GDPR
Privacy policy
We care about your privacy. This page explains what personal data we collect, why we collect it and what rights you have.
Data controller
Aumla AB (company reg. no. 559204-5925) is the data controller for the processing of your personal data. If you have questions about how we handle your data, contact us at miriam@aumla.se.
What data we process and why
When you contact us
When you use the contact form or email us, we process the details you provide: name, organisation, email address, phone number (optional), the topic and your message. If you request a proposal for a keynote or workshop, we also process the preferred date and number of participants. We use this to respond to your enquiry and, where relevant, to prepare a proposal and deliver the assignment.
Legal basis: legitimate interest in responding to enquiries and, when we enter into an agreement, performance of a contract.
When you download our guide
To download the guide Women’s health at work, you provide your first name, last name, email address and company. We use this to send you the guide and to contact you with related information about our services in the same area. You can opt out at any time by replying to the email or writing to us.
Legal basis: legitimate interest in delivering the guide and following up with relevant information in your professional role.
When you visit the website
Our website is hosted by Vercel. Technical data such as IP address and browser are processed in server logs to keep the site working and secure. We use Vercel Web Analytics to understand how the site is used. It sets no cookies and only collects anonymised, aggregated statistics – we cannot identify individual visitors.
Legal basis: legitimate interest in running, securing and improving the website.
When you book a meeting
You can book a conversation with us via Calendly. We then process your name, email address and the answers you give in the booking form, such as organisation, role and what you would like to discuss, in order to prepare and hold the conversation. The calendar on our contact page only loads when you click “Show available times”, and Calendly may then set cookies in line with Calendly’s privacy notice.
Legal basis: legitimate interest in booking and holding meetings you request.
Cookies and embedded content
The website does not use tracking or marketing cookies. A necessary cookie is only set when a client logs in to a password-protected client area.
Our podcast pages include embedded players from Spotify. When you visit such a page, Spotify may collect data and set cookies in line with Spotify’s privacy policy.
Who we share data with
We never sell your personal data. We use a small number of suppliers that process data on our behalf (data processors):
- Vercel – website hosting and forms
- Resend – sending email from the forms
- Google Workspace – email
- Calendly – meeting bookings
Some suppliers may process data outside the EU/EEA, for example in the United States. Such transfers rely on the European Commission’s adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.
How long we keep data
- Contact form enquiries: as long as needed to handle the matter, and no longer than 24 months after the last contact if no assignment follows.
- Guide downloads: no longer than 24 months after the download, or until you ask us to delete the data.
- Client assignments: for the duration of the agreement and then as long as required by Swedish accounting law.
- Technical logs: a shorter period in line with our supplier’s routines.
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict processing
- object to processing based on legitimate interest, such as contact about our services
- receive data you have provided in a machine-readable format (data portability)
Contact us at miriam@aumla.se to exercise your rights. If you are unhappy with how we handle your personal data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Changes
We may update this policy. The latest version is always available on this page.
Last updated: 12 October 2026