Privacy and Data Protection Policy

Last updated: 6 October 2025

1. Introduction

We value your privacy and are committed to protecting your personal data.
This policy explains how Creative Insights Studio AB (Org. No. 559164-3043) (“we,” “our,” “us”) collect, use, and protect your personal information in accordance with:

  • The EU General Data Protection Regulation (GDPR 2016/679)

  • The Swedish Data Protection Act (Dataskyddslagen 2018:218)

2. Who we are

Data Controller:
Creative Insights Studio AB / Kulturrummet
Helsingborg, Sweden
hello@creativeinsights.studio

3. What data we collect

We collect only the information necessary to communicate with you or provide our services, such as:

  • Name and email address (for newsletters, event updates, or contact forms)

  • Organization or affiliation

  • Any information you voluntarily provide when contacting us

4. Why we collect your data (Lawful basis)

We process your data under one or more of these lawful bases:

  • Consent – when you sign up for our newsletter or mailing list.

  • Contract – to deliver services, projects, or events you participate in.

  • Legitimate interest – to communicate with partners, collaborators, and participants with an existing relationship.

  • Legal obligation – when we must retain records for accounting or reporting purposes.

5. How we use your information

  • To send occasional emails about projects, events, and news.

  • To respond to inquiries or partnership requests.

  • To analyze general engagement (data is aggregated and anonymous).
    We never sell or share your data with third parties for marketing purposes.

6. Data storage and security

Your data is stored securely through our newsletter platform (Squarespace Email Campaigns), which complies with GDPR standards.
We apply appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or loss.

7. Data retention

We keep your personal information only for as long as necessary to fulfil the purpose for which it was collected or to meet legal obligations.
If you unsubscribe from our newsletter, your data is deleted or anonymized within 30 days.

8. Your rights under GDPR

You have the right to:

  • Access the personal data we hold about you.

  • Request correction of inaccurate information.

  • Request deletion of your data (“right to be forgotten”).

  • Withdraw consent at any time.

  • Object to processing based on legitimate interest.

  • Request data portability.

To exercise your rights, email us at hello@creativeinsights.studio
We will respond within 30 days.

9. Cookies and tracking

Our websites may use cookies to improve user experience and analyze traffic.
You can control cookies through your browser settings. Analytics data is processed in aggregate form and does not identify individual users.

10. Third-party services

We may use trusted service providers for:

  • Email campaign delivery (Squarespace)

  • Cloud storage (Google Drive)

  • Event registration (lu.ma)

    All third-party processors comply with GDPR and process data only on our instructions.

11. International transfers

Whenever possible, your data is stored within the EU/EEA.
If data is transferred outside the EU (for example via a service provider in the US), we ensure appropriate safeguards such as EU Standard Contractual Clauses.

12. Contact and complaints

If you have questions about this policy or believe your data is being handled incorrectly, contact us at hello@creativeinsights.studio.


You also have the right to file a complaint with:
Integritetsskyddsmyndigheten (IMY) – Sweden’s Data Protection Authority
imy.se
imy@imy.se

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements.The latest version will always be available on our websites.