Your privacy matters to us. This policy explains what personal data GoSource processes, why, for how long, who we share it with, and the rights you have under the General Data Protection Regulation (GDPR).

What data we collect and why

1. When you contact us or book a meeting

Through the contact and booking forms we collect your name, email address, phone number and the message you write.

• Purpose: to respond to your enquiry and be able to contact you.
• Legal basis: legitimate interest, or steps prior to entering into a contract.

2. When you apply for a position

Through the application forms we collect your name, email, phone, LinkedIn profile, the role you apply for and any attachments (CV, cover letter).

• Purpose: to assess your application and carry out the recruitment process.
• Legal basis: legitimate interest (recruitment) and, for storing your application for future opportunities, your consent.

3. When you visit the website (analytics)

With your consent we use Google Analytics 4 to understand how the website is used (page views, approximate location, device and browser). This measurement is enabled only if you choose "Accept all" in our cookie banner. If you choose "Necessary only", no analytics measurement takes place.

• Purpose: to measure and improve the website.
• Legal basis: your consent.

Cookies

A cookie is a small text file stored in your browser. We use two types:

Type	Purpose	Requires consent?
Necessary	Make the website work and store your cookie choice (gs_consent).	No
Analytics (Google Analytics)	Statistics on how the website is used.	Yes

You can change or withdraw your choice at any time via the Cookie settings link at the bottom of the page. You can also delete cookies in your browser settings.

Who we share data with (processors)

We never sell your data. To run our business we use trusted providers that process data on our behalf:

Provider	Used for
Google (Analytics, Sheets, Drive)	Web analytics and receiving/storing applications.
Microsoft 365	Email and handling of enquiries.
Resend	Sending transactional email (e.g. confirmations).
Cloudflare	Hosting, security and delivery of the website.

Some of these providers may process data outside the EU/EEA (e.g. in the USA). Where this happens, the transfer is made with appropriate safeguards, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep the data

• Contact and booking enquiries: for as long as needed to handle the matter, then deleted.
• Applications: during the recruitment process. If we wish to keep your application longer for future opportunities, we do so only with your consent.
• Analytics data: according to the settings in Google Analytics (at most 14 months).

Your rights

Under the GDPR you have the right to:

• request access to the data we hold about you,
• have inaccurate data corrected,
• have data erased ("the right to be forgotten"),
• request restriction of, or object to, the processing,
• receive your data in a machine-readable format (data portability),
• withdraw any consent given, at any time.

Contact us at info@gosource.se to exercise your rights. If you are dissatisfied with how we process your data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Changes to this policy

We may update this policy as our business or the law changes. The latest version is always available on this page, with the date of the most recent update shown at the top.