Dubhub – Privacy Policy

16 Oct 2026

1. Who we are

This policy explains how HubDub Solutions AB ("Dubhub", "we", "us") handles personal data when you visit dubhub.se or contact us through it. We are the data controller for that data under the EU General Data Protection Regulation (GDPR).

• Company: HubDub Solutions AB

• Organisation number: 559492-6353

• Address: Luntmakargatan 26, 6th floor, 111 37 Stockholm, Sweden

• Privacy contact: info@dubhub.se

We have not appointed a Data Protection Officer, as we are not required to. Send any privacy question or request to the contact address above.

2. What personal data we collect

We collect only what you give us through our contact form, plus technical and usage data from your visit.

• Enquiries. When you use the contact form we receive your name, email address, company name (if given), and the content of your message. Please do not include sensitive personal data in your message.

• Technical data. Our hosting provider, Framer, automatically logs your IP address, browser type, device type, and the pages and files requested. This happens on every visit and is needed to deliver the site securely.

• Analytics data. If you accept analytics cookies, we collect information about how you use the site, such as pages viewed, time on page, approximate location (city or country level), referring website, and device information.

• Advertising data. If you accept marketing cookies, Google, Meta and LinkedIn can record that you visited our site and what you did there, and link this to your account with them.

We do not use the site to collect payment details, and we do not knowingly collect special categories of personal data.

3. Why we use your data and our legal basis

Every use of your data rests on one of the legal bases in Article 6 of the GDPR.

• Replying to your enquiry and following up on a possible assignment. Data used: enquiry data. Legal basis: our legitimate interest in responding to people who contact us, or taking steps before entering a contract if you ask about our services.

• Running the website securely and fixing errors. Data used: technical data. Legal basis: our legitimate interest in a secure, working website.

• Understanding how the site is used so we can improve it. Data used: analytics data. Legal basis: your consent.

• Measuring our advertising and showing relevant ads on other platforms. Data used: advertising data. Legal basis: your consent.

• Meeting legal obligations, such as bookkeeping if an enquiry leads to an assignment. Data used: enquiry data. Legal basis: legal obligation.

• Establishing or defending legal claims. Data used: any relevant data. Legal basis: our legitimate interest.

Where we rely on legitimate interest, we have weighed our interest against your privacy and concluded that the processing is limited and expected. You can object at any time (see section 8). Where we rely on consent, you can withdraw it at any time without affecting processing that took place before.

4. Cookies and similar technologies

We only place analytics and marketing cookies after you accept them in our cookie banner. This follows the Swedish Electronic Communications Act (lagen om elektronisk kommunikation, chapter 9, section 28) and the GDPR.

Cookies are small text files stored on your device. We also use similar technologies, such as tracking pixels and scripts, which are covered by the same consent.

• Strictly necessary (no consent needed). Set by Dubhub via CookieYes. These remember your cookie choices and keep the site working.

• Analytics (consent needed). Google Analytics 4, loaded via Google Tag Manager. These measure visits and how the site is used.

• Marketing (consent needed). Google Ads, the Meta Pixel (Facebook and Instagram) and the LinkedIn Insight Tag. These measure how our ads perform and build audiences for showing ads on those platforms.

A full, up-to-date list of the individual cookies we use, with their names, purposes and durations, is shown under each category in our cookie settings.

You can change or withdraw your consent at any time through the cookie settings button shown on every page of the site. You can also block or delete cookies in your browser settings, although some parts of the site may then not work as intended.

We use Google Consent Mode, which means Google's tags respect your choice. If you decline, no analytics or advertising cookies are set.

5. Who we share your data with

We never sell your personal data. We share it only with the service providers below, who process it on our behalf under data processing agreements, or who act as independent or joint controllers where stated.

• Framer B.V. (processor; Netherlands, with servers in the EU and US) hosts the website and receives contact-form submissions.

• CookieYes Limited (processor; United Kingdom) runs our cookie banner and keeps a record of your consent choices.

• Our email service provider (processor; EU/EEA or US, see section 6) stores enquiries sent to our inbox.

• Google Ireland Ltd and Google LLC (processor for analytics, independent controller for advertising; Ireland and US) provide Google Analytics, Tag Manager and Google Ads.

• Meta Platforms Ireland Ltd (joint controller for collecting pixel data, independent controller afterwards; Ireland and US) provides the Meta Pixel.

• LinkedIn Ireland Unlimited Company (joint controller for collecting Insight Tag data, independent controller afterwards; Ireland and US) provides the LinkedIn Insight Tag.

• HolyComms (processor; Sweden) manages our advertising accounts on our behalf.

Where we are joint controllers with Meta or LinkedIn, this covers only the collection and transfer of data from our website. What they do with the data afterwards is governed by their own privacy policies.

We may also disclose data to authorities when required by law, or to advisers such as accountants and lawyers.

6. Transfers outside the EU/EEA

Some of our providers, including Framer, Google, Meta and LinkedIn, may transfer personal data to the United States.

These transfers rely on the EU–US Data Privacy Framework where the recipient is certified under it. Where it is not, they rely on the European Commission's Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for more information about the safeguards for a specific transfer.

CookieYes stores consent records in the United Kingdom, which the European Commission recognises as providing an adequate level of data protection.

7. How long we keep your data

We keep personal data only as long as we need it for the purpose it was collected for.

• Enquiries that do not lead to an assignment: 24 months from our last contact.

• Enquiries that lead to an assignment: for the duration of the business relationship. Records needed for bookkeeping are kept for 7 years under the Swedish Bookkeeping Act (bokföringslagen).

• Server logs: kept by our hosting provider, Framer, in line with its own retention practices.

• Google Analytics data: 14 months.

• Cookies: shown for each cookie in our cookie settings (see section 4).

After these periods, the data is deleted or anonymised.

8. Your rights

You have the following rights under the GDPR, and we will respond to any request within one month.

• Access: get a copy of the personal data we hold about you.

• Rectification: have inaccurate data corrected.

• Erasure: have your data deleted, unless we must keep it by law.

• Restriction: ask us to limit how we use your data.

• Data portability: receive data you gave us in a machine-readable format.

• Objection: object to processing based on our legitimate interest.

• Withdraw consent: change your cookie choices at any time via the cookie settings button on the site.

To use any of these rights, email info@dubhub.se. We may ask you to confirm your identity first.

If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se. You can do this wherever you live. If you live in the EU or EEA, you can also complain to the data protection authority in your own country. We would appreciate the chance to resolve your concern first.

9. Security, children and changes

Security. The site is served over an encrypted (HTTPS) connection, and access to enquiries and our analytics and advertising accounts is limited to the people who need it.

Children. Our services are aimed at businesses. We do not knowingly collect personal data from children under 13.

Changes to this policy. We may update this policy when our website, services or the law change. The date at the end of this policy shows when it was last updated. If we make significant changes, we will make this clear on the website.

Last updated: 16 October 2026