Privacy Policy
By M Consulting AB · Reg. no. 559579-0105 · Last updated May 2026
Data Controller
By M Consulting AB is responsible for the processing of your personal data. If you have questions about how we handle your data, please contact us at magdalena@bymconsulting.se.
What we collect and why
We process names, contact details, and information you share with us – through contact forms, email, meeting bookings (Calendly), or in the context of a consulting engagement. We never collect more information than is necessary for the purpose at hand.
Depending on the situation, processing is based on one of the following legal grounds under GDPR: performance of a contract, legal obligation (such as the Swedish Accounting Act), legitimate interest, or your consent.
Confidentiality
All information shared within the scope of a consulting engagement is treated as confidential – regardless of whether a written confidentiality agreement has been signed. We never share information about clients, candidates, or business relationships with third parties without explicit consent, unless required by law. Confidentiality applies without time limit, even after an engagement has ended.
Retention periods
Enquiries that do not result in a business relationship are deleted after 12 months. Data related to completed engagements is retained for 7 years in accordance with the Swedish Accounting Act.
Third parties
We use a limited number of external services: Calendly for meeting bookings, Google Analytics GA4 for website analytics (activated only with your consent via the cookie banner), WPForms for contact form management, and Microsoft 365 for email communication. Data processing agreements are in place with all providers that process personal data on our behalf.
Your rights
Under GDPR, you have the right to request access to, rectification, or erasure of your personal data. You also have the right to restrict processing, object to processing based on legitimate interest, and request data portability. Contact us at magdalena@bymconsulting.se – we respond within 30 days.
If you believe we have handled your data incorrectly, you may lodge a complaint with the Swedish Authority for Privacy Protection (IMY): imy.se · imy@imy.se · 08-657 61 00