Privacy Policy

Last updated: 2025-06-16

Controller

Lindholmen Science Park AB, company organization number 556568-6366, ("Lindholmen Science Park","we","our", "us") provides the platform My AI ("My AI") and as a result of you registering an account on My AI ("User") or by using My AI we process your personal data. We also process personal data about you who are mentioned on My AI by our Users.

Your privacy and the protection of your personal data are important to us and for transparency we have created this Privacy Policy to provide you with the information of how we process your personal data in connection to My AI.

Processing of User

Registration

Categories of personal data

When you register an account on My AI, we collect your first and last name, nationality, and your sign-on credentials (email and password).

Purpose

We process this personal data for the purpose of setting up and administering your account, including contacting you in relation to eventual changes to your account and My AI.

Legal basis

The legal basis for this processing is that the processing is necessary for the performance of the contract that you enter into with us for your account on My AI. You are required to provide this personal data in order to register an account on My AI. If you don't provide the personal data, we have no possibility to set up and administering your account.

Retention period and deletion

We will process this personal data as long as it is necessary for us to administer our contractual relation and to fulfill and/or exercise our contractual rights and obligations towards you as a User.

Recipients of Personal Data

Personal data may be shared with third parties involved in the development, operation, or maintenance of the service. This includes both external service providers and internal parties who support, improve, or manage various aspects of the platform. All processing of personal data is carried out in accordance with applicable data protection laws and with appropriate security measures in place.

Profile

Categories of personal data

When you have registered an account on My AI, you can create a personal profile containing first name and last name.

You can also choose to share additional personal data than what is required for registering an account. If you choose to provide such additional information, we will also process this personal data, including information about employment, preferred content, additional contact details and other information that you provide in relation to your profile on My AI.

Please note that it is optional to create a personal profile and as such it is optional to register age and/or gender in your profile. If you choose to provide also this information, it will be processed solely by us and is not something that will become public on My AI. All other information that you provide in your profile on My AI will be visible to other Users.

Please note! Do not include any sensitive information or unsuitable information about yourself or others in your profile on My AI. Your profile will be visible to other Users, so do not include personal data in your profile that you do not want to share openly with other Users.

Purpose

We will process the personal data that you provide for your profile for the purpose of creating and publishing your profile in accordance with the information that you provide which hopefully will make your interaction with other Users more fruitful.

Legal basis

The processing of your personal data for this purpose is based upon the legal basis that it is necessary for the performance of the contract that you enter into with us for your account on My AI.

When you choose to provide additional information, we process it based on your consent. You have the right to withdraw your consent to this processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Retention period and deletion

We will process the personal data as long as you are a User or until you delete the information in your profile on My AI.

Recipients of Personal Data

Personal data that you have chosen to provide in your profile, except for age and gender as described above, and the content that you upload on My AI will be shared with all Users of My AI.

Personal data may be shared with third parties involved in the development, operation, or maintenance of the service. This includes both external service providers and internal parties who support, improve, or manage various aspects of the platform. All processing of personal data is carried out in accordance with applicable data protection laws and with appropriate security measures in place.

Updates and uploaded material

Categories of personal data

If you publish content or upload material on My AI containing your personal data, we also process the personal data in such publications and uploaded material.

Purpose

We process this personal data to maintain My AI and to enable the information sharing features of the platform, as you choose to participate

Legal basis

When you upload content or materials to our platform, you consent to our processing and display of that content. You may withdraw your consent and remove the uploaded material at any time. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

Retention period and deletion

We will process the personal data as long as the material on My AI containing your personal data is available on My AI.

Recipients of Personal Data

Personal data may be shared with third parties involved in the development, operation, or maintenance of the service. This includes both external service providers and internal parties who support, improve, or manage various aspects of the platform. All processing of personal data is carried out in accordance with applicable data protection laws and with appropriate security measures in place.

Support, requests and reporting

Categories of personal data

If you ask for support connected to your use of My AI or if you make requests, we will process personal data about you that relates to such request.

If you report another User or content on My AI, we will also process your personal data that relates to this.

The same applies if you have been reported by another User, we will process your personal data that relates to such a report.

Purpose

The purpose of our processing of this personal data is to register, investigate, decide upon, communicate with you and to take necessary measures to resolve the matter at hand and administer your request for support or your reporting of another User or content on My AI.

Another purpose of the processing is to ensure that our Terms of Use for My AI are upheld.

Legal basis

We process your personal data based on our contract with you. This is necessary to provide My AI, manage your support requests, handle reports about other users or content, and ensure our My AI Terms of Use are followed.

Retention period and deletion

We will process the personal data until the matter relating to your support matter or a request put forward by you or another User is resolved and for a period of three months thereafter for administrative purposes.

Recipients of Personal Data

Personal data may be shared with third parties involved in the development, operation, or maintenance of the service. This includes both external service providers and internal parties who support, improve, or manage various aspects of the platform.

