Privacy Policy

Introduction

Swedish Project is a trading name of Space in the Making AB ("we," "our," or "us"), the data controller responsible for the processing of your personal data. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website or engage with our services.

Information We Collect

We may collect the following types of information:

• Contact Information: Name, email address, phone number, and company name when you fill out our contact form.
• Usage Data: Information about how you interact with our website, including pages visited and time spent.
• Technical Data: IP address, browser type, device information, and operating system.

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide customer support
• Send relevant information about our services
• Improve our website and user experience
• Comply with legal obligations

Cookies

We only use cookies and browser storage that are needed to run the site and keep you signed in. No analytics or advertising cookies are used. See our Cookie Policy for the full list.

Sub-processors

To run our website and The Hub, we use a small number of carefully selected service providers (sub-processors). Each is bound by a data processing agreement in line with GDPR Article 28. Where data is transferred outside the EU/EEA, it is protected by the EU Standard Contractual Clauses (SCCs) or an equivalent safeguard.

Documents and files

Drawings, contracts, invoices, photos and other files uploaded to The Hub are stored in private storage. They are never publicly accessible and can only be opened by authorised users through short-lived, signed links.

Business customers can request our data processing agreement (DPA) and are notified by email at least 30 days before a new sub-processor is added, with the right to object. Contact us at info@swedishproject.com.

Organisation Directory and Discoverability

Status: directory not yet launched

1. Purpose. The organisation directory helps organisations using The Hub find suitable partners for projects.
2. Opt-in. An organisation is listed only if an administrator of that organisation actively switches on "Discoverable in the Hubfolio directory". The setting is off by default.
3. Information shown. A listing contains company information only: company name, country and services or disciplines. Personal data, such as the names, email addresses or phone numbers of individual users, is never shown in the directory. Prices, project information and client names are never shown.
4. Withdrawal. An administrator may switch the setting off at any time. The listing is then removed from the directory immediately.
5. Legal basis. Listing is based on the organisation's consent, given through the setting, and on our legitimate interest in connecting organisations on the platform.

Anonymised Project Data

Project data entered in The Hub may be used in anonymised and aggregated form to produce industry benchmarks. Only project type, area, timelines and cost categories are used. Names, companies, contact details, client names and individual figures are removed first. A result is shown only when it combines at least 5 projects from at least 3 organisations, so no person, company or project can be identified. Benchmarks are a setting each organisation controls. Keeping it switched on is the organisation's instruction to us to include its anonymised data (to be confirmed by legal review).

Every organisation can opt out: an administrator switches off "Include our anonymised data in benchmarks" under Workspace → Settings → Organisations. The organisation's data is then left out of all future benchmarks.

Data Inside The Hub

• We process account details (name, email, organisation, role), project and unit data, documents, site photos, field reports and messages you send to our support team.
• Each organisation's data is kept separate. Access follows organisation membership and the projects or units you are invited to, not your job title.
• Contractor costs, markups and internal margins are never shown to clients.
• AI features only propose; a person reviews and decides. Your data is not used to train AI models. How long an AI provider keeps a request follows its own terms.
• Important actions, such as approvals and sign-offs, are stored with name and date.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including two-factor authentication for accounts and access rules enforced in the database. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access your personal data
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to processing of your personal data
• Request restriction of processing
• Data portability
• Withdraw consent at any time

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. The table below covers our own records as a company (enquiries, our own accounts and billing). Data your organisation enters in the platform follows the rule after the table.

Your data in The Hub. Data your organisation enters is deleted within 30 days after the contract ends, unless you ask us to export it first or the law requires us to keep it longer. Deleted data disappears from backups as they rotate; the exact backup period is available on request.

When your data is no longer needed, we will securely delete or anonymize it. You may request earlier deletion of your personal data by contacting us, subject to any legal obligations that require us to retain certain information.

Contact Us

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.