Privacy Policy for entryscape.com

Version 1.0. This policy applies from and including 21 October 2026 until further notice. It applies to the website entryscape.com. For EntryScape customer instances, the privacy policy for customer instances applies.

At MetaSolutions, we respect your privacy. We want you to feel secure when you entrust your personal data to us. That is why we have published this Policy. It is based on current data protection legislation, and explains how we work to safeguard your rights and your privacy when we process your information.

Among other things, this Privacy Policy describes the following:

  • What information we collect and why.
  • How we use the information.
  • What information we share with others.
  • How long we keep the information and what rights you have.

Personal Data Controller

MetaSolutions AB, corporate ID number 556854-0701, Söder Mälarstrand 21, 118 20 Stockholm, Sweden, is the Personal Data Controller for the processing set out in this Policy.

If you have any questions about this Policy, the processing of personal data or if you want to know or exercise your rights, please do not hesitate to contact us at support@entryscape.com. Our data protection contact can be reached at the same address.

The information that we collect and legal basis

We collect information in the following way. The legal basis for each kind of processing is set out under the heading Legal basis below.

  • Information provided by you or your organisation.
    • Forms on the website When you fill in a form on entryscape.com, for example to contact us, book a demo or a consultation, sign up for a course or subscribe to our newsletter, we store what you enter. Depending on the form, this is your email address, first name, last name, organisation, job title, phone number and your message, and that you have accepted the terms. The form also includes the page it was sent from and an internal reference to the form. More about this under the heading Forms and newsletter.
    • Newsletter and other communications We collect and process personal data which you submit to us, such as when you register for our newsletter or contact us on other matters, in order to deal with enquiries and communicate with you.
  • Information we obtain when you visit the website. We collect information on how you use the website, for example which pages you read. This applies to the following types of information:
    • Logs Our hosting provider Vercel logs the IP address and the requested address, for operations and security. The function that receives the forms uses a hash of your IP address for no more than ten minutes to stop spam, and does not store it. Our own functions do not write any personal data to the logs.
    • Local storage The website does not store anything in the browser's storage. The only things stored in your browser are the cookies described under the heading Cookies on entryscape.com below.
    • Cookies A cookie is a small text file which is stored in your web browser. On entryscape.com we only use the cookies described under the heading Cookies on entryscape.com below.
  • Information from other sources
    • In some cases we collect information from other sources, such as our partners, Group companies and other suppliers. We can also collect and update your address information via third parties' address updating services.

Cookies on entryscape.com

We ask for your consent before we use any cookies other than the necessary ones. On your first visit, a box at the bottom of the page lets you accept all, reject all or choose for yourself under Settings. Nothing is preselected. No scripts for statistics or marketing are loaded before you have said yes.

  • Necessary The cookie cc_cookie stores your cookie choice: the categories you accepted, a random consent ID, the time and the version of the settings. The website needs it to remember your choice, and it is kept for 12 months. After that you are asked again. It is not sent to any server.
  • Statistics If you accept statistics, we use Google Analytics 4 to see how the website is used, for example which pages are read and where visitors come from. Google Analytics sets cookies (_ga and _ga_ followed by an ID) which distinguish visitors with a random ID. We have switched off Google signals and ad personalisation, and we do not use the data for advertising. The cookies are kept for 13 months. The provider is Google Ireland Limited.
  • Marketing If you accept marketing, we load the tracking from Constant Contact Lead Gen & CRM (formerly SharpSpring). It records which pages you visit and sets cookies: __ss_tk, a random ID for your browser which Constant Contact gives a lifetime of 25 years, and __ss, __ss_referrer and __ss_initial_referrer, which keep track of the visit for no more than 24 hours. Constant Contact also sets the cookie koitk on its own domain, to recognise your browser between visits, for 400 days. If you fill in one of our forms, your visits are linked to your contact details, so that we can follow up on what you are interested in. The provider is Constant Contact, Inc.
  • Embedded content (videos from YouTube) Some pages have videos from YouTube. Before you click play, nothing is loaded from YouTube, and the video image comes from our own server. When you click, the video plays from youtube-nocookie.com. Your IP address is then sent to Google, and YouTube may store cookies and other data in your browser. They are listed under Embedded content in the cookie declaration. The provider is Google Ireland Limited, and Google's privacy policy applies. If you do not want that, you can watch the video on YouTube instead through the link below the video.

You can change or withdraw your consent at any time under Cookie settings at the bottom of every page. If you withdraw your consent to statistics, the Google Analytics cookies are removed, and if you withdraw your consent to marketing, the Constant Contact cookies on entryscape.com are removed. The cookie koitk is on Constant Contact's domain and cannot be removed by us, but it is no longer used once consent has been withdrawn. Which cookies we use, how long they are kept and whether data is transferred outside the EU/EEA is set out in the cookie declaration.

Forms and newsletter

When you send a form on entryscape.com, the data first goes to our own function on the website, which runs in the EU (Vercel's region in Stockholm). From there it is passed on to Constant Contact Lead Gen & CRM (formerly SharpSpring). This is our customer database (CRM) and our tool for forms, newsletters and automated mailings. When a request comes in, Constant Contact sends an email about it to our sales team. We use the data to reply to you and handle your request, for example to book a demo or a place on a course. If you have accepted marketing, the ID in the cookie __ss_tk is also sent with the form, so that your visits to the website are linked to your contact details.

The email address is required in all forms, because we need it to be able to reply to you. Fields marked with * must be filled in for the form to be sent. Other fields are optional.

You only receive the newsletter if you have signed up yourself and explicitly said yes to it. Every mailing has a link that lets you unsubscribe. By default, Constant Contact measures whether mailings are opened and which links are clicked, so that we can see what interests our readers.

Legal basis

We process personal data on the basis of Article 6 of the General Data Protection Regulation (GDPR):

  • Consent (Article 6(1)(a)) for statistics and marketing cookies, for linking your visits to the website to your contact details and for our newsletter. You can withdraw your consent at any time.
  • Contract and steps prior to a contract (Article 6(1)(b)) when we reply to a request for a demo, consultation, quote or course.
  • Legitimate interest (Article 6(1)(f)) when we reply to other questions you send us, for server logs and information security, for collecting information from other sources and for profiling of clients as described below. Our legitimate interest is to be able to answer questions, keep the website secure and running and give our clients relevant offers.
  • Legal obligation (Article 6(1)(c)) where the law requires us to keep data, for example accounting records.

How long do we store your personal data?

Your personal data is processed only for as long as necessary for the purposes for which it is collected, for example as long as it is required to enable us to fulfil the obligations we have under an agreement with you or your organisation, to fulfil a request from you or to carry out market analysis and marketing. We can also store your information for longer if this is required by law or to protect our legal interests, for example during a legal process.

Your personal data will be deleted or anonymised when it is no longer relevant for the purposes for which it was collected.

Retention periods:

  • The consent cookie cc_cookie: 12 months.
  • Google Analytics cookies: 13 months. Data in Google Analytics: 14 months.
  • Constant Contact cookies: __ss_tk 25 years and koitk 400 days (the lifetime is set by Constant Contact), the others no more than 24 hours.
  • Visits that have been linked to your contact details: as long as the contact is in our customer database, see requests below.
  • Requests from the forms (contact, demo, consultation, course): as long as the customer relationship or contact is active, and for two years after that.
  • Newsletter: until you unsubscribe. Unsubscribed addresses are kept on a suppression list so that you do not receive mailings again.
  • Logs at Vercel: no more than 30 days.
  • Accounting records: seven years under the Swedish Accounting Act.

Profiling

If you have accepted marketing and filled in one of our forms, we link your visits to the website to your contact details in Constant Contact. We can then see which pages you have visited and which of our newsletters you have opened and clicked in. We do this so that we can follow up on what you are interested in. If you are a client of ours, we can also look at which of our services and offers you have been interested in and which of our events you have registered for, to give you targeted offers. You can at any time withdraw your consent under Cookie settings or object to the profiling by contacting us.

How we use the information we collect

Information we collect on the website is used to run, maintain and improve the website and to protect MetaSolutions and our visitors.

Statistics from Google Analytics, if you have accepted them, are used to improve the website.

We also use information we collect to enable us to:

  • keep you regularly informed when new information is posted on our blog/news page, if you subscribe to our newsletter,
  • send information that you request from our knowledge bank and other resources,
  • inform you about activities you might be interested in participating in,
  • contact you and give you the help you have requested,
  • contact you concerning recruitment if you have applied for a position with us.

Information that we share

We do not share personal data with companies, organisations or individuals outside MetaSolutions except in the following circumstances:

  • With your consent We share personal data with companies, organisations or individuals outside MetaSolutions if you have given us permission to do so. We must have your active consent before we can share sensitive personal data with others.
  • For legal reasons We share personal data with companies, organisations or individuals outside MetaSolutions if we have good reason to believe that access to, retention of or disclosure of such data is necessary for:
    • complying with applicable legislation, rules, legal process or a mandatory demand from the authorities
    • guaranteeing that current user terms and conditions are followed, including investigation of any possible breach of these terms and conditions
    • discovering, preventing or otherwise dealing with fraud, security problems or technical issues
    • protecting against damage to MetaSolutions' rights, property or security, MetaSolutions' users or the general public in accordance with what is required or permitted by law.
  • With collaborating companies We may share your personal data with companies and suppliers who provide services for us, e.g. to handle mailings, deliver services, communicate offers, supply IT systems and carry out client analyses. These companies are permitted to process your personal data only in accordance with our instructions and must not use your data for their own purposes. The suppliers for the website are listed under the heading Recipients and processors.

If MetaSolutions is involved in a merger, an acquisition or any other form of sale, we will safeguard the confidentiality of all personal data and inform the users involved before their personal data is transferred or comes under the privacy policy of another party.

Recipients and processors

For the website entryscape.com we use the following suppliers. They process personal data on our behalf under data processing agreements.

  • Vercel hosts the website. The function that receives forms runs in the EU (Stockholm). Pages are delivered via Vercel's global network of servers (CDN), so your request may be answered by a server outside the EU.
  • Google (Google Ireland Limited) provides Google Analytics, which is only used if you have accepted statistics.
  • Constant Contact (Constant Contact Lead Gen & CRM) receives what you send via the forms, notifies our sales team of requests and sends our newsletter. If you have accepted marketing, Constant Contact also records your visits to the website.

Transfers to countries outside the EU/EEA

Google, Constant Contact and Vercel are US companies or have US parent companies, and data may therefore be transferred to the USA. Transfers are based on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Article 45 GDPR), under which all three companies are certified:

  • Google LLC is certified under the EU-US Data Privacy Framework.
  • Constant Contact, Inc. is certified under the EU-US Data Privacy Framework, and SharpSpring is covered by the certification. Should the framework cease to apply, the European Commission's standard contractual clauses (Article 46 GDPR) apply under our data processing agreement.
  • Vercel Inc. is certified under the EU-US Data Privacy Framework. Our data processing agreement with Vercel also includes the European Commission's standard contractual clauses (Article 46 GDPR).

Information security

We protect personal data against unauthorised access, changes, disclosure and destruction. Among other things, we do the following:

  • All traffic to the website and the forms is encrypted with HTTPS (TLS).
  • We review our procedures for collecting, storing and processing data, including physical security measures, for the purpose of protecting against unauthorised access to systems.
  • We limit access to personal data to MetaSolutions' employees, suppliers and agents who require it to enable them to process the data on our behalf. They are bound to strict confidentiality in accordance with their contracts of employment or a separate confidentiality obligation.

Links and external websites

The website links to other websites and to social media. When you follow such a link, that website's own privacy policy applies, and we recommend that you read it.

Your rights

You can exercise your rights by contacting us at support@entryscape.com. We reply within one month.

  • Rectification and access to your personal data As a data subject, you have the right at any time to request rectification of inaccurate information or change the personal data you have provided. You also have the right to view the personal data that we have registered on you. You do this by requesting a register extract.
  • Withdraw any consent with future effect If we process your personal data on the basis of your consent, you have the right at any time to withdraw your consent in respect of future processing. You change your cookie consent under Cookie settings at the bottom of the page. You unsubscribe from the newsletter with the link in every mailing.
  • Object to processing You have the right to object to processing which we carry out on the basis of legitimate interest. You can, at any time, indicate that you no longer wish to receive, for example, advertising and communications mailings. You can unsubscribe either by clicking on a link in the current mailing or by contacting us.
  • Erasure Under certain circumstances, you have the right to have your personal data deleted. This does not apply, however, if, for example, we have a legal obligation to retain the data.
  • Restriction of processing You may also have the right to request that the processing of your personal data be restricted. If you request that the processing of your data is to be restricted, this may, however, mean that we cannot fulfil our obligations towards you during the time to which the processing has been restricted.
  • Data portability In the event that you wish to move your data from us, you also have the right to obtain a copy of the personal data which concerns you in a structured, machine-readable format. This right extends only to data which you yourself have shared with us.
  • Complaints in respect of our processing of your personal data If you are dissatisfied with the way in which we process your personal data, we ask you in the first instance to contact us directly. Our contact information is provided in this Policy. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se.

Changes

This Privacy Policy may be changed from time to time. We will post announcements on changes to the Privacy Policy on this page. If the changes are significant, we will also provide a more prominent notification.