Upsalite

Privacy policy

Introduction

This Privacy Policy explains how we collect and process personal data ("data") relating to visitors of upsalite.com (the "Website") — including consumers, cosmetics formulators, and other professionals — and anyone who contacts us, requests information or samples, or signs up for updates.

For the purposes of applicable data protection legislation, Disruptive Materials Operations AB (publ), corporate reg. no. 559118-9401, or as the case may be, companies from the same company group ("Disruptive Materials", "we", "us", "our"), is the controller of your personal data and determines how and why it is processed.

Should you have any questions regarding our processing of personal data, please contact us via our contact page at www.upsalite.com or refer to the contact details at the end of this Privacy Policy.

Further Information

For further information about this policy, you can contact our data protection officer at dataskyddsombud@disruptivematerials.com.

How We Collect Data

We collect your personal data:

  • Through your use of the Website.

  • When you contact us through a form, email, or our contact page — for example to ask a question, request technical information, or request a sample.

  • When you sign up for our newsletter or other updates.

  • When you interact with us through social media or at events.

What Data We Collect

We do not collect more information than we need to fulfill the purposes described below.

Depending on how you interact with us, we may process:

  • Contact and enquiry details — such as your name, email address, telephone number, company or organization, role, and the content of your message or request.

  • Sample and technical-information requests — such as the materials, applications, or formulation areas you are interested in, and any information you provide to help us respond.

  • Subscription details — such as your name and email address if you sign up for our newsletter or updates.

  • Technical and usage data — such as your IP address, browser and device type, pages visited, and how you use the Website (see "Cookies" below).

Why We Process Your Data and Our Legal Basis

To respond to your enquiries, requests, and sample requests ("Communication purposes"). The legal basis is our legitimate interest in answering you and managing our relationship with you, or steps taken at your request prior to entering into a business relationship. We may also send transactional emails directly related to your enquiry — for example, a confirmation when we receive your message, or follow-up on a sample request you made. The data is stored no longer than necessary for this purpose.

To send newsletters, updates, and marketing communications ("Marketing purposes"). Where required, the legal basis is your consent; otherwise it is our legitimate interest in marketing our materials and products. With your consent, we may also receive information about whether you opened our email and interacted with content such as links. You can opt out at any time using the unsubscribe link in any message. The data is stored until you opt out or withdraw consent.

To operate, secure, and improve the Website. The legal basis is our legitimate interest in running an effective and secure website.

To comply with legal obligations. Where transactions or correspondence give rise to obligations under, for example, the Swedish Accounting Act (Sw. bokföringslagen) or other applicable legislation, the legal basis is compliance with a legal obligation. The data is stored as long as required by law.

To establish, exercise, or defend legal claims ("Legal rights"). The legal basis is our legitimate interest in doing so. Relevant information may be kept for up to 10 years in accordance with the Swedish Statute of Limitations Act (Sw. preskriptionslagen).

How We Share Your Data

We do not sell your data to any third party for marketing purposes. However, we may share information with suppliers who perform services on our behalf — for example, hosting, email, analytics, and customer-relationship tools. Such suppliers may only process the data in accordance with our instructions and under data processing agreements.

We may also disclose or share your data with:

  • Auditors and professional advisors.

  • A third party where necessary to comply with a legal obligation, whether by law or contract.

  • Social media such as Facebook, Instagram, LinkedIn, or X when you contact us through such services. If you use these services, we refer to the respective service's privacy policy for how they process data.

We strive to process all your data inside the EU/EEA. However, some of our IT providers and partners operate in the United States — for example Google (through the use of Google Analytics). When personal data is shared with these providers, we put forth reasonable efforts to ensure the level of protection is equivalent to that applicable in the EU/EEA, through the providers' certification under the EU-U.S. Data Privacy Framework and/or the use of the European Commission's Standard Contractual Clauses, in accordance with applicable data protection legislation.

How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes described above, or as required by law (for example, accounting records are kept for seven years under Swedish law). Enquiry and sample-request data is kept for as long as needed to handle your request and a reasonable period afterwards. Newsletter data is kept until you unsubscribe.

How We Protect Your Data

We use a range of technical and organizational measures to protect your data from unauthorized access, use, loss, change, or deletion in accordance with applicable data protection legislation. Such measures include, but are not limited to, physical controls, encryption, eligibility restrictions, and internal policies.

Your Rights

In accordance with applicable data protection legislation, you have the right to request access to, rectification, or erasure of your personal data, or restriction of its processing. You also have the right to object to processing, the right to data portability, and the right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details below.

You also have the right to lodge a complaint regarding our processing of your data with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, Sweden. You can also contact the data protection authority in the Member State of your domicile or place of work.

Cookies

The Website uses cookies. A cookie is a small text file that a website requests to save on your device. We use cookies based on your consent to:

  • Facilitate and improve your use of the Website.

  • Collect information about your experience on the Website using Google Analytics — such as the number of visitors, average session duration, pages per session, and more.

  • Engage in marketing — for example, displaying our adverts when you visit certain websites (including Facebook, LinkedIn, X, Instagram, and Google), creating marketing profiles based on information collected via cookies, and assessing marketing performance.

Necessary cookies required for the Website to function are always active. You can manage or withdraw your consent at any time through the cookie banner on the Website or through your browser settings. The "Help" section of most browsers explains how to prevent your browser from accepting new cookies or how to be notified when you receive one.

Changes to This Privacy Policy

We reserve the right to make changes to this Privacy Policy from time to time. The current version is always available on this page. If substantial changes are made, we will inform you by email, provided we have your email address, or, if reasonably possible, in some other manner.

How to Contact Us

Please do not hesitate to contact us if you have any questions about this Privacy Policy or the processing of your data, or if you would like to exercise any of your rights.

You can contact us at: Disruptive Materials Operations AB, corporate registration number 559118-9401, Kungsängsvägen 27, 753 23 Uppsala, Sweden.

You can contact our data protection officer at +46 (0)73-812 87 03 or dataskyddsombud@disruptivematerials.com.

Otherwise, see our contact information at www.upsalite.com.