Privacy policy

Latest news

2025-03-19

Navigera rätt i regelverken – en konkurrensfördel för e-hälsobolag

Årets första nätverksträff för eHealth Business ägde rum på Kalmar Science Park, där Diana Melander, affärsjurist, delade med sig av insikter och konkreta råd. Budskapet var tydligt: att förstå och hantera regelverken är en konkurrensfördel. – Vårdbranschen är hårt reglerad. Ibland är reglerna dessutom motstridiga, inleder Diana Melander, när hon tar oss med på färden […]

Associate

2025-03-13

Årets innovation stoppar telefonbedrägerier

Det blev Nordskydd UF som vann priset för årets innovation som delades ut av Kalmar Science Park på UF-mässan i Kalmar. Henning Lindeberg och Erik Apelqvist imponerade stort på juryn med sin innovativa mjukvara. Med hjälp av AI kan den identifiera telefonbedrägerier och göra tillvaron tryggare för många människor. – Dom här killarna är […]

momentumhistoria

2025-03-07

Dags för årets höjdpunkt för alla som bygger varumärken

Den 10:e april är det dags för tredje upplagan av Bygg ditt varumärke. En heldag om ett ständigt aktuellt ämne, som kräver ständig spaning. Ett lyckat varumärkesbygge handlar om mer än att bara synliggöra ett namn eller en logotyp. Det är att bygga en kultur. Att stå för något som både medarbetare och kunder gillar […]

Kalmar Science Park

Upcoming events

Mar 27

Activity

Expertrum har öppet – Fråga proffs inom 12 områden

För dig i Kalmar län som funderar på att starta företag, är nyföretagare eller anslutet företag till Kalmar Science Park. Välkommen till Expertrummen! Oavsett om du är nystartad eller etablerad, dyker det upp frågor i ett företag där det kan behövas experthjälp av någon utifrån. Vi samarbetar med experter inom tolv områden som du kan boka möte […]

Mar 28

Activity

Prissättning för startups

Sätt Rätt Pris från start – En överlevnadsstrategi för nya företag Endast avsedd för företag i Inkubatorprogrammet Välkommen till en unik utbildning för startups inom vårt inkubatorsprogram. För att sätta rätt pris behöver du ta in pris tidigt och inte skjuta upp det till framtiden – det är en viktig förutsättning som kan göra all […]

Apr 09

Activity

Tillväxt genom innovation – hur vi gör utveckling till en vana

Innovation är ingen engångshändelse det är en vana. Men hur skapar vi rätt förutsättningar för att företag ska kunna växa genom innovation? Den 9 april samlas vi för en interaktiv workshop med Tomas de Souza, expert inom innovation och professionell utveckling. Vi utforskar hur företag kan stärka sitt innovationsarbete och skapa en kultur som driver […]

It is important to us at Kalmar Science Park that you feel confident in how we handle your personal data. Therefore, we have established this privacy policy. It is based on the EU’s General Data Protection Regulation (GDPR) and clarifies how we work to safeguard your rights and privacy.

The privacy policy describes how Kalmar Science Park collects and processes your personal data, who may access it, and under what conditions. It also explains how we protect your personal data, your rights, and how you can contact us if you have any questions about our handling of your personal data.

1. GENERAL

We always base the collection and processing of your personal data on legal grounds. This could be an agreement, a legitimate interest, a legal obligation, or consent, depending on the type of personal data processing we carry out. We review our most common types of personal data processing in section 3.

We primarily process your personal data to fulfill our obligations to you. Our principle is to process no more personal data than necessary for the purpose, and we always strive to use the least sensitive data. Kalmar Science Park is committed to protecting your personal privacy and never sells your data.

In several cases, we use legitimate interest as the legal basis for processing your personal data. In addition to fulfilling our obligations to you as a registered individual, our legitimate interest is to carry out our public mission to promote growth and innovation in the business sector.
In certain cases, your personal data may be stored for longer than described in section 3 if we are required to do so by law, regulations, or decisions from authorities.

2. DATA CONTROLLER

The personal data is collected by Kalmar Science Park, 556504-2859, which is also the data controller, meaning we are responsible for how your personal data is processed and that your rights are protected.

3 HOW WE COLLECT AND PROCESS YOUR PERSONAL DATA

Here we outline our most common personal data processing activities related to the main processes of our business.

