Privacy Notice
How we process personal data when you visit our website, contact us, or appear in public research and innovation sources.
Lodexa AB (“Lodexa”, “we”, “us”), Swedish corporate identity number 559587-7324, Sandelsgatan 30, 115 34 Stockholm, Sweden, is the controller of the personal data described in this notice. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection law.
This notice covers personal data we process when you visit our website, contact us, or interact with us as a prospective or existing business contact, as well as personal data we compile from public research and innovation sources. It does not cover data that our customers upload to the Lodexa platform; such processing is governed by our agreements with those customers.
What information we collect
Information you provide: name, work email address, phone number, organisation, role, country and any information you include in your messages or share in meetings, and your email address if you subscribe to our newsletter.
Information from other sources: business contact details from public professional sources (such as company websites or LinkedIn), from colleagues or partners who refer you to us, or from events where we meet.
Technical information: limited data such as IP address and browser information, necessary to operate and secure our website. We use cookies that are necessary for the website to function. With your consent, we also use an analytics cookie (Google Analytics 4) to count visits and understand how our website is used. It is set only after you accept it in our cookie banner, is stored for 2 years, and you can change your choice at any time via at the bottom of each page.
Why we use your information and our legal basis
To respond to your enquiries, assess requests for early access and arrange meetings or demonstrations — to take steps at your request before entering into an agreement, or our legitimate interest in responding to people who contact us.
To manage relationships with prospective and existing customers, partners and suppliers — performance of a contract, or our legitimate interest in developing and maintaining business relationships.
To send you information about Lodexa and our services — our legitimate interest in marketing our services to business contacts, or your consent where required by law.
To send you Lodexa Insights, our newsletter — your consent, which you give when you subscribe. This includes measuring whether our emails are opened and links clicked, so that we can improve our content. You can unsubscribe at any time via the link in each email.
To operate and secure our website — our legitimate interest in providing a secure and functioning website.
To understand how our website is used — your consent, given through our cookie banner.
To comply with legal obligations, such as bookkeeping requirements — legal obligation.
Providing personal data is voluntary, but we may not be able to respond to your enquiry without it. We do not use automated decision-making, including profiling, that produces legal or similarly significant effects. We do not sell your personal data.
Data from public research and innovation sources
To develop Lodexa’s analysis of public investment in research and innovation, we compile information from public sources such as CORDIS, ORCID, OpenAIRE and Vinnova’s open data. This can include personal data about researchers, project leaders and contact persons, such as names, affiliations, roles, project participation, publications and identifiers such as ORCID iDs.
We process this data based on our legitimate interest in analysing publicly funded research and innovation. We do not use it for marketing. We keep it for as long as it is relevant to our analysis and update it as the original sources change. You can object to this processing and exercise your other rights as described below.
How we share information
We use trusted service providers for website hosting, website analytics, email, newsletter distribution, communication, customer relationship management and business administration. They process personal data only on our behalf, under data processing agreements, and are required to protect it appropriately. We may also share data with professional advisers or authorities where required by law.
Transfers outside the EU/EEA
Some of our service providers may process personal data outside the EU/EEA. In such cases we rely on an adequacy decision by the European Commission (including the EU–US Data Privacy Framework where applicable) or the Commission’s Standard Contractual Clauses. You can request a copy of the relevant safeguards by contacting us.
How long we keep your information
Enquiries and business contact data: up to 24 months after our last contact, unless an ongoing business relationship requires longer.
Newsletter subscribers: until you unsubscribe. We keep a record of your unsubscription so that we can respect your choice.
Data relating to customer agreements: for the duration of the relationship and up to ten years after it ends, corresponding to the general limitation period under Swedish law.
Accounting records: seven years after the end of the relevant calendar year, as required by the Swedish Bookkeeping Act.
Your rights
You have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing and, where applicable, data portability. Where processing is based on consent, you may withdraw your consent at any time.
You have the right to object to processing based on our legitimate interests. You can object to direct marketing at any time, and we will then stop using your data for that purpose. Every marketing email includes an unsubscribe option.
We respond to requests within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se.
Changes
We may update this notice. The latest version is always available at lodexa.ai.