Privacy Policy

DigitalWell Ventures AB

Last updated: 5 October 2026

1. Introduction

DigitalWell Ventures AB (“DigitalWell Ventures”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard personal data when you interact with our website, apply to our programs, attend our events, or otherwise engage with us.

This policy is provided in accordance with the EU General Data Protection Regulation (GDPR) and the Swedish Data Protection Act (Lag 2018:218 med kompletterande bestämmelser till EU:s dataskyddsförordning).

2. Data Controller

The data controller responsible for your personal data is:

DigitalWell Ventures AB

Reg. no. 556733-9923
Hamntorget 5, 652 26 Karlstad, Sweden
Email: hello@digitalwellventures.com

Contact person for data protection matters:

Stefan Skoglund, CEO
Email: stefan@digitalwellventures.com
Phone: +46 (0)70-607 08 67

3. What Personal Data We Collect, Why, and on What Legal Basis

We collect and process personal data for the purposes described below. Each processing activity has its own legal basis under Article 6 of the GDPR.

3.1 Website contact form

  • Data collected: name, email address, the content of your message, and any other information you choose to provide.

  • Purpose: to respond to your inquiry and follow up if relevant.

  • Legal basis: Legitimate interest (GDPR Art. 6(1)(f)) – our interest in responding to people who contact us.

  • Retention: 12 months after the conversation is concluded, after which the data is deleted unless an ongoing relationship requires longer retention.

3.2 Newsletter subscription

  • Data collected: email address (and name if provided).

  • Purpose: to send you newsletters with updates about our programs, events, and the Nordic and Baltic startup ecosystem.

  • Legal basis: Consent (GDPR Art. 6(1)(a)). You may withdraw consent at any time by clicking the unsubscribe link in any newsletter.

  • Retention: until you unsubscribe, plus 30 days for technical removal from our systems.

3.3 Program applications

(Accelerator, Incubator, Social X, Cybercampus Startup Program, Cyber X Idea Lab, Co-founder Matching)

  • Data collected: name, email, phone number, company or project name, team information, pitch or description, CV or LinkedIn link, and any other information requested in the application form.

  • Purpose: to evaluate your application, communicate with you during the selection process, and – if accepted – administer your participation in the program.

Legal basis:

  • For evaluation: Legitimate interest (Art. 6(1)(f)) – assessing applications to our programs.

  • For accepted participants: Performance of a contract (Art. 6(1)(b)) – delivering the program.

  • For statutory record-keeping after participation: Legal obligation (Art. 6(1)(c)) under the Swedish Accounting Act (Bokföringslagen).

Retention:

  • Applications not selected: 12 months after the application round closes.

  • Accepted participants: duration of the program plus 7 years for financial records, as required by the Swedish Accounting Act.

3.4 Mentor register

  • Data collected: name, email, phone number, organization, role or title, areas of expertise, short bio, and LinkedIn link.

  • Purpose: to coordinate mentor activities, match mentors with startups, and maintain the mentor community.

  • Legal basis: Legitimate interest (Art. 6(1)(f)) – running a functional mentor network for our programs. For mentors with a formal agreement, also performance of a contract (Art. 6(1)(b)).

  • Retention: while you are an active mentor and 2 years after your last engagement.

3.5 Event registrations

  • Data collected: name, email, organization, role, and any event-specific information (e.g. dietary requirements or accessibility needs).

  • Purpose: to administer your participation in the event, communicate practical information, and follow up afterwards.

  • Legal basis: Performance of a contract (Art. 6(1)(b)) – your registration is a request to attend. Dietary and accessibility information, which may constitute special categories of personal data under Article 9 GDPR (e.g. data concerning health or religion), is processed only with your explicit consent (Art. 9(2)(a) GDPR).

  • Retention: 12 months after the event, longer if the event is part of an ongoing program. Special category data (dietary and accessibility information) is deleted immediately after the event.

3.6 Photography and image use at events

Photography and filming may take place at our events. We always inform participants in advance, either in the invitation or on site. You have the right to object to being photographed or filmed. If you do not wish to appear in images, you can contact the photographer or our staff on site. At larger events we may use dedicated forms where you can indicate that you do not wish to be photographed.

  • Data processed: still and moving images in which you can be identified.

  • Purpose: documenting our events and communicating about our work, programs, and partners (e.g. on our website, in newsletters, on social media, and in reports).

  • Legal basis: Legitimate interest (GDPR Art. 6(1)(f)) – our interest in communicating about our work and events. For images in which an individual is clearly the main subject, we obtain consent (Art. 6(1)(a)).

  • Retention: Selected images are kept in DigitalWell Ventures' internal image library and used for communication purposes as long as they remain relevant. The library is reviewed regularly, and material that could be perceived as intrusive or that is no longer relevant is removed. You can request the removal of an image of you at any time by emailing stefan@digitalwellventures.com.

3.7 Cookies and website analytics

See Section 8 below.

4. Recipients and Processors

We do not sell your personal data. We share personal data only with the following categories of recipients:

Data processors (acting on our instructions):

  • Airtable, Inc. (USA) – CRM and form platform where applications, mentor data, and event registrations are stored.

  • Squarespace, Inc. (USA) – website hosting and website forms.

  • Microsoft Ireland Operations Ltd. / Microsoft Corporation – email and productivity tools (Microsoft 365).

We have data processing agreements (DPAs) in place with all our processors as required by Article 28 GDPR. Our processors may engage sub-processors under Article 28(2) GDPR. A current list of sub-processors is available on request.

Other recipients:

  • Program partners (e.g. Karlstad University, Region Värmland, Vinnova) – aggregated and statistical data for reporting purposes. Personal data is shared only when required by the program agreement and only to the extent necessary.

  • Public authorities – when we are legally required to disclose information.

5. Transfers Outside the EU/EEA

Some of our processors (notably Airtable and Squarespace) are based in the United States. When personal data is transferred outside the EU/EEA, we ensure an adequate level of protection through:

  • the EU-US Data Privacy Framework (where the recipient is certified), and/or

  • Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by additional safeguards where necessary.

You may request a copy of the safeguards in place by contacting us at stefan@digitalwellventures.com.

6. How We Protect Your Data

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. These measures include:

  • encryption in transit (HTTPS/TLS),

  • access control based on need-to-know,

  • staff training in data protection and confidentiality undertakings,

  • regular review of access rights and system logs,

  • data processing agreements with all suppliers.

Access to personal data within DigitalWell Ventures is limited to staff who need it to perform their work.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access – to obtain confirmation of whether we process your data and receive a copy.

  • Right to rectification – to correct inaccurate or incomplete data.

  • Right to erasure (“right to be forgotten”) – under certain conditions.

  • Right to restriction of processing – under certain conditions.

  • Right to data portability – to receive your data in a machine-readable format and transfer it to another controller, where processing is based on consent or contract.

  • Right to object – to processing based on legitimate interest, including profiling.

  • Right to withdraw consent – at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing before the withdrawal.

To exercise any of these rights, contact us at stefan@digitalwellventures.com. We will respond within one month.

For processing based on legitimate interest (Art. 6(1)(f)), you have the right to request information about the balancing test on which the processing is based.

We do not sell your personal data and do not use it for third-party marketing.

DigitalWell Ventures does not use automated decision-making or profiling with legal effects concerning you (Art. 22 GDPR).

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY):

Integritetsskyddsmyndigheten
Box 8114, 104 20 Stockholm, Sweden
imy@imy.se | www.imy.se

8. Cookies and Analytics

Our website uses cookies and similar technologies to make the site function and to understand how visitors use it.

Strictly necessary cookies are used to operate the website (e.g. session management, security, language preferences). These do not require your consent.

Statistics and functional cookies are used only with your consent, which you can give or refuse via our cookie banner.

Cookies set by our website provider (Squarespace) may include session cookies, security cookies, and basic visitor statistics. You can manage or delete cookies through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when the latest changes were made. Substantial changes will be communicated through our website or by email where appropriate.

10. Contact

For any questions about this Privacy Policy or how we process your personal data:

Stefan Skoglund
Contact person for data protection matters
DigitalWell Ventures AB
Email: stefan@digitalwellventures.com
Phone: +46 (0)70-607 08 67
Address: Hamntorget 5, 652 26 Karlstad, Sweden