Privacy
How we handle personal data in fund management and our business relationships.
Responsible for your personal data
AIFM Capital AB (556737-5562) is the controller. This English overview accompanies our full published privacy policy, available below.
Data, purposes and legal bases
We process identity, contact, financial, investor, due-diligence and recruitment information to administer investments, meet regulatory duties, communicate and assess applications. Data comes from you and, where needed, other sources.
Depending on the activity, processing relies on contract, legal obligation, legitimate interests or consent. The full policy maps purposes to data, legal bases and retention.
Read the full policy
- Download
Privacy policy / Integritetspolicy
Full privacy policy (Swedish). Board-approved 4 December 2025.
Your rights
Subject to the conditions in the GDPR, you can:
Ask for access to your personal data and information about its use.
Request correction, erasure or restriction of processing.
Receive data you provided in a portable format where processing is automated and based on consent or a contract.
Object to processing based on legitimate interests, and always object to processing for direct marketing.
Withdraw consent without affecting the lawfulness of earlier processing.
Conditions and safeguards
Rights are assessed individually. Erasure may be limited by legal record-keeping duties. GDPR also provides safeguards for decisions based solely on automated processing that have legal or similarly significant effects.
Sharing, retention and safeguards
Who may receive information?
Recipients may include service providers, distributors, advisers, auditors and authorities. Access is limited according to responsibilities, with contractual and security safeguards.
How long is information retained?
Retention varies: accounting records generally remain for seven years; anti-money-laundering records generally for five years after the relationship ends, or longer where required. Other periods are detailed in the policy.
What about transfers outside the EU/EEA?
Processing normally takes place within the EU/EEA. Where a transfer outside this area is necessary, it must meet GDPR requirements, such as an adequacy decision or appropriate safeguards including standard contractual clauses. Contact us for information about the safeguards applicable to your data.
Making a request or a complaint
We may need information to verify your identity. Requests must be answered without undue delay, normally within one month. Complex or numerous requests may allow an extension of up to two further months; you must be informed within the first month.
You may complain to the Swedish Authority for Privacy Protection (IMY), or another competent supervisory authority. Contacting us first does not remove that right.
Website cookies
Cookies and similar technologies are addressed separately on the Cookies page. For questions about the technologies used on this website or how your information is handled, contact us.
Contact us about your data
For privacy questions or to exercise your rights, email us with “Data protection” in the subject line.