3.1 You Are in Our Incubator Program
Purpose: To manage the incubator process.
Personal Data Processed: Name, email, and phone number.
Legal Basis: Contract.
Recipients: Our data processors Invotech AB, Microsoft Corporation, Viva Media AB, and Svensk Dokumenthantering AB, who provide our information systems, have access to your data. We share your contact details with external consultants, feedback panels, municipal business representatives in Kalmar County, and partners (e.g., Kick Capital, Ignite) to fulfill our contractual obligations.
Retention Period: Your personal data is deleted no later than one year after the program ends in our information systems.
Transfer to Third Countries: Yes. When we send out information about news and activities, it is done through our event management system EventOnline. The system uses an email client based in the USA – DigitalOcean. This provider is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries.

3.2 You Are an Associate, Partner, or Member of One of Our Networks
Purpose: To manage your connection to Kalmar Science Park and/or our networks.
Personal Data Processed: Name, email, and phone number.
Legal Basis: Legitimate interests. The processing is necessary to fulfill our obligations to you and to meet our public mission to contribute to growth and innovation in the business sector.
Recipients: Our data processors Invotech AB, Microsoft Corporation, Viva Media AB, and Svensk Dokumenthantering AB, who provide our information systems, have access to your data. We may share your contact details with collaborating parties and speakers at activities and network meetings to meet our commitments.
Retention Period: Your personal data is continuously deleted when no longer relevant.
Transfer to Third Countries: Yes. When we send out information about news and activities, it is done through our event management system EventOnline. The system uses an email client based in the USA – DigitalOcean. This provider is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries.

3.2.1 You Are a Member of the eHealth Business Network
This is a network jointly managed by Kalmar Science Park and eHealth Arena. When registering for network activities, you have given consent to eHealth Arena’s personal data processing. In this consent, eHealth Arena informs you that they share the personal data with us at Kalmar Science Park. Here we detail our processing of your personal data.
Purpose: To manage your membership in the network and inform about network activities.
Personal Data Processed: Name, email, and phone number. Photos from network meetings.
Legal Basis: Legitimate interests. The processing is necessary to fulfill our obligations to you and to meet our public mission to contribute to growth and innovation in the business sector.
Recipients: Our data processors Invotech AB, Microsoft Corporation, Viva Media AB, and Svensk Dokumenthantering AB, who provide our information systems, have access to your data.
Retention Period: Your personal data is continuously deleted when no longer relevant from the contact list. Photos on the website and social channels are processed until a request for removal is made or until we delete them due to irrelevance.
Transfer to Third Countries: Yes. For our social media, the provider Meta is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries.

3.2.2 You Are a Participant at the TechHeads Conference
Registration for this conference is managed by Kalmarsalen, which shares personal data with us as the main organizer for handling the conference and future marketing. When registering for the network’s activities, you have consented to Kalmarsalen’s personal data processing. We also inform you of our privacy policy in email communications to all participants.
Here we detail our processing of your personal data.
Purpose: To manage your registration for the conference and marketing of the conference.
Personal Data Processed: Name, email, and phone number. Photos and videos from the conference.
Legal Basis: Legitimate interests. The processing is necessary to fulfill our obligations to you and to meet our public mission to contribute to growth and innovation in the business sector.
Recipients: Destination Kalmar (photo/video) and our data processors Invotech AB, Microsoft Corporation, Viva Media AB, and Svensk Dokumenthantering AB, who provide our information systems, have access to your data.
Retention Period: Your personal data is deleted no later than 12 months after the conference from the contact list. Photos and videos on the website and social channels are processed until a request for removal is made or until we delete them due to irrelevance.
Transfer to Third Countries: Yes. For our social media, the provider Meta is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries.

3.3 You Have Booked a Meeting with Us or Are Part of the Boost Chamber Process
Purpose: To manage your meeting booking and meeting. To offer you support, advice, and possibly our internal Boost Chamber process (pre-incubator).
Personal Data Processed: Name, email, and phone number.
Legal Basis: Legitimate interests. The processing is necessary to fulfill our obligations to you and to meet our public mission to contribute to growth and innovation in the business sector.
Recipients: Our data processors Invotech AB, Microsoft Corporation, Viva Media AB, and Svensk Dokumenthantering AB, who provide our information systems, have access to your data. We may share your contact details with external consultants, Almi, municipal business representatives in Kalmar County, and Nyföretagarcentrum Kalmarsund.
Retention Period: Personal data is deleted once a year.
Transfer to Third Countries: Yes. When we send out information about news and activities, it is done through our event management system EventOnline. The system uses an email client based in the USA – DigitalOcean. This provider is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries.

