Privacy Policy

01 Who we are & scope

This policy is issued by Fivation AB (org. no. 559232-4908), based in Stockholm, Sweden ("Fivation", "we", "us"). It explains how we handle personal data across the Fivation website and the Asgard platform.

It covers data for which Fivation is the controller — visitors to our website, people who contact us, and account-level data for Asgard. It does not govern the personal data our customers process inside Asgard; for that, Fivation is a processor and our Data Processing Agreement applies (see section 4).

02 The data we collect

You give us

• Contact & enquiry data — your name, email, organisation, and message when you email us or get in touch.
• Account data — the details needed to create and run an Asgard account (e.g. name, work email, organisation, role).

We collect automatically

• Usage & device data — pages and features used, approximate location from IP, browser/device type, and log data, to keep the service secure and improve it.
• Cookies & similar — essential cookies, plus privacy-respecting analytics where you consent (see section 6).

03 How & why we use it

We only use personal data for clear purposes, each with a lawful basis under Article 6 of the GDPR:

We do not sell personal data, and we do not use it for automated decisions that produce legal effects without a lawful basis and appropriate safeguards.

04 Data you put into Asgard

This policy covers data for which Fivation is the controller — the website, enquiries, and Asgard account-level data (e.g. the name and email you sign up with). It does not cover the personal data your organisation puts into Asgard itself (venture content, statutory register data, anything a customer processes on the platform, including special-category data such as health data in clinical/healthcare use). For that, Fivation acts as your processor, not controller — the authoritative, current documents are Asgard's own Privacy Policy and Data Processing Agreement, not this page.

05 Cookies & analytics

We use essential cookies needed to run the site and keep you signed in. With your consent, we also use privacy-respecting analytics to understand how the site and platform are used so we can improve them. You can change your choice at any time through your browser or our cookie controls.

Asgard's own Cookie Policy has the full, current inventory of what's actually set and why.

06 Who we share data with

We share personal data only with:

• Sub-processors — vetted providers who help us run the website and Asgard account infrastructure (hosting, email, monitoring), each under GDPR-compliant terms. Asgard's own, currently-maintained sub-processor list is on its Sub-processors page.
• Professional advisers & authorities — where we are legally required to, or to establish or defend legal claims.

We never sell personal data or share it for third-party advertising.

07 International transfers

We store and process personal data within the EU/EEA. If a transfer outside the EEA is ever necessary, we rely on an appropriate safeguard such as the European Commission's Standard Contractual Clauses, together with any additional measures required.

08 How long we keep data

We keep personal data only as long as needed for the purpose it was collected, or as required by law. Enquiry data is kept for the duration of our correspondence and a reasonable period after; Asgard account data is retained per your settings and deleted or returned on termination unless law requires otherwise.

09 Your rights

Under the GDPR you can:

• Access a copy of your personal data;
• Rectify data that is inaccurate or incomplete;
• Erase data ("right to be forgotten") in certain cases;
• Restrict or object to certain processing;
• Port your data to another provider;
• Withdraw consent at any time, where we rely on it.

To exercise a right, contact us (section 13). You also have the right to lodge a complaint with your supervisory authority — in Sweden, the Swedish Authority for Privacy Protection (IMY, imy.se).

10 How we protect data

We apply appropriate technical and organisational measures, including encryption in transit and at rest, least-privilege access controls, logging, and a documented incident-response process. No system is perfectly secure, but we work to protect your data and to notify you of any breach without undue delay where the GDPR requires.

11 Children

Our website and Asgard are intended for professional and organisational use and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12 Changes to this policy

We may update this policy as our services and the law evolve. We will revise the "last updated" date above and, for material changes, provide a more prominent notice. Please review it periodically.

13 How to contact us

For any privacy question, or to exercise your rights, contact our data protection point of contact:

• Email — farhad@fivation.com