Privacy Policy

Introduction

At Solstice, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit our website or engage with our services. We handle all personal data in accordance with the General Data Protection Regulation and applicable Swedish data protection laws.

Data Controller Information

Solstice, located at Norrmalmstorg 1, 111 46 Stockholm, Sweden, acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data and are responsible for its protection.

What Information We Collect

We collect information that you provide directly to us and information that is automatically collected during your use of our website:

Information You Provide

When you contact us through our contact form or communicate with us via email, we collect your name, email address, and any other information you choose to provide in your message. This information is collected only when you voluntarily submit it.

Automatically Collected Information

We automatically collect certain technical information when you visit our website, including your IP address, browser type, device information, pages visited, time spent on pages, and referring website addresses. This data is collected through cookies and similar technologies as described in our Cookie Policy.

How We Use Your Information

We process your personal data for the following purposes:

To respond to your inquiries and provide customer support

To improve and optimize our website functionality and user experience

To analyze website usage patterns and visitor behavior through analytics

To send relevant information about our services when you have consented to receive such communications

To comply with legal obligations and protect our legitimate business interests

Legal Basis for Processing

We process your personal data based on consent where you have provided it, legitimate interests where we need to operate our business and communicate with potential clients, contractual necessity when fulfilling service agreements, and compliance with legal obligations under Swedish and European Union law.

Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your data with:

Service providers who assist us in operating our website and business, such as hosting providers, email service providers, and analytics platforms. These providers are contractually bound to protect your data and use it only for specified purposes.

Legal authorities when required by law or when necessary to protect our rights, property, or safety, or that of others.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are kept for up to two years unless you request earlier deletion. Analytics data is aggregated and anonymized after six months. Cookie data is retained according to the periods specified in our Cookie Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit, secure server environments, regular security assessments, access controls limiting data access to authorized personnel only, and regular backups to prevent data loss.

International Data Transfers

Your data is primarily processed within the European Economic Area. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your information in accordance with European data protection standards.

Your Privacy Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data in certain circumstances.

Right to Restriction

You can request limitation of processing in specific situations.

Right to Data Portability

You can request transfer of your data to another service provider in a structured, commonly used format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

Exercising Your Rights

To exercise any of these rights, please contact us using the information provided at the top of this page. We will respond to your request within one month, though this period may be extended by two additional months in complex cases. We may need to verify your identity before processing your request.

Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.

Supervisory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten) or your local data protection authority.