3.4 You Are a Member of an Expert Panel or Hired as a Speaker at Our Events and Trainings
Purpose: To conduct our activities.
Personal Data Processed: Name, email, and phone number. Photos may be used for marketing events as agreed (see section 3.7).
Legal Basis: Legitimate interests. The processing is necessary to conduct the activities required to fulfill our public mission to contribute to growth and innovation in the business sector.
Recipients: Our data processors Invotech AB, Microsoft Corporation, Viva Media AB, and Svensk Dokumenthantering AB, who provide our information systems, have access to your data.
Retention Period: Personal data is deleted when no longer relevant from contact lists.
Transfer to Third Countries: Yes. When we send out information about news and activities, it is done through our event management system EventOnline. The system uses an email client based in the USA – DigitalOcean. This provider is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries.

3.5 You Attend Our Events
Purpose: To manage your registration and conduct our events.
Personal Data Processed: Name, email, phone number, and photo. The registration form includes information on how we may take photos during our events and how to opt-out if you do not wish to be photographed.
Legal Basis: Legitimate interests. The processing is necessary to fulfill our obligations to you and to meet our public mission to contribute to growth and innovation in the business sector.
Recipients: Our data processors Invotech AB, Microsoft Corporation, and Viva Media AB, who provide our information systems, have access to your data.
Retention Period: From collection until a request for removal is made.
Transfer to Third Countries: Yes. When we send a confirmation for an event you have registered for, it is done through our event management system EventOnline. The system uses an email client based in the USA – DigitalOcean. This provider is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries. Photos from our events may be published on social media. The provider Meta is also part of the Data Privacy Framework agreement.

3.6 You Receive Newsletters, Invitations, and Information from Us
Purpose: To inform about our activities, news, and updates.
Personal Data Processed: Name, phone number, and email.
Legal Basis: Consent. (Legitimate interests if you are a contact person for an affiliated company or a member of our networks).
Recipients: Our data processors Invotech AB, Microsoft Corporation, and Viva Media AB, who provide our information systems, have access to your data.
Retention Period: From collection until you unsubscribe. (For affiliated companies, continuous deletion when no longer relevant).
Transfer to Third Countries: Yes. When we send out information about news and activities, it is done through our event management system EventOnline. The system uses an email client based in the USA – DigitalOcean. This provider is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries.

3.7 You Are Featured in Articles on the Website, Newsletters, or Social Channels
Purpose: To inform about our activities.
Personal Data Processed: Name, email, and photo.
Legal Basis: Legitimate interests. The processing is necessary to spread information and knowledge about our activities and to fulfill our public mission to contribute to growth and innovation in the business sector.
Recipients: Our data processors Invotech AB, Microsoft Corporation, Viva Media AB, and Svensk Dokumenthantering AB, who provide our information systems, have access to your data.
Retention Period: Until a request for removal is made or the information becomes irrelevant.
Transfer to Third Countries: Yes. For our social media, the provider Meta is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries.

3.8 You Participate in Advertising Materials and Campaigns
Purpose: Marketing of our activities.
Personal Data Processed: Name and image.
Legal Basis: Consent.
Recipients: Our data processors Invotech AB, Microsoft Corporation, Viva Media AB, and Svensk Dokumenthantering AB, who provide our information systems, have access to your data.
Retention Period: From collection until a request for removal is made.
Transfer to Third Countries: Yes. When we send out information about news and activities, it is done through our event management system EventOnline. The system uses an email client based in the USA – DigitalOcean. This provider is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries. Meta, which provides our social media services, is also part of the Data Privacy Framework agreement.

