Privacy & Cookie Policy

1. Who we are (Controller)

For the purposes of the EU General Data Protection Regulation (“EU GDPR”) and the UK GDPR, Øresund Infrastructure Brokers is the data controller for the personal data described in this policy.

Contact: enquiries@oresundib.com

2. Scope

This policy applies to our website, enquiries made by email or via our contact form, and related communications. It does not cover third‑party websites we link to.

3. Personal data we collect

• Contact details (name, company, email address, phone number) and the content of your message.
• Business context you choose to share (e.g., requirements, preferred locations, timelines).
• Technical and usage data (IP address, browser/device information, pages visited, approximate location derived from IP, and referral URLs) collected via server logs and cookies.
• Cookie preferences (your consent and settings choices).

4. How we use personal data

• To respond to enquiries and provide our brokerage services.
• To manage our relationship with you and keep records of communications.
• To operate, secure, and improve our website (including troubleshooting, analytics, and fraud prevention).
• To comply with legal obligations and protect our legal rights.

5. Legal bases (EU/UK GDPR)

We rely on one or more of the following legal bases under the EU/UK GDPR depending on the context:

• Legitimate interests (e.g., responding to enquiries, operating and securing our website, improving services), balanced against your rights.
• Contract / steps prior to contract (when you request information or services).
• Consent (e.g., for non‑essential cookies where required).
• Legal obligation (e.g., compliance, record‑keeping where applicable).

6. Cookies and similar technologies

Cookies are small text files stored on your device. We may use:

• Strictly necessary cookies (required for the site to function).
• Preference cookies (remembering your choices, such as cookie consent).
• Analytics cookies (understanding how the site is used so we can improve it), where enabled.

You can manage cookies through your browser settings and, where offered, our cookie controls. Blocking certain cookies may affect site functionality.

7. Sharing and disclosures

We may share personal data with:

• Service providers who help us operate the website and communications (e.g., hosting, security, email, analytics) under appropriate contractual protections.
• Professional advisers (legal, accounting) where necessary.
• Authorities if required by law or to protect rights, safety, and security.

We do not sell personal data.

8. International data transfers

Your data may be processed in countries outside the UK/EU (for example, where our providers operate). Where required, we use appropriate safeguards such as adequacy decisions, the EU Standard Contractual Clauses, and/or the UK International Data Transfer Agreement/addendum, along with supplementary measures where appropriate.

9. Data retention

We keep personal data only for as long as necessary for the purposes described above, including to meet legal, accounting, or reporting requirements. We typically retain enquiry correspondence for a reasonable period to manage relationships and maintain business records.

10. Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. No internet transmission is completely secure; please take care when sending information electronically.

11. Your rights (UK/EU)

Subject to conditions and exceptions, individuals in the UK/EU have rights to:

• Access, correct, or delete personal data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority (UK: ICO; EU: your local authority)

12. US privacy rights

US privacy laws vary by state. Where applicable (including California), you may have rights to know/access, delete, correct, and opt out of certain processing such as “sale” or “sharing” of personal information for targeted advertising. We do not sell personal information. To exercise applicable rights, contact us using the details above. We may need to verify your request.

13. Children

Our services are intended for business users and are not directed to children. We do not knowingly collect personal data from children.

14. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top indicates when changes were made.

15. Contact

If you have questions about this policy or how we handle personal data, contact enquiries@oresundib.com.