PRIVACY POLICY
PRIVACY POLICY
We value your privacy and process your personal data in accordance with the General Data Protection Regulation (GDPR). This policy describes how we collect and process personal data, what rights you have, and how you can contact us.
Data Controller
EP-Social [legal company name] (company registration no. [company registration number]), which operates ep-social.com, is the data controller for the processing of personal data described in this policy.
This policy applies to you when you visit ep-social.com, contact us, are a customer of ours, or otherwise provide information to us. We process your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Swedish legislation.
What Is Personal Data?
Personal data is any information that can directly or indirectly be linked to a living, identifiable individual, such as a name, email address, telephone number, or IP address.
Processing means anything we do with the data, such as collecting, storing, using, changing, and deleting it.
Contact and Quote Requests
When you contact us or request a quote, we store your name, email address, telephone number, company name, website, the services you are interested in, and any message you may provide. We process this information in order to respond to you, provide information, and prepare proposals.
Legal basis: Legitimate interest. Our interest in responding to your request and presenting relevant services outweighs your interest in preventing the processing of your data.
Retention period: Up to 24 months after your most recent contact with us, unless we establish a customer relationship before then.
When You Are a Customer
When you become a customer, we process the information necessary for us to deliver and administer our services, issue invoices, and maintain communication throughout our cooperation.
Legal basis: Performance of a contract, or legitimate interest when you are a contact person at a company with which we have an agreement. For accounting records, the legal basis is a legal obligation.
Retention period: Throughout the customer relationship. Records subject to accounting legislation are retained for seven years.
After You Have Been a Customer
When our cooperation has ended, we retain certain information in order to provide support, handle subsequent questions, and comply with legal requirements.
Retention period: Up to 24 months after the end of the cooperation, in addition to information that we are legally required to retain for longer periods, such as seven years under applicable accounting legislation.
Information Obtained from Sources Other Than You
We may obtain information about companies and their contacts from sources other than you. This applies when we contact companies that we believe may benefit from our services.
The sources may include visitor identification services, which identify the company from which a visit to ep-social.com originates based on the IP address, providers of company and contact data, public registers, and the company’s own website.
The information we process may include company name, company registration number, industry and company size, as well as the name, professional role, and email address of a contact person at the company.
Legal basis: Legitimate interest. Our interest in presenting our services to companies where they may be relevant outweighs the data subject’s interest in preventing the processing of their data. We process the information solely in a professional capacity and never as a private individual.
You always have the right to object to this processing. Contact us at [info@ep-social.com], or reply to the email you received, and we will delete the information and will not contact you again.
Retention period: Up to 12 months from the date of collection if no contact has been initiated.
Other Purposes of Processing
Information collected through our digital channels may also be processed in order to:
- Produce statistics and analyses and conduct market research
- Administer and secure our systems
- Evaluate, test, and improve our website and services
- Customize and target relevant communications and offers
Information processed for these purposes may include your name, contact details, company name, the services you are interested in, and technical information such as device type, IP address, browser, and cookie information.
Legal basis: Legitimate interest, and for non-essential cookies, your consent (see the Cookies section).
Direct Marketing and How to Opt Out
We may send you marketing communications, primarily by email, containing information about our services. The legal basis for this is legitimate interest.
You always have the right to opt out of direct marketing. You can do so by clicking the unsubscribe link in the communication or by contacting us at [info@ep-social.com].
Advertising to Companies on Social Media
In order for our advertisements to be shown to the right people at the companies we target, we may share contact information in encrypted form with social media platforms and advertising networks. The platform matches the information against its own users and displays the advertisement to those who match. Information that does not match is deleted by the platform.
For the matching process itself, we are jointly responsible for the processing of personal data with the platform. This means that both we and the platform are responsible for that processing, unlike service providers that process personal data solely on our instructions. If you would like to know which platform is involved, we will provide this information upon request.
Legal basis: Legitimate interest, in the same way as described above. The target audience is updated regularly, and the information is deleted by the platform when the advertising activity ends.
You always have the right to object to this processing without giving a reason. Email [info@ep-social.com], and we will remove and block the relevant information.
Children
Our services are intended for businesses and not for children. We do not knowingly collect personal data from children under the age of 13.
Who Do We Share Personal Data With?
To operate and develop our business, we use service providers that process personal data on our behalf, including providers within the following categories:
- Analytics and statistics tools
- Advertising and marketing platforms
- Customer relationship management (CRM) and email systems
- IT, hosting, operational, and storage services
- Accounting and payment services
These providers may only process the data according to our instructions and for the purposes we specify. This is regulated through data processing agreements.
We never sell your personal data. We may disclose information if we are legally required to do so or if required by a decision from a public authority.
Transfers to Third Countries
Some of our service providers, particularly those involved in analytics and advertising, are based in or transfer data to countries outside the EU/EEA, primarily the United States.
When this occurs, we ensure an adequate level of protection corresponding to EU requirements through the European Commission’s Standard Contractual Clauses or by using providers participating in the EU–US Data Privacy Framework.
How We Protect Your Personal Data
We implement technical and organizational measures to protect your personal data against unauthorized access, loss, and misuse.
Access to personal data is limited to the individuals and service providers who need it in order to perform their work.
Your Rights
You have the right to:
- Receive information about and access the personal data we process about you (data access request)
- Have inaccurate information corrected
- Have your personal data deleted in certain circumstances
- Request that the processing of your personal data be restricted
- Object to processing based on legitimate interest, including direct marketing
- Under certain circumstances, receive and transfer your personal data (data portability)
To exercise your rights, contact us at [info@ep-social.com].
If you believe that we are processing your personal data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), which is the supervisory authority in Sweden.
Cookies
On ep-social.com, we use cookies and similar technologies to ensure that the website functions properly, improve your experience, collect statistics, and enable relevant marketing.
When you visit the website, our cookie banner allows you to choose which non-essential cookies you consent to. Essential cookies required for the website to function do not require consent.
You can change or withdraw your consent at any time through the cookie settings on the website. You can also block or delete cookies through your browser. If you block cookies, some features may not function correctly.
More information is available in our Cookie Policy.
Links to External Websites
ep-social.com may contain links to other websites. We are not responsible for the content of these websites or how they process your personal data.
We recommend that you read the privacy policy of any website you visit.
Changes to This Policy
We may update this policy, for example, due to changes in legislation or changes to our business.
The latest version will always be published on ep-social.com.
Last updated: September 29, 2026.
Contact Information
EP-Social [legal company name]
Company registration no. [company registration number]
[Street address]
[Postal code and city]