All processing of personal data is carried out in accordance with applicable data protection laws and with appropriate security measures in place.

Improve the products on MY AI

Categories of personal data

When you use My AI, we process your IP-address and information about your use of My AI such as time and duration of your visit to My AI. The information is collected through the use of cookies and similar technology. Further information about our use of cookies is further described in our cookie policy, full cookie declaration for My AI is presented here.

Purpose

The purpose of our processing of this personal data is to collect aggregated statistics and execute surveys to develop and improve the products on My AI.

Legal basis

We process your platform usage data based on our legitimate interest in developing and improving our products. This includes analyzing usage patterns, identifying areas for improvement, and testing new features.

Retention period and deletion

We will keep your personal data for three months from the date it was collected.

Recipients of Personal Data

Personal data may be shared with third parties involved in the development, operation, or maintenance of the service. This includes both external service providers and internal parties who support, improve, or manage various aspects of the platform. All processing of personal data is carried out in accordance with applicable data protection laws and with appropriate security measures in place.

Private messaging function

Categories of personal data

To provide and maintain the My AI service, we process certain personal data. This includes your username, profile picture, and potentially your email address or phone number, which are necessary for account management and identification. When you use the messaging functionality, we process the content of your messages, message timestamps, and information about the users participating in the conversation. If you share files or links, these are also processed. Additionally, for technical and security purposes, we collect IP addresses, device information (such as device type and operating system), and log files that record your platform usage.

Purpose

Our purpose is to enable direct communication between users via chat functionality.

Legal basis

We process your personal data to administer the private messaging function in My AI, according to the terms of our contract with you.

Retention period and deletion

We will process the personal data in the private messaging function as long as the user account is active, or for a certain period after account deactivation.

Some data (e.g., log files) may need to be stored longer to comply with legal requirements.

Recipients of Personal Data

Personal data may be shared with third parties involved in the development, operation, or maintenance of the service. This includes both external service providers and internal parties who support, improve, or manage various aspects of the platform. All processing of personal data is carried out in accordance with applicable data protection laws and with appropriate security measures in place.

Text messages sent via the platform are encrypted to protect user privacy. The encryption is designed to safeguard data against unauthorized access---for example, in the event of a security breach. However, to enable the functioning of features such as message delivery, storage, and user access, encryption and decryption must be handled by our servers. This means that, from a technical standpoint, it is possible for authorized system administrators to access the content in readable form if necessary.

Such access is strictly limited and only permitted under specific circumstances, such as when required by law (e.g., in response to a lawful request from law enforcement). It may also be necessary in order to investigate misuse, ensure platform integrity, or defend against legal claims. We do not access message content for any other purpose, and all access is logged and monitored to prevent misuse.

Statistics

Categories of personal data

To enable user differentiation and support our analysis, we will process the following personal data: IP address, email address, first name, and last name.

Purpose

To compile and analyze statistics on platform usage, such as user numbers and user activity, to create reports that describe the development and usage of My AI. Aggregated data will be used for public sharing to illustrate overall trends.

Legal basis

We rely on your consent as the legal basis for this collection. You can modify or withdraw your consent through our cookie settings. [(länk)]{.mark}

Retention period and deletion

We will retain your personal data only for the purpose of compiling statistics until the completion of the relevant report. Deletion will be made after the report is finalized.

Recipients of Personal Data

Personal data may be shared with third parties involved in the development, operation, or maintenance of the service. This includes both external service providers and internal parties who support, improve, or manage various aspects of the platform. All processing of personal data is carried out in accordance with applicable data protection laws and with appropriate security measures in place.

Platform Security

Categories of personal data

The information processed may include but is not limited to IP addresses, traffic routing data, system configuration information, and other information about traffic to and from Our website.

Purpose

Our purpose is to ensure user account security by collecting data to identify and block bot activity, and to maintain technical safeguards against unauthorized login attempts.

Legal basis

The legal basis is a balance of interests, and our interest is to deliver a secure platform to the Users.

Retention period and deletion

We will process the personal data as long as you are a User.

Recipients of Personal Data

To ensure the technical security and integrity of our platform, we utilize third-party service providers. These providers assist us with measures such as threat detection, vulnerability scanning, intrusion prevention, and other security-related services. When engaging these third parties, we implement appropriate safeguards to ensure they process your data in accordance with applicable data protection laws and our instructions. These third-party providers act as our data processors and are contractually obligated to maintain the confidentiality and security of any personal data they may access in the course of providing their services. We carefully select these providers based on their expertise and commitment to data security.

Technical development

Categories of personal data

These personal data, including your IP address and screen resolution, are collected to help us identify and resolve bugs.

Purpose

The purpose of processing this data is to diagnose and fix errors, bugs, and other technical problems to ensure the smooth and reliable operation of our platform.

Legal basis

The legal basis for this processing is contract, as it is necessary for us to provide the user with a functioning platform.

