Effective date: 14th October 2026

You can view the former privacy policy here.

Privacy Policy for BIMobject

In this privacy policy, BIMobject describes how we process your personal data. We process your personal data when you use the bimobject.com service, use Prodikt (our intelligent product data platform), Open Dictionary or the Design App for Revit, receive marketing, visit our website, participate in one of our events or webinars, or when we otherwise communicate with you.

When we refer to the bimobject.com service in this privacy policy, we refer to the service we offer on our website bimobject.com, unless specifically stated otherwise. Any references in this privacy policy to “BIMobject”, "we", "us" or "our" mean BIMobject AB, or, if BIMobject Inc. is the contracting party under the User Terms of Service, BIMobject Inc.

For further information on how we process your personal data in specific circumstances, please refer to the relevant sections in the summary below. Each section is clickable for ease of reference.

Summary – How do we process your personal data?

If you use the bimobject.com service or the Design App for Revit, we process your personal data to:

  • create and manage your Bim.com login,
  • enable you to use features on the bimobject.com service, e.g. downloading a product,
  • share your data and related insights with manufacturers you interact with,
  • manage your purchase(s),
  • analyse your usage of the bimobject.com service and the Design App for Revit (if you have consented to this or if necessary for the bimobject.com service and the Design App for Revit), and
  • improve the bimobject.com service by sending surveys.

If you use Prodikt or Open Dictionary, we process your personal data to:

  • create and manage your BIM.com login, and
  • analyse your usage of Prodikt and Open Dictionary (if you have consented to this).

If you receive marketing, we process your personal data to:

  • send you newsletters and other marketing to market ourselves,
  • send you marketing with content from manufacturers you have engaged with, as well as manufacturers who market to you as a target audience
  • send you personalised marketing, and
  • improve our newsletters.

If you visit our website, we process your personal data to:

  • analyse how our website is used (if you have consented to this), and
  • provide a functioning website.

If you are in contact with us, represent a business lead or visit our social media, we process your personal data to communicate with you, e.g. via email or social media

If you participate in any of our events or webinars, we process your personal data to:

  • take photos/videos during an event, and publish them on our website and social media if you consent, and
  • administrate and manage your participation in events and webinars.

If you have questions, complaints, legal claims, or similar, we process your personal data to:

  • handle your questions, complaints, feedback, or legal claims,
  • send updated privacy policies,
  • comply with marketing laws, if you have unsubscribed from our mailings, and
  • comply with accounting legislation.

Our processing of personal data means that your personal data is shared with certain third-parties who process it outside the EU/EEA.

Your rights

You have the following rights:

We are committed to transparency in the processing of your personal data. Below, you will find further details regarding our processing activities. This privacy policy has been drafted in detail in order to comply with the requirements of the General Data Protection Regulation (GDPR). For ease of reference, please use the summary above and the table of contents below to navigate to the relevant section. Should you have any questions or wish to exercise your rights, please do not hesitate to contact us.

Privacy Policy – more details

Click here to read more about:

Data controller and our contact details

Who process your personal data and why?

Do we transfer your personal data outside the EU/EEA?

Detailed information about how we process your personal data

What rights do you have when we process your personal data?

Balancing of interests

Data controller and our contact details

BIMobject AB, with organization number 556856-7696 (“BIMobject”), is the data controller responsible for the processing of your personal data as described in this privacy policy. If you have any questions regarding our processing of your personal data, or if you wish to exercise any of your rights, please contact us at the details set out below.

Email: hello@bimobject.com

Letter: c/o Studio Nordenskiöldsgatan 24, 211 19 Malmö

Who processes your personal data and why?

In most cases we collect your personal data directly from you. We may also collect your personal data from third party providers we engage to find business leads, who processes your personal data as a data controller. In certain cases, we also share your personal data with third parties, as further described below.

We provide several features to you on bimobject.com where you can engage with other users and manufacturers on the bimobject.com service. Whenever you do so, your personal data connected to your user account will be visible to those you have engaged with, and some manufacturers will also be able to send marketing to you with promotional offers or newsletters. Please note that we will not share any personal data if you only use Prodikt and/or Open Dictionary.

In order to conduct our business, we need to engage suppliers and partners who process your personal data on our behalf, for example, to support the delivery of, provide functionality on, or help enhance the performance and security of our solutions, websites, and communications with you. Examples of such suppliers include HubSpot and Salesforce, which we use for CRM purposes.

In particular, we share your personal data with our IT suppliers, who process your personal data on our behalf and in accordance with our instructions in their capacity as data processors. We share personal data with these suppliers for all the purposes set out in the tables below.

We are responsible for ensuring that your personal data remains adequately protected when shared with such third parties. We take appropriate measures to protect your personal data, including when it is transferred outside the EU/EEA, as further described below.

We share your personal data with our partners and suppliers in the manner described below.

