Privacy policy

It is important to us at Ecogain that you feel safe with how we handle your personal data. We take your privacy into account when we collect personal information, and we process the data in accordance with applicable data protection regulations and our internal policies and procedures. This privacy policy describes how we collect and process your personal data.

Do you have questions about how we process your personal data and data protection? Contact us at

What is personal data and what does processing personal data mean?

Personal data is any kind of information that can be directly or indirectly linked to a living natural person. For example, images and sound recordings can be personal data, even if no names are mentioned. Encrypted data and various electronic identities, such as IP addresses, are also personal data if they can be linked to natural persons.

By processing, we mean everything that happens to personal data, such as how we collect, record, store, process and disseminate personal data.

What personal data do we collect and why?

The personal data we collect depends on the relationship you, or your company, has with Ecogain. Below you can read more about what applies, depending on whether you are an individual, customer, sub-consultant or supplier. 

Private individuals

When you contact us, register for training and other activities, use our digital channels or subscribe to our newsletter, we may process the following data:

  • Personal and contact information: name, social security number, email address and phone number and other relevant information.

The purpose is to follow up on requests received and to communicate relevant information about Ecogain with you. Before we start processing your personal data, we will - where required - obtain your consent.

Clients and missions

For potential and existing customers, we may process:

  • Business card data, i.e. name, phone number, email address and address
  • Billing information.

For sub-consultants, we may process

  • Contact details
  • CV-related information 
  • Company-specific information.

The purpose of processing information about potential customers is to enable us to develop new business opportunities. The processing is necessary in order to develop cooperation with you as a customer. We process customers' personal data in order to be able to establish complete contracts. This processing is necessary for us to be able to fulfill our contractual obligations to you as a customer. The purpose of collecting personal data of sub-consultants is to ensure that the right resources are linked to the appropriate assignment or project. For this type of processing, we will obtain your consent before we start the processing.


For suppliers, we may process:

  • contact details such as name, phone number, email address and organization number.

We process suppliers' personal data to enable us to process orders and purchases. The processing is necessary to fulfill purchase agreements.

Who might we share information with?

In order for us to fulfill our commitments, your personal data may be shared with and transferred to our partners such as Raq's SEO agency. By establishing a data processing agreement, we ensure that your information is safe and that the processing of your personal data takes place in accordance with the current Data Protection Regulation.

Where do we process your personal data?

As your security is important to us, we always aim for your data to be processed within the EU/EEA.

We will not keep your data longer than necessary

Your data will not be kept by us for longer than necessary, i.e. to fulfill the purposes for which the data was initially collected. Please note that the retention period may vary depending on any statutory retention period. In other words, some information may be stored for longer.

What are your rights?

You have the right to:

  • access your personal data - you can, free of charge once per calendar year, request a copy of the data you would like and verify the information we hold about you
  • obtain rectification of inaccurate or incomplete personal data
  • in certain cases, have your data deleted, for example if your personal data is no longer necessary for the purposes for which it was collected
  • restrict the processing of your personal data in certain cases
  • in certain cases, obtain and transfer personal data to another controller (data portability).

You have the right to withdraw consent

We keep personal data for marketing purposes for as long as you consent to us sending you marketing (newsletters). You can withdraw your consent at any time by sending an email to

How we work to protect your data

We have taken a number of measures to protect your personal data and we are actively working on privacy issues, developing our IT environment and training our staff.

We use cookies

We use cookies to improve your user experience with us.