Effective Date: January 30, 2026

 

1. Introduction

 

We respect your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR). This policy explains how PSU-Personsäkerhetsutveckling AB collects, uses, and safeguards information.

 

2. Data Controller

 

The entity responsible for the processing of your personal data is:

PSU-Personsäkerhetsutveckling AB
Sandvägen 25, 236 36 Höllviken, Sweden
Email: info@psuchina.com

 

3. Data We Collect & Legal Basis

We process your data based on the following legal grounds:

Contact Information: Name and email to respond to inquiries.

• Legal Basis: Legitimate Interest (to conduct business and assist you).

Job Applications: CV, cover letter, employment history, and contact details.

• Legal Basis: Legitimate Interest & Necessity to Enter a Contract.
• Retention: Unsuccessful applications are retained for 6 months to answer queries or consider you for future roles, after which they are securely deleted.

Marketing: Email address for newsletters.

• Legal Basis: Consent (You may unsubscribe at any time).

Cookies & Analytics: IP address and browsing behavior (via Google Analytics).

• Legal Basis: Consent. We only track this data if you click “Accept” on our Cookie Banner. You may withdraw this consent at any time by clearing your cookies. Google Analytics anonymises IP addresses to protect your identity.

 

4. International Data Transfers (China)

 

Our servers are securely hosted in the European Union. However, to provide efficient support and operational services, your data is accessed and processed by our operational teams located in the Chinese mainland.

To ensure your data remains protected in accordance with EU standards, PSU-Personsäkerhetsutveckling AB has entered into Standard Contractual Clauses (SCCs) with our affiliated entity, PSU (China) Consulting Co., Ltd. Beijing. These clauses are approved by the European Commission and legally bind our non-EU operations to uphold European data protection standards.

We have also conducted a Transfer Impact Assessment (TIA) to ensure that the recipient country provides a level of protection essentially equivalent to that of the EU.

 

5. Data Processed During Provision of Services (Due Diligence & Investigations)

 

This Privacy Policy primarily relates to personal data collected via this website. However, in the course of providing our services (including due diligence, corporate intelligence, and forensic investigations) to clients, we may process personal data on individuals who are the subject of those services.

Where we collect personal data from third-party sources (such as open-source research or public records) for due diligence purposes, we do not provide fair processing notices (notification) to the individuals involved. We rely on the exemption under GDPR Article 14(5)(b), as providing such notice would seriously impair the achievement of the objectives of that processing. The legal basis for such processing includes legitimate interests (ensuring clients do not take actions resulting in legal liability or reputational harm) and the prevention or detection of unlawful acts.

 

6. Your Rights

 

Providing data is voluntary, though necessary to receive services (e.g., we cannot reply to you without your email). Under GDPR, you have the right to:

• Access, Rectify, or Erase your personal data.
• Withdraw Consent (for newsletters or cookies).
• Restrict Processing or Object to processing.
• Data Portability (to receive your data in a structured, machine-readable format).
• Lodge a Complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).

To exercise these rights, please contact us at info@psuchina.com.