  • If you use the bimobject.com service, and have not opted out after receiving information, your personal data will be shared with manufacturers using the bimobject.com service in the following scenarios:

    • When you have downloaded one of their products or engaged with them in any way, such as by requesting a demo or contacting them about their products. We do this to provide insights about how users engage with their products, as well as to enable them to inform you about their business and products. This includes enabling manufacturers to export information about users who have downloaded their products or otherwise engaged with them, and use this information to find leads, including through a function we offer to manufacturers that enables them to search for your name and title on LinkedIn in order to connect with you.
    • We share your personal data with our group companies (including acquired subsidiaries), who use it to assist us with regional support and service in connection with the provision of our services. You cannot opt-out of this sharing, as it is necessary for us to provide the bimobject.com service.
  • If you have consented on the websites or when using our services, we use analytics services from third party providers, such as Google (YouTube) and Mouseflow, to analyse and improve our website and service. Your personal data will then be shared with these providers, who process your personal data on our behalf as our data processors, but also process your personal data as independent data controllers. These providers will inform you separately about the personal data processing for which they are responsible.
  • If you visit our websites, your personal data will be processed by the service providers we use to ensure the website functions, is secure and to remember your choices, such as Cloudflare. Cloudflare processes this data on our behalf, and also as an independent controller to improve its own bot-detection capabilities. You can read how Cloudflare handles this data in Cloudflare's Turnstile Privacy Addendum and its Privacy Policy. You can find a complete list of these providers on the cookie information on our website.
  • If you make purchases, your personal data will be processed by our payment service providers, who receive the personal data you provide to handle your purchase and who are responsible for the processing of personal data in connection with the payment. They are independently responsible for the processing of your personal data.
  • If you contact us via social media, the social media platform that you use will process personal data about you as a user. These social media platforms will continue to process your personal data as independent controllers. Information about how long they store your personal data can be found in their respective privacy information.

  • If you participate in any of our events, we will share your personal data with:

    • The photographer who takes your picture. The photographer will process your personal data on our behalf and in accordance with our instructions;
    • Social media platforms, if we publish a picture or video in which you appear. These social media platforms either process your personal data in accordance with our instructions or as controllers in their own right. Their role in a particular case depends on the specific platform and activity; and
    • Our event partner, if we arrange the event in collaboration with such a partner.
  • In the event of a legal dispute, we will share your personal data with authorities and lawyers as necessary.
  • In the event of a corporate transaction, such as a merger, acquisition, reorganisation, sale of assets or stock, financing, public offering of securities, or similar transaction or proceeding (including any related due diligence), we will share your personal data with the actual or potential buyer or seller and its agents and advisers. Such sharing will be subject to standard confidentiality arrangements, and we will inform the receiving party that your personal data may only be used for the purposes set out in this privacy policy.

If you want more information about how we share your personal data, please contact us.

Do we transfer your personal data outside the EU/EEA?

We are a European company and use servers located in the EEA. A lot of our processing will therefore be based in the EU/EEA. However, certain service providers and group companies process personal data outside the EU/EEA, and manufacturers located worldwide may receive personal data as described above. Such transfers outside the EU/EEA occur in the following cases:

  • If you visit our websites, your personal data will be transferred outside the EU/EEA if you consent to Google (YouTube) processing your personal data, and will also be transferred outside the EU/EEA to the US when Cloudflare processes your personal data to keep the service secure and prevent misuse.
  • When we engage our group companies in the provision of our services, your personal data will be shared outside the EU/EEA when such companies operate outside the EU/EEA.
  • If you contact us via our social media accounts, your personal data will be processed outside the EU/EEA by Meta and LinkedIn when you have chosen to be active on Instagram or Facebook.
  • If you have engaged with manufacturers or other users when using the bimobject.com service and have not opted out from sharing your personal data, your personal data will be transferred outside the EU/EEA when such users or manufacturers are operating outside the EU/EEA.

When your personal data is transferred to the US, it is done so on the basis of an adequacy decision by the European Commission pursuant to Article 45 of the GDPR. This means that the EU has assessed that the US has adequate protection for your personal data – through an agreement between the EU and the US called the EU-US Data Privacy Framework. Google, Meta, and Microsoft are certified under the EU-US Data Privacy Framework. On the Data Privacy Framework's website you can search for information about certified providers.

When US companies are not certified under the EU-US Data Privacy Framework, or when we transfer personal data to a country not subject to an adequacy decision, we cannot rely on the adequacy decision for transfers. In such cases, we will transfer your personal data under the Standard Contractual Clauses (Article 46.2 (c) GDPR) together with supplementary measures. You can find the Standard Contractual Clauses here. This will be the case when we transfer personal data to manufacturers who operate outside the EU/EEA. We have implemented additional safeguards to ensure that your personal data is protected.

If you would like to know more about the protective measures we implement when transferring your personal data, please contact us.

