Privacy Policy
We take your privacy seriously. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and what rights you have under the EU General Data Protection Regulation (GDPR) and Swedish data protection law.
1. Who we are
Mundus International AB ("Mundus", "we", "us") is the data controller for personal data collected through mundus-international.com and our services, including Mundus News, Mundus Business Insights, Lumyn and our events.
-
Company: Mundus International AB, organisation number 559221-8118
-
Address: Noragårdsvägen 21b, SE-182 34 Danderyd, Sweden
-
Privacy contact: charlotte@mundus-international.com
2. What personal data we collect
We collect only the data we need to answer you, deliver our services and run our business.
-
When you contact us or request a trial briefing: name, email address, organisation, role, your message and the countries or topics you mention.
-
When you subscribe to a publication or service: name, email address, organisation, job title, billing details and delivery preferences.
-
When you use Lumyn: the countries, topics and sources you ask us to monitor, and feedback on your briefings.
-
When you register for an event: name, organisation, title, contact details, and any dietary or access needs you choose to share.
-
When you log in to a members area or pay by card: account details and payment information. Card details are handled by Stripe and are not stored by us.
-
When you visit our website: IP address, browser and device type, pages visited, and cookie data (see section 6).
We do not ask for sensitive personal data. Please do not include it in messages to us.
3. Why we use it and our legal basis
-
Answering enquiries and setting up trial briefings: legitimate interest in responding to people who contact us.
-
Delivering subscriptions, Lumyn briefings and events you have signed up for: performance of a contract.
-
Invoicing and bookkeeping: legal obligation (Swedish Bookkeeping Act).
-
Sending you information about our services as a business contact: legitimate interest. You can opt out at any time.
-
Newsletters you have signed up for: consent. You can unsubscribe at any time.
-
Website analytics cookies: consent.
-
Keeping the website and our systems secure: legitimate interest.
Where we rely on legitimate interest, we have weighed it against your privacy. You can object at any time (see section 7).
4. Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf, under data processing agreements:
-
Wix.com: website hosting, forms and members area
-
Google (Gmail and Google Workspace): email and office tools
-
HubSpot: customer records (CRM) and email communication
-
Stripe: card payments. Card details go directly to Stripe and are not stored by us.
-
Google Analytics (Google): website analytics, only with your consent
-
Anthropic: AI services used to help produce Lumyn briefings. We do not use your personal data to train AI models.
We may also share data where the law requires it, for example with tax authorities.
Transfers outside the EU/EEA. Some providers may process data outside the EU/EEA, for example in the United States (Google, HubSpot, Stripe, Anthropic) or Israel (Wix). When they do, we rely on an EU adequacy decision (including the EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.
5. How long we keep it
-
Enquiries and trial requests that do not lead to an agreement: 24 months after our last contact
-
Client and subscriber records: for the length of the agreement, then 24 months
-
Invoices and accounting records: 7 years, as required by the Swedish Bookkeeping Act
-
Event registrations: 12 months after the event
-
Newsletter subscriptions: until you unsubscribe
-
Analytics and cookie data: as set out in section 6
After these periods we delete or anonymise the data.
6. Cookies
Our website uses cookies, small files stored on your device.
-
Necessary cookies make the site work, for example security, language choice and logging in. They do not need consent.
-
Analytics cookies from Google Analytics help us understand how visitors use the site. We set them only with your consent.
We do not use marketing or advertising cookies.
You can accept or decline non-essential cookies in the cookie banner and change your choice at any time via the privacy settings button on our website. You can also delete cookies in your browser settings.
7. Your rights
Under the GDPR you have the right to:
-
Access the personal data we hold about you and get a copy
-
Have inaccurate data corrected
-
Have your data erased, where we have no legal reason to keep it
-
Restrict how we use your data
-
Receive your data in a portable format
-
Object to processing based on legitimate interest, including direct marketing
-
Withdraw your consent at any time, without affecting earlier processing
To use any of these rights, email charlotte@mundus-international.com. We will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at www.imy.se, or to the data protection authority where you live.
8. Security, changes and contact
Security. We protect personal data with access controls, encrypted connections and by limiting access to staff and providers who need it.
Changes. We may update this policy. The latest version is always on this page, with the date it was last updated.
Contact. Questions about this policy or your data: charlotte@mundus-international.com, Mundus International AB, Noragårdsvägen 21b, SE-182 34 Danderyd, Sweden.
​
Last updated: 9 November 2026
