Privacy Policy

What data do we store?

The data stored consists of the fields contained in each respective form. We retain the data for as long as is necessary for the purposes of the processing. We base the collection of personal data on consent.

Purpose of collection?

We collect data to establish contact, initiate, and/or maintain a business relationship. Contact details may be used to send out newsletters.

Access, modify, or delete stored information

You have the right to request information about the personal data we have stored about you up to once per year. To do this, please contact the Data Controller. You also have the right to request the correction or deletion of your personal data at any time.

Consent

You have the right to withdraw your consent for the use of your personal data at any time by contacting the Data Controller. If you believe that we have handled your personal data in a manner inconsistent with our stated directives, you have the right to lodge a complaint with a supervisory authority.

Contact information for the Data Controller

Avara Insights AB

Company reg. no: 559367-9979

Drottninggatan 38

411 07 Gothenburg

Phone +46 76 209 95 08

hi@avarainsights.com

‍

Privacy Policy

Avara Insights AB, company registration number 559367-9979 (”Avara”), provides research-based surveys and consulting for quality assurance and business development for our clients. As part of our operations, we process personal data. Avara is committed to protecting the privacy of everyone we interact with. All processing is carried out in accordance with this policy and the requirements set out in the General Data Protection Regulation (GDPR). 

If you have any questions regarding Avara's processing of personal data, please contact us at hi@avarainsights.com. 

‍

1. Data Controller

Avara Insights AB can act as both a data controller and a data processor in our operations. Simply put, the difference between these roles depends on situations where we process personal data on our own behalf, in which case we are the data controller, and on behalf of others, in which case we are the data processor. You can find more about this distinction below in the descriptions of each type of personal data processing we carry out within our operations. 

‍

2. Description of our personal data processing 

Our processing differs to some extent between our various business areas. Below you can read about the processing we perform specifically for each area, consisting of its respective purposes and the legal grounds we base it on, types of data, and the duration of the processing. 

2.1 Conducting industry studies 

2.1.1 What personal data processing do we perform? 

Avara conducts quality and industry studies within the consulting sector, focusing on the consulting firms' clients' views on the relationship, including analyses of the market for purchasing consulting services. To investigate clients' views on the consulting industry, Avara contacts individuals who purchase consulting services. In this regard, Avara is the data controller for the processing, and the purpose is to conduct client and industry studies. 

To analyze clients' views on their relationships with their consulting firms, Avara receives lists from the consulting firms containing client names and contact persons for each client. The processing that Avara performs regarding this personal data is carried out on behalf of the consulting firms, which means that Avara acts as a data processor for the consulting firms, who are the data controllers. 

The purpose of the processing is to conduct quality studies regarding the consulting firms. The processing consists of contacting respondents (i.e., the consulting firms' clients) and asking them to answer questions via a survey accessed through an individualized link, as well as through telephone interviews. The results are later compiled as a basis for producing Avara's analyses. The consulting firms do not have access to results attributable to individual clients. The personal data processed may consist of: name, job title at a specific company, work email address, telephone number, and individualized links for survey responses. 

For us at Avara to offer our services to consulting firms, we process personal data belonging to contact persons at these firms; this applies both to consulting firms with whom we already have a customer relationship and to prospective customers. Regarding data from customers, it is used for the purpose of maintaining the customer relationship. We collect data regarding prospective customers from open sources, and the purpose is to market Avara's services. The personal data processed may consist of: name, job title at a specific company, work email address, telephone number, and invoice references. 

2.1.2 What legal grounds do we base our processing on? 

Regarding industry studies, Avara bases the processing on a balancing of interests. In this regard, Avara notes that we have a legitimate interest in analyzing trends for the consulting industries in which our customers operate. Avara assesses that the data subject's interests or fundamental rights and freedoms do not outweigh this legitimate interest. In this context, Avara particularly notes that all registered individuals have contact details published in open sources and that these are B2B relationships. 

When it comes to analyzing the consulting firms' clients' views on their relationships with their consulting firms, the processing of personal data is carried out on behalf of the consulting firms, which means that the consulting firms are the data controllers for this processing. The consulting firms have obtained consent from their clients for the purpose of Avara conducting an analysis of the customer relationship and subsequently storing the responses for a period of one year for backup purposes. 

