Privacy
Last updated: 1 November 2026
Who is responsible for your data
Spark Lab34 AB (org. no. 559477-0587), Nyängsvägen 50, 167 54 Bromma, Sweden, is the controller of the personal data described here. Contact: mattias@mattiasjosander.com.
What I collect, and why
- When you book a call: your name, email address and the time you choose, through Google Calendar. I use it to hold the call and follow up.
- When you email me: your name, email address and what you write. I use it to answer you and, if we work together, to run the assignment.
- When we work together: names, roles and contact details of the people taking part, the material you share with me before and after the workshop, and the CliftonStrengths results that participants choose to share for the workshop. I use it only to prepare, run and follow up the work we agreed.
- When you visit the site: basic, anonymous visitor statistics and the cookies needed to run the site, through Squarespace. Analytics cookies are used only if you accept them in the cookie banner.
Legal basis
Booking and email: my legitimate interest in answering you and setting up a conversation you asked for. Client work: our agreement. Analytics: your consent. Invoicing and bookkeeping: legal obligation.
CliftonStrengths results
Each participant owns their own results and their Gallup account, which is covered by Gallup's own privacy policy. I use the results you share with me only for the workshop and its follow-up. Results are shared within the team for one purpose: to understand each other and work better together. They are never used to assess, rank or recruit people.
Who else handles the data
I use a few trusted services to run the business: Squarespace (website and client pages), Google Workspace (email, calendar and documents) and Gallup (participants' own CliftonStrengths accounts). Some of them may process data outside the EU, under the safeguards required by EU law. I never sell personal data or share it for marketing.
How long I keep it
Emails and booking details: as long as we are in contact, and no longer than two years after our last contact. Client material: up to three years after the last assignment, unless you ask me to delete it earlier. Invoices and bookkeeping records: seven years, as Swedish law requires.
Your rights
You can ask to see the data I hold about you, correct it, delete it, limit how it is used, or object to it. Email mattias@mattiasjosander.com and I will answer within a month. If you are not happy with how I handle your data, you can contact the Swedish Authority for Privacy Protection (IMY), imy.se.