Detailed information about how we process your personal data

In this detailed description, you can read more about

  • why we process your personal data,
  • the categories of personal data we process,
  • the legal basis for processing your personal data,
  • how long we store your personal data,
  • where we obtain your personal data, and
  • whether you must provide us with your personal data.

If you use the bimobject.com service or the Design App for Revit

When we refer to “the bimobject.com service”, we refer to the services we offer on the website bimobject.com.

When you create a login, you create a so called Bim.com login, meaning that you can use the same login for our other services Prodikt and Open Dictionary. We inform you about some personal data we process when you use Prodikt or Open Dictionary below under the header “If you use Prodikt or Open Dictionary”.

To use the bimobject.com service or the Design App for Revit, you must create a user account. If you do not provide us with your personal data, we will not be able to create or manage your user account, and you will therefore not be able to use the bimobject.com service. Generally, we receive the information directly from you. However, if you choose to create an account via Google, LinkedIn or Autodesk, we also receive information from the provider you have chosen to create an account with, in order to enable you to log in.

We provide several features where you can engage with other users and manufacturers on the bimobject.com service. Whenever you do so, your personal data connected to your user account will be visible to those you have engaged with, and some manufacturers will also be able to send you marketing with promotional offers or newsletters, unless you have decided not to receive such communications. We describe this in more detail under the heading “If you receive marketing”.

When you as a manufacturer create a product in the bimobject.com service, you are responsible as a data controller for the images and texts you upload. This means that we do not process your images or texts for our own purposes as listed below.

To create and manage your Bim.com login

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • Enable you to create and log in to your user account when you log in with your email address
  • Email address
  • First and last name
  • Location: City and country
  • Occupation/field
  • Employer/company name
  • Your choices and settings, such as email preferences, preferred topics, and feed preferences
  • Phone number, if you have chosen to add it
  • Profile picture, if you have chosen to add it
  • Your member type, such as if you have a free account or a paying subscription

Performance of a contract (article 6.1 (b) GDPR)

The processing is necessary for us to create and manage your user account, and thereby perform the agreement relating to your user account. If you do not provide us with your personal data, you will not be able to create a user account with us.

  • Enable you to create and log in to your user account when you log in with a third-party account such as Google, LinkedIn or Autodesk
  • Email address connected to the service you chose to log in with, such as your Google account
  • Profile picture, if you have one associated with your third-party account
  • First and last name
  • Location: City and country
  • Occupation/field
  • Employer/company name
  • Your choices and settings, such as email preferences, preferred topics, and feed preferences
  • Phone number, if you have chosen to add it
  • Your member type, such as if you have a free account or a paying subscription
  • Ensure a secure login
  • Password
Storage period: We will process your personal data as long as you have a user account. You can close your user account using your user profile settings. If you choose to close your user account, your personal information will stop being visible to others on our services. 

Enable you to use features on the bimobject.com service

Purpose of the processingWhat personal data we processOur legal basis for the processing

Enable you to use certain features, such as:

  • Downloading a product,
  • Requesting a quote or more information from a manufacturer,
  • Viewing your previous downloads.

We use your email address as a sender address when you choose to continue a discussion after a manufacturer has left you an answer for your review and when contacting a brand through our business messenger on your behalf. If you choose to use this feature, the receiving brand can see and respond to your email address.

  • Email address
  • City
  • Employer/company name
  • Profile picture, if you have uploaded one
  • What products you have downloaded
  • Information that you have requested a quote or information from a manufacturer

Legitimate interest (Article 6.1 (f) GDPR)

The processing is necessary for purposes related to our legitimate interest in being able to offer the bimobject.com service.

  • Collect ratings and reviews of your downloaded products and publish them

After you have downloaded a product, we will send you an email where you can leave a review or rating of a product, unless you have opted out of such emails.

  • Email address
  • What products you have downloaded
  • Your ratings and reviews
  • Your occupation/field

Legitimate interest (Article 6.1 (f) GDPR)

The processing is necessary for purposes related to our legitimate interest in being able to offer the bimobject.com service.

Storage period: We will process your personal data as long as you have a user account. You can close your user account using your user profile settings. If you choose to close your user account, your personal information will stop being visible to others on our services. 

Information you have shared with others (e.g., through projects or business messenger) may remain visible after you close/delete your user account, and we are not data controllers for data that other users/manufacturers/customers may have copied out of our services.

Purpose of the processingWhat personal data we processOur legal basis for the processing

Certain manufacturers purchase the function where they can export user information related to users who have engaged with the manufacturer, for the purpose of marketing their products.

  • Export your user information to manufacturers who have enabled such function.
  • First and last name
  • Employer/company name
  • Occupation
  • Geographical location, such as country, state, zip code, city
  • Any activity related to the manufacturer’s products, such as downloads

Legitimate interest (Article 6.1 (f) GDPR)

The processing is necessary for purposes related to our legitimate interest in being able to offer the bimobject.com service and our manufacturers' legitimate interest in exporting leads.

