Corvenia Software Privacy Policies

Effective Date : 30th September, 2026

1. Introduction

This Privacy Policy aims to provide you with clear and detailed information about how Corvenia AB (“us”, “we”) processes your personal data when you use our website, products or services, as well as the measures we take to protect your personal data.

In this privacy policy, we outline the types of information we collect, the reasons for collecting it, and how we use this information to deliver our products and services and when you visit our website or contact us for support.

If you have any questions about the Privacy Policy or our privacy practices in general, please feel free to contact us at privacy@corvenia.com.

2. Our role

We are the data controller responsible for the personal data of our website visitors, prospective customers who contact us through email, social media, or our website, as well as job applicants. This means that we are responsible for ensuring the lawful processing of your personal data in compliance with the General Data Protection Regulation (“GDPR”).

3. The personal data we collect and why

To meet your requests and deliver our services, we may collect and process various types of personal data, including:

Identity Data: This includes your full name, company name, and any identifiers you provide when communicating with us.
Contact Data: We collect details such as email addresses, phone numbers, and mailing or billing addresses. These are used to communicate with you regarding support, service updates, or marketing (where permitted).
Financial Data: For payment processing, we may collect billing information, including payment card details or bank account information.
Technical Data: This includes information gathered when you interact with our website, such as your IP address, browser type and version, device identifiers, and operating system. We may also use cookies and similar technologies to better understand how you engage with our services.

4. How and when we collect your personal data

We collect your personal data through various methods to ensure the delivery and continuous improvement of our services:

Direct Interactions: You provide personal data directly to us when signing up for our mailing list, completing contact forms on our website, or reaching out to our sales, support, or customer service teams via email, phone, or other communication channels.
Automated Technologies and Interactions: When you visit our website, we may collect technical data using cookies and similar technologies.

5. Legal bases for processing

We process your personal data in accordance with the following legal grounds, as required by the GDPR:

Consent: We process your personal data when you have explicitly provided your consent. This typically applies to optional activities, such as subscribing to mailing lists or receiving promotional content. You have the right to withdraw your consent at any time.
Contractual Necessity: We process your data to fulfil our obligations under a contract with you. This includes activities such as providing customer support, delivering services, and processing payments. Without this data, we may be unable to provide the services you have requested.
Legitimate Interests: We process your data when it is necessary to pursue our legitimate business interests, provided these do not override your fundamental rights and freedoms. Examples include improving our products and services, enhancing security, and preventing fraud.

6. Sharing your personal data and international transfers

We may share your personal data with trusted third-party providers when necessary to deliver our services.

In some cases, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including those that may not offer the same level of data protection as within the EEA. Such transfers typically occur when we use cloud storage, hosting services, or other service providers located outside the EEA.

To ensure your data remains protected in compliance with GDPR requirements, we implement appropriate safeguards for all international transfers. These measures may include:

Standard Contractual Clauses (SCCs): Using European Commission-approved SCCs with third parties to guarantee an adequate level of data protection.
Adequacy Decisions: Transferring data only to countries recognised by the European Commission as providing adequate protection.
Additional Safeguards: Applying technical and organisational measures, such as encryption, access controls, and strict confidentiality agreements, to enhance data security.

7. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined, comply with legal obligations, or resolve disputes.

8. Your rights under the GDPR

You may have certain rights regarding our processing of your personal data, including:

The right to access and rectification: You may request a copy of the personal data we hold about you and have the right to correct, update, or amend it.
The right to restrict processing or deletion: In certain circumstances, you may request that we limit the processing of your data or delete it entirely.
The right to withdraw consent: Where processing is based on your consent, you have the right to withdraw it at any time, subject to certain conditions.

For any of the above requests or if you believe that our processing of your personal data violates applicable law, please contact us at privacy@corvenia.com.

If you feel your rights have been infringed, you also have the right to lodge a complaint with the Norwegian Data Protection Authority (“Datatilsynet”) or your local data protection authority.

9. Cookies

This website uses cookies and similar technologies to ensure the proper functioning of our site, improve your browsing experience, analyse traffic, and provide personalised advertising.

Cookies are small text files saved on your device when you visit a website. They enable the site to recognise your device, retain your preferences, and enhance your overall user experience.

Types of cookies we use

Strictly necessary cookies: These cookies are essential for the website’s functionality and cannot be disabled.
Analytical cookies: These cookies enable us to gain insights into how visitors engage with our website.
Functional cookies: These cookies enable the website to remember your preferences, such as language or region.
Targeting and advertising cookies: These cookies may be placed on our site by advertising partners. They help create a profile of your interests to deliver personalised and relevant advertisements on other websites.

Cookies we use

Below is a summary of the cookies that may be set when you visit our site:

Cookie name	Provider	Purpose	Expiry	Type
__hssrc	HubSpot	Tracks whether the visitor has restarted their browser; identifies a new session	Session	First-party, Session
_hssc	HubSpot	Keeps track of sessions to determine if HubSpot should increment session numbers	30 minutes	First-party, Persistent
_hstc	HubSpot	Main tracking cookie for visitor identity and analytics	6 months	First-party, Persistent
hubspotutk	HubSpot	Keeps track of a visitor’s identity for analytics and form submissions	6 months	First-party, Persistent
_lfa	Leadfeeder	Identifies IP addresses and tracks users from the same location for analytics/retargeting	2 years	First-party, Persistent
_ga	Google Analytics	Used to distinguish users for analytics	14 months	Third-party, Persistent
_gid	Google Analytics	Used to distinguish users/session tracking	24 hours	Third-party, Persistent
_gat	Google Analytics	Throttles request rates to improve site performance	1 minute	Third-party, Session
ads_pref	Google Ads / Facebook Ads	Stores ad personalization preferences and opt-outs	Varies (~1 year)	Third-party, Persistent
site_preferences	corvenia.com	Remembers user preferences such as language, theme, or display settings	1 year	First-party, Persistent
newsletter_signup	corvenia.com	Remembers if a visitor is subscribed to our newsletter and controls opt-in prompts	1 year	First-party, Persistent
survey_seen	corvenia.com	Prevents repeatedly showing the same survey invitation	30 days	First-party, Persistent
form_data	corvenia.com	Saves entered form values temporarily for easier re-entry during the same session	Session	First-party, Session

Managing cookies

The placement of non-essential cookies is dependent on your consent, which you may withdraw at any time.

10. Updates to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page, along with the revised effective date.

11. Contact information

For questions about this Privacy Policy, please contact us at privacy@corvenia.com or by post at Corvenia AB, Artillerigatan 42, 114 45 Stockholm, Sweden.