(A) Privacy

Your data. Clearly explained.

Vesteros Consulting respects your privacy. This notice explains what personal data we may process when you visit our website, contact us or enquire about our services, why we process it, how long we keep it and what rights you have.

01

Who is responsible for your data?

OmsorgSync Nordic AB, trading as Vesteros Consulting, is the data controller for personal data processed through this website and in connection with enquiries about Vesteros Consulting.

Company
OmsorgSync Nordic AB
Trading name
Vesteros Consulting
Organisation number
559566-8376
Location
722 26 Västerås, Sweden
Privacy email
help@vesterosconsulting.com

02

When do we process personal data?

We may process personal data when you:

  • contact us through the website
  • book or request a discovery session
  • contact us by email or another communication channel
  • become or enquire about becoming a client
  • interact with our website
  • provide information to us during a business conversation, workshop or prospective engagement.

03

What information may we collect?

Contact and enquiry information may include:

  • name
  • email address
  • company or organisation
  • role or job title
  • phone number, if provided
  • information included in your message or enquiry
  • information you voluntarily provide during conversations with us

Website information may include, depending on the technologies actually used:

  • IP address
  • browser and device type
  • language
  • referring page
  • pages visited
  • date and time of visits
  • basic technical and security logs

We do not currently use analytics, advertising or behavioural tracking tools on this website. If we introduce them, this notice and our cookie declaration will be updated first and consent will be requested where required.

04

Why do we process your data?

PurposeExamplesLegal basis
Responding to enquiriesReplying to messages, discovery-session requests and service enquiriesLegitimate interests and/or steps requested before entering into a contract
Providing servicesManaging client communication and delivering agreed consulting workPerformance of contract
Business administrationInvoices, accounting, contracts and legally required recordsLegal obligation and performance of contract
Improving our website and servicesUnderstanding website performance and usage where analytics are enabledConsent for non-essential analytics cookies
Website securityPreventing abuse, spam and malicious activityLegitimate interests
Marketing communicationOnly where applicable and legally permittedConsent or legitimate interests depending on the communication and applicable law

We do not currently send newsletters or run automated marketing.

05

Contact forms

When you submit our contact form, we process the information you provide so that we can respond to your enquiry. Please do not include sensitive personal information in your message unless it is necessary.

Form submissions are not stored in a database. They are validated on our website server, sent to us as an email notification and stored in our email inbox, and a confirmation email is sent to the address you provided. A limited technical log, including your IP address, is used briefly to prevent spam and abuse.

06

How long do we keep personal data?

We retain personal data only for as long as it is reasonably necessary for the purpose for which it was collected, or for longer where required by law.

General enquiries that do not result in a business relationship are normally deleted when they are no longer needed for follow-up.

Client, contract, invoice and accounting information may need to be retained for longer periods where Swedish law requires this.

Consent records may be retained for as long as necessary to demonstrate the consent choice made.

07

Service providers and data processors

We may use trusted service providers to operate our website, host data, manage communications and deliver technical functionality. These providers may process personal data on our behalf only where necessary for the relevant service.

ProviderPurposeType of dataProcessing locationMore information
LovableWebsite platform and hostingTechnical and security log data, including IP addressEU and USAlovable.dev
CloudflareContent delivery, website delivery and securityTechnical and security log data, including IP addressGlobal edge network, including EU and USAcloudflare.com
ResendDelivery of contact-form notification and confirmation emailsName, email address, company and message contentEU and USAresend.com
Google FontsWeb fonts used for the website's typographyIP address and browser information when fonts are requestedEU and USAfonts.google.com

08

Transfers outside the EU/EEA

If a service provider processes personal data outside the EU/EEA, we take appropriate steps to ensure that the transfer is made in accordance with applicable data-protection law. This may include relying on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

09

Your GDPR rights

Depending on the circumstances, you may have the right to:

  • Access: request information about personal data we process about you.
  • Rectification: have inaccurate or incomplete information corrected.
  • Erasure: request deletion of your personal data in certain circumstances.
  • Restriction: request that processing is restricted in certain circumstances.
  • Portability: receive certain data you provided in a structured, commonly used format.
  • Object: object to processing based on legitimate interests.
  • Withdraw consent: withdraw consent at any time where processing is based on consent.

Some rights are subject to legal conditions and exceptions. To exercise a right, contact us at help@vesterosconsulting.com.

10

Complaints

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).

Visit IMY

11

Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, loss or misuse. No internet service can, however, guarantee absolute security.

12

Cookies and similar technologies

Cookies are small pieces of information stored by your browser or device when you visit a website. Some cookies are necessary for the website to function. Others may be used for preferences, analytics or marketing and require your consent where applicable.

Necessary
Required for core website functionality, security, consent management and similar essential functions. These cannot be switched off where they are necessary for the website to operate.
Preferences
Used to remember optional choices such as language or display preferences.
Analytics
Used to understand how visitors interact with the website and help us improve it. These are only activated after consent where required.
Marketing
Used to measure campaigns or provide personalised advertising. These are only activated after explicit consent where required.

13

Cookie declaration

This website uses necessary technologies and, with your consent, optional analytics and campaign measurement. LinkedIn Insight Tag is loaded only when you allow marketing technologies in the cookie settings.

Cookie / technologyProviderPurposeCategoryExpiryFirst or third party
vesteros-cookie-consent (local storage)Vesteros ConsultingStores your cookie choices so we do not ask againNecessaryUntil you clear it in your browserFirst party
vesteros-lang (local storage)Vesteros ConsultingRemembers whether you read our legal pages in English or SwedishPreferencesUntil you clear it in your browserFirst party
LinkedIn Insight TagLinkedIn Ireland Unlimited CompanyMeasures campaign performance and website visits associated with LinkedInMarketingAccording to LinkedIn's applicable retention periodsThird party

14

Changing your cookie choices

You can change or withdraw your cookie choices at any time by selecting in the footer.

15

Changes to this notice

We may update this Privacy & Cookies Notice when our services, website or legal obligations change. The latest version will always be available on this page.

Last updated: 10 September 2026