  • Enable manufacturers to profile search on LinkedIn

As part of certain customer services, we include functionality where manufacturer’s representatives can click on a tab which takes them to LinkedIn where they can search for your professional profile. We do not provide a direct link to your profile, nor do we request that you submit any LinkedIn URL when you register your account.

  • First and last name

Legitimate interest (Article 6.1 (f) GDPR)

The processing is necessary for purposes related to our legitimate interest in being able to offer the bimobject.com service and our manufacturers' legitimate interest in finding leads.

Storage period: We will process your personal data as long as you have a user account. You can close your user account using your user profile settings. Manufacturers process your personal data for their own purposes, for which they are data controllers. They will inform you separately in their own privacy policies about how they process your personal data for such purposes.

To manage your purchase(s)

Purpose of the processingWhat personal data we processOur legal basis for the processing
If you make a purchase, we will process your personal data to manage your purchase
  • Name
  • Username, if applicable
  • Contact details (such as address, postal code, city, delivery address, email address, phone number)
  • Order number
  • Order information, e.g., subscription plan
  • Payment, purchase, and order history

Performance of a contract (article 6.1 (b) GDPR)

The processing is necessary for us to perform the contract relating to your purchase. If you do not provide us with your personal data, you will not be able to make a purchase from us.

Legitimate interest (Article 6.1 (f) GDPR)

If you make a purchase as a representative of a company or organization, the processing is necessary for purposes related to our legitimate interest in being able to handle purchases made by that company.

Storage period: We process the personal data linked to your purchase for the time required to administer and manage your order.

We will then process information about your purchase so that we can efficiently handle any questions or complaints about your purchase, as well as to comply with bookkeeping legislation. You can read more about this in the table below.

Analyse your usage of the bimobject.com service and the Design App for Revit

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • If you consent, analyse how you use the bimobject.com service and the Design App for Revit with the help of cookies. We do this to improve the functionality of the bimobject.com service, to customize it to suit our users, and to be able to draw conclusions about our users.
  • To do this, we use, among other things, analytics services from different third-party providers. These will use cookies or similar technologies to distinguish your device from other visitors and to confirm and analyse patterns in how our services are used.

We are only interested in how users interact with us on an overall level. We do not know who you are and do not take any measures to find out.

  • An encrypted version of your IP address that we at BIMobject cannot link to you as an individual
  • Information about how you use the bimobject.com service and the Design App for Revit, such as what you click on and which services you engage with
  • Which geographic area you are using the bimobject.com service or the Design App for Revit from
  • How many times you have visited the bimobject.com service or used the Design App for Revit, which gives us a basis for calculating the total number of visitors to the service
  • Your device/browser, for example, your screen resolution
  • Other information that our analytics services providers have about you, such as information about which website or another channel you found us from

Consent (article 6.1 (a) GDPR)

We obtain your consent when you use the bimobject.com service and the Design App for Revit. You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Storage period: Personal data is stored for as long as you have an account with us.

Improve the bimobject.com service or the Design App for Revit by sending surveys

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • Send you a request to participate in a user satisfaction survey regarding your use of the bimobject.com service
  • Handle your answers in our surveys and generate statistics and insights from the results
  • First and last name
  • Email address
  • Employer/company name
  • Occupation
  • Geographical location, such as country, state, zip code or city
  • Information you have provided in our surveys

Legitimate interest (Article 6.1 (f) GDPR)

The processing is necessary for purposes related to our legitimate interest to be able to collect and evaluate your feedback and for us to improve our business.

Storage period: We will store information from your answers to our surveys for as long as you are a user, provided that such answers only relate to products and services and not as such sensitive in any way. If you delete your account, your personal data related to surveys will also be deleted. Any analysis or results from the surveys will be processed on an aggregated level.

If you use Prodikt or Open Dictionary

When you only use our Prodikt and/or Open Dictionary services, your personal data will not be shared with manufacturers or advertisers using BIMobject, Prodikt or Open Dictionary. Although you can use the BIM.com login on bimobject.com, Prodikt and Open Dictionary, we keep your personal data separate as a main rule. However, should you also use bimobject.com with your BIM.com login, your personal data will be processed in accordance with the information above under the header “If you use the bimobject.com service”, and may, depending on your choices, be shared with manufacturers.

We process your personal data to create a BIM.com login and enable you to use our services and apps. If you do not provide us with your personal data, we will not be able to create or manage your user account, and you will therefore not be able to use our services and apps.

If you consent, we analyse how our services and apps are used in order to gain insights to improve them. Personal data is then collected from your device (e.g., mobile phone, computer, or tablet) when you use Prodikt or Open Dictionary.

We use cookies and similar technologies to collect personal data when you visit the website, as described below. In our cookie information on our website, we explain in more detail how this works. There you can also find a list of the cookies we use.

