Privacy Policy

AidMix Privacy Policy

Effective Date: August 20, 2025

1. Introduction and Scope

Thank you for choosing AidMix. This Privacy Policy explains in detail how AidMix AB, with organization number 559528-7060 ("AidMix", "we", "our", "us"), collects, uses, stores, shares, and protects your personal data when you access or use our online platform that connects businesses and individuals seeking specialized scientific expertise with independent specialist service providers (the "Services").

Our commitment is to safeguard your privacy while providing a valuable and personalized service. This policy is designed to ensure you understand what information we collect, why we collect it, and how you can manage it. By creating an account, accessing the AidMix Platform, or using our Services in any capacity, you acknowledge that you have read, understood, and agree to the data processing practices described in this Privacy Policy.

If you do not agree with the terms and conditions of this Privacy Policy, we ask that you please refrain from using our Services.

2. Data Controller Information

For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, AidMix AB is the data controller responsible for the processing of your personal data.

Legal Entity: AidMix AB

Organization Number: 559528-7060

Contact Email for Data Protection Matters: help@aidmix.se

3. Personal Data We Collect and Process

We collect and process various categories of personal data to deliver and improve our Services. The data is collected when you provide it to us directly, when it is generated through your use of the Services, or when we receive it from third parties.

3.1. Registration and Account Data

This is the information you provide when you sign up for an AidMix account. It includes your full name, date of birth, professional title, company or academic affiliation, physical address, email address, telephone number, country of residence, and the secure, anonymized customer ID generated upon registration. This data is essential for creating and maintaining your account.

3.2. Professional Profile Data (for Specialists)

To showcase expertise on the platform, Specialists may provide detailed professional information. This includes, but is not limited to, your curriculum vitae (CV), lists of publications, educational background, summaries of research, work samples, project histories, and specific areas of scientific expertise that you choose to upload to your profile.

3.3. Project and Transaction Data

We collect information related to the projects facilitated through our platform. This includes project descriptions, Statements of Work (SOWs), deliverables, transaction histories between Clients and Specialists, invoices, and payment statuses.

3.4. Payment and Financial Data

To facilitate payments for services, we process financial data. This includes bank account details (IBAN/SWIFT), credit/debit card information (such as card type, expiration date, and certain digits of the card number), and billing addresses. This data is collected and processed securely by our third-party payment providers (e.g., Stripe, Klarna, Swish). AidMix typically only receives limited information, such as a unique payment token and transaction confirmation, to verify payments.

3.5. Communications Data

We process data from communications that occur through our platform. This includes messages exchanged between Clients and Specialists via the platform's messaging system, public reviews, ratings, testimonials, feedback, and records of your communications with our customer support team.

3.6. Technical and Usage Data

When you interact with our Services, we automatically collect technical information. This includes your IP address, device type and ID, browser type and version, operating system, URL information, cookie data, network connection type (e.g., WiFi, 4G, LTE), platform usage logs (such as feature interaction and session duration), and other analytics information to enhance platform functionality and security.

3.7. Location Data

We may process your non-specific location (e.g., country or city) based on your IP address to provide localized services and for security purposes. We will only collect and process your specific device location (e.g., via GPS) for features like project matchmaking after first obtaining your explicit consent, which you can withdraw at any time through your device settings.

3.8. Marketing and Survey Data

This includes your marketing preferences, your responses to our promotional campaigns or surveys, your participation in events, and any feedback you provide to us.

4. Legal Basis for Processing Your Personal Data

Our processing of your personal data is grounded in the following legal bases as defined by the GDPR:

4.1. Performance of a Contract

: A significant portion of our data processing is necessary to fulfill our contractual obligations to you as outlined in our Specialist User Agreement. This includes processing your

Registration Data to create your account, Professional Profile Data to display your expertise, and Payment Data to facilitate transactions.

4.2. Legitimate Interest

We process certain data because it is in our legitimate interest to do so for the development and security of our business. This applies to:

• Analyzing Technical and Usage Data to improve and optimize the platform experience.
• Monitoring activities to prevent fraud, secure our Services, and investigate misuse of the platform.
• Contacting existing users with information about similar services or features that may be of interest to them.

4.3. Your Consent

For specific processing activities, we will rely on your freely given, explicit consent. This includes:

• Collecting and using your specific location data.
• Publishing testimonials that contain your personal information.
• Sending direct marketing communications to you if you are not an existing user or for services not similar to those you already use.

4.4. Legal Obligations

We are required to process certain personal data to comply with legal and regulatory obligations. This includes:

• Retaining financial records in accordance with Swedish accounting laws.
• Reporting earnings of platform sellers (Specialists) to tax authorities like the Swedish Tax Agency (Skatteverket) under regulations such as the EU DAC7 directive.
• Complying with anti-money laundering (AML) requirements.

