Privacy Notice.

1. Introduction and Data Controller.

Regweaver AB, a company incorporated under the laws of Sweden, with company registration number 559526-9704 (hereinafter referred to as “we”, “us” or the “Company”), is the data controller responsible for the processing of your personal data as described in this Privacy Notice. This Privacy Notice applies to personal data we collect and process about individuals acting in their professional capacity as representatives, employees, or other contact persons of our business partners, customers, suppliers, and other corporate entities with whom we or our customers maintain or seek to establish a business relationship.

For any questions regarding this Privacy Notice or our processing of your personal data, please contact us at: privacy@regweaver.com.

2. Categories of Personal Data.

We may process the following categories of personal data relating to you: (a) identification data, including name, title, position, and professional role; (b) contact information, including business email address, business telephone number, and business address; (c) account data, including username, password (encrypted), and account preferences; (d) communication data, including correspondence, support requests, and records of interactions with us; (e) contractual data, including information relating to contracts between us and the entity you represent; (f) financial and transactional data, including invoicing information and payment records; and (g) marketing preferences, including consent records and communication history.

3. Sources of Personal Data.

We collect personal data from the following sources: (a) directly from you, when you provide information in connection with the establishment or performance of a business relationship; (b) from the company or organisation you represent; (c) from publicly available sources, including company registers, professional networking platforms, and corporate websites; and (d) from third parties, including customers, business partners, industry databases, and credit reference agencies.

4. Purposes and Legal Bases for Processing.

We process your personal data for the following purposes and on the following legal bases pursuant to Article 6(1) of the General Data Protection Regulation (EU) 2016/679 (“GDPR”). To the extent our processing of your personal data is based on our legitimate interest (Article 6(1)(f) GDPR), you may contact us to learn more about how we have balanced your interests against ours.

4.1 User Account Administration

We process your personal data to set up, maintain, and administer user accounts enabling you to access our systems, platforms, or services on behalf of the entity you represent.

Legal basis: Legitimate interests in facilitating the business relationship (Article 6(1)(f) GDPR).

4.2 Provision of Support

We process your personal data to provide technical and customer support in connection with our products and services.

Legal basis: Legitimate interests in maintaining customer satisfaction and resolving issues (Article 6(1)(f) GDPR).

4.3 Contract Management

We process your personal data to establish, maintain, and manage the contractual relationship with the entity you represent, including for purposes of contract negotiation, execution, performance, and enforcement.

Legal basis: Legitimate interests in managing our business relationships and performing our contractual obligations (Article 6(1)(f) GDPR).

4.4 Marketing

We process your personal data to send you information about our products, services, and offerings that may be of interest to you or the entity you represent.

Legal basis: Legitimate interests in promoting our business and maintaining business relationships (Article 6(1)(f) GDPR), or where required, your consent (Article 6(1)(a) GDPR). You may opt out of marketing communications at any time.

4.5 Legal Compliance

We process your personal data to comply with applicable legal obligations, including accounting, tax, and regulatory requirements.

Legal basis: Compliance with a legal obligation to which we are subject (Article 6(1)(c) GDPR).

4.6 Corporate Transactions

We may process and transfer your personal data in connection with a merger, acquisition, reorganisation, sale of assets, or similar corporate transaction.

Legal basis: Legitimate interests in conducting and facilitating corporate transactions (Article 6(1)(f) GDPR).

5. Website Visitors and Online Tracking.

When you visit our website or use our online services, we may collect and process personal data relating to your use thereof. This may include technical information such as your IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, time spent on pages, links clicked, and the date and time of your visit. We may also collect information about your interactions with our content and communications. We process this data for the purposes of: (a) ensuring the security, stability, and functionality of our website and online services; (b) detecting, preventing, and investigating security incidents and fraudulent activity; (c) analysing website usage, user behaviour, and performance metrics; (d) improving and optimising our online services and user experience; and (e) fulfilling our legal obligations.

Legal basis: Legitimate interests in maintaining, improving, and securing our website and online services, and in understanding how our services are used (Article 6(1)(f) GDPR). Where required by applicable law, certain processing activities may be based on your consent (Article 6(1)(a) GDPR).

We use cookies and similar tracking technologies on our website. For detailed information about the types of cookies we use, their purposes, retention periods, and how you can manage your cookie preferences, please refer to our Cookie Notice available at https://regweaver.com/.

6. Recipients of Personal Data.

We may share your personal data with the following categories of recipients: (a) affiliated companies within our corporate group; (b) service providers and processors acting on our behalf, including IT service providers, cloud hosting providers, and customer relationship management providers; (c) professional advisors, including legal counsel, auditors, and accountants; (d) public authorities and regulatory bodies where required by law; and (e) potential or actual acquirers or successors in connection with a corporate transaction as described in above.

7. International Transfers.

Your personal data may be transferred to, and processed in, countries outside the European Economic Area (“EEA”). Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with Chapter V GDPR, including the use of European Commission-approved standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms. You may request further information about such safeguards by contacting us using the details provided in Section 1.

8. Retention Periods.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. The retention period may vary depending on the context and our legal obligations. As a general principle: (a) data relating to contractual relationships is retained for the duration of the relationship and for a period of ten (10) years thereafter to comply with statutory limitation periods and legal obligations; (b) accounting and financial records are retained in accordance with applicable accounting and tax legislation; and (c) marketing data is retained until you object to such processing, subject to applicable limitation periods in national legislation.

9. Your Rights.

Subject to applicable law, you have the following rights in relation to your personal data: (a) the right to access your personal data and obtain a copy thereof (Article 15 GDPR); (b) the right to rectification of inaccurate or incomplete personal data (Article 16 GDPR); (c) the right to erasure of your personal data in certain circumstances (Article 17 GDPR); (d) the right to restriction of processing in certain circumstances (Article 18 GDPR); (e) the right to data portability in certain circumstances (Article 20 GDPR); (f) the right to object to processing based on legitimate interests or for direct marketing purposes, which we will assess in accordance with applicable law (Article 21 GDPR); and (g) where processing is based on consent, the right to withdraw such consent at any time, without affecting the lawfulness of processing prior to withdrawal (Article 7(3) GDPR).

To exercise any of these rights, please contact us using the details provided in Section 1. You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

10. Updates to this Privacy Notice.

We may update this Privacy Notice from time to time to reflect changes in our processing activities or applicable law. The current version will be made available upon request. We encourage you to review this Privacy Notice periodically.

Last updated: 2026-05-05