To create and manage your BIM.com login

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • Enable you to create and log in to your user account when you log in with your BIM.com login.
  • Email address
  • First and last name
  • Location: City and country
  • Occupation/field
  • Employer/company name
  • Your choices and settings, such as email preferences, preferred topics, and feed preferences
  • Phone number, if you have chosen to add it

Performance of a contract (article 6.1 (b) GDPR)

The processing is necessary for us to create and manage your user account, and thereby perform the agreement relating to your user account. If you do not provide us with your personal data, you will not be able to create a user account with us.

  • Enable you to create and log in to your user account using a third-party account, such as Google, LinkedIn or Autodesk.
  • Email address connected to the service you chose to log in with, such as your Google account
  • Profile picture, if you have one associated with your third-party account
  • First and last name
  • Location: City and country
  • Occupation/field
  • Employer/company name
  • Your choices and settings, such as email preferences, preferred topics, and feed preferences
  • Phone number, if you have chosen to add it
  • Ensure a secure login
  • Password
Storage period: We will process your personal data as long as you have a user account. You can close your user account using your user profile settings. If you choose to close your user account, your personal information will stop being visible to others on our services. 

Analyse your usage of Prodikt and Open Dictionary

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • If you consent, analyse how you use Prodikt and/or Open Dictionary with the help of cookies. We do this to improve the functionality of our services and apps, to customize them to suit our users, and to be able to draw conclusions about our users.
  • To do this, we use, among other things, analytics services from different third-party providers. These will use cookies or similar technologies to distinguish your device from other visitors and to confirm and analyse patterns in how our services are used.

We are only interested in how users interact with us on an overall level. We do not know who you are and do not take any measures to find out.

  • An encrypted version of your IP address that we at BIMobject cannot link to you as an individual
  • Information about how you use the website, such as what you click on and how long you stay on the website
  • Which geographic area you are using our website from
  • How many times you have visited the website, which gives us a basis for calculating the total number of visitors to the website
  • Your device/browser, for example, your screen resolution
  • Other information that our analytics services providers have about you, such as information about which website or another channel you found us from

Consent (article 6.1 (a) GDPR)

We obtain your consent when you visit the Prodikt or Open Dictionary website. You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Storage period: We will process your personal data as long as you have a user account. You can close your user account using your user profile settings. If you choose to close your user account, your personal information will stop being visible to others on our services. 

For an anonymous visit to our websites, personal data is stored for 180 days after your visit.

If you receive marketing

We use your information to send you marketing communications, including promotional content (“marketing”), about BIMobject's products and services.

If you use the bimobject.com service on bimobject.com and have not opted out of such marketing communications, we will also send you marketing with promotional content from the manufacturers on the bimobject.com service, based on the legal basis legitimate interest. You will receive such marketing if you have engaged with them or their products, or if you have shown interest in similar products.

Marketing from manufacturers will be sent by BIMobject on behalf of the manufacturer to the email address associated with your account. The content of any email campaign is created by the manufacturer but will generally consist of information regarding product(s) and/or promotional marketing content. There are two scenarios in which you may receive marketing from manufacturers: (i) If you have engaged with a specific manufacturer or that manufacturer's product(s), for example by downloading a product, requesting a demo, or contacting them, that manufacturer may send you marketing communications about their products and business. (ii) If you have downloaded a product from any manufacturer on the bimobject.com service, other manufacturers whose products you have not downloaded or otherwise engaged with may also send you marketing communications. Such marketing is based on broad targeting criteria, for example targeting users who have downloaded a certain type of product. These manufacturers do not receive any personal data about the individuals included in the targeted audience and cannot identify you personally.

We will only send you these communications in accordance with your preferences, and you may opt out of any such communications by unsubscribing in your Profile Settings or via the unsubscribe links in a received email.

We gather your personal data directly from you when you subscribe. We also generate certain personal data by analysing how you interact with our marketing campaigns.

You can read more about how we process your personal data if you have unsubscribed from our marketing here.

To market ourselves and improve our newsletters

Purpose of the processingWhat personal data we processOur legal basis for the processing

If you have shown interest in our products and services, e.g. by booking a demo, filled in a “contact us” form or opting in to our newsletter

  • We market ourselves to you by email. This includes e.g. information about news, marketing, offers and invitations.
  • First name, last name
  • Email address
  • Contact information, such as phone number and email address
  • Information about which organisation you represent

Legitimate interest (Article 6.1 (f) GDPR)

If you have shown interest in BIMobject, your personal data will be processed based on our legitimate interest to market the bimobject.com service towards the company you represent which we consider could be interested in BIMobject or to have a business relationship with us.

If you have chosen to receive our newsletters your personal data will also be processed based on our legitimate interest in being able to send you newsletters.

