Privacy Policy

Last updated: 1st January 2026

Data Controller Information

Operon AB is the data controller responsible for your personal data. You can contact us at:

• Company: Operon AB
• Registration Number: 614872-6148
• Address: Storgatan 65, 119 19 Stockholm, Sweden
• Email: privacy@operon.pro
• Phone: +46 81515100

Data Collection

The data we collect depends on how you interact with our website and services. We collect personal information that you voluntarily provide to us and information that is automatically collected when you use our website.

Information You Provide

When you contact us, request information, or use our services, we may collect:

• Name and contact details (email address, phone number)
• Company name and business information
• Messages and communications you send to us
• Service preferences and requirements
• Any other information you choose to provide

Automatically Collected Information

When you visit our website, we automatically collect certain technical information:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our website
• Referring website information
• Cookie data (see our Cookie Policy for details)

How We Use Your Information

We process your personal data for various purposes based on different legal grounds under GDPR. Here's how we use your information:

Service Provision

We use of your data to provide our competitive strategy consulting services, respond to your enquiries, and manage our business relationship with you. This includes processing your contact information to communicate with you about our services and your specific requirements.

Legal Basis for Processing

• Legitimate Interest: To provide information about our services and improve our website
• Contract Performance: To fulfil our obligations when providing consulting services
• Consent: For marketing communications and cookies (where required)
• Legal Obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please see our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal data. We may share your information with trusted third parties in the following circumstances:

• Service Providers: We work with third-party service providers who help us operate our website and deliver our services
• Google Services: We use Google Analytics and Google Ads, which may collect and process data according to their privacy policies
• Legal Requirements: We may disclose information if required by law or to protect our legal rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Generally, we keep contact information for active business relationships and for a reasonable period after the relationship ends. Website analytics data is typically retained for 26 months. We regularly review our data retention practices and delete information that is no longer needed.

Your Rights

Under GDPR and other applicable data protection laws, you have several rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can ask us to correct inaccurate or incomplete information
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can ask us to limit how we use your data
• Right to Data Portability: You can request your data in a portable format
• Right to Object: You can object to certain types of processing
• Right to Withdraw Consent: You can withdraw consent for processing based on consent

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure data transmission, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Data Transfers

As we are based in Sweden (EU), your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

Contact Information

If you have any questions about this Privacy Policy, want to exercise your rights, or have concerns about how we handle your personal data, please contact us:

• Privacy Officer: privacy@operon.pro
• General Contact: contact@operon.pro
• Phone: +46 81515100
• Address: Operon AB, Storgatan 65, 119 19 Stockholm, Sweden

Complaints

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with the Swedish Data Protection Authority (Dataskyddsmyndigheten) or the supervisory authority in your country of residence.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.