Skip to content

Legal

Privacy policy

Last updated: 27 October 2026

Who is responsible for your personal data

Ametalis AB, corporate identity number 559358-4740, Riddargatan 17D, 114 57 Stockholm, Sweden, is the controller for the personal data described in this policy. Contact us at info@ametalis.com.

Ametalis AB owns a group of independent environmental consulting companies: Envima, Westberg Vibrations- och Omgivningskontroll, Natur og Samfunn and Etha. When an enquiry is passed to one of these companies, that company is responsible for how it handles your data from then on, and its own privacy policy applies.

We process personal data in accordance with the EU General Data Protection Regulation (2016/679) and other applicable data protection law. Personal data is any information that can directly or indirectly identify a living person.

What we collect, why, and on what legal basis

Enquiries through the website ("Talk to a specialist" and Contact)

Name, organisation, email address, phone number, country and region, customer group, your description of the need and any file you attach. We use this to answer you and to pass your enquiry to the group company best placed to help. Legal basis: our legitimate interest in answering and handling business enquiries. We keep the data for up to 24 months after our last contact, unless it becomes part of an assignment.

Confidential introductions (For entrepreneurs)

Name, company, email address, phone number, country and message. Only Ametalis AB receives these messages. We use them to answer you and to discuss a possible future together. Legal basis: our legitimate interest. We keep the data for up to 24 months after our last contact. If discussions continue, the data becomes part of the transaction documentation described below.

Career interest registrations

Name, email address, discipline, preferred company and preferred city. We use this to contact you about suitable roles in Ametalis or the group companies, and we share it with the company or companies you are interested in. Legal basis: your consent, which you can withdraw at any time. We keep the data for 24 months or until you withdraw your consent.

Newsletter

Email address and the topics you choose. We use it to send you the newsletter. Legal basis: your consent. We keep the data until you unsubscribe, which you can do at any time through the link in each email or by writing to info@ametalis.com. Your data is then deleted.

Acquisitions, portfolio management and other business relationships

Names, personal identity numbers where needed, job titles, contact details, invoicing details and other business information about people at companies we evaluate or own, and at partners and suppliers. We receive this from you or your company, and we may add information from public websites, public registers and paid databases. We use it to evaluate and carry out acquisitions, to manage and develop the companies in the group, and for accounting and invoicing. Legal basis: our legitimate interest in acquiring and managing companies, and our legal obligations, for example under the Swedish Accounting Act. Accounting records are kept for seven years. Other data relating to an assignment or transaction is generally kept for up to ten years after it has ended, and then deleted or anonymised.

Specialists shown on the website

Name, role, company, office, work phone number, work email address, photo and areas of expertise of specialists employed in the group companies. We show this so that customers can contact the right specialist directly. Legal basis: our and the group companies' legitimate interest. Employees can ask to be removed from the website at any time.

Technical data when you visit the website

When you visit the website, our hosting provider processes technical data such as your IP address, browser type and the pages you request, so that the website can be delivered and protected against misuse. Legal basis: our legitimate interest in operating a secure website. This data is kept for a short period by the hosting provider. We do not use analytics or advertising tracking. Read more in our cookie policy.

Do you have to give us your data?

No. Providing personal data is voluntary. If you choose not to, we may not be able to answer your enquiry, consider you for a role or send you the newsletter.

Who we share data with

Only people at Ametalis who need the data for the purposes above have access to it. We do not sell personal data, and we only share it when you have agreed, when it is needed to carry out an assignment or answer your enquiry, or when it is needed to run our systems. This means data may be shared with:

  • the group companies, when your enquiry or interest concerns them;
  • service providers that process data on our behalf, such as the providers that host the website and its database (Lovable and Supabase) and our email and IT provider (Microsoft);
  • advisers bound by confidentiality, in connection with transactions;
  • authorities, when we are required to by law.

Transfers outside the EU/EEA

We aim to process personal data within the EU/EEA. If a service provider processes data outside the EU/EEA, we make sure there is a legal basis for the transfer, such as the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

Your rights

You have the right to:

  • get information about and a copy of the personal data we hold about you;
  • have incorrect data corrected;
  • have your data erased or its processing restricted;
  • object to processing based on our legitimate interest;
  • object to direct marketing, in which case we stop immediately;
  • receive data you have given us in a machine-readable format (data portability);
  • withdraw your consent at any time, where processing is based on consent.

Write to info@ametalis.com to use your rights. We answer within one month.

If you think we handle your personal data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se.

Changes to this policy

We update this policy when our processing changes. The latest version is always published on this page, with the date it was last updated.

Cookie preferences

We only store your preference. No analytics or advertising cookies are active.