Regarding Avara's processing of personal data belonging to contact persons at consulting firms that are our customers, this processing must take place to maintain necessary contact with the customer, for example regarding invoicing. In this regard, we base our processing on the fact that it is necessary to fulfill our customer agreements. Additionally, certain data, particularly billing material that constitutes accounting information, may be stored to comply with the legal obligations incumbent upon Avara. 

For the processing of contact details from consulting firms that we identify as prospective customers, we base this processing on a balancing of interests. In this regard, Avara has determined that we have a legitimate interest in conducting marketing. Avara assesses that the data subject's interests or fundamental rights and freedoms do not outweigh this legitimate interest. In this context, Avara particularly notes that all registered individuals have contact details published in open sources and that these are B2B relationships. 

2.1.3 Who are the recipients of the personal data? 

Avara does not sell any personal data to third parties. However, some data may be stored by our IT providers, who supply platforms for survey management, CRM systems, email management, and system backups. Additionally, telephone interviews may be conducted with the help of a partner, based on data provided to them and subsequently returned to Avara. All recipients are covered by data processing agreements to ensure that your data is handled correctly and securely. 

2.1.4 Storage periods 

Contact details for respondents are deleted after Avara has collected the responses required for each survey. Contact details and other information that may appear in survey responses are stored for one year; this applies to both responses from the consulting firms' clients and responses in industry studies. Personal data regarding customers is stored for the entire duration of the customer relationship and ceases only thereafter. Contact details for prospective customers are stored until contact is established (which occurs within one month), and processing ceases if there is no interest in Avara's services. 

However, the data may continue to be processed for marketing purposes, such as email newsletters and event invitations. This processing continues until you object (which can be done at any point of contact with Avara), and our deletion procedures ensure that only current information about prospective customers is stored. All of our email newsletters include an option to opt out of further processing. Data stored due to legal obligations is kept for as long as necessary to fulfill the legal obligation in question.  

‍

2.2 Conducting customer surveys and in-depth interviews

2.2.1 What personal data processing do we carry out? 

Avara conducts customer surveys and in-depth interviews within the consulting industry (“Customer Surveys”) with a focus on the consulting firms' clients' views on the relationship. To examine the clients' views on the consulting firms, Avara contacts individuals who purchase consulting services. In this capacity, Avara is the data controller for the processing, and the purpose is to conduct Customer Surveys. 

To analyze clients' views on their relationships with their consulting firms, Avara receives lists from the consulting firms containing client names and contact persons for each client. The processing that Avara performs regarding this personal data is done on behalf of the consulting firms, which means that Avara acts as a data processor for the consulting firms, who are the data controllers. 

The purpose of the processing is to conduct Customer Surveys regarding the consulting firms. The processing consists of contacting respondents (i.e., the consulting firms' clients) and asking them to answer questions via a survey, telephone, or similar. The results are subsequently compiled as a basis for producing Avara's analyses. The personal data processed may consist of: name, job title at a specific company, work email address, telephone number, and individualized responses. 

In order for us at Avara to offer our services to consulting firms, we process personal data belonging to contact persons at those firms. Regarding data from customers, it is used for the purpose of maintaining the customer relationship.

2.2.2 What legal grounds do we base our processing on? 

Regarding Customer Surveys, Avara bases the processing on a legitimate interest assessment. In this regard, Avara notes that we have a legitimate interest in analyzing trends for the consulting firms we work with. Avara assesses that the data subject's interests or fundamental rights and freedoms do not override this legitimate interest. 

When analyzing the consulting firms' clients' views on their relationships with their consulting firms, the processing of personal data is performed on behalf of the consulting firms, which means the consulting firms are the data controllers for this processing. The consulting firms have obtained consent from their clients for Avara to analyze the customer relationship and subsequently store the responses for a period of one year for backup purposes. 

Regarding Avara's processing of personal data belonging to contact persons at consulting firms that are our customers, this processing is necessary to maintain essential contact with the customer, for example regarding invoicing. We therefore base our processing on the fact that it is necessary to fulfill our customer agreements. Furthermore, certain data, particularly billing material that constitutes accounting information, may be stored to comply with the legal obligations incumbent upon Avara. 

