(A) Privacy
Your data. Clearly explained.
Vesteros Consulting respects your privacy. This notice explains what personal data we may process when you visit our website, contact us or enquire about our services, why we process it, how long we keep it and what rights you have.
01
Who is responsible for your data?
OmsorgSync Nordic AB, trading as Vesteros Consulting, is the data controller for personal data processed through this website and in connection with enquiries about Vesteros Consulting.
- Company
- OmsorgSync Nordic AB
- Trading name
- Vesteros Consulting
- Organisation number
- 559566-8376
- Location
- 722 26 Västerås, Sweden
- Privacy email
- help@vesterosconsulting.com
02
When do we process personal data?
We may process personal data when you:
- contact us through the website
- book or request a discovery session
- contact us by email or another communication channel
- become or enquire about becoming a client
- interact with our website
- provide information to us during a business conversation, workshop or prospective engagement.
03
What information may we collect?
Contact and enquiry information may include:
- name
- email address
- company or organisation
- role or job title
- phone number, if provided
- information included in your message or enquiry
- information you voluntarily provide during conversations with us
Website information may include, depending on the technologies actually used:
- IP address
- browser and device type
- language
- referring page
- pages visited
- date and time of visits
- basic technical and security logs
We do not currently use analytics, advertising or behavioural tracking tools on this website. If we introduce them, this notice and our cookie declaration will be updated first and consent will be requested where required.
04
Why do we process your data?
| Purpose | Examples | Legal basis |
|---|---|---|
| Responding to enquiries | Replying to messages, discovery-session requests and service enquiries | Legitimate interests and/or steps requested before entering into a contract |
| Providing services | Managing client communication and delivering agreed consulting work | Performance of contract |
| Business administration | Invoices, accounting, contracts and legally required records | Legal obligation and performance of contract |
| Improving our website and services | Understanding website performance and usage where analytics are enabled | Consent for non-essential analytics cookies |
| Website security | Preventing abuse, spam and malicious activity | Legitimate interests |
| Marketing communication | Only where applicable and legally permitted | Consent or legitimate interests depending on the communication and applicable law |
We do not currently send newsletters or run automated marketing.
05
Contact forms
When you submit our contact form, we process the information you provide so that we can respond to your enquiry. Please do not include sensitive personal information in your message unless it is necessary.
Form submissions are not stored in a database. They are validated on our website server, sent to us as an email notification and stored in our email inbox, and a confirmation email is sent to the address you provided. A limited technical log, including your IP address, is used briefly to prevent spam and abuse.
06
How long do we keep personal data?
We retain personal data only for as long as it is reasonably necessary for the purpose for which it was collected, or for longer where required by law.
General enquiries that do not result in a business relationship are normally deleted when they are no longer needed for follow-up.
Client, contract, invoice and accounting information may need to be retained for longer periods where Swedish law requires this.
Consent records may be retained for as long as necessary to demonstrate the consent choice made.
07
Service providers and data processors
We may use trusted service providers to operate our website, host data, manage communications and deliver technical functionality. These providers may process personal data on our behalf only where necessary for the relevant service.
| Provider | Purpose | Type of data | Processing location | More information |
|---|---|---|---|---|
| Lovable | Website platform and hosting | Technical and security log data, including IP address | EU and USA | lovable.dev |
| Cloudflare | Content delivery, website delivery and security | Technical and security log data, including IP address | Global edge network, including EU and USA | cloudflare.com |
| Resend | Delivery of contact-form notification and confirmation emails | Name, email address, company and message content | EU and USA | resend.com |
| Google Fonts | Web fonts used for the website's typography | IP address and browser information when fonts are requested | EU and USA | fonts.google.com |
08
Transfers outside the EU/EEA
If a service provider processes personal data outside the EU/EEA, we take appropriate steps to ensure that the transfer is made in accordance with applicable data-protection law. This may include relying on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.
09
Your GDPR rights
Depending on the circumstances, you may have the right to:
- Access: request information about personal data we process about you.
- Rectification: have inaccurate or incomplete information corrected.
- Erasure: request deletion of your personal data in certain circumstances.
- Restriction: request that processing is restricted in certain circumstances.
- Portability: receive certain data you provided in a structured, commonly used format.
- Object: object to processing based on legitimate interests.
- Withdraw consent: withdraw consent at any time where processing is based on consent.
Some rights are subject to legal conditions and exceptions. To exercise a right, contact us at help@vesterosconsulting.com.
10
Complaints
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).
11
Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, loss or misuse. No internet service can, however, guarantee absolute security.
12
Cookies and similar technologies
Cookies are small pieces of information stored by your browser or device when you visit a website. Some cookies are necessary for the website to function. Others may be used for preferences, analytics or marketing and require your consent where applicable.
- Necessary
- Required for core website functionality, security, consent management and similar essential functions. These cannot be switched off where they are necessary for the website to operate.
- Preferences
- Used to remember optional choices such as language or display preferences.
- Analytics
- Used to understand how visitors interact with the website and help us improve it. These are only activated after consent where required.
- Marketing
- Used to measure campaigns or provide personalised advertising. These are only activated after explicit consent where required.
13
Cookie declaration
This website uses necessary technologies and, with your consent, optional analytics and campaign measurement. LinkedIn Insight Tag is loaded only when you allow marketing technologies in the cookie settings.
| Cookie / technology | Provider | Purpose | Category | Expiry | First or third party |
|---|---|---|---|---|---|
| vesteros-cookie-consent (local storage) | Vesteros Consulting | Stores your cookie choices so we do not ask again | Necessary | Until you clear it in your browser | First party |
| vesteros-lang (local storage) | Vesteros Consulting | Remembers whether you read our legal pages in English or Swedish | Preferences | Until you clear it in your browser | First party |
| LinkedIn Insight Tag | LinkedIn Ireland Unlimited Company | Measures campaign performance and website visits associated with LinkedIn | Marketing | According to LinkedIn's applicable retention periods | Third party |
14
Changing your cookie choices
You can change or withdraw your cookie choices at any time by selecting in the footer.
15
Changes to this notice
We may update this Privacy & Cookies Notice when our services, website or legal obligations change. The latest version will always be available on this page.
Last updated: 10 September 2026
