Last updated: May 15, 2026
This policy explains how Leadwhale AB handles personal data when you visit or interact with leadwhale.se. We comply with the EU General Data Protection Regulation (GDPR), the Swedish Data Protection Act (2018:218), the Swedish Marketing Act (2008:486) and the Swedish Electronic Communications Act (LEK 2003:389).
Data controller
Leadwhale AB (reg.no 559450-2675)
Kungsportsavenyen 10, 411 36 Gothenburg, Sweden
Email: oliver@leadwhale.se
The fastest way to reach us is by email. We have not appointed a Data Protection Officer, which is not required under GDPR article 37 since we do not carry out large-scale processing of sensitive data.
What we collect
leadwhale.se is an informational site with no registration, login or forms of our own. We therefore do not collect personal data directly on the site. However, some data is processed by the services we use to deliver and operate the site:
- Technical data via Cloudflare (our hosting provider): IP
address, timestamp, page view, browser type. This is used solely for security,
operation and abuse prevention. Cloudflare sets a strictly necessary security
cookie (
__cf_bm) that is exempt from consent requirements under Swedish LEK §6. - Booking data via Cal.com when you book a meeting through our calendar widget. You then provide name, email and any comments you choose to add. Cal.com acts as the controller for the collection on its platform; we receive the booking notification by email.
- Emails you send us to oliver@leadwhale.se. The content is handled by Oliver Ivanovic for the purpose of responding to your inquiry.
Legal basis and purposes
| Purpose | Legal basis |
|---|---|
| Operation and security (site availability, abuse protection) | Legitimate interest (art 6.1.f) |
| Handle bookings via Cal.com | Contract (art 6.1.b) — you initiate the booking |
| Respond to emails you send us | Legitimate interest (art 6.1.f) |
We use no analytics cookies or marketing cookies on leadwhale.se. We do not track visitors across sessions, we use no Google Analytics, Meta Pixel or similar tools. If we start using such cookies in the future we will update this policy and obtain your consent before they are activated.
We do not send marketing emails from leadwhale.se. There is no mailing list to subscribe to on this site.
Retention
- Technical logs: deleted or anonymized within 30 days by Cloudflare.
- Bookings: stored in Cal.com for as long as business relevant, no longer than 24 months after last contact.
- Email correspondence: retained while the matter is active, up to 24 months after closing. Accounting material is retained for 7 years under Swedish bookkeeping law where relevant.
Third parties and international transfers
We do not share personal data with third parties for marketing purposes. The following data processors handle data on our behalf:
- Cloudflare, Inc. — hosting, CDN and security. Data is processed primarily within the EU. For any transfers to the US, the EU Commission's adequacy decision under the Data Privacy Framework and Standard Contractual Clauses (SCC) apply.
- Cal.com, Inc. — booking calendar. Cal.com is also a separate controller on its platform. Cal.com's own privacy policy: cal.com/privacy.
- Google LLC — web fonts are served via Google Fonts. The font is loaded from Google's CDN; no further data is collected by us.
Other sites operated by Leadwhale AB
Leadwhale AB operates several other websites and brands in finance, insurance, auto and related verticals. Each such site is a separate GDPR context with its own privacy policy that applies there. This policy covers leadwhale.se only. When you visit or sign up on any of our other sites, please read that site's own privacy policy.
Your rights
Under GDPR you have the right to:
- Request a copy of the personal data we process about you (art 15)
- Request rectification of inaccurate data (art 16)
- Request erasure of your data when it is no longer needed (art 17)
- Request restriction of processing (art 18)
- Request data portability where technically possible (art 20)
- Object to processing based on legitimate interest (art 21)
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (art 7.3)
Send your request to oliver@leadwhale.se. We respond within 30 days.
Complaints to the supervisory authority
If you believe we are handling your personal data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Integritetsskyddsmyndigheten
Box 8114, 104 20 Stockholm, Sweden
www.imy.se ·
imy@imy.se
Changes to this policy
We may update this policy. The date of the last update is shown at the top. Material changes will be published here in good time before they take effect.