For the processing of contact details from consulting firms that we identify as prospective customers, we rely on a legitimate interest assessment. In this regard, Avara has determined that we have a legitimate interest in conducting marketing. Avara assesses that the data subject's interests or fundamental rights and freedoms do not override this legitimate interest. In this context, Avara specifically notes that all registered individuals have contact details published in open sources and that these are B2B relationships. 

2.2.3 Who are the recipients of the personal data?

Avara does not sell any personal data to third parties. However, some data may be stored by our IT providers, who supply platforms for survey management, CRM systems, email management, and system backups. Additionally, telephone interviews may be conducted with the help of a partner, based on data provided to them and subsequently returned to Avara. All recipients are covered by data processing agreements to ensure that your data is handled correctly and securely. 

2.2.4 Retention periods

Contact details for respondents are deleted once Avara has collected the responses required for each survey. Contact details and other information that may appear in responses are stored for one year; this applies to responses from the consulting firms' clients. Personal data regarding customers is stored for the duration of the customer relationship and ceases thereafter. Contact details for prospective customers are stored until contact is established (which occurs within one month), and processing ceases if there is no interest in Avara's services. 

However, data may continue to be processed for marketing purposes, such as email newsletters and event invitations. This processing continues until you object (which can be done at any point of contact with Avara), and data cleansing procedures ensure that only current information is stored for prospective customers. All of our email newsletters include an option to opt out of further processing. Data stored due to legal obligations is kept only for as long as is necessary to fulfill the specific legal requirement. 

‍

2.3 The Goodfeed platform

2.3.1 Third-party use of your data

When you use the Goodfeed platform, personal data about you is processed within the service. The personal data comes from you (contact details and your opinions), your employer (name, contact details, role, and project), or your contractor (name, contact details, company, and project). In the vast majority of cases, your employer/contractor is the data controller for the processing that takes place. Please contact them if you want to know more about how they process your personal data in connection with the service.

2.3.2 Goodfeed's use of your data

In connection with your use of the service, Avara may also process the personal data collected through the service in its capacity as a data controller. For our own purposes, we process your data if it is necessary for us to administer the service, including invoicing (e.g., if you represent the company that is our customer). In such cases, we process your name and your contact details as well as any correspondence between us. The data is collected from you or your employer. This is carried out based on our legitimate interest.

We may also use information about you as a company representative for marketing purposes, with the aim of informing you about our service. In such cases, we process your name, contact details, and any correspondence. This is collected from you or from public sources. This is also carried out based on our legitimate interest.

We only process anonymous or statistical data. To the extent that the data is not anonymous, we will anonymize it before using it. We process the data to evaluate, develop, and improve the service. Anonymization of the data is carried out based on our legitimate interest.

If you would like to know more about how we have balanced our interests against yours, please contact us.

Your data may be shared with our subcontractors, primarily platform providers and other suppliers who assist us with analysis, development, and invoicing. We will only process your personal data within the EU/EEA.

You have the right to access the personal data we process about you, and you can also have incorrect data corrected. In certain cases, you also have the right to have data deleted. If you do not agree with our processing, you can object to it, and you can ask us to restrict our processing while we investigate whether you are entitled to any of the above. Since, in the vast majority of cases, we only hold anonymous data about you in our capacity as a data controller, you will in most cases not be able to exercise any of these rights (because we cannot identify you). In some cases, you may instead turn to your employer/contractor and ask to exercise your rights (in relation to processing where they are the data controller).

If you wish to exercise your rights or learn more about how we process your personal data as a data controller, please contact us at:

hi@avarainsights.com

You also have the right to lodge a complaint with the supervisory authority where you live, work, or where you believe a breach has occurred. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (IMY).

‍

2.4 Conducting events and email newsletters aimed at our customers and prospective customers

2.4.1 What personal data processing do we carry out?

Avara conducts various events, such as seminars, workshops, award ceremonies, and more, aimed at our customers and prospective customers. The purposes of the processing are to hold events to engage in dialogue with the industry, highlight specific events, market our services, and similar activities. Furthermore, the events must be planned, and photographs from them may in some cases be used for marketing purposes. Avara also sends out email newsletters regarding our business for marketing purposes. The email addresses are partly sourced from our customer lists, but also from lists of prospective customers where we have personally found the information among open sources, as well as email addresses saved from when someone has visited our events. There is always an opportunity, which is stated in every email newsletter, to object to continued processing, upon which the email newsletters will automatically cease immediately and the personal data in question will be deleted from our CRM system, meaning it will no longer be processed for marketing purposes. 

