Privacy Policy

Version 3.0. This policy applies from and including 21 October 2026 until further notice. It replaces version 2.0, which applied from and including 1 June 2020.

At MetaSolutions, we respect your privacy. We want you to feel secure when you entrust your personal data to us. That is why we have published this Policy. It is based on current data protection legislation, and explains how we work to safeguard your rights and your privacy when we process your information.

Among other things, this Privacy Policy describes the following:

  • What information we collect and why.
  • How we use the information.
  • What information we share with others.
  • How long we keep the information and what rights you have.

Personal Data Controller and Personal Data Processor

MetaSolutions AB, corporate ID number 556854-0701, Söder Mälarstrand 21, 118 20 Stockholm, Sweden, is the Personal Data Controller for the processing set out in this Policy.

MetaSolutions is also Personal Data Processor in the event that we process your personal data on behalf of another party, e.g. if your personal data is included in datasets in our EntryScape service. In that event, we refer you to our client's privacy policy for more information on how your personal data is managed.

If you have any questions about this Policy, the processing of personal data or if you want to know or exercise your rights, please do not hesitate to contact us at support@entryscape.com. Our data protection contact can be reached at the same address.

The information that we collect and legal basis

We collect information in the following way. The legal basis for each kind of processing is set out under the heading Legal basis below.

  • Information provided by you or your organisation.
    • User accounts You must have a user account to use our services such as EntryScape or our community. When you open an account, we ask you for personal data including name and email address to enable us to manage your account.
    • Forms on the website When you fill in a form on entryscape.com, for example to contact us, book a demo or a consultation, sign up for a course or subscribe to our newsletter, we store what you enter. Depending on the form, this is your email address, first name, last name, organisation, job title, phone number and your message, and that you have accepted the terms. The form also includes the page it was sent from and an internal reference to the form. More about this under the heading Forms and newsletter.
    • Our community, newsletter and other communications We collect and process personal data which you submit to us, such as when you register for our newsletter, contact us on other matters for the purpose of dealing with enquiries, communicate with you, give you a good experience of our services or when you participate in group discussions in our community.
  • Information we obtain when you use our services. We collect information on how you use our services and websites, for example when you view and interact with content and functions. This applies to the following types of information:
    • Log information When you use a service or view content which is provided by us, we collect certain information, and this is automatically saved in the server logs. Log data includes the following:
      • Information on how you used our service, such as your search queries.
      • IP address.
      • Cookies which can identify your web browser or your user account.
    • Logs for entryscape.com Our hosting provider Vercel logs the IP address and the requested address, for operations and security. Our own functions on the website do not write any personal data to the logs.
    • Local storage We can collect and save information (including personal data) locally on your device using functions such as the browser's storage (including HTML 5) and software caches.
    • Cookies A cookie is a small text file which is stored in your web browser. On entryscape.com we only use the cookies described under the heading Cookies on entryscape.com below. In our services, such as EntryScape, we use cookies to handle login. If we collect statistics on how the services are used, in order to improve them, we first ask for your consent where required. A cookie cannot be used to destroy or otherwise damage a visitor's computer.
  • Information from other sources
    • In some cases we collect information from other sources, such as our partners, Group companies and other suppliers. We can also collect and update your address information via third parties' address updating services.

Cookies on entryscape.com

We ask for your consent before we use any cookies other than the necessary ones. On your first visit, a box at the bottom of the page lets you accept all, reject all or choose for yourself under Settings. Nothing is preselected. No scripts for statistics or marketing are loaded before you have said yes.

  • Necessary The cookie cc_cookie stores your cookie choice: the categories you accepted, a random consent ID, the time and the version of the settings. The website needs it to remember your choice, and it is kept for 12 months. After that you are asked again. It is not sent to any server.
  • Statistics If you accept statistics, we use Google Analytics 4 to see how the website is used, for example which pages are read and where visitors come from. Google Analytics sets cookies (_ga and _ga_ followed by an ID) which distinguish visitors with a random ID. We have switched off Google signals and ad personalisation, and we do not use the data for advertising. The cookies are kept for 13 months. The provider is Google Ireland Limited.
  • Marketing We currently use no marketing cookies. If we start doing so, for example to measure our ads, we will ask for your consent first, and the cookies will then be listed in the cookie declaration.
  • Embedded content (videos from YouTube) Some pages have videos from YouTube. Before you click play, nothing is loaded from YouTube, and the video image comes from our own server. When you click, the video plays from youtube-nocookie.com. Your IP address is then sent to Google, and YouTube may store cookies and other data in your browser. They are listed under Embedded content in the cookie declaration. The provider is Google Ireland Limited, and Google's privacy policy applies. If you do not want that, you can watch the video on YouTube instead through the link below the video.

You can change or withdraw your consent at any time under Cookie settings at the bottom of every page. If you withdraw your consent to statistics, the Google Analytics cookies are removed. Which cookies we use, how long they are kept and whether data is transferred outside the EU/EEA is set out in the cookie declaration.

Forms and newsletter

When you send a form on entryscape.com, the data first goes to our own function on the website, which runs in the EU (Vercel's region in Stockholm). From there it is passed on to Constant Contact Lead Gen & CRM (formerly SharpSpring). This is our customer database (CRM) and our tool for forms, newsletters and automated mailings. When a request comes in, Constant Contact sends an email about it to our sales team. We use the data to reply to you and handle your request, for example to book a demo or a place on a course.

You only receive the newsletter if you have signed up yourself and explicitly said yes to it. Every mailing has a link that lets you unsubscribe. By default, Constant Contact measures whether mailings are opened and which links are clicked, so that we can see what interests our readers.

Legal basis

We process personal data on the basis of Article 6 of the General Data Protection Regulation (GDPR):

  • Consent (Article 6(1)(a)) for statistics and marketing cookies and for our newsletter. You can withdraw your consent at any time.
  • Contract and steps prior to a contract (Article 6(1)(b)) for user accounts in our services and when we reply to a request for a demo, consultation, quote or course.
  • Legitimate interest (Article 6(1)(f)) when we reply to other questions you send us, for server logs and information security, for collecting information from other sources and for profiling as described below.
  • Legal obligation (Article 6(1)(c)) where the law requires us to keep data, for example accounting records.

How long do we store your personal data?

Your personal data is processed only for as long as necessary for the purposes for which it is collected, for example as long as it is required to enable us to fulfil the obligations we have under an agreement with you or your organisation, to fulfil a request from you or to carry out market analysis and marketing. We can also store your information for longer if this is required by law or to protect our legal interests, for example during a legal process.

Your personal data will be deleted or anonymised when it is no longer relevant for the purposes for which it was collected.

Retention periods:

  • The consent cookie cc_cookie: 12 months.
  • Google Analytics cookies: 13 months. Data in Google Analytics: 14 months.
  • Requests from the forms (contact, demo, consultation, course): as long as the customer relationship or contact is active, and for two years after that.
  • Newsletter: until you unsubscribe. Unsubscribed addresses are kept on a suppression list so that you do not receive mailings again.
  • Logs at Vercel: no more than 30 days.
  • User accounts in our services: as long as the account exists. The data is deleted when the account is closed.
  • Accounting records: seven years under the Swedish Accounting Act.

Profiling

If you are a client of ours, we can look at how you use our website, which of our services and offers you have been interested in, which of our newsletters you have interacted with, which of our events you have registered for and similar information. We do this so that we can provide you with targeted offers on our services. You can, at any time, object to the processing of personal data through profiling by contacting us.

How we use the information we collect

Information we collect from our services is used to provide, support and improve our services, develop new services and protect MetaSolutions and our users.

Statistics from Google Analytics, if you have accepted them, are used to improve the website and the overall quality of the service.

We also use information we collect to enable us to:

  • keep you regularly informed when new information is posted on our blog/news page, if you subscribe to our newsletter,
  • send information that you request from our knowledge bank and other resources,
  • inform you about activities you might be interested in participating in,
  • contact you and give you the help you have requested,
  • contact you concerning recruitment if you have applied for a position with us,
  • manage accounts and user profiles in our services that you are a user of,
  • make available our community, where you can ask questions and exchange experiences with other community members.

Information which you make public in our services

In our services, you can make information public. Remember that information which you make public can be indexed by Google and other search engines. You or your organisation are/is the Personal Data Controller for all information which you store on our services such as EntryScape and EntryScape Free, and for ensuring that this processing is in conformity with current data protection legislation.

