Prycis Let's talk

Privacy notice — Prycis

Last updated: 10 November 2026

Who we are

This notice is issued by Chris Prestegaard (sole trader, Sweden), trading as Prycis, Lugna Gatan 66, 211 59 Malmö, Sweden ("Prycis", "we", "us"). We are the controller of the personal data described here. For privacy questions, or to exercise your rights, email [email protected].

What we use personal data for

We use personal data to carry out B2B prospecting and business correspondence: to identify and contact potential brand partners, to reply to people who write to us, and to administer any later business relationship.

The lawful basis

For prospecting, and for ordinary business correspondence that is not required by a contract or by law, our lawful basis is legitimate interest under Article 6(1)(f) of the GDPR. We have weighed our interest in making a relevant business approach against your privacy rights. We use only business contact details, taken from public sources, to contact you about a professional service that relates to your role, and you can opt out at any time. You may ask us for a copy of this assessment.

If we later enter a contract with you or your company, we will also process data as needed to take steps at your request before a contract, and to perform that contract (Article 6(1)(b)). We process some records because we are required to keep them under bookkeeping, tax or limitation rules (Article 6(1)(c)).

What data we hold, and where it comes from

We hold business contact details: name, role, company, business email address and business telephone number, together with notes of our correspondence and the public page on which we found your details.

If we did not collect these details from you, we obtained them from public sources, such as your company's website, a professional profile (for example LinkedIn), a trade-fair or exhibitor list, or a business directory. Each first email tells you the page we used. This is the source disclosure required by Article 14 of the GDPR.

We also hold the content of emails and other business correspondence you exchange with us.

Who we share data with

We use service providers who process data on our instructions:

  • email and workspace: Google Workspace
  • website hosting: Cloudflare (hosting and DNS)

Some of these providers may process data outside the European Economic Area. Where that happens, we rely on an adequacy decision where one exists (including, where applicable, the EU-US Data Privacy Framework for certified US organisations) or on the European Commission's Standard Contractual Clauses, with supplementary measures where needed. You may ask us for more detail.

We do not sell personal data. We do not share it with other organisations for their own marketing.

How long we keep data

  • Prospects who have not opted out: we keep business contact details for 24 months after our last contact with you, and then delete them (or anonymise them), unless a longer legal duty applies.
  • If you opt out of marketing, we keep a minimal suppression record (your email address, the date, and the fact of the objection) indefinitely, so that we do not contact you again.
  • Business correspondence and invoices, and any records we must keep for bookkeeping, tax or limitation purposes: We keep these records until the end of the seventh year after the calendar year in which the relevant financial year ended, as required by the Swedish Bookkeeping Act (bokföringslagen (1999:1078) 7 kap. 2 §).

Your rights

You have the right to access your data, to have it rectified or erased, to restrict its processing, and (in some cases) to data portability. You also have the right to object to processing based on legitimate interest.

You have an unconditional right to object to our use of your data for direct marketing, including the profiling that is related to that marketing (Article 21(2) and 21(3) GDPR). If you object, we will stop marketing to you at once.

To opt out of further approaches, reply to our email with "STOP", or email [email protected]. We will not contact you again for marketing, and we will keep only the minimal suppression record described above.

We will answer rights requests at [email protected]. We may need to confirm your identity.

Complaints

You can also lodge a complaint with a supervisory authority. Our lead supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). See https://www.imy.se/klagomal. You may instead complain to the authority in the country where you live, where you work, or where you think a breach has occurred.

Automated decisions

We do not make automated decisions that produce legal or similarly significant effects about you, and we do not carry out profiling of that kind.

Cookies

This website does not set or read cookies and does not use analytics. We do not store or access information on your device. If that changes, we will update this notice and, where the law requires it, ask for your consent.