Privacy Policy (GDPR)

Last updated: January 27, 2025

1. Introduction

Mohlin Ventures ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, share, and protect your personal data in accordance with GDPR (General Data Protection Regulation).

2. Data Controller

Mohlin Ventures
Sole Proprietorship
Email: info@mohlin-ventures.se

3. What personal data do we collect?

We collect the following types of personal data:

Contact information: Name, email address when you purchase a license
Payment information: Processed securely via Stripe (we do not store card numbers)
License information: License type, purchase date, expiration date
Technical information: IP address, browser type (for website analytics)

4. How do we use your personal data?

We use your personal data for the following purposes:

To process and manage your license purchase
To send you license information and confirmations
To provide support and customer service
To send important updates about your license
To improve our website and services
To fulfill legal obligations

5. Legal basis for processing

We process your personal data based on:

Contract: To fulfill our agreement with you (license sales)
Legal obligation: To comply with accounting and tax laws
Legitimate interest: To improve our services and website
Consent: When you give us explicit consent (e.g., newsletter)

6. Sharing of personal data

We share your personal data with the following third-party services:

Stripe: For payment processing. Read Stripe's privacy policy: stripe.com/privacy
Supabase: For database and backend services. Read Supabase's privacy policy: supabase.com/privacy

We never sell or rent your personal data to third parties for marketing purposes.

7. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. This includes:

Encryption of data in transit (HTTPS)
Secure storage in Supabase database
Limited access to personal data
Regular security reviews

8. Your rights under GDPR

You have the following rights:

Right of access: You can request a copy of your personal data
Right to rectification: You can request correction of inaccurate data
Right to erasure: You can request deletion of your data (with certain exceptions)
Right to restriction: You can request restriction of processing
Right to data portability: You can request your data in a structured format
Right to object: You can object to processing based on legitimate interest
Right to withdraw consent: If processing is based on consent

To exercise these rights, contact us at info@mohlin-ventures.se

9. Data retention

We retain your personal data for as long as necessary for the purposes for which it was collected:

License information: As long as your license is active plus 7 years for accounting obligations
Payment information: 7 years according to Swedish legislation
Support communications: 2 years after last contact

10. International data transfer

Your personal data may be transferred to and stored on servers outside the EU (e.g., Stripe, Supabase). These companies are GDPR-compliant and use appropriate safeguards according to EU data protection regulations.

11. Children's privacy

Our website and services are not intended for persons under 18 years of age. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this privacy policy at any time. Material changes will be notified via email or via a notice on the website.

13. Contact and complaints

If you have questions or complaints about our processing of personal data, contact us at:

Email: info@mohlin-ventures.se

You also have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe we are processing your personal data in violation of GDPR.