This notice explains how Shinan Advisory Services handles personal data about clients, prospective clients, business contacts and visitors to this website.
Who is responsible
Shinan Advisory Services, run by Peder Engman, Sweden, is the controller for the processing described here. Questions and requests: peder@shinanadvisory.com.
Preparing for business meetings
Before meeting or contacting someone in a business context, I may review publicly available professional information about them. This covers their role, employer, career background and public statements, taken from company websites, LinkedIn, news media and company registers. I collect professional information only, never details of private life or sensitive data.
The legal basis is my legitimate interest in preparing relevant, well-informed meetings (GDPR Art. 6(1)(f)). I have documented an assessment of this interest against the interests of the people concerned, and can share it on request.
I use AI tools to help search and summarise public sources. These tools are set up so that my inputs are not used to train AI models, and some providers are based outside the EU/EEA, including in the United States. Research notes are deleted after the meeting, except for brief verified notes kept while there is an active business relationship or opportunity.
Clients and business contacts
When we work together or correspond, I process names, roles, contact details and the content of our communication. The legal basis is the performance of our agreement or my legitimate interest in managing business relationships. Data is kept for as long as the relationship is active, and accounting records for as long as Swedish law requires (currently seven years).
Visiting this website
This site uses no cookies, analytics or contact forms. It is hosted by Cloudflare, which processes technical data such as IP addresses to deliver and protect the site. Fonts are loaded from Google Fonts, which means your browser connects to Google's servers.
Your rights
You can ask what personal data I hold about you, and have it corrected or deleted. You can also object to processing based on legitimate interest at any time; if you object to meeting research, it stops immediately. I respond within one month.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
← Back to home