Privacy Policy

1. Data controller

The controller responsible for the processing described here is:

• EduFuture Europe AB (trading as EduConvert)
• Reg. no. (organisationsnummer) 559481-6349 · VAT no. SE559481634901
• c/o EduFuture Europe AB, Envägen 17, 822 31 Alfta, Sweden
• Privacy contact: ingmar.bertram@educonvert.com · Phone: +46 76 327 0023

2. Personal data we collect

We only collect data you actively provide, plus the minimum technical data needed to run the site securely.

• Demo requests: your name, work email address, organisation, any message you write, and the browser user agent string sent with the request.
• AI-Readiness Assessment: your name, work email address, organisation, role (optional), any message, your answers to the assessment questions, and the resulting score and readiness tier.
• Direct contact: the content of emails or calls you send to us, including the address or number you contact us from.
• Technical data: server log data such as IP address, requested URL, timestamp and user agent, generated automatically when a page is served, plus records of pages that could not be found (404 logging) so we can repair broken links.

3. Purposes and legal bases

We process your data for the following purposes and on the following legal bases under Article 6(1) GDPR:

• To respond to your demo request and arrange a demo — steps taken at your request prior to entering into a contract, Art. 6(1)(b).
• To calculate your assessment result and give you access to the accompanying whitepaper — steps taken at your request, Art. 6(1)(b).
• To follow up with relevant information about EduConvert after you contacted us — our legitimate interest in direct B2B marketing to an existing enquiry, Art. 6(1)(f). You can object to this at any time.
• To operate, secure and improve the website, prevent abuse and fix broken links — our legitimate interest in a functioning and secure service, Art. 6(1)(f).
• To comply with accounting and other statutory obligations where applicable — Art. 6(1)(c).

4. Providing your data

Providing your data is voluntary. However, the fields marked as required in the demo and assessment forms are necessary for us to contact you or return your result — without them we cannot process your request.

5. Recipients and processors

Your data is accessible to authorised staff of EduFuture Europe AB who need it to handle your request. We also use carefully selected service providers who process data on our behalf under a data processing agreement pursuant to Article 28 GDPR:

• Our website hosting and application platform provider, which serves the site and runs the backend.
• Our managed database and authentication provider, which stores form submissions and assessment results.
• Our email and office software provider, used for correspondence with you.
• Google Ireland Limited, which provides Google Analytics 4 — only where you have consented to analytics (see section 8).

6. Transfers outside the EU/EEA

Personal data collected through this website is stored and processed within the EU/EEA. We do not routinely transfer it to third countries. Should a transfer become necessary in future, it will only take place on the basis of an adequacy decision or appropriate safeguards under Chapter V GDPR, such as the European Commission's Standard Contractual Clauses, and we will update this policy accordingly.

7. Retention

We do not keep personal data longer than necessary for the purposes above.

• Demo requests and assessment leads, including assessment answers and scores: 24 months from our last contact with you, unless a customer relationship begins, in which case the data is kept for the duration of that relationship.
• Correspondence: 24 months from the last message, unless it forms part of a contract or must be kept for accounting purposes.
• Server and error logs: normally up to 12 months.
• Accounting records: 7 years, as required by the Swedish Accounting Act (bokföringslagen 1999:1078).
• Data is deleted earlier if you ask us to and we have no overriding legal ground to keep it.

8. Cookies and local storage

We use strictly necessary local storage in your browser to remember your language choice, your cookie choice, and your progress in the assessment form, and — where you sign in to the admin area — a session cookie required for authentication. Under Chapter 9, Section 28 of the Swedish Electronic Communications Act (lag (2022:482) om elektronisk kommunikation), storage of this kind does not require consent.

In addition, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, to understand how visitors find and use this site — for example which pages are viewed, which language is chosen, and how many visitors request a demo. Google Analytics sets cookies (typically _ga and _ga_*) and processes an abbreviated IP address, device and browser information, and the pages you view.

Cookies are grouped into two categories: "Necessary" (always active, no consent required) and "Analytics" (optional, off by default). You can accept all, reject everything non-essential, or set the analytics category individually in the preference centre of the cookie banner.

Google Analytics is only loaded after you accept it in the cookie banner. The legal basis is your consent under Article 6(1)(a) GDPR and Chapter 9, Section 28 of the Swedish Electronic Communications Act. If you decline, no analytics script is loaded and no analytics cookie is set.

You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer of this page; we then stop the tracking and delete the analytics cookies from your browser. You can also block cookies in your browser settings or install Google's opt-out browser add-on.

We do not use Google Analytics for advertising, remarketing or cross-site profiling, and we have not linked it to Google Ads or Google Signals. Analytics data is retained by Google for 14 months.

9. Automated decision-making

The AI-Readiness Assessment calculates a score from the answers you give and places you in a readiness tier. This is a simple scoring of your own input used to select which guidance to show you. It produces no legal effects and no similarly significant effects for you, and therefore does not constitute automated decision-making within the meaning of Article 22 GDPR.

10. Your rights

Under the GDPR you have the right to:

• Access — obtain confirmation of whether we process your data and receive a copy of it (Art. 15).
• Rectification — have inaccurate or incomplete data corrected (Art. 16).
• Erasure — have your data deleted where the conditions are met (Art. 17).
• Restriction — have processing restricted in certain circumstances (Art. 18).
• Data portability — receive data you provided in a structured, machine-readable format (Art. 20).
• Object — object at any time to processing based on our legitimate interests, including direct marketing, after which we will stop unless we can show compelling legitimate grounds (Art. 21).
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing (Art. 7(3)).

11. How to exercise your rights

Write to ingmar.bertram@educonvert.com or to the postal address in section 1. We respond within one month of receiving your request, as required by Article 12(3) GDPR. We may ask for information to verify your identity before acting.

12. Complaints

If you believe we process your data unlawfully, you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, Sweden — imy@imy.se, +46 8 657 61 00, imy.se. You may also complain to the supervisory authority in your country of residence or workplace.

13. Security

We apply appropriate technical and organisational measures under Article 32 GDPR, including encrypted transport (HTTPS), access control and role-based restrictions on the admin area, and storage of form submissions in a database with row-level access rules.

14. Changes to this policy

We may update this policy as our services or legal obligations change. The current version is always available on this page, with the date of the latest revision shown at the top.