Teneo AI (‘’TENEO’’) is committed to protecting your privacy and ensuring the highest level of security for your personal information. This Privacy Notice explains the types of personal information we collect, how we use that information, who we share it with, how we protect that information and your legal rights. This Privacy Notice (“Notice”) applies to TENEO’ domain: teneo.ai, its subdomains, and any other services and features related to teneo.ai and its subdomains, which are described below (the “Domains”). 

If you are a user of TENEO Services, Teneo.ai and any other services and features related to these products and subdomains, please check the applicable privacy policy here:  

Please read the following carefully to understand our views and practices regarding your personal information. 

For the purposes of the applicable data protection law, the Data Controller is Teneo AI AB, with registered office at Svärdvägen 2, 182 33, Danderyd, Sweden, with organization number 556840-2076. 

Th applicable data protection laws, shall include, but not be limited to the EU General Data Protection Regulation (2016/679) (‘’GDPR’’), the Data Protection Act 2018 and any other laws over which the European Commission has issued an adequacy decision.  

This Privacy Notice covers all personal information processed by Teneo AI acting as a Controller (as described in the GDPR) which means information that (either in isolation or in combination with other information) enables you to be identified directly or indirectly. The process complies with the principles and rights contained in the GDPR. 

We may collect information about you from the following resources: 

We may collect personal information, such as your name, e-mail address, job title, telephone number, and all other personal information that may be provided by you. This personal information is provided to us when you: 

We may also collect information about you from other sources including third parties and from publicly available information.  We may combine this information with Personal Data provided by you. This helps us update, expand, and analyze our records, identify new customers. The Personal Data we may collect from other sources includes identifiers, professional or employment-related information and commercial information. We collect such Personal Data from the following sources: 

We have implemented technical and organisational security measures to safeguard your personal information in our custody or control. Such measures include, for example, limiting access to personal information only to employees and authorised service providers who need to know such information for the purposes described in this Privacy Notice, as well as other administrative, technical and physical safeguards.  

In using some of the functionalities we make available, you may come across links to websites and services operated by third parties. These third parties have their own privacy policies, which will apply to your activity if you click on the link or access their website or service. We do not accept any responsibility or liability for such external sites’ privacy and security practices. 

We endeavour to protect our systems, sites, operations and information against unauthorised access, use, modification, and disclosure, due to the inherent nature of the Internet as an open global communications vehicle and other risk factors. 

We will only keep your personal data during the length of the agreement, to be able to deliver the services we agreed to. We will keep it as long as the applicable laws in conjunction with our Information Security Management System requires it. When none of the reasons above are met we will delete or anonymize all your personal data that we may hold, without prejudice of the exercise of your right to delete. Bear in mind we may not be able to accept your request if it makes impossible for us to deliver the service or contravenes a compulsory mandate by law. 

Service providers: In some cases, we share your data with external service providers: 

Communication tools: We may communicate with you via email. 

Cloud tools: Where we will store any agreement you have in place with us. 

Consent register: Where we store your consent and the information related to it. 

Technical service partners: To obtain information about you once you have given us your consent. 

While providing such services, these service providers may have access to your personal information. However, we will only provide our service providers with personal information which is necessary for them to perform their services, and we require them not to use your information for any other purpose. We use our best efforts to ensure that all our service providers keep your personal information secure.  If you need more details about our Service providers, please contact us using the details below. 

Third parties required or permitted by law: In certain circumstances, we may be required to disclose or share your personal information in order to comply with a legal or regulatory obligation (for example, we may be required to disclose personal information to the police, regulators, government agencies or to judicial or administrative authorities). 

We may also disclose your personal information to third parties where disclosure is both legally permissible and necessary to protect or defend our rights, matters of national security, law enforcement, to enforce our contracts or protect your rights or those of the public. 

Third parties connected with business transfers: We may transfer your personal information to third parties in connection with a reorganisation, restructuring, merger, acquisition or transfer of assets, provided that the receiving party agrees to treat your personal information in a manner consistent with this Privacy Notice. 

If you are a resident in the European Union, be aware that by continuing to use some of the functionalities we make available, some of your personal information may be transferred to and processed outside of the European Union, by us, our affiliates and our service providers. We take all steps that are reasonably necessary to ensure that your personal information is treated securely and in accordance with this Privacy Notice, national data protection laws and the General Data Protection Regulation (EU) 2016/679 requirements for data transfers outside the European Union, by using tools such as Standard Contractual Clauses, Adequacy Decisions, International Treaties and, of course, your consent. If you have any questions, please contact us at the details set out below. 

Teneo AI group entities:  we may share your information with our entities located in the European Union and which are legally bound by GDPR. Furthermore, TENEO operates within a ISMS which guarantees the same security standard to all European and non-European companies for the purpose of information security and GDPR.  

You have the following rights:  

You can make a request to exercise any of these rights in relation to your personal information by sending the request by mail to our group DPO, María Carrillo at Svärdvägen 2, 182 33, Danderyd, Sweden, or by email to LegalCompliance@teneo.ai.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.

You also have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws. If you are based in, or the issue you would like to complain about took place, in the EEA, please click here for a list of local data protection authorities in the other EEA countries. If you are based in the UK or Switzerland, your local data protection authorities are the UK Information Commissioner's Office and the Swiss Federal Data Protection and Information Commissioner.

This Privacy Notice is written in English and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this notice, the English version shall prevail.

We reserve the right to change our Privacy Policy from time to time. If we add any different purpose of those included here, we will notify you and ask for your acceptance. If we decide to do any other changes to this Policy, we will update it directly in our websites.

If there are any questions or concerns regarding this Privacy Notice, please contact our DPO as follows: