Privacy policy
Last updated: 9 November 2026
At Innomare, we respect your privacy and are committed to protecting your personal data. We handle personal information responsibly, transparently and in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR).
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us or engage with our business.
1. Who we are
Innomare is an international group of companies providing specialist services within underwater infrastructure, marine construction, inspection, survey and asset maintenance.
The website www.innomare.com is operated by Esther Midco AB, which is responsible for the processing of personal data described in this policy.
- Company:
- Esther Midco AB
- Registration number:
- 559553-2572
- Address:
- Box 5304, 102 47 Stockholm, Sweden
- Email:
- info@innomare.com
Other companies within the Innomare Group may act as independent data controllers for personal data processed in connection with their own business activities.
For questions regarding the processing of your personal data, please contact us using the details above.
2. What personal data we collect
We collect and process personal data that is necessary for our business activities and the operation of our website.
Information you provide directly
When you contact us or communicate with representatives of Innomare, we may collect:
- Name, company name and professional contact details.
- Email address and telephone number.
- Job title and business affiliation.
- Information included in correspondence, enquiries or other communications.
- Any additional information you voluntarily provide.
Information collected through our website
When you visit our website, certain technical information may be processed, including:
- IP address and approximate location derived from it.
- Browser type, device information and operating system.
- Website usage and technical server logs.
- Information necessary to deliver website content, including images and videos.
The information collected depends on how you interact with our website and which technical services are used.
3. How and why we use your personal data
We process personal data only where we have a lawful basis under applicable data protection legislation.
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and communicating with you | Legitimate interests in managing business communications |
| Managing customer, supplier and other professional relationships | Legitimate interests in conducting and developing our business, or performance of a contract where applicable |
| Operating, maintaining and securing our website | Legitimate interests in providing a functional and secure website |
| Complying with legal and regulatory obligations | Compliance with legal obligations |
| Processing information through optional website analytics or similar technologies, where implemented | Consent where required |
Where we rely on legitimate interests, we assess those interests against the rights and freedoms of the individuals concerned.
We do not use personal data collected through our website for automated decision-making or profiling that produces legal or similarly significant effects.
4. Cookies and website technologies
Our website may use cookies and similar technologies to support website functionality, security and the delivery of content, including videos and other embedded media.
Strictly necessary cookies may be used to enable essential website functions without requiring consent.
Where optional cookies or similar technologies are used, such as for analytics or non-essential third-party media functionality, we request consent where required by law before activating them.
Where consent is required, you can choose whether to accept these technologies and withdraw your consent at any time through the cookie preferences made available on our website.
Information about the specific cookies and similar technologies used, their purposes, providers and retention periods will be made available through our cookie information or consent management solution.
5. Sharing personal data
We do not sell personal data to third parties.
We may share personal data where necessary for legitimate business purposes, including with:
- Innomare Group companies, where relevant to handling enquiries, coordinating projects or managing customer and supplier relationships.
- IT and service providers, including website hosting, content management, email, IT security and video delivery providers.
- Professional advisers, such as legal, accounting and other advisers where necessary.
- Public authorities, where disclosure is required by applicable law or regulation.
We limit the sharing of personal data to what is necessary for the relevant purpose.
Where third parties process personal data on our behalf, we require appropriate contractual arrangements and safeguards in accordance with applicable data protection legislation.
6. International data transfers
Innomare operates internationally, and certain service providers or business partners may process personal data outside the European Union and European Economic Area (EU/EEA).
Where personal data is transferred outside the EU/EEA, we ensure that an appropriate legal transfer mechanism is in place, as required by applicable data protection legislation.
Depending on the destination and recipient, these mechanisms may include:
- An adequacy decision issued by the European Commission, including the EU–US Data Privacy Framework where applicable.
- The European Commission's Standard Contractual Clauses, together with supplementary safeguards where necessary.
- Other legally permitted transfer mechanisms.
You may contact us for further information about the safeguards applicable to international transfers of your personal data.
7. How long we retain personal data
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations.
Retention periods depend on the nature of the information and the purpose of processing.
- Business correspondence: Retained for as long as necessary to manage the enquiry, business relationship or related matters, taking into account any applicable legal requirements.
- Customer and supplier information: Retained for the duration of the relevant business relationship and thereafter where necessary to meet contractual, accounting or legal obligations.
- Technical website information: Retained for the period necessary to maintain website functionality, security and technical operations.
- Cookie-related information: Retained in accordance with the applicable cookie settings and stated retention periods.
When personal data is no longer required, it is securely deleted or anonymised in accordance with our applicable procedures.
8. How we protect your information
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or misuse.
These measures include access controls, appropriate technical security arrangements and internal procedures for handling personal information.
Access to personal data is restricted to authorised personnel and service providers who require the information to perform their duties.
We regularly review our security arrangements to maintain an appropriate level of protection.
9. Your rights
Under the GDPR, you have certain rights regarding your personal data, subject to applicable legal conditions and limitations.
These include the right to:
- Access: Request information about the personal data we process about you.
- Rectification: Request correction of inaccurate or incomplete personal data.
- Erasure: Request deletion of your personal data where applicable.
- Restriction: Request that we restrict certain processing activities.
- Objection: Object to processing based on legitimate interests, subject to applicable exceptions.
- Data portability: Request transfer of certain personal data in a structured, commonly used and machine-readable format, where applicable.
- Withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, please contact us at info@innomare.com.
We will respond to your request in accordance with applicable data protection legislation, normally within one month.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), or another competent data protection supervisory authority.
For further information, visit www.imy.se.
10. Third-party websites and external content
Our website may contain links to external websites or content provided by third parties.
Such websites and services may have their own privacy policies and data processing practices. Innomare is not responsible for the privacy practices of independent third-party websites.
We encourage you to review their privacy policies when accessing external services.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business operations, website functionality, technology or applicable legislation.
The latest version will always be available on our website, together with the date of the most recent update.
12. Contact us
If you have any questions about this Privacy Policy or how we process personal data, please contact:
Esther Midco AB (Innomare)Registration number: 559553-2572Box 5304, 102 47 Stockholm, SwedenEmail: info@innomare.com