  • Improve and develop our newsletters by analysing how you open them and what you click on in the newsletters
  • Information about how you open our newsletters and what you click on
  • IP-address
  • Email address

Legitimate interest (Article 6.1 (f) GDPR)

Your personal data will be processed based on our legitimate interest to improve and develop our newsletters.

Storage period: You will continue to receive marketing until you object to marketing or opt-out from it. If you object or opt-out, your contact details will be stored in our unsubscribe register until further notice, see table below. Certain information will be retained for statistical purposes.

Send marketing with content from manufacturers

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • Send information via email with marketing from the manufacturers you have engaged with, as well as from other manufacturers you have not engaged with who market towards you based on your activity on the bimobject.com service

Manufacturers you have not engaged with cannot identify you personally, but only determine a broad target audience they want to market towards.

  • Name
  • Email address
  • Information related to the products or manufacturer you have engaged with

Legitimate interest (Article 6.1 (f) GDPR)

The processing is necessary for purposes related to our legitimate interest in being able to offer the bimobject.com service and our manufacturers' legitimate interest in marketing their products and informing about their business.

  • Tailor the marketing you receive and from which manufacturer. This is known as profiling*.

We use data from your engagement with products and manufacturers to tailor the marketing.

  • Browsing history
  • Download history
  • Country
  • Location of IP address, for example, the postal code where the IP address is located
  • Delivery address you have chosen as a customer
  • Information about which products you show interest in on our website
  • We improve and develop our newsletters by analysing how you open them and what you click on in the newsletters.
  • However, we never perform such analysis at an individual level, i.e., we do not look at how you specifically interact with our newsletters.
  • Name
  • Email address
  • IP-address
  • Information about how you interact with our newsletters, such as information about whether you open our newsletter and information about what you click on

Legitimate interest (Article 6.1 (f) GDPR)

Your personal data will be processed based on our legitimate interest to improve and develop our newsletters.

Storage period: You will continue to receive marketing until you object to marketing or opt-out from it. If you object or opt-out, your contact details will be stored in our unsubscribe register until further notice, see table below. Certain information will be retained for statistical purposes.

*Profiling: Your personal data is used to show you the offers that we and the manufacturers on the bimobject.com service believe are best suited to you. So-called profiling is done because otherwise we would not be able to show you relevant offers and marketing, and you would instead see offers that are not relevant to you. You have the right to object to profiling. You can read more about your right to object below, where your rights are explained in detail.

If you visit our websites

When we refer to visiting our websites, we mean when you visit Bim.com, bimobject.com, prodikt.com and opendictionary.com, including all of the subdomains for these websites, without logging in.

If you consent, we analyse how our websites are used in order to improve them. We explain this in detail in the tables below.

Personal data is collected from your device (e.g., mobile phone, computer, or tablet) when you visit our websites. Third-party service providers we use on our websites also use information they already have to perform analysis. Read more about this under the header “Who processes your personal data and why?” above.

We use cookies and similar technologies to collect personal data when you visit our websites, as described below. In our cookie information on our websites, we explain in more detail how this works. There you can also find a list of the cookies we use.

Analyse how our websites are used

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • Analyse how you use our websites with the help of cookies. We do this to improve the functionality of the website, to customize the website to suit our visitors, and to be able to draw conclusions about our visitors.
  • To do this, we use, among other things, analytics services from third party providers, such as Leadfeeder. These will use cookies or similar technologies to distinguish your device from other visitors, e.g. through your IP-number, and to confirm and analyse patterns in how our services are used

We are only interested in how visitors interact with us on an overall level. We do not know who you are and do not take any measures to find out.

  • An encrypted version of your IP address that we at BIMobject cannot link to you as an individual
  • Information about how you use the websites, such as what you click on and how long you stay on the websites
  • Which geographic area you are using our websites from
  • How many times you have visited the websites, which gives us a basis for calculating the total number of visitors to the websites
  • Your device/browser, for example, your screen resolution
  • Other information that the third-party service providers have about you, such as information about which website or another channel you found us from

Consent (article 6.1 (a) GDPR)

We obtain your consent when you visit our websites. You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Storage period: For an anonymous visit to our websites, personal data is stored for 180 days after your visit.

To provide a functioning website

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • Make sure that our websites work in a satisfying and secure manner and optimize the websites to your device
  • To remember your choices on the website, such as your consent
  • Enable you to play videos, such as videos hosted on YouTube that are embedded on the website.
  • IP-address including which country the internet connection is from
  • Information about your device and browser, such as the type of device, e.g. mobile phone, computer or tablet, browser or user-agent
  • Information about the request (time, page, referring page, request patterns)
  • The result of the security check and a security token stored in your browser
  • A pseudonymized account- ID that identifies you as a unique visitor
  • Information about your choices

Legitimate interest (Article 6.1 (f) GDPR)

The personal data is processed based on our legitimate interest to provide a functioning website.

