Privacy Notice for Website Visitors
Last updated: 17 August 2026
Profundus AB (“Profundus”, “we”, “us” or “our”) cares about your privacy and is committed to protecting your personal data. We process personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (“GDPR”).
This Privacy Notice explains how Profundus processes your personal data when you visit or interact with our website, www.profundus.com, including when you contact us or subscribe to our newsletter.
This Privacy Notice applies to personal data processed in connection with the website and related website communications only. It does not govern the processing of patient data, retinal images, clinical investigation data or other personal data processed in connection with the use of Profundus medical devices or clinical studies.
1. Who is responsible for your personal data?
Profundus AB, organisation number 556971-2333, incorporated in Mölndal, Sweden, is responsible for the processing of your personal data described in this Privacy Notice and acts as the data controller.
Profundus AB Krokslätts Fabriker 30 431 37 Mölndal Sweden
If you have any questions regarding Profundus’s processing of your personal data or wish to exercise your rights, please contact us at:
info@profundus.com
Profundus has not appointed a formal Data Protection Officer.
2. How we process your personal data
2.1 What personal data do we collect?
Profundus may collect personal data directly from you when you interact with our website, contact us or subscribe to our newsletter.
Depending on how you interact with us, this may include:
Personal identification and contact information:
· First name and last name
· Email address
· Telephone number
· Company or organisation
· Job title
· Country or region
· Other information you provide when contacting us
Information submitted through our contact form:
· The content of your message and any other information you choose to provide to us.
Newsletter information:
· Your name and email address
· Information relating to your subscription and communication preferences
· Information regarding whether newsletters are delivered, opened or interacted with, where such functionality is enabled in our newsletter service
Technical and website usage information:
· IP address
· Browser and device information
· Operating system
· Website navigation and interaction data
· Date, time and duration of visits
· Pages visited and other information relating to your use of the website
We may also process personal data that you voluntarily provide to us without specifically being asked to do so.
Please do not provide sensitive personal data through the website unless it is necessary and you have a clear reason for doing so.
2.2 Why do we process your personal data and what is our legal basis?
To respond to enquiries and communicate with you
If you contact us through the website, by email or otherwise, we process relevant personal data to respond to your enquiry and communicate with you.
Categories of personal data:
Name, contact details, company or organisation details, job title and information contained in your message or enquiry.
Legal basis:
Our legitimate interest in communicating with website visitors, prospective customers, partners and other persons who contact Profundus.
To administer and send our newsletter
If you choose to subscribe to our newsletter, we process your personal data to administer your subscription and send you news and information about Profundus, our products, developments and other relevant company information.
Categories of personal data:
Name, email address, subscription preferences and, where applicable, information concerning interaction with our newsletters.
Legal basis:
Your consent. You may withdraw your consent at any time by using the unsubscribe link included in our communications or by contacting us at info@profundus.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To operate, secure and improve our website
We process technical and usage information to operate the website, maintain its security, understand how visitors use it and improve its functionality and content.
Categories of personal data:
IP address, browser and device information, operating system, navigation behaviour and other technical and usage information.
Legal basis:
Where the processing is necessary for the operation and security of the website, our legitimate interest in maintaining a secure and functional website.
Where analytics or other non-essential cookies require consent under applicable law, the relevant processing is based on your consent.
2.3 Cookies and website analytics
Profundus uses cookies and similar technologies on its website.
We use MonsterInsights, a WordPress analytics integration, in connection with website analytics. Depending on the configuration of the service, this may involve the use of Google Analytics and related technologies to help us understand how visitors use our website.
Analytics information may include, for example, information about pages visited, navigation behaviour, approximate geographic location derived from IP address, device and browser information, and similar website usage information.
Non-essential cookies and similar technologies are used only where the necessary consent has been obtained in accordance with applicable law.
You can manage or withdraw your cookie preferences through the cookie consent functionality available on our website, where applicable. You may also configure your browser to block or delete cookies. Please note that blocking certain cookies may affect the functionality of the website.
3. Who may receive your personal data?
Profundus limits access to personal data to persons who need access in order to perform their duties.
We may share personal data with service providers that process personal data on our behalf, including providers of website hosting, website technology, newsletter services and analytics services.
Our current relevant service providers include:
· one.com – website hosting and related infrastructure services
· HubSpot – newsletter management and distribution
· MonsterInsights – website analytics integration
· Google Analytics, where enabled through our website configuration – website analytics
These providers may act as personal data processors or, depending on the particular service and processing activity, may process certain data for their own purposes as independent controllers. Where a provider acts as a processor on our behalf, we take appropriate steps to ensure that the processing is governed by an appropriate data processing agreement and applicable data protection requirements.
We may also disclose personal data where necessary to comply with a legal obligation, protect our legal rights, establish or defend legal claims, or in connection with a corporate transaction involving Profundus.
4. Transfers of personal data outside the EU/EEA
Profundus is not part of a corporate group and does not transfer personal data to affiliated group companies.
However, some of our service providers may process or make personal data accessible from countries outside the EU/EEA. This may, depending on the configuration and services used, include providers such as HubSpot and Google.
Where personal data is transferred outside the EU/EEA, Profundus will ensure that the transfer is carried out in accordance with applicable data protection law. This may include reliance on:
· an adequacy decision adopted by the European Commission;
· the European Commission’s Standard Contractual Clauses; and/or
· other appropriate safeguards and supplementary measures where required.
You may contact us at info@profundus.com if you would like further information regarding the safeguards applicable to a particular international transfer of your personal data.
5. Links to other websites and social media
Our website may contain links to websites or services operated by third parties. We do not control those websites and are not responsible for their privacy practices. We encourage you to review the privacy information applicable to any third-party website you visit.
Our website may also contain links to Profundus’s social media pages, including LinkedIn. Such links direct you to the relevant third-party platform. Profundus does not control the personal data that the social media provider may collect or process once you visit or interact with that platform. The relevant provider’s privacy notice will apply to such processing.
6. How long do we retain your personal data?
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.
Newsletter subscriptions
If you have consented to receive our newsletter, we normally retain the personal data associated with your subscription until you withdraw your consent or unsubscribe.
We may retain limited information after you unsubscribe where necessary to document your withdrawal of consent, maintain appropriate suppression lists or comply with legal obligations.
Enquiries and communications
Where we process personal data based on our legitimate interest in communicating with you, we normally retain the data for no longer than necessary to fulfil the purpose of the communication. Unless a longer retention period is justified by the circumstances, we generally aim not to retain such information for more than two years after our last relevant interaction with you.
Technical and analytics information
Technical and analytics data is retained in accordance with the applicable settings of the relevant technology or analytics provider and our data retention practices. Retention periods may depend on the type of data and the configuration of the service concerned.
We may retain personal data for longer where necessary to comply with legal obligations or establish, exercise or defend legal claims.
Where appropriate, we may anonymise information so that it can no longer be linked to an identifiable individual.
7. How do we protect your personal data?
Profundus takes appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access and other unlawful processing.
Our security measures are designed taking into account the nature of the personal data, the risks associated with the processing and available technology.
Access to personal data is restricted to persons who require access for legitimate business purposes.
8. Your rights
Under the GDPR, you may have the following rights in relation to your personal data.
Right of access
You have the right to request confirmation of whether we process personal data concerning you and, where applicable, to request access to such personal data and certain information about the processing.
Right to rectification
You have the right to request that inaccurate personal data concerning you be corrected and, where appropriate, that incomplete personal data be completed.
Right to erasure
In certain circumstances, you have the right to request that your personal data be erased.
This right is not absolute and may not apply where, for example, we are required or permitted to retain the data under applicable law or need it to establish, exercise or defend legal claims.
Right to restriction of processing
In certain circumstances, you may request that we restrict the processing of your personal data.
Right to object
Where we process personal data based on our legitimate interests, you have the right to object to the processing on grounds relating to your particular situation.
If you object, we will stop the processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.
Right to withdraw consent
Where processing is based on your consent, you have the right to withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Right to data portability
Where applicable, you may have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible, to request that the data be transmitted to another controller.
Right to lodge a complaint
If you believe that our processing of your personal data does not comply with applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.
In Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY).
9. How to exercise your rights
If you wish to exercise any of your rights or have questions regarding how Profundus processes your personal data, please contact us at:
info@profundus.com
Please clearly describe your request and provide sufficient information for us to understand what personal data and processing activity your request concerns.
To protect your privacy and security, we may need to verify your identity before responding to certain requests. Any information collected for identity verification will only be used for that purpose and retained for no longer than necessary.
We will respond to your request without undue delay and in accordance with applicable data protection law.
10. Changes to this Privacy Notice
Profundus may update this Privacy Notice from time to time, for example where our processing activities, website functionality, service providers or legal requirements change.
The latest version will be published on www.profundus.com. We encourage you to review this Privacy Notice periodically.
11. Contact us
If you have questions regarding this Privacy Notice or Profundus’s processing of your personal data, please contact:
Profundus AB Krokslätts Fabriker 30 431 37 Mölndal Sweden
Email: info@profundus.com
Appendix 1 – Website-related service providers
The following service providers are currently relevant to the processing activities described in this Privacy Notice:
|
Service provider |
Service/purpose |
|
one.com |
Website hosting and related infrastructure |
|
HubSpot |
Newsletter management and distribution |
|
MonsterInsights |
Website analytics integration for WordPress |
|
Google / Google Analytics |
Website analytics, where enabled through the MonsterInsights configuration |
This list may be updated from time to time as Profundus changes or adds website-related service providers.