to obtain a copy of the relevant safeguards.
How long information is kept
We retain personal data for the purpose for which it was collected, taking account of the criteria below. A record is not kept simply because it may be useful at an unspecified future time. When the purpose ends and no further legal or justified need applies, the information should be deleted or anonymized.
| Record | Retention criteria |
|---|---|
| Enquiries and related correspondence | While the enquiry and any agreed follow-up remain active. If a customer relationship follows, relevant correspondence becomes part of that relationship’s records. |
| Business relationship records | For the duration of the relationship and any continuing contractual duties, applicable recordkeeping requirements or documented need to handle legal claims. |
| Newsletter and marketing records | While your subscription or consent remains active. After withdrawal or objection, limited preference records may be retained to respect your choice and, where necessary, demonstrate compliance. |
| Optional-cookie consent preference and cookies | The consent preference is valid for 180 days from your saved choice. Google Analytics cookies are configured to expire after 180 days without extending expiry on each page load. Albacross states that its nQ_cookieId and nQ_visitId cookies expire after 1 year. LinkedIn storage examples and lifetimes are listed in our Cookie Policy. Browsers can shorten these periods. Withdrawing a purpose stops future collection by those services and removes its accessible cookies. These browser-storage periods are separate from retention of information already sent to the providers. Contact us for the applicable account settings. |
| Technical and security records | Only for the period justified by service operation, investigation of an incident or another applicable legal requirement. |
| Records subject to a legal duty or dispute | For the period required by the applicable law or the documented need to resolve the specific claim. |
You can ask about the retention period and deletion criteria for a particular record by contacting us.
Your privacy rights
- Access: ask whether we process your personal data and obtain a copy and information about that processing.
- Correction: ask us to correct inaccurate information or complete incomplete information.
- Erasure and restriction: ask us to delete information or limit its use where the conditions in data-protection law are met.
- Objection: object to processing based on legitimate interests because of your particular situation. We must stop unless a lawful overriding reason or a legal-claims exception applies.
- Direct marketing: object at any time, without giving a reason. We will stop using your information for that marketing, including related profiling.
- Portability: where processing is automated and based on consent or a contract, ask to receive the data you provided in a structured, commonly used, machine-readable format, and to transmit it where applicable.
- Consent withdrawal: withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before you withdrew it.
Email info@nemely.com to exercise a right. You do not need an account or a special form. We may request proportionate information to confirm your identity when needed to protect your data. These rights have conditions and exceptions; if we cannot fulfil a request, we will explain why.
We respond without undue delay and normally within one month. If a request is complex or we receive several requests, the law permits an extension of up to two further months. We will explain any extension and its reasons within the first month.
You can complain to the Swedish Authority for Privacy Protection (IMY), or another competent supervisory authority, including in the country where you live or work. You can contact the authority without contacting us first.
Newsletters and marketing choices
Withdrawing from marketing does not prevent necessary replies to an enquiry or service communications about an existing relationship.
Cookies and linked services
Links to social networks, recruitment services and other external websites take you to services with their own privacy information. Following a link does not mean this website controls that provider’s processing. Careers application links open Nemely’s recruitment service; read the privacy information provided with the application before submitting candidate information.
Changes to this policy
We update this policy when the website or relevant processing changes. The date above identifies the latest revision. Where the law requires additional notice or a new consent, updating this page alone does not replace that requirement.
A privacy question or request?
Tell us how we can help. For a data request, include enough context to identify the relevant interaction without sending unnecessary sensitive information.