Privacy policy

Who’s responsible for your data

In order to keep our website services running smoothly we need some information about you This information is called ‘personal data’ as it can be used to identify you. Because we collect, use and store your personal data we are a so-called controller of your information. This means, for example, that we are responsible for keeping your personal data safe.

Below we explain in a bit more detail how, why and for how long exactly we have your personal data.

Data we need, the legal basis and the storage time

Contact details

First and foremost, we need your contact details to provide some of our services, such as applying to open positions, business inquiries and the distribution of our newsletter. This is important because every now and then we may need to contact you and inform you for example about newly opened positions or interesting news. If you don’t want us to do that, you can of course tell us to stop. In any case we keep your contact details only for as long as necessary.

  • Legal basis for processing: Consent, legitimate interest, legal obligation


For communications we use email. The information that is stored in depends a lot on yourself and what you choose to write to us about. Please remember that. It may be possible to identify you only from your messages - that is even if you don’t use your whole name in - which makes those messages personal data as well. In any case we remove inactive users once a year. We will delete your email details after six months has passed from the last communication, unless there are pressing reasons to retain them past that date. These reasons may include agreement with you, complying with applicable legislation or a legitimate business interest to hold onto that data.

  • Legal basis for processing: Consent, legitimate interest


Our website uses some cookies that provide us with analytics. This gives us certain data about how you use our website – such as what type of content you are interested in, what company do you represent, where are you located. This gives us valuable insight on what type of content people using our website are interested in and to help develop that content. User analytics also aid our IT security team in making our website and associated services secure.

You can find more information on our cookies here.

  • Legal basis for processing: Legitimate interest


From time to time we conduct surveys. In these surveys we may ask you about your interests, career etc. This helps us to establish different types of professional and industry profiles that are interested in IQM. This helps us to develop our business and recruiting, as well as to better seek out potential partnerships. Any personal data relating to these surveys will be deleted after six months has passed from the survey closing.

  • Legal basis for processing: Consent, legitimate interest


From time to time we collect data using Forms. In these Forms we may ask you about your dietary requirements, event participation and other practical topics related to events. This helps us to organize events and cater to your needs. Any personal data relating to these Forms will be deleted after six months has passed from the event.

  • Legal basis for processing: Consent, legitimate interest


For careers services we use Teamtailor. Teamtailor is a recruitment platform we use for managing our new openings and their application processes. The data entered into Teamtailor will vary depending on the opening and on what you decide to tell us of yourself. We may retain applications sent through Teamtailor for up to a year, in case there comes up an opening for which you could be a great fit.

Teamtailor is a third party service.

  • Legal basis for processing: Consent, legitimate interest

What is a legitimate interest?

Controller’s - that is: our - legitimate interest is one of six so called legal bases. At least one of those six is required in order for us to lawfully collect, use and store your data.

We base some of our processing to that legitimate interest. In order for this to work, our interest in processing your data must outweigh your interest for us not to process your data. To figure out if this is the case we have thought about it.

In cases where our processing of your data is based on legitimate interest, it is for us to make our website service and user experience smoother and better serving both parties’ needs. The data we process based on legitimate interest include your contact details, analytics, submissions and communications. Without these our provision, and your use, of IQM website services would be negatively affected.

You can, however, object any of our processing of your data if you think it’s not necessary or justified. Please let us know if this is the case at email hidden; JavaScript is required and we will consider your request. You are also entitled to lodge a complaint at the Office of the Data Protection Ombudsman. You can find more information on how to lodge a complaint here (redirects to the webpage of the Office of the Data Protection Ombudsman).

Data retention

Above we have described some of the time periods we retain your data. In all other cases when we have no ongoing legitimate business need to process your personal information, we will either primarily delete or secondarily anonymize it.

We will also retain your data for as long as legally required, such as for employment, tax or accounting requirements.

Where do we get your data?

We get the information like your name, phone number and email primarily from you. We also use Leadfeeder, which collects data from publicly available sources.

Other information is usually created and stored in data systems based on your own actions. These include for example communications, submissions, analytics, and surveys.

Your rights and options

You have the following rights on the info that we hold on you or that any third party we've shared your data with holds on you:

  • You may request a copy of all the data
  • You may request the deletion of all the data.
  • You may request that we correct any incorrect data.
  • You may request that we transfer your data directly to another company or entity*
  • You may restrict the processing of data e.g. if you need the data kept as evidence for a legal claim. Please see Article 18 of the GDPR for the exact conditions.
  • You may object to processing for direct marketing purposes.
  • You may revoke your consent at any time, in which case we will seize any further processing of your data and erase it, unless we have a justified reason or legal obligation to keep them.

* Which we will do if feasible with reasonable efforts. Please note, that this ‘right of portability’ applies only to the data you have provided to us yourself, and thus may not apply to all the data we have about you.

If you would like to exercise these rights or revoke your consent (if applicable), please send an e-mail to email hidden; JavaScript is required. We aim to fulfill these requests within 30 days, unless we are overwhelmed by the amount of such requests.

After a data deletion request has been fulfilled, your data may survive in backups for some time.

Data transfers outside the EU

Some of the data may be moved outside the EU, since we also do business in America and Asia. We have ensured that the service providers we use have in place legitimately sufficient measures that provide safety for the data transferred from the EU, ensured by contractual and technical safeguards.

Privacy information on the services we use

All links redirect to external webpages.