Privacy and data protection
This policy explains which personal data HubMind AB processes through hubmind.se, why we process it, who may receive it and how long we retain it. It reflects the website’s verified contact, analytics, consent and survey flows.
Who is responsible for your data?
HubMind AB, Falkenberg, Sweden, is the data controller. Questions and rights requests can be sent to info@hubmind.se or made by phone at +46 10 164 69 00.
What we process and why
Contact requests
Data: Name, email address, optional company, message, chosen language and delivery metadata.
Purpose: To answer your request, assess a potential assignment and continue the conversation you initiated.
Legal basis: Legitimate interests under Article 6(1)(f) GDPR and, where your request concerns a possible agreement, steps before entering a contract under Article 6(1)(b).
Retention: Normally 24 months after the last meaningful contact. If the conversation becomes a client relationship, relevant records follow the agreement and applicable accounting or legal retention requirements.
Website operation and abuse prevention
Data: IP address and ordinary request, browser, device and security-log information. The contact endpoint creates a one-way hash of the IP address for rate limiting.
Purpose: To deliver and secure the website, diagnose faults and prevent automated misuse of the contact form.
Legal basis: Legitimate interests under Article 6(1)(f) GDPR. Essential language and consent preferences are necessary for the requested website functions.
Retention: The contact rate-limit hash expires after 10 minutes. Operational security logs are normally retained for no longer than 30 days unless an incident requires a longer investigation or law requires retention.
Website measurement with Google Analytics 4
Data: Online identifiers, cookie identifiers, approximate location derived from IP, device/browser information, page views, referrer and interaction events. HubMind does not send contact-form content to Analytics.
Purpose: To understand aggregate website use and improve content and navigation.
Legal basis: Consent under Article 6(1)(a) GDPR. Analytics storage is enabled only after you consent to Analytics, and consent can be withdrawn at any time.
Retention: Analytics cookies remain for up to two years. Event-level data follows the retention configured in HubMind’s GA4 property; aggregated reports may remain after they no longer identify an individual visitor.
Voluntary website survey
Data: Your free-text answer, survey status and the page context needed to present and administer the survey. Do not include sensitive personal data in an answer.
Purpose: To understand visitors’ impression of the website and improve it.
Legal basis: Consent under Article 6(1)(a) GDPR. The survey software and its state cookies load only after you independently consent to Website Feedback.
Retention: Survey answers are reviewed and retained for up to 12 months, then deleted or anonymised. Survey state cookies last for the browser session.
Service providers and international transfers
HubMind uses service providers only where needed to operate the website and handle the activities above. They process data under contractual and confidentiality obligations.
- The website and its WordPress database are operated through hosting and technical service providers acting for HubMind.
- Contact-form messages are delivered through Resend, operated by Plus Five Five, Inc. in the United States. Resend processes the recipient and sender addresses, message content and delivery metadata. Its data processing addendum incorporates the EU Standard Contractual Clauses and describes additional transfer safeguards.
- Google Analytics is provided for EEA customers by Google Ireland Limited and may involve Google affiliates and infrastructure outside the EEA. Google describes the applicable legal transfer frameworks and safeguards in its privacy documentation.
- The survey runs through the UserFeedback WordPress software. Survey requests are sent to HubMind’s own WordPress endpoint; using the plugin does not by itself send your survey answer to the software publisher.
Cookies and your consent choice
The current cookie register, purposes and durations are published in our Cookie Policy. You can reject optional storage or change your choice through Cookie Preferences. Withdrawing consent does not affect processing that was lawful before withdrawal.
Your rights
Depending on the circumstances, you have the right to access, rectify or erase your personal data, restrict or object to processing, receive data you provided in a portable format, and withdraw consent. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or another competent supervisory authority. We may need to verify your identity before acting on a request.
Other important information
HubMind does not sell personal data, use website data for automated decision-making or knowingly request sensitive personal data through the website. External websites linked from hubmind.se are responsible for their own processing. We update this policy when the website’s processing changes materially.
Operationally reviewed 8 August 2026.