Privacy Policy

Last updated 28 July 2026.

Who is responsible for your personal data

The controller for personal data processed through digitalspace.world is:

BruhnBruhn Innovation AB
Svartbäcksgatan 8, 753 20 Uppsala, Sweden
Swedish company registration number 559438-8455
On behalf of the Founding Members of the Digital Space Consortium.

BruhnBruhn Innovation AB operates this website on behalf of the Founding Members of the Digital Space Consortium and determines, alone, the purposes and means of the processing described here. It is therefore the sole controller within the meaning of Article 4(7) of the General Data Protection Regulation.

The Digital Space Consortium is not a controller of data collected through this website. Mitsubishi Electric Corporation and Blue Marble Communications are neither controllers nor joint controllers of that data.

We have not appointed a Data Protection Officer. We are not required to. Questions about this policy go to dsc@dacreo.io.

What we collect, and why

Enquiries you send us

When you use the contact form we collect the name, email address, organisation and message you provide, together with the time of submission and technical signals used to reject automated submissions. We use this to answer you. The lawful basis is our legitimate interest under Article 6(1)(f) in responding to people who contact us about the work of the Consortium. Where your enquiry concerns joining the Consortium, the basis is Article 6(1)(b), taking steps at your request before entering a contract.

Providing this data is voluntary, but without an email address we cannot reply.

Statistics

If you consent, we record which pages are visited, referring pages, approximate region derived from an IP address that is discarded before storage, and browser and device type. Statistics are collected without cookies and without any identifier that persists between visits, and are held on our own infrastructure in Sweden. No third party analytics service receives your data. The lawful basis is your consent under Article 6(1)(a), which you may withdraw at any time through the cookie settings link in the footer.

If you do not consent, no statistics are recorded and the site works exactly as it otherwise would.

Server logs

Our web servers record the request path, timestamp, response status, user agent and IP address as part of ordinary operation. These logs exist to keep the service available and to investigate abuse and security incidents. The lawful basis is our legitimate interest under Article 6(1)(f) in the security and integrity of our infrastructure. They are not used to build a profile of you and are not combined with the statistics described above.

Administrator accounts

People who edit this website have an account holding a username, email address and password hash. This applies to staff of the Founding Members, not to visitors.

What we do not do

We do not sell personal data. We do not share it for advertising. We run no advertising, tracking or profiling technology, no social media pixels and no embedded third party content that would observe you. We take no automated decisions producing legal or similarly significant effects, and we carry out no profiling.

Who receives your data

Enquiries are stored on infrastructure operated by BruhnBruhn Innovation AB in Sweden and are readable only by the small number of authorised people at BruhnBruhn Innovation AB who handle correspondence addressed to the Consortium.

Your enquiry is not forwarded to the other Founding Members and is not transferred outside the European Economic Area. Where a question can only be answered by another Founding Member, we will tell you and ask you first.

Beyond this, we disclose personal data only where the law requires it, or to professional advisers under a duty of confidentiality.

International transfers

None. All processing described in this policy takes place within the European Economic Area. If that changes we will update this policy before the change takes effect and describe the safeguards relied on.

How long we keep it

Enquiries that do not lead to a relationship	24 months from the last message, then deleted
Enquiries that lead to participation in the Consortium	For the duration of participation and 7 years afterwards, to meet Swedish accounting and corporate record obligations
Statistics	14 months, in aggregate form only
Server logs	90 days
Administrator accounts	Removed when the person no longer needs access

Your rights

Under the General Data Protection Regulation you have the right to ask for a copy of your data, to have inaccurate data corrected, to have data erased, to have processing restricted, to receive data in a portable format, and to object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting the lawfulness of what came before.

Write to dsc@dacreo.io. We will respond within one month. If a request is complex we may extend that by two further months and will tell you why. There is no charge unless a request is manifestly unfounded or excessive.

We may need to verify your identity before acting, which usually means replying from the address that sent the original enquiry.

Security

The site is served over TLS. Access to enquiry data is restricted to named accounts, and no enquiry data is exposed through any public interface. Infrastructure is patched on an ongoing basis and backups are held within the European Economic Area. No system is perfectly secure, but we treat a breach affecting personal data as a reportable incident and will notify the supervisory authority, and you where the law requires it.

Children

This website addresses a professional audience and is not directed at children. We do not knowingly collect data from anyone under 16.

Complaints

If you believe our processing does not comply with data protection law you may complain to a supervisory authority. Because the controller is established in Sweden the competent authority is Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm, imy@imy.se. You may also complain to the authority where you live or work.

We would rather have the chance to put things right. Please write to dsc@dacreo.io first, or alongside.

Changes

Where we make a material change we will publish the revised policy here and update the date at the top. Earlier versions are available on request.