3.9 We Communicate with Each Other
Purpose: To provide support and answer your questions via email, phone, website forms, or social channels.
Personal Data Processed: Name, email, and phone number. If you contact us via social channels (Facebook, Instagram, Twitter, LinkedIn), profile name and photo.
Legal Basis: Legitimate interests. We need to provide feedback on your questions or comments.
Recipients: Our data processors Invotech AB, Microsoft Corporation, and Viva Media AB, who provide our information systems, have access to your data.
Retention Period: Communication of temporary importance is deleted when no longer relevant. Communication that leads to a case or is part of a case is retained according to Kalmar Municipality’s information management plan.
Transfer to Third Countries: Yes. For our social media, the provider Meta is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries.

3.10 You Visit Our Website
Purpose: To ensure the technical functionality of our website and analyze it to improve and develop the site.
Personal Data Processed: IP address.
Legal Basis: Legitimate interests. We need to analyze our website to develop it and reach our target audience with our offers and activities. This helps us fulfill our public mission to contribute to growth and innovation in the business sector.
Recipients: Our data processor Viva Media AB also has access to your data.
Retention Period: Your IP address is stored temporarily while you are a visitor on our website. For information on cookies, see section 6.
Transfer to Third Countries: No.

3.11 We Communicate Through the Innovation for Transformation Project
Purpose: To implement the project according to the project description approved by Tillväxtverket and Region Kalmar County.
Personal Data Processed: Name, phone number, and email.
Legal Basis: Legitimate interests. We must fulfill our commitments in the project according to the project description approved by Tillväxtverket and Region Kalmar County. The project helps us meet our public mission to contribute to growth and innovation in the business sector.
Recipients: Our data processors Invotech AB, Microsoft Corporation, and Viva Media AB, who provide our information systems, have access to your data. Tillväxtverket, Region Kalmar County, and collaborating parties involved in project activities and speakers.
Retention Period: Project documents are stored during the project and for 6 years after its completion. Contact lists are deleted after the project ends.
Transfer to Third Countries: Yes. When we send out information about news and activities, it is done through our event management system EventOnline. The system uses an email client based in the USA – DigitalOcean. This provider is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries.

3.12 You Are Included in Statistics and Goal Tracking
Purpose: To follow up, evaluate, and improve our activities.
Personal Data Processed: Name, phone number, and email. Statistical reports are anonymized when shared with external parties.
Legal Basis: Legitimate interests. We need to follow up, evaluate, and improve our activities to fulfill our public mission to contribute to growth and innovation in the business sector.
Recipients: Our data processors Invotech AB, Microsoft Corporation, Viva Media AB, and Svensk Dokumenthantering AB, who provide our information systems, have access to your data.
Retention Period: Lists for sending surveys are stored for a maximum of 6 years after the end of the affiliation. Survey compilations are retained according to Kalmar Municipality’s information management plan. Personal data is not visible when shared externally.
Transfer to Third Countries: Yes. In some cases, surveys are sent via our event management system EventOnline. The system uses an email client based in the USA – DigitalOcean. This provider is part of the Data Privacy Framework agreement, ensuring an adequate level of protection for transfers to third countries.

4. HOW WE PROTECT YOUR PERSONAL DATA

We have procedures, working methods, and IT systems in place to ensure that your personal data is handled as securely as possible. We are owned by Kalmar Municipality and follow the municipality’s guidelines for IT security and information security.

The basic principle is that only employees and consultants within the organization who need the personal data to perform their tasks should have access to it. In some cases, we need to engage data processors for the processing of personal data. The processing is then carried out according to our instructions and regulated through agreements.

We do not transfer personal data in any cases other than those explicitly stated in this policy.

5. YOUR RIGHTS

You can contact karin.weddingo@kalmarsciencepark.se at any time to request the correction, transfer, deletion, or restriction of your personal data.

Requests for an extract of your personal data must be made in writing by filling out the request for register extract form available on Kalmar Municipality’s website: https://kalmar.se/kommun-och-politik/overklaga-beslut-rattssakerhet/integritetspolicy.html

You can also contact our Data Protection Officer at dataskyddsombudet@kalmar.se.

You have the right to file a complaint with the supervisory authority, the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten), at imy@imy.se if you believe we are handling your personal data incorrectly. You can also read more about your rights there.

6 USE OF COOKIES

We use so-called cookies when you visit www.kalmarsciencepark.se to analyze visitor statistics, improve the user experience of our website, and tailor our marketing. You can read more about which cookies are stored and how they work here.