Information that we share

We do not share personal data with companies, organisations or individuals outside MetaSolutions except in the following circumstances:

  • To provide you with the service you have requested For example, we share personal data such as name and user profile in our community with other members for the purpose of achieving a vibrant and successful community service.
  • With your consent We share personal data with companies, organisations or individuals outside MetaSolutions if you have given us permission to do so. We must have your active consent before we can share sensitive personal data with others.
  • For legal reasons We share personal data with companies, organisations or individuals outside MetaSolutions if we have good reason to believe that access to, retention of or disclosure of such data is necessary for:
    • complying with applicable legislation, rules, legal process or a mandatory demand from the authorities
    • guaranteeing that current user terms and conditions are followed, including investigation of any possible breach of these terms and conditions
    • discovering, preventing or otherwise dealing with fraud, security problems or technical issues
    • protecting against damage to MetaSolutions' rights, property or security, MetaSolutions' users or the general public in accordance with what is required or permitted by law.
  • With collaborating companies We may share your personal data with companies and suppliers who provide services for us, e.g. to handle mailings, deliver services, communicate offers, supply IT systems and carry out client analyses. These companies are permitted to process your personal data only in accordance with our instructions and must not use your data for their own purposes. The suppliers for the website are listed under the heading Recipients and processors.

If MetaSolutions is involved in a merger, an acquisition or any other form of sale, we will safeguard the confidentiality of all personal data and inform the users involved before their personal data is transferred or comes under the privacy policy of another party.

Recipients and processors

For the website entryscape.com we use the following suppliers. They process personal data on our behalf under data processing agreements.

  • Vercel hosts the website. The function that receives forms runs in the EU (Stockholm). Pages are delivered via Vercel's global network of servers (CDN), so your request may be answered by a server outside the EU.
  • Google (Google Ireland Limited) provides Google Analytics, which is only used if you have accepted statistics.
  • Constant Contact (Constant Contact Lead Gen & CRM) receives what you send via the forms, notifies our sales team of requests and sends our newsletter.

Transfers to countries outside the EU/EEA

Google, Constant Contact and Vercel are US companies or have US parent companies, and data may therefore be transferred to the USA.

  • Google LLC is certified under the EU-US Data Privacy Framework.
  • Constant Contact: under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses, as set out in our data processing agreement with the provider.
  • Vercel: under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses, as set out in our data processing agreement with the provider.

Transfers are based on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Article 45 GDPR) or, for a company that is not certified, the European Commission's standard contractual clauses (Article 46).

Information security

We work hard to protect ourselves and our users against unauthorised access, changes, disclosure or destruction of information which we manage. Specific security measures are:

  • We encrypt access to our services and websites using HTTPS (TLS).
  • We review our procedures for collecting, storing and processing data, including physical security measures, for the purpose of protecting against unauthorised access to systems.
  • We limit access to personal data to MetaSolutions' employees, suppliers and agents who require it to enable them to process the data on our behalf. They are bound to strict confidentiality in accordance with their contracts of employment or a separate confidentiality obligation.

Links and external websites

Our websites provide links to other websites and social media platforms. We are committed to protecting your personal privacy as a user of our websites. In the event that you use social media, for example, we recommend that you familiarise yourself with the policies which apply to these platforms.

Your rights

You can exercise your rights by contacting us at support@entryscape.com. We reply within one month.

  • Rectification and access to your personal data As a data subject, you have the right at any time to request rectification of inaccurate information or change the personal data you have provided. You also have the right to view the personal data that we have registered on you. You do this by requesting a register extract.
  • Withdraw any consent with future effect If we process your personal data on the basis of your consent, you have the right at any time to withdraw your consent in respect of future processing. You change your cookie consent under Cookie settings at the bottom of the page. You unsubscribe from the newsletter with the link in every mailing.
  • Object to processing You have the right to object to processing which we carry out on the basis of legitimate interest. You can, at any time, indicate that you no longer wish to receive, for example, advertising and communications mailings. You can unsubscribe either by clicking on a link in the current mailing or by contacting us.
  • Erasure Under certain circumstances, you have the right to have your personal data deleted. This does not apply, however, if, for example, we have a legal obligation to retain the data.
  • Restriction of processing You may also have the right to request that the processing of your personal data be restricted. If you request that the processing of your data is to be restricted, this may, however, mean that we cannot fulfil our obligations towards you during the time to which the processing has been restricted.
  • Data portability In the event that you wish to move your data from us, you also have the right to obtain a copy of the personal data which concerns you in a structured, machine-readable format. This right extends only to data which you yourself have shared with us.
  • Complaints in respect of our processing of your personal data If you are dissatisfied with the way in which we process your personal data, we ask you in the first instance to contact us directly. Our contact information is provided in this Policy. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se.

Changes

This Privacy Policy may be changed from time to time. We will post announcements on changes to the Privacy Policy on this page. If the changes are significant, we will also provide a more prominent notification. Earlier versions remain available: version 2.0 applied from and including 1 June 2020.