Retention period and deletion

We will process the personal data as long as you are a User.

Recipients of Personal Data

To assist us in identifying and resolving technical issues and bugs, we may share relevant personal data with third-party service providers. These providers offer services that help us diagnose errors, analyze system logs, and understand the context in which issues arise, ultimately enabling us to provide a more stable and functional platform. These third parties act as our data processors and are contractually obligated to handle your personal data in accordance with applicable data protection laws and our instructions, ensuring its security and confidentiality.

Protect and exercise our legal rights

Categories of personal data

In the event of a dispute or similar between us in relation to My AI we may process such personal data about you that are relevant in the particular matter.

Purpose

We will process this personal data for the purpose of defending or exercising our rights.

Legal basis

The processing of your personal data for defending or exercising our rights is based upon the legal basis that the processing is necessary for the purpose of our legitimate interests to defend or exercise our rights.

Retention period and deletion

We will process the personal data according to the above until the matter is resolved.

Recipients of Personal Data

Personal data may be shared with third parties involved in the development, operation, or maintenance of the service. This includes both external service providers and internal parties who support, improve, or manage various aspects of the platform. All processing of personal data is carried out in accordance with applicable data protection laws and with appropriate security measures in place.

Processing of persons in content and news

Content and news

Categories of personal data

Other Users can post and share content and news on My AI that contain your personal data. We can also collect personal data about you from other sources, such as relevant professional news relating to you, and share such content on My AI as part of our service to provide My AI.

Purpose

The purpose of our processing of this personal data is to maintain My AI and the purpose of the platform which among other is to be a platform for information sharing.

Legal basis

The processing of your personal data for this purpose is based upon the legal basis that the processing is necessary for the purpose of our legitimate interests to maintain My AI and the purpose of the platform of information sharing.

Retention period and deletion

We will process the personal data as long as the content containing your personal data is available on My AI.

Recipients of Personal Data

Personal data provided in connection with content and news may be published and made publicly accessible on our platform. This means that the information could be viewed by other users and external parties.

Transfer of personal data to countries outside the EU/EEA

We strive to only process personal data within the EU/EEA. When we transfer your personal data to third parties acting as our processors, e.g., supplier of support and maintenance of IT and cloud products, these processors may transfer data outside the EU/EEA on our behalf. In cases where our processors are transferring or processing personal data outside the EU/EEA, such processing is based either on a decision from the European Commission establishing that the country in question ensures an adequate level of protection or appropriate safeguards that ensure that your rights are protected such as standard contractual clauses adopted by the European Commission and supplementary security measures to such standard contractual clauses when necessary.

Your rights

Below you can read about the rights you have in relation to our processing of your personal data. To exercise your rights, you are welcome to contact us in accordance with our contact information below.

Right to object to our processing

You have the right to object to the processing of your personal data that is based on the legal basis that the processing is necessary for the purposes of a legitimate interest.

Right to access

You have the right to obtain confirmation from us as to whether or not we process your personal data. If we process your personal data, you have the right to receive information about our processing of your personal data. You also have the right to request a copy of the personal data we process about you.

Right to rectification

You have the right to have incorrect personal data corrected and to have incomplete information completed by providing us with the correct information.

Right to erasure (right to be forgotten) and limitation of our processing

You have the right to request that we erase your personal data (for example, if the personal data is no longer necessary for the purpose of the processing). You may also request that we restrict certain processing of your personal data (for example if you object to the accuracy of the data).

Right to data portability

If you have given your consent to our processing of your personal data or if the legal basis for our processing is to fulfil an agreement with you, then you have the right to obtain the personal data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to request that we transmit such personal data to another controller or that we assist you in transmitting the data to another controller when this is technically feasible.

Right to complain

You have the right to lodge a complaint with a supervisory authority concerning our processing of your personal data. The supervisory authority in Sweden is (Integritetsskyddsmyndigheten - IMY). See contact information to IMY below.

Our contact information

If you want to contact us with regards to our processing of your personal data, or if you want to exercise your rights in relation to our processing of your personal data, you are welcome to contact us through the contact details below.

CONTROLLER

Name: Lindholmen Science Park AB

Company organization number: 556568-6366

Postal address: Lindholmspiren 3-5, Box 8077, SE-402 78 Gothenburg

E-mail address: privacy@lindholmen.se

Telephone number: +46 (0)70-820 29 69

Please note:

This privacy policy applies only to Lindholmen Science Park and its subdomains' processing of your personal data. Lindholmen Science Park assumes no responsibility for how other companies or websites process your personal data. When you are redirected to a third-party website, we recommend that you also read the privacy policy applicable to that website.

TILLSYNSMYNDIGHET

Namn: Integritetsskyddsmyndigheten, IMY

Postadress: Box 8114, 104 20 Stockholm, Sverige

E-postadress: imy@imy.se

Telefonnummer: +46 (0)08-657 61 00

Cookie Declaration