Legal
Privacy Policy
This policy explains what personal data we collect, why we collect it, and your rights under the EU General Data Protection Regulation (GDPR).
Last updated: 11 June 2026
1. Data controller
Centricity Consulting AB (Philipp Krieg), Stockholm, Sweden.
Email: philipp@centricity.consulting
2. What data we collect
- Contact data you provide voluntarily when you email us (name, email address, message content).
- Technical data automatically collected by our hosting provider for security and reliability (IP address, browser type, request logs). Retained for a short period only.
- Analytics data only if you opt in via the cookie banner. We do not currently run third-party analytics.
3. Legal basis (GDPR Art. 6)
- Legitimate interest — operating and securing the site.
- Consent — for any non-essential cookies or analytics.
- Performance of contract / pre-contractual steps — when you contact us about an engagement.
4. How we use your data
To respond to enquiries, deliver services we have agreed with you, and maintain the security and integrity of our website. We do not sell your personal data and do not use it for automated decision-making.
5. Sharing and transfers
We use a small number of trusted service providers (hosting, email) acting as processors on our behalf. Where data is transferred outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses.
6. Retention
Enquiry emails are retained for as long as needed to address your request and for a reasonable follow-up period. Server logs are retained for a short period for security purposes.
7. Your rights
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)
8. Contact
For any privacy-related requests, email philipp@centricity.consulting.