2.4.2 What legal grounds do we base the processing on?

To carry out Avara's various events, it facilitates our work if we have names and contact details to plan and administer the events. We base this processing on a balancing of interests, where the aforementioned constitutes a legitimate interest for Avara that does not outweigh the interests of the registered individuals. In this context, Avara particularly points out that all registered individuals have expressed a desire to attend the events. 

Regarding photography at our events, this is done to a limited extent, and in cases where faces are visible, it only occurs with the knowledge of the person being photographed. Avara bases the processing of photographs on a balancing of interests, where we assess that the registered individual's interests or fundamental rights and freedoms do not outweigh Avara's legitimate interest in marketing. Avara determines that the registered individual's interests or fundamental rights and freedoms do not outweigh this legitimate interest. In this regard, Avara particularly notes that there is always an opportunity to decline being photographed and that the contexts in which the images may appear are not of a sensitive nature, but rather various forms of industry-related settings. Furthermore, this also concerns B2B relationships. 

Regarding the processing carried out for our email newsletters, we base this on a balancing of interests. In this regard, Avara assesses that we have a legitimate interest in conducting marketing. Avara determines that this legitimate interest outweighs the potential intrusion into the registered individuals' right to privacy that may arise from this processing. In this context, Avara particularly notes that it is always easy to opt out of further mailings, at which point the data is deleted regarding continued processing for marketing purposes. Furthermore, this involves B2B processing, and all registered individuals are active within the business areas in which Avara operates. 

2.4.3 Who are the recipients of the personal data?

Avara does not sell any personal data to third parties. However, some data may be stored with our IT providers who supply CRM systems, email management, and system backups. All recipients are covered by data processing agreements to ensure that your data is handled in a correct and secure manner. 

2.4.4 Retention periods 

Contact details are stored in our CRM system until further processing is objected to. In all of our email communications, there is an option to opt out of further processing. 

‍

3. Your rights as a data subject

If your personal data is processed by Avara, you are guaranteed certain rights, which we describe below. 

‍

3.1 Right to request access to your stored personal data

As a data subject, you have the right to request access to your stored personal data free of charge. However, if requests are made repeatedly, Avara is entitled to charge a reasonable fee to cover the administrative costs of your request. Requests should preferably be made in writing and sent to us by mail to Avara Insights AB, Drottninggatan 38, 411 07 Gothenburg. Avara reserves the right to take measures to verify the identity of anyone requesting such information. 

‍

3.2 Other rights 

As a data subject, you have the right to request the correction of incorrect or incomplete personal data and to request the transfer of your personal data (data portability). Furthermore, you have the right to request that Avara restrict further processing of your personal data and also to request its erasure. In addition, you always have the option to object to the processing. 

‍

4. Recipients of personal data

Avara does not sell any personal data. For more detailed information about who may be a recipient of your personal data, please see the description for the various types of processing that we carry out. 

‍

5. Transfers to third countries

Avara does not transfer your personal data outside the EU/EEA (so-called third countries). All processing of your personal data therefore takes place primarily within the EU/EEA. If any data leaves the EU/EEA through the processing of any of our engaged data processors, Avara will always secure the handling through specific data protection agreements and/or data processing agreements with our engaged data processors. In such cases, these will take into account decisions from the European Commission regarding an adequate level of protection for personal data processing outside the EU/EEA area. 

‍

6. Automated decision-making and profiling

Avara does not use any form of automated decision-making or profiling regarding the analysis of survey responses. 

‍

7. Retention periods

Retention periods are specified in the descriptions for the various types of processing we perform (see above). 

‍

8. Complaints

You always have the right to file a complaint with the Swedish Authority for Privacy Protection (www.imy.se, imy@imy.se, +46 8-657 61 00) regarding our processing of personal data. This policy may be updated. 

‍

The current version was adopted by Avara on 2026-04-09