Privacy policy

This policy regards the handling of personal data. All data and information regarding inventions, innovation and intellectual property follow strict secrecy.

What does this mean to you?

In short, the GDPR means that you:

  • Have the right to receive more detailed information about how we process your personal data. We provide you with such information in the Privacy Policy below.
  • Get strengthened opportunities to take part of your personal information and to, under certain conditions, have it corrected or deleted.
  • Given the opportunity, under certain conditions, to request that your personal data be transferred or that we limit the processing.
  • May approve or decline certain communication we perform, for example, send out newsletters.

Privacy policy

For KI Science Park AB, it is important that you always feel safe with how we process your personal data. You should be able to feel confident that we handle your data correctly and in a secure way. You should also be confident that we do not handle your data if we are not allowed.

According to current privacy rules, personal data may only be processed for specifically stated purposes and if there is a legal basis for the processing.

In this privacy policy, we describe why we process your personal data, what personal data we process, and what legal basis we support the processing on and how long the data is stored. We also describe how you can influence the treatment by exercising your rights. We also give you information about who you can talk to if you have questions about personal data processing and where to turn if you are not satisfied with our handling.

What is personal data?

Personal data is information through which we can directly or indirectly identify you, e.g. your name, customer number or your telephone number.

What is processing of personal data?

Everything we do with your personal data is considered by applicable laws as processing, this applies regardless of whether we use automated systems or not. Examples of common handling are collection, registration, organization, structuring, storage, processing, transfer, and deletion. Reading personal data is also a treatment.

What is the data used for?

In order for us to process your personal data, it is required that we have stated an explicit and justified purpose of the processing. The personal data may then not be processed in a way that is incompatible with the original purpose. In addition to this, we must have support in the law, so-called legal basis, to be allowed to process personal data.

The purpose for which we process your personal data is as follows:

  • The processing of your personal data is necessary for us to be able to be in contact with you, enter into an agreement or help you with further contacts with any other stakeholders. For example. to collect information such as name, telephone number, email address, etc.
  • The processing of your personal data is necessary for us to be able to fulfill a legal obligation, e.g. to save personal data for accounting purposes and auditing.
  • We assess, after a so-called balancing of interests, that if we need to process your personal data for the compilation of our commitments and companies that we work with.
  • You have given your consent to the treatment, e.g. by entering into an agreement, filled out a form on our website, or filling in a pass card form. In some cases, we also ask you for your consent before handling of your personal data begins. In other cases, we ask for your general consent for recurring contact with you. You can revoke your consent at any time. It is important to note that if you revoke your consent, we may not be able to continue to provide the same service as before.

In order for us to be able to provide our services to you, we need to process and manage your personal data. Below are examples of the purposes for which we process your personal data and the legal basis on which we do so.

Providing services

We process your personal data to the extent necessary for us to be able to identify you as our customer, supplier or user of our services. We also process your personal data so that we can deliver the services you want. Furthermore, we process personal data about you in order to be able to make compilations prior to auditing and to be able to present them to our owners and financiers if necessary. We also process your personal data so that we can fulfill our obligations under our agreement with you.

Legal basis: Fulfillment of agreement and Legitimate interest.

Communication about services

We process personal data in our communication with you, e.g. to provide you with information about our business and our services in the form of newsletters, emails and more. We also process personal data that we receive from you when and if you have chosen to respond to surveys and customer satisfaction surveys that we have sent to you or that you have read in another way.

Legal basis: Fulfillment of agreement and Legitimate interest, consent.

Development of services

We process personal data to improve and develop our offers to you and to develop our internal processes and systems. For this purpose, we may also compile statistics for analysis needs.

Legal basis: Legitimate interest

Ivoicing and financing

We process personal data for invoicing purposes.

Legal basis: Legitimate interest, agreement.

How do we collect the data?

  • We collect personal information when you are being in contact with us, either by handing it to us through one of our digital interfaces, or by handing it to us orally during conversations or meetings where we document the information.
  • We collect personal information that is generated when you call us or when you send SMS or e-mail and we document information that originates from these calls and e-mail conversations.
  • We collect personal information when you choose to respond to surveys, participate in events and when you subscribe to our newsletters.
  • We collect information through our website. We use cookies to collect information from your browser.

For how long is the data stored?

According to the Privacy Act, we may not store personal information longer than we need based on the purpose for which we process it. We therefore never save personal data just because they are “good to have” but always have a defined purpose that is supported by law.

Because the data we collect and which is created when you use our services are processed for different purposes, they are also stored for different lengths of time. It may therefore be the case that personal information about you is stored in one system but deleted in another. Below we describe some main rules for how long we store personal data.

  • We save customer and supplier information if we do not state anything else and as long as you are a customer or supplier to us. When the agreement terminates, we delete or anonymize the personal data in the systems used to support the contractual relationship. However, personal data may remain in other systems e.g. CRM and the invoicing system, because we need to save them longer to be able to follow our business development over time and meet the requirements of the Accounting Act.
  • The customer, supplier and traffic information we collect is due to the fact that we have an obligation to do so in accordance with law or other statutes, government regulations, or decisions at the request of the government. These are saved for as long as the current requirement states.

To whom is the information disclosed?

In some situations, we share your personal information with others. Below we describe when and why we do this. We want to emphasize that we will never hand over your personal data unless it is not necessary for us to be able to carry out one of the actions listed above, for which we have a purpose and that there is a legal basis for. We also do not sell your personal information to others.

Suppliers and partners we work with

In several cases, we hire suppliers so that we can provide the services that we consider relevant and important to you. Furthermore, we sometimes use the partners to improve our service to you.

Your rights

You have the right to receive information about how we process your personal data. You will receive such information in this privacy policy. If you have further questions about our processing of personal data, you are welcome to contact us at or the contact persons listed below.

In addition to your right to information, you also have other rights in relation to your personal data. You can influence our handling by requesting extracts, corrections, deletions and restrictions. You also have the right to object to certain processing and request your personal information to be deleted or request it to be moved.

To request an extract from the register, please send us a letter stating the information you are interested in and your name, social security number, address and a copy of a valid ID document signed by you.

Please send your request to:
Karolinska Institutet Science Park AB
Nanna Svarts Väg 6a
171 65 Solna

If you have questions or want more information, you are always welcome to contact:

Sara Gunnerås, KI Science Park

If you have comments on how we process your personal data, you should report this to us as soon as possible.

More information:


In addition to personal information, there are also cookies. A permanent cookie is a text file that is stored locally on your hard drive by the website, while a session cookie is stored in the browser throughout your visit to the website. A cookie can, for example, make it possible to customize your visit and / or to save time in frequent activities. Cookies are used by virtually all websites and are often a prerequisite for the website to work well.

How to disable cookies in your browser

Through settings in your browser, you can decide how you approach the use of cookies. If you disable all cookies, you need to be aware that certain functionality may be lost.

Ytterligare information om cookies finns på Post- och telestyrelsens webbplats,

Cookies at

We use cookies mainly to save language settings and to collect visitor statistics. With the help of visitor statistics, we get a basis for optimizing the site and user experience. The statistics are anonymous and the information is in aggregate form about users, traffic and traffic providers. If you want to refrain from cookies being set, we refer to the paragraph above where you can set how cookies are handled in your browser.

Cookies from the following external services is set when visiting our website:

Embedded content from other websites

Pages on this site may contain embedded content (such as videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if the visitor has visited the other website.

These websites may collect information about you, use cookies, embed additional tracking from third parties and monitor your interaction with said embedded content, including tracking your interaction with this embedded content if you have an account and are logged in to the website in question.