Storage period: The personal data used to provide a functioning website will as a main rule be processed during your visit of the website and until you close your browser. Some personal data will be stored longer, such as information related to what cookies you have consented to in order to avoid asking you again every time you visit the websites.

With regard to cookies relating to the security of our website, we store them as follows: Bot-management cookie: deleted after 30 minutes of inactivity; Security-clearance cookie: deleted after 30 minutes; and Edge security logs: deleted after 3 days.

You can find detailed information about how long we store specific cookies in our cookie schedule, on our website.

If you are in contact with us, represent a business lead or visit our social media

If you engage with us without having a business relationship with us, for example by sending us an email, a message on our social media account, engaging with our resources or requesting a demo, or if we consider you a business lead, we will process your personal data as we describe in the tables below.

In most cases we receive the personal data directly from you, in other cases we will receive your personal data from your user account on social media platforms or other third-party providers we have engaged to find business leads.

To communicate with you

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • Communicate with you, e.g., via email
  • Communicate with you via social media, e.g., if you comment on our page or send us direct messages
  • Communicate with you if you have downloaded a resource, requested a demo or signed up to our webinars or are otherwise a business lead
  • Provide answers to your questions
  • Name
  • Contact information, such as phone number and email address
  • Sector
  • Employer/company name
  • Other information regarding the matter for which you contact us
  • If you engage with us through our social media accounts (e.g. our LinkedIn page) we also process:
    • Information from your profile on the social media in question (username and any picture you have chosen for your account)

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest in communicating with you who have contacted us.

Storage period: We will delete your personal data regularly and as described below:

  • Communication with us via our websites or in emails will be stored for a period of 12 months after the matter for which you have contacted us has been resolved, in order for us to give you the best service.
  • Your comments and communication with us on social media can be deleted by you at any time. We will remove posts or comments which are in breach of the rules of the platform or in conflict with legislation as soon as possible.
  • If we find that your company is a business lead, we will store your personal data for 12 months, if we conclude that we will not enter into an agreement with your company.

If you participate in any of our events or webinars

Below, we describe in more detail how we process your personal data in connection with our events and webinars. We collect your personal data directly from you when you register for one of our events or webinars. In some cases, we may also receive your personal data from an event partner if we arrange the event in collaboration with such a partner.

To take photos/videos during an event and publish them on our website and social media

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • Take photos of you during an event
  • Publish your photo on our intranet, our website or on our social media pages to be able to market our events
  • Your personal data will only be processed for this purpose after you have been informed about our publication of photos and provided you have not objected to our processing.
  • Your image, either in photos or video material

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest to document our events and make use of footage from the event for marketing purposes.

Consent (Article 6.1 (a) GDPR)

In cases where we want to process footage where you are clearly depicted, we will obtain your consent.

You have the right to withdraw your consent at any time by contacting us. Your withdrawal of consent shall not affect the lawfulness of the processing before its withdrawal.

Storage period: Photos or videos of you that have been published on our social media pages or website will remain published until you request their removal or until we determine that they are no longer relevant for the purpose we published them.

To arrange events and host webinars

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • Administrate your registration to one of our events or webinars (“event”)
  • Communicate with you before and during the event
  • Send requests to participate in evaluations after the event, administrate the answers you provide in the evaluation, and compile statistics based on the evaluation results
  • Name, employer/company name, position in your company, telephone number and email address
  • Dietary preferences (if applicable)
  • Information you provide in an evaluation (if applicable)

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest to arrange events.

Consent (Article 6.1 (a) and 9.2 (a) GDPR)

If we process sensitive personal data such as information about your allergies, we will obtain your explicit consent.

You have the right to withdraw your consent at any time by contacting us. Your withdrawal of consent shall not affect the lawfulness of the processing before its withdrawal.

Storage period: Your personal data will be stored until the event has been completed. However, a participant list containing your personal data will be retained in order to follow up on your participation and to invite you to similar events. We will delete your personal data upon your request.

Where we have sent you an evaluation following an event to which you have responded, we will store the evaluation results for 12 months after you have provided your response. We will stop sending evaluations if you object to receiving them.

The tables below describe how we process your personal data if you have complaints, feedback or any claims and our defence and handling of claims. We also describe how we process your personal data when we comply with our legal obligations, such as when you unsubscribe from our marketing. We obtain your personal data from you when you contact us or unsubscribe from marketing.

To handle any questions, complaints or claims

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • To handle your questions, feedback, complaints, or claims
  • Defend ourselves against claims if needed
  • To initiate any claims

We will only process the personal data necessary to handle a specific case, such as:

  • Name
  • The contact details you use, such as your email address, telephone number, and/or address
  • Position
  • Information regarding your or your company’s complaint or claim
  • Other information you provide in connection with our contact

Legitimate interest (Article 6.1 (f) GDPR)

The personal data is processed based on our legitimate interest to handle a question, complaint and/or legal dispute in which you are the representative of a customer, supplier or partner

Legal obligation (Article 6.1 (c) GDPR)

If you exercise any of your rights under the GDPR, the processing is necessary to comply with our obligations under the GDPR. You must provide us with your personal data, as otherwise we will not be able to respond to your request and we will not be able to comply with the GDPR.

Send out an updated privacy policy to keep you informed about our personal data processing.
  • Name
  • Email address

Legal obligation (article 6.1 (c) GDPR)

The processing is necessary to fulfil our obligations under the GDPR. You must provide us with your personal data so that we can comply with the GDPR.

Storage period: We store personal data contained in communications in our customer service cases for 3 years from the date on which our contact regarding the case has been concluded. Personal data involved in a legal dispute will be stored for the duration of the potential dispute.

We send updates to our privacy policy as long as it is relevant to you. For example, if you are affected by our updated privacy policy, you will receive a copy of it when it is updated.

To comply with marketing legislation

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • If you unsubscribe from our mailings, we will store your email address in a “unsubscribe list” to ensure that we do not market to you.
  • This is not personal data that we actively process, we do not look at your email address and do not use it for anything other than ensuring that you do not receive marketing from us.
  • Email address
  • Telephone number, where applicable
  • Information that you no longer wish to receive marketing from us

Legal obligation (article 6.1 (c) GDPR)

The processing is necessary to fulfil our obligation under the marketing legislation to ensure that you do not receive mailings that you have requested not to receive. You need to provide us with your personal data, as otherwise we cannot ensure that you will no longer receive marketing from us and that we comply with marketing legislation.

Storage period: Your personal data will remain in our “unsubscribe list” until further notice.

To comply with accounting legislation

Purpose of the processingWhat personal data we processOur legal basis for the processing
  • Comply with accounting legislation by recording, accounting for, and archiving payments and other transactions.
  • Payment history, transactions, and other material constituting accounting records

Legal obligation (article 6.1 (c) GDPR)

The processing is necessary to comply with applicable law, i.e., the Accounting Act. If you do not provide your personal data, we will not be able to complete your purchase, as we need the data to ensure that our business complies with the Accounting Act.

Storage period: Personal data included in our accounting records is stored for seven to eight years to comply with the Accounting Act (end of the seventh financial year).

Balancing of interests

As stated in the tables above, we process some of your personal data on the legal basis of “legitimate interest”. This means we have carried out a balancing of interests assessment concerning our processing of your personal data, and that we have assessed that our legitimate interest in performing the processing outweighs your interest and your fundamental rights not to have your personal data processed. Our legitimate interest is stated in the tables above.

If you would like to know more about how we have made these assessments, please contact us.

What rights do you have when we process your personal data?

In accordance with the GDPR, you have certain rights – see more information below.

If you have any questions about your rights or wish to exercise any of them, please contact us using the contact details above. You can also find more detailed information about when your rights apply and what exceptions there are at the Swedish Data Protection Authority.

Right to complain – Article 77 of the GDPR

You have the right to lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data violates the GDPR. In Sweden, the competent supervisory authority is the Swedish Data Protection Authority. You can find a list of supervisory authorities in the EU here.

Right to withdraw consent – Article 7.3 of the GDPR

You have the right to withdraw your consent at any time by contacting us using the contact details above. If you choose to give your consent on the website, you can always withdraw your consent directly on the website. Your withdrawal of consent does not affect the lawfulness of processing before consent is withdrawn.

Right of access – Article 15 of the GDPR

You have the right to obtain confirmation as to whether or not we are processing your personal data. You can send a request by contacting us using the contact details above. If we are processing your personal data, you also have the right to obtain a copy of the personal data we are processing and information about our processing, such as the purposes of the processing and how long your personal data will be stored.

Right to object – Article 21 of the GDPR

You have the right to at any time object to our processing of your personal data for direct marketing purposes (including any profiling) and to the processing of your personal data based on a legitimate interest (including any profiling).

Right to rectification of processing – Article 16 of the GDPR

You have the right to have inaccurate personal data concerning you rectified without undue delay. You also have the right to have incomplete personal data completed.

Right to erasure (”the right to be forgotten”) – Article 17 of the GDPR

Under certain circumstances, you have the right to have your personal data erased by us without undue delay. For example, if you withdraw your consent and there is no other legal basis for the processing, or if the personal data is no longer necessary for the purposes for which it was collected or processed.

Right to restriction of processing – Article 18 of the GDPR

Under certain circumstances, you have the right to request that we restrict our processing of your personal data. For example, if you contest the accuracy of the personal data, or if the processing is unlawful and you oppose the erasure of the personal data but instead request a restriction on the use of the data.

Right to data portability – Article 20 of the GDPR

If we process your personal data based on your consent or to fulfill a contract, you have the right to receive personal data concerning you. This right applies to personal data that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit those personal data to another data controller, when technically feasible.

This privacy policy was established on October 14th 2026

Scroll to top