This Privacy Policy explains what personal data we may collect through the Yun Consultancy website, why we collect it, how we use it, how long we retain it, and the rights you have under the General Data Protection Regulation (GDPR) and applicable data-protection law.

1. Who is responsible for your personal data?
The data controller responsible for personal data processed through this website is:
Yun Consultancy
Suzanne Duffour
Larsbergsvägen 21, 181 38 Lidingö
Sweden
Contact: info@yun-consultancy.com
If you have questions about how your personal data is handled or wish to exercise your rights, you can contact us using the address above.

2. What personal data do we collect?
We only collect personal data that is relevant to the purpose for which it is provided.
Depending on how you interact with the website, this may include:

• Name
• Email address
• Organisation and professional role
• Phone number, where provided
• LinkedIn profile or other professional information, where you voluntarily provide it
• Information you include in a contact, collaboration, network or project enquiry
• Information provided when registering for a training, event, pilot or other activity
• Information provided when subscribing to research or newsletter communications
• Technical information generated through use of the website, including information collected through cookies and similar technologies

We do not ask you to provide sensitive personal data unless this is specifically necessary for a particular service or activity. Please do not submit sensitive personal information through general website forms unless specifically requested.

3. How we collect personal data
We may collect personal data when you:

• Contact Yun Consultancy
• Register for a training or event
• Subscribe to a newsletter or research communication
• Express interest in a pilot or project
• Apply to join the Yun Consultancy network
• Submit information through another website form
• Use the website and its functions, including where cookies or similar technologies are enabled

Where information is collected directly from you, you decide what information to provide, subject to information that is necessary to provide the service or activity you have requested.

4. Why do we use your personal data?
We use personal data only for defined purposes, including:

➔ Event and training administration
When you register for a training or event, we may use your name and contact details to:

• Process your registration;
• Send confirmation and practical information;
• Communicate changes or cancellations;
• Provide relevant information concerning the activity; and
• Conduct necessary follow-up directly related to the activity.

➔ Responding to enquiries
When you contact Yun Consultancy, we use the information you provide to respond to your enquiry and communicate with you concerning the subject of your request.

➔ Pilots, projects and professional collaboration
Where you express interest in a pilot, project, partnership, network position or professional collaboration, we use the information you provide to evaluate and manage that enquiry and communicate with you about it.

➔ Research and publications
Where you voluntarily subscribe to research or newsletter communications, we use your email address to send the communications you have requested, such as new research, publications, events or relevant Yun Consultancy developments.

➔ Website operation and security
We may process technical information necessary to operate, maintain and secure the website.

➔ Website analytics and cookies
Where you give the relevant permission, cookies and similar technologies may be used to understand website usage and improve the website and its communications.

5. Legal bases for processing
Depending on the circumstances, Yun Consultancy may process personal data on one or more of the following legal bases under Article 6 GDPR:

• Performance of a contract or steps requested by you before entering into a contract;
• Compliance with a legal obligation;
• Legitimate interests, where applicable and where those interests are not overridden by your rights and freedoms;
• Consent, where consent is required or is the appropriate legal basis.

The applicable legal basis depends on the specific processing activity.
For example, registering for a training may require processing your contact details so that the registration can be administered. Optional subscription to a newsletter is handled separately and is based on your active choice where consent is required.

6. Newsletter and optional communications
If you choose to subscribe to Yun Consultancy's newsletter or research communications, your email address will be used to send the communications described at the point of subscription.
Subscription to these communications is optional.
Where consent is the legal basis, you may withdraw your consent at any time. You can also object to direct marketing at any time.
Unsubscribing from research or newsletter communications does not affect the lawfulness of processing carried out before you withdrew your consent.

7. Training and event registrations
Training and event registration are separate from optional newsletter subscriptions.
Registering for a training or event does not automatically mean that you have subscribed to the Yun Consultancy newsletter or other general marketing communications. Where a registration form offers an optional newsletter or research subscription, that choice is separate from the registration itself.

8. Cookies and similar technologies
The Yun Consultancy website uses cookies and similar technologies.
Some cookies are necessary for the website to function, including functions such as maintaining privacy preferences and enabling forms.
Other cookies, such as analytics or advertising-related cookies, may be optional and are controlled through the website's cookie settings where applicable.
You can manage your cookie preferences through the cookie controls provided on the website.
The use of specific third-party technologies may change as the website develops. Where applicable, information about relevant cookies and providers is made available through the website's cookie settings.

9. Who may receive your personal data?
We do not sell your personal data.
Personal data may be processed by service providers that support the operation of the website, registration systems, communications, hosting, analytics, forms or other business functions. Such providers may process personal data only as necessary to provide their services and, where required, under appropriate contractual and data-protection arrangements. Where personal data is shared with another organisation for its own independent purposes, this will be handled in accordance with the applicable legal requirements and, where required, you will be informed.

10. International transfers
Some service providers used by Yun Consultancy may process personal data outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, Yun Consultancy will take the measures required by applicable data-protection law, which may include an adequacy decision or appropriate safeguards such as Standard Contractual Clauses. The specific providers and transfer mechanisms may depend on the services currently used by the website.

11. How long do we keep your personal data?
We retain personal data only for as long as it is necessary for the purpose for which it was collected, unless a longer retention period is required by law or is necessary for the establishment, exercise or defence of legal claims.

For example:

• Training and event registration information may be retained for a reasonable period for administration, records and follow-up related to the activity.
• Enquiry information may be retained for as long as reasonably necessary to handle the enquiry and any resulting relationship.
• Newsletter subscription information is retained while you remain subscribed, subject to applicable legal requirements.
• Information that is no longer necessary is deleted or otherwise securely disposed of.

Where a specific retention period cannot reasonably be determined in advance, we use criteria appropriate to the purpose and nature of the processing.

12. Your rights
Under the GDPR, you may have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate or incomplete personal data;
• Request deletion of your personal data where the legal conditions for deletion are met;
• Request restriction of processing in certain circumstances;
• Object to certain processing, including direct marketing;
• Receive personal data in a portable format where the right to data portability applies;
• Withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the competent data-protection supervisory authority. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (IMY).

13. How to exercise your rights
To exercise your rights or ask a question about your personal data, contact:
info@yun-consultancy.com
Please provide enough information for us to understand your request and, where necessary, verify your identity. We will respond within the period required by applicable data-protection law.

14. Data security
Yun Consultancy takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
No internet-based system can be guaranteed to be completely secure, but we take appropriate measures proportionate to the nature of the information and the risks involved.

15. Automated decision-making and profiling
Yun Consultancy does not use personal data collected through the website for solely automated decision-making that produces legal or similarly significant effects on individuals.

16. Third-party websites
The Yun Consultancy website may contain links to external websites, platforms or services. This Privacy Policy applies to Yun Consultancy's processing of personal data. It does not govern the privacy practices of external websites.
We recommend reviewing the privacy information of any external service before providing personal data to it.

17. Changes to this Privacy Policy
This Privacy Policy may be updated when the website, services, data-processing activities or applicable legal requirements change.
The latest version will be published on this page with the date of the latest update.

18. Contact
For questions concerning this Privacy Policy or the processing of your personal data:
Yun Consultancy
Suzanne Duffour
Larsbergsvägen 21, 181 38 Lidingö
Sweden
Contact: info@yun-consultancy.com

19. Supervisory authority
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a data-protection supervisory authority.

For Yun Consultancy's Swedish operations, the relevant authority is:
Swedish Authority for Privacy Protection (IMY)
Integritetsskyddsmyndigheten
Official information: https://www.imy.se/

This Privacy Policy is intended as general information about Yun Consultancy's personal-data processing and is not legal advice.