Privacy Policy
Last Updated:
August 2026
This Privacy Policy explains how Nataliia Kravets (hereinafter referred to as "the Data Controller", "we", "us") collects, processes, and protects personal data obtained through this website, research questionnaires, and associated diagnostic tools in compliance with the EU General Data Protection Regulation (Regulation (EU) 2016/679 — GDPR) and the Swedish Data Protection Act (Lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning).
Data Controller (Personuppgiftsansvarig)
The controller responsible for the processing of your personal data on this website is:
-
Name: Nataliia Kravets
-
Location: Stockholm / Sweden
-
E-mail: kravets.nataliia.l@gmail.com
-
Telephone: +46 73 5875515
Categories of Data Collected & Purposes of Processing
We collect and process personal data strictly in proportion to our applied academic research and B2B diagnostic goals:
-
Academic & Empirical Research Data:
-
Data Collected: Industry sector, company size, export history, intellectual property status, certification readiness, and operational bottlenecks.
-
Purpose: Statistical analysis, generation of aggregated research findings, and publication of the White Paper.
-
Method: All survey responses are evaluated and presented in an aggregated, anonymized format.
-
-
Individual Readiness Check-Up & Inquiries:
-
Data Collected: Contact person’s name, professional title, corporate email, phone number, company name, and website.
-
Purpose: Delivering tailored export readiness assessments, individualized feedback, and project updates.
-
-
B2B Exporter Directory (Voluntary Opt-In):
-
Data Collected: Company name, business profile, product/service offerings, and authorized contact information.
-
Purpose: Presenting verified Ukrainian exporters to Nordic business associations, chambers of commerce, and institutional partners (strictly conditional on explicit consent).
-
-
Technical Logs & Hosting Data:
-
Data Collected: Anonymized IP addresses, browser types, timestamps, and interface interactions.
-
Purpose: Maintaining website stability, cyber-security, and platform functionality via Wix infrastructure.
-
Legal Grounds for Processing
(Rättslig grund)
In accordance with Article 6(1) of the GDPR, we process personal data under the following legal bases:
-
Consent (Art. 6(1)(a) GDPR): Freely given, specific, and informed consent provided when completing survey forms, opting in for the individual Check-Up, or requesting inclusion in the Exporter Directory.
-
Legitimate Interests (Art. 6(1)(f) GDPR): Processing essential technical log files and anonymized metrics necessary for website security and research administration.
Legal Grounds for Processing
(Rättslig grund)
-
Personal data is processed in accordance with Article 6(1) of the GDPR under the following legal bases:
-
Consent (Art. 6(1)(a) GDPR): Provided voluntarily when completing survey forms, requesting an individual Check-Up, or opting into the B2B Exporter Directory.
-
Legitimate Interests (Art. 6(1)(f) GDPR): Processing basic technical telemetry necessary for platform integrity, security, and administrative management.
Data Storage & Retention Period (Lagringstid)
-
Research Datasets: Anonymized, non-identifiable statistical datasets are retained for long-term academic evaluation and comparative research.
-
Contact & Directory Records: Identifiable contact details are retained only for the duration necessary to deliver the requested diagnostic services or until consent is explicitly withdrawn.
-
We strictly do not process sensitive categories of personal data (känsliga personuppgifter) under Article 9 of the GDPR, nor do we request confidential financial secrets.
Your Rights Under GDPR (Dina rättigheter)
-
Under Swedish and EU data protection laws, you possess the following rights:
-
Right of Access (Art. 15 GDPR): Request confirmation and a transcript of personal data held about you.
-
Right to Rectification (Art. 16 GDPR): Request the update or correction of incomplete or incorrect records.
-
Right to Erasure (Art. 17 GDPR): Request the deletion of your personal data upon withdrawal of consent.
-
Right to Restriction of Processing (Art. 18 GDPR): Request the suspension of processing under statutory circumstances.
-
Right to Withdraw Consent (Art. 7(3) GDPR): Revoke your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
-
To exercise your statutory rights, email your request to: kravets.nataliia.l@gmail.com.
Supervisory Authority (Tillsynsmyndighet)
If you consider that our processing of your personal data infringes the GDPR, you have the right under Article 77 of the GDPR to lodge a complaint with the Swedish supervisory authority:
-
Integritetsskyddsmyndigheten (IMY)
-
Postal Address: Box 8114, 104 20 Stockholm, Sweden
-
Website: www.imy.se
-
E-mail: imy@imy.se
-
Phone: +46 (0)8 657 61 00
