Privacy Policy

Last updated: 21 August 2026

1. Introduction

European Resource Hub AB, registration number 559441-8203, and postal address c/o Mikael Salo, Selmedalsvägem 64, 12937 Hägersten ("European Resource Hub", "we", "our" or "us"), is the controller responsible for the processing of personal data described in this Privacy Policy. For privacy-related matters, please contact us at info@resourcehub.se.

This Privacy Policy explains how we collect, use, disclose and safeguard personal data when you use our platform at resourcehub.se (the "Platform"). The Platform is designed exclusively for business-to-business (B2B) transactions between professional parties. The Platform is not intended for use by Consumers or private individuals, or persons under 18 years of age.

Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect several types of information from and about users of our Platform. We receive information directly from you, from the organisation you represent and from other Platform users; where necessary for verification, we may also obtain limited information from publicly available business registers. The categories of information include:

2.1. Personal Information

When you register for an account, we collect:

  • Name and contact information (email address, phone number)
  • Organization details (company name, address, registration number)
  • Verification documents (business licenses, certificates)
  • Profile information (job title, profile picture)

2.2. Transaction Information

When you use our Platform to post listings or engage in transactions, we collect:

  • Listing details (material types, quantities, pricing)
  • Transaction records
  • Messages between users
  • Documentation related to materials and transport

2.3. Usage Information

We automatically collect certain information about your device and how you interact with our Platform, including:

  • IP address and device information
  • Browser type and operating system
  • Pages viewed and features used
  • Time spent on the Platform and access dates and times

3. How We Use Your Information

3.1

We use the information we collect to:

  • Provide, maintain, and improve our Platform
  • Process and facilitate transactions between users
  • Verify user identities and organizations
  • Communicate with you about your account and transactions
  • Send you updates, security alerts, and support messages
  • Respond to your inquiries and provide customer support
  • Monitor and analyze usage patterns and trends
  • Detect, prevent, and address technical issues and fraudulent activities
  • Comply with legal obligations

3.2 Legal Basis for Processing

We process personal data on only where we have a lawful basis under Article 6 of the GDPR. Where you are the contracting party, we process data necessary to provide the Platform and administer your account under Article 6(1)(b). Where you act as a representative, employee or contact person for a business customer, we normally rely on our legitimate interests under Article 6(1)(f) in operating the Platform and managing the relevant business relationship. We process data to comply with accounting, tax and other statutory obligations under Article 6(1)(c). We also rely on Article 6(1)(f) for security, fraud prevention, troubleshooting, service administration and proportionate development of the Platform; our legitimate interests are to protect the Platform, users and transactions, maintain secure and efficient services, and develop our B2B offering. Where consent is required, including for non-essential cookies, we rely on Article 6(1)(a); consent may be withdrawn at any time without affecting processing already carried out.

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1. With Other Users

When you create a listing or engage in a transaction, other relevant Platform users may see the business and contact information, listing details, transaction records and communications that you choose to make available or that are necessary to facilitate the relevant transaction. The relevant counterparty normally processes personal data it receives for its own business purposes as an independent controller.

4.2. With Service Providers

We may share personal data with service providers that support hosting and infrastructure, customer support, communications, security, verification, analytics, professional advice and other operational services. Where such providers process personal data on our behalf, they act as processors under written data-processing agreements and may process the data only on our documented instructions. We may also disclose data to professional advisers, auditors, insurers and public authorities where necessary or required by law.

Our Infrastructure:

We do not transfer your personal data to our own systems, servers, or service providers located outside the European Union (EU) or the European Economic Area (EEA). All data processing by us and our service providers takes place exclusively within the EU/EEA, ensuring that your personal data remains subject to EU data protection standards. As a B2B trading platform designed to facilitate international commerce, you may choose to use the Platform to connect with potential trading partners located outside the EU/EEA. Where European Resource Hub makes personal data available to a counterparty in a third country through the Platform, that counterparty normally receives the data as an independent controller. We will make such transfers only where a transfer mechanism under Chapter V of the GDPR applies, including an adequacy decision under Article 45 or the European Commission's Standard Contractual Clauses under Article 46, supplemented where necessary by additional safeguards.

User-Initiated International Business Contacts:

As a B2B trading platform designed to facilitate international commerce, you may choose to use the Platform to connect with potential trading partners located outside the EU/EEA. When you actively choose to engage with businesses in third countries, certain personal data may be shared as follows:

What data may be shared:

  • Your name and professional title
  • Your business email address and phone number
  • Your company name and business address
  • Information you choose to include in enquiries, offers, or negotiations

When sharing occurs:

  • When you respond to an enquiry from a business located outside the EU/EEA
  • When you initiate contact with a potential trading partner in a third country
  • When you enter into commercial negotiations or contracts with non-EU/EEA parties
  • When you actively choose to disclose your contact details through the Platform's messaging or transaction features. You may request further information about the transfer mechanism and applicable safeguards by contacting us at info@resourcehub.se.

4.3. For Legal Reasons

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.4. Business Transfers

If we are involved in a merger, acquisition, or sale of all or a part of our assets, personal data may be disclosed or transferred as part of that transaction where necessary. The recepient must protect the data in accordance with applicable data protection laws, and any transfer outside the EU/EEA will be subject to an appropriate transfer mechanism under Chapter V of the GDPR.

5. Data Security

5.1

We implement appropriate technical and organizational measures to protect the security of your personal information. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure.

5.2 Data Retention

We retain your personal data for as long as necessary to fulfil our contractual obligations to you and to facilitate transactions between users.

  • Account information: Retained for the duration of your active account and thereafter only for as long as necessary to comply with legal obligations, resolve disputes, enforce agreements or establish, exercise or defend legal claims.
  • Transaction and accounting records: Retained for the period required by applicable accounting and tax legislation, and otherwise for as long as necessary to resolve disputes or establish, exercise or defend legal claims. For accounting material subject to Swedish bookkeeping requirements, this will normally be until the end of the seventh calendar year after the end of the relevant financial year.
  • Communication records:Retained for the duration necessary to administer the relevant account or transaction and thereafter for the applicable limitation period where needed to document an agreement or resolve a dispute.

Once the retention period expires and the data is no longer necessary for contractual purposes, we will securely delete or anonymise your personal data in accordance with our data retention schedule.

6. Your Rights

As a data subject within the European union, you have certain rights regarding your personal information, including:

  • The right to access and receive a copy of your personal information
  • The right to rectify or update your personal information
  • The right to request erasure of your personal data where the requirements of Article 17 of the GDPR are met
  • The right to request restriction of processing and to object, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or (f) of the GDPR; you may object at any time to processing for direct-marketing purposes
  • The right to data portability
  • The right to withdraw consent (where processing is based on consent)
  • The right to lodge a complaint with the supervisory authority in the EEA Member State of your habitual residence, place of work or the place of the alleged infringement

Limitation on Rights: Please note that certain rights may be limited where we have an overriding legitimate interest or legal obligation to continue processing your data. For example, we may need to retain certain transaction data to fulfil our contractual obligations even if you request deletion.

To exercise these rights, please contact us at info@resourcehub.se.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Platform and hold certain information. For more information about our use of cookies, please see our Cookie Policy.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at info@resource.se.

Supervisory Authority: