Last updated: 12 February 2026

1. Data Controller

AirZyme AB, org. nr 559387-9066, is the data controller for the processing of personal data described in this Privacy Policy.

Registered address: Stockholm, Sweden

Email: hello@airzy.me

2. Personal Data We Process

We may process the following categories of personal data:

Contact details (name, email address, phone number, company, job title)

Communication data (emails, inquiries, meeting notes)

Recruitment data (CV, education, work experience, references)

Website data (IP address, device information, cookies, usage data)

Contract and billing information

We do not intentionally collect sensitive personal data unless necessary and legally permitted.

3. Purpose and Legal Basis

We process personal data for the following purposes:

Business communication and partnerships

To manage inquiries, investor relations, collaborations, and grant-funded activities.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) or Contract (Art. 6(1)(b) GDPR).

Where processing is based on legitimate interest, we ensure that our interests do not override your fundamental rights.

Contract performance

To enter into and fulfil agreements.

Legal basis: Contract (Art. 6(1)(b) GDPR).

Recruitment

To assess and select candidates.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).

References are contacted based on consent (Art. 6(1)(a) GDPR).

Legal obligations

To comply with accounting and regulatory requirements.

Legal basis: Legal obligation (Art. 6(1)(c) GDPR).

Website functionality and analytics

To ensure security and improve user experience.

Legal basis: Legitimate interest (necessary cookies) and Consent (analytics cookies, where used).

4. Cookies

We use cookies to ensure website functionality and, where applicable, to analyse website usage.

Necessary cookies are required for the website to function properly.

Analytics cookies are only used with your consent.

You can withdraw your consent at any time via our cookie settings.

5. Data Retention

We retain personal data only as long as necessary:

Recruitment data: up to 12 months after the recruitment process ends

Business communications: up to 3 years after last interaction

Accounting data: 7 years in accordance with Swedish bookkeeping law

Website log data: normally up to 30 days

Data may be retained longer if required to establish, exercise, or defend legal claims.

6. Data Sharing

We may share personal data with:

IT and cloud service providers

Accounting and legal advisors

Recruitment service providers

Public authorities where required by law

All service providers act under data processing agreements in accordance with GDPR.

7. Transfers Outside the EU/EEA

Where personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses or participation in the EU-US Data Privacy Framework where applicable.

8. Your Rights

Under GDPR, you have the right to:

Access your personal data

Request rectification

Request erasure

Restrict processing

Object to processing based on legitimate interest

Data portability (where applicable)

Withdraw consent at any time

To exercise your rights, contact us at hello@airzy.me.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY):

https://www.imy.se

9. Updates

We may update this Privacy Policy when necessary. The latest version will always be available on our website.