Privacy Policy
 
Last updated: 17 August 2026
 
1. Who we are
This website is operated by Boneprox AB, company registration number 556945-1882, Andra Långgatan 19, 413 28 Gothenburg, Sweden ("we", "us", "our"). We are the data controller for the personal data described in this policy.
Boneprox AB is the parent company of the Boneprox Group. Our subsidiaries operate their own websites. Other group companies operate their own websites under separate privacy policies, and each group company is an independent controller for the personal data it collects.
For any question about this policy or your personal data, contact us at info@boneprox.se.
 
2. What this policy covers

This policy explains how we handle personal data collected through this website and through direct contact with us, for example when you fill in a form, request a demo, subscribe to updates, register for a webinar, or apply for a job.

What this policy does not cover. When clinics and other care providers use the products and services of the Boneprox Group, patient data is processed on their behalf and on their instructions by the relevant group company. In those cases the clinic is the controller and the group company acts as a processor. That processing is governed by the data processing agreement between the parties, not by this policy.
 
3. Personal data we collect

• Information you give us: name, e-mail address, telephone number, employer or clinic, professional title, country, and the content of your message or enquiry.

• Event and webinar registrations: the above, plus attendance and any feedback you submit.

• Recruitment: CV, cover letter and the information you choose to include in an application.

• Technical and usage data: IP address, approximate location derived from IP address, device and browser type, operating system, referring page, pages visited, time spent, and interactions with our content. This is collected through cookies and similar technologies as described in section 5.

We do not intentionally collect special categories of personal data, such as health data, through this website. Please do not include patient information or other sensitive data in web forms or e-mails to us.
 
4. Why we process your data, and on what legal basis
 

• Responding to enquiries, demo and contact requests.

• Contact and enquiry data, on the basis of our legitimate interest in responding to a request you initiated, or in order to take steps prior to entering into a contract.

• Administering webinars and events.

• Registration and attendance data, in order to perform our agreement with you.

• Newsletters and marketing communications.

• Contact data, on the basis of your consent, or our legitimate interest in communicating with existing business contacts.

• Managing customer and supplier relationships. Contact and business data, in order to perform our agreement with you or on the basis of our legitimate interest.

• Recruitment. Application data, on the basis of our legitimate interest in assessing candidates, and on your consent where we retain the application beyond the recruitment process.

• Operating and securing the website. Technical data and strictly necessary cookies, on the basis of our legitimate interest in providing a secure and functioning website.

• Analytics, advertising and audience measurement. Usage and device data and cookie identifiers, on the basis of the consent you give through our cookie banner.

• Complying with legal obligations. As applicable, where required by law.

​

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
 
5. Cookies and similar technologies
Cookies are small files placed on your device that allow a website to recognise your browser, remember your preferences and measure how the site is used. We also use similar technologies such as pixels, tags and local storage.

 

We use four categories of cookies:

• Strictly necessary cookies are required for the website to work, including security, load balancing, session handling and storing your cookie choices. These are set without consent.

• Performance and analytics cookies help us understand how the website is used so that we can improve it.

• Functional cookies remember choices such as language or region.

• Advertising and targeting cookies allow us and our advertising partners to measure campaigns and show you relevant content on third-party platforms.

• All non-essential cookies are set only after you have given your consent through our cookie banner. You can change or withdraw your choices at any time through the cookie settings link on this website. You can also block or delete cookies in your browser settings, although this may affect how the website functions.
   

6. Service providers and recipients
We share personal data only where necessary, with the following categories of recipients:

• Wix, for website hosting, forms and site infrastructure.

• Google Analytics (Google), for website analytics and audience measurement.

• LinkedIn (Microsoft), for advertising, conversion measurement and audience building through the LinkedIn Insight Tag.

• Meta (Facebook and Instagram), for advertising, conversion measurement and audience building through the Meta Pixel.

• Other IT, hosting, e-mail, CRM and professional service providers acting on our instructions.

• Public authorities, courts and advisers, where required by law or in order to establish, exercise or defend legal claims.

• Other Boneprox Group companies, where relevant to your enquiry, on the basis of our legitimate interest.

• ​Providers acting on our instructions are bound by data processing agreements. Where LinkedIn or Meta act as independent or joint controllers for their own advertising purposes, their own privacy policies also apply.

• We do not sell your personal data.
   

7. International transfers
Some of our providers process personal data outside the EU/EEA, including in the United States. Where this happens, we rely on the European Commission's adequacy decisions, such as the EU-US Data Privacy Framework, or on the EU Standard Contractual Clauses together with supplementary technical and organisational measures. You may request a copy of the relevant safeguards at info@boneprox.se.
 

8. How long we keep your data
We keep personal data only for as long as necessary for the purposes described above.
Enquiries and contact requests are kept for up to 24 months after our last contact with you. Webinar and event data is kept for up to 24 months after the event. Marketing contact data is kept until you unsubscribe or withdraw your consent, and for up to 12 months of inactivity thereafter. Customer and supplier relationship data is kept for the term of the relationship and for up to 24 months afterwards. Recruitment data is kept for up to 24 months after the recruitment process closes, unless a longer period is agreed with you. Accounting records are kept for seven years, as required by the Swedish Accounting Act. Cookie data is kept for the lifetime of each cookie, as set out in our cookie settings.

9. Security
We apply technical and organisational measures appropriate to the risk, including access control, encryption in transit, logging, supplier assessments and internal policies. Access to personal data is limited to personnel who need it in order to perform their role.
 

10. Your rights
Under the General Data Protection Regulation you have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to have data erased in certain circumstances, and to have processing restricted in certain circumstances.
You also have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format and to have it transmitted to another controller, to object to processing based on our legitimate interests including profiling, to object at any time to processing for direct marketing purposes, and to withdraw your consent at any time.
To exercise any of these rights, contact us at info@boneprox.se. We will respond within one month. We may need to verify your identity before acting on a request.

11. Complaints
If you believe that we are handling your personal data incorrectly, we would like to hear from you first. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, imy@imy.se, or with the supervisory authority in your country of residence.

12. Changes to this policy
We may update this policy to reflect changes in our practices or for legal, operational or regulatory reasons. The current version is always published on this page together with the date of the latest update.

13. Contact
Boneprox AB, company registration number 556945-1882, Andra Långgatan 19, 413 28 Gothenburg, Sweden info@boneprox.se