5. How We Use Your Personal Data

We use the collected personal data for the following specific purposes:

• To Operate and Administer the Platform: To manage user accounts, provide core functionalities, and ensure the technical stability and security of the Services.
• To Facilitate Connections: To match Clients with suitable Scientific Specialists based on project requirements and specialist profiles.
• To Process Payments: To securely handle all transactions, including service fees, specialist payouts, and commission fees, and to assist in generating invoices.
• To Verify and Ensure Trust: To verify user identities (e.g., via BankID where applicable), qualifications, and to prevent fraudulent or unauthorized activities on the platform.
• To Promote Expertise: To display Specialist profiles, including CVs, areas of expertise, and case studies, on our public marketplace and, with explicit consent, in AidMix's marketing materials to attract new Clients.
• To Enable Communication: To provide secure channels for Clients and Specialists to communicate, collaborate on projects, and provide feedback.
• To Provide Customer Support: To respond to your inquiries, resolve issues, and provide assistance throughout your use of the Services.
• To Communicate with You: To send you important service-related notifications, as well as promotional offers, newsletters, or surveys that you may be interested in (always with a clear option to opt-out).
• To Comply with Legal Requirements: To fulfill our reporting obligations to Swedish and EU tax authorities and to cooperate with law enforcement or other legal bodies when required by law.

6. Sharing and Disclosure of Personal Data

AidMix is committed to not selling your personal data. We only share your data with trusted third parties under specific circumstances and with appropriate safeguards in place:

• Between Clients and Specialists: Essential information is shared between the parties to enable collaboration. This includes profile information, contact details, and project-related communications necessary for the execution of a service contract.
• Payment Service Providers: We share necessary transaction data with secure payment processors like Stripe, Klarna, or Swish to handle payments, payouts, and prevent fraudulent transactions.
• IT, Hosting, and Analytics Providers: We engage third-party service providers to host our platform (e.g., cloud services like AWS or Azure), perform data analytics (e.g., Google Analytics), and help us understand the use of our Services.
• Marketing and Communication Partners: We may share data with partners who assist us with marketing outreach and communications, such as email service providers or CRM platforms.
• Legal and Governmental Authorities: We may disclose your personal data if we are legally required to do so, for example, in response to a court order or a request from a public authority like the Swedish Tax Agency (Skatteverket) or the Swedish Authority for Privacy Protection (IMY).

7. International Data Transfers

Your personal data may be processed in countries outside of the European Union/European Economic Area (EU/EEA) by us or our service providers. When we transfer your data internationally, we ensure an adequate level of protection is in place by using one of the following legal mechanisms:

• Implementing the Standard Contractual Clauses (SCCs) as approved by the European Commission.
• Transferring data to providers located in countries that the European Commission has deemed to provide an adequate level of data protection.
• Utilizing other approved transfer mechanisms, such as the EU-U.S. Data Privacy Framework for transfers to certified U.S. companies.

8. Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, accounting, or reporting requirements.

• Active Account Data: We retain your profile and account data for as long as your account remains active.
• Inactive Account Data: If an account has been inactive for a period of 24 months, we will either delete or anonymize the associated personal data.
• Financial and Tax Records: In compliance with Swedish accounting law (Bokföringslagen), payment and transaction records are retained for up to 7 years.
• Marketing Consent Data: We retain data related to marketing consent until you choose to opt-out or withdraw your consent.

9. Your Data Protection Rights

Under the GDPR, you have several rights concerning your personal data. You have the right to:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request the correction of any inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): Request the deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request that we limit the processing of your personal data under certain circumstances.
• Right to Object to Processing: Object to our processing of your data when it is based on our legitimate interests.
• Right to Withdraw Consent: Withdraw your consent at any time for any data processing that is based on your consent.
• Right to Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another data controller.

To exercise any of these rights, please contact us at help@aidmix.se.

If you believe that our processing of your personal data infringes on your rights, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten - IMY) or with the supervisory authority in your country of residence within the EU.

10. Use of Cookies and Similar Technologies

AidMix uses cookies and other tracking technologies for several purposes:

• Essential Functionality: To ensure the core functions of the platform work correctly, such as keeping you logged in.
• Performance and Analytics: To monitor platform performance and gather analytics on how users interact with our Services, which helps us make improvements.
• Personalization and Marketing: To provide personalized content, recommendations, and relevant advertising.

For comprehensive details on the types of cookies we use and how you can manage your preferences, please see our separate Cookie Policy.

11. Security of Your Information

We implement robust technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (SSL/TLS), strict access controls, secure data hosting with reputable providers, and ensuring all our employees and service providers are bound by confidentiality obligations.

12. Children's Data

The AidMix Services are not directed to, and we do not knowingly collect personal data from, individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information from our records.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or applicable laws. Any updates will be posted on the AidMix website, and we will revise the "Effective Date" at the top of this policy. For significant changes, we will provide you with more prominent notice, such as via email or a platform notification.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please do not hesitate to contact us: