Privacy Policy

Effective from 4 August 2026

This Privacy Policy describes how LaborFlow Consulting AB collects, uses, stores, and protects personal data in connection with our business and our website.

LaborFlow Consulting AB ("LaborFlow", "we", "us", or "our") provides professional services in HR, international recruitment, Talent Acquisition, HR advisory, and consulting.

We are committed to protecting your privacy and process personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR) and supplementary Swedish data protection legislation.

This Policy applies when you represent a customer, supplier, business partner, or prospective customer, act as a reference person, visit our website, contact us via a form, email, or telephone, subscribe to information from us, or otherwise come into contact with our business.

If you register your CV, apply for a position, are included in our candidate pool, or participate in a recruitment process, our separate Privacy Policy for Candidates applies instead to the processing related to recruitment.

1. Data Controller

LaborFlow Consulting AB, company registration number 559577-4794, is the data controller responsible for the processing of personal data described in this Policy.

Address: Lillgårdens Gränd 3/1001, 436 57 Hovås, Sweden.
Email: office@laborflow.se
Website: www.laborflow.se

2. Personal Data We Process

Depending on how you come into contact with us, we may process the following categories of personal data:

-identity and contact information, such as name, job title, company, telephone number, and email address;

-communications and information you provide in messages, forms, or other contact with us;

-contract, customer, and payment information required to administer our services, invoicing, and customer relationships;

-information about business relationships, meetings, quotations, enquiries, and collaborations;

-technical information, such as IP address, timestamps, and log data when you use our website;

-marketing preferences and information about consent where consent is required;

-other information that you voluntarily provide to us.

3. Purposes and Legal Basis

We process personal data to respond to enquiries, provide and administer our services, manage contracts and payments, develop and maintain business relationships, ensure IT and information security, comply with legal obligations, and, where permitted, provide information about our services.

Depending on the circumstances, the processing is based on the necessity to perform a contract or take steps prior to entering into a contract, comply with a legal obligation, pursue our or a third party's legitimate interests, or on your consent where consent is required.

Where we rely on legitimate interests as the legal basis for processing, we carry out a balancing test and process the data only where our legitimate interests do not override your interests, fundamental rights, and freedoms.

4. Recipients of Personal Data

LaborFlow primarily processes personal data within its own operations. We never sell personal data to third parties.

Where necessary, personal data may be shared with providers of services such as web hosting, email, payment and invoicing services, IT operations, IT security, and other technical systems. Such providers process personal data in accordance with our instructions when acting as data processors and are subject to applicable data processing agreements.

The website may use hCaptcha to protect forms against spam and misuse. If you use an AI-based feature, the information necessary for that feature may be processed by the relevant AI provider. We limit the information shared to what is necessary for the purpose.

Personal data may also be disclosed to public authorities, courts, advisers, or other recipients where required by law or necessary to establish, exercise, or defend legal claims.

5. Transfers Outside the EU/EEA

We strive to process and store personal data within the EU/EEA. If a service provider or other recipient processes personal data outside the EU/EEA, we ensure that the transfer takes place in accordance with the GDPR.

Transfers may, for example, be based on a European Commission adequacy decision or appropriate safeguards under Article 46 of the GDPR, such as the European Commission's Standard Contractual Clauses (SCCs). Where necessary, we use supplementary technical and organisational safeguards.

Please contact us if you would like more information about international transfers or the safeguards applied.

6. Retention Period

We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as we are required to retain it by law.

Contact enquiries are normally retained for no longer than 12 months after the matter has been closed, unless the data needs to be retained for longer for another legitimate reason.

Customer, contract, and business relationship data is retained for the duration of the relationship and thereafter for as long as necessary to manage legal claims or comply with legal obligations.

Accounting information is retained in accordance with the Swedish Accounting Act.

Data processed for marketing purposes is retained for as long as the processing is permitted and necessary for the purpose. Where the processing is based on consent, it ceases when the consent is withdrawn, unless another legal basis applies.

7. Cookies and Similar Technologies

The website uses necessary cookies and may, depending on your choices, use additional cookies or similar technologies. Information about which cookies are used, their purposes, retention periods, and how to change your choices is provided in the website's cookie information and consent solution.

8. Your Rights

Under the GDPR, depending on the circumstances, you have the right to:

-receive information about and access to the personal data we process about you;

-request correction of inaccurate or incomplete data;

-request deletion of personal data where the applicable conditions are met;

-request restriction of processing in certain circumstances;

-object to processing based on legitimate interests and always object to processing for direct marketing purposes;

-receive certain data in a structured, commonly used, and machine-readable format where the right to data portability applies;

-withdraw consent where the processing is based on consent.

These rights are not absolute and may be restricted by law. To protect your data, we may need to verify your identity before processing a request.

9. Security

We use appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, destruction, and unlawful disclosure. The measures are adapted to the nature, scope, and risk of the processing.

10. Complaints

If you believe that we process your personal data in breach of data protection rules, you are welcome to contact us. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another competent supervisory authority under the GDPR.

Swedish Authority for Privacy Protection (IMY)
Website: www.imy.se

11. Changes to This Policy

We may update this Privacy Policy when our processing activities or applicable legal requirements change. The latest version is published at www.laborflow.se. In the event of material changes, we will provide appropriate notice.

12. Contact

LaborFlow Consulting AB
Company registration number: 559577-4794
Lillgårdens Gränd 3/1001
436 57 Hovås, Sweden
Email: office@laborflow.se
Website: www.laborflow.se