What we hold, why we hold it, and how to have it removed.

JDBG GEMS, part of JDBG Holding AB, Stockholm, Sweden, is responsible for the personal data described here. Questions about this policy, and any request concerning your data, can be sent through the enquiry form on the Office page.

Only what you choose to send us in an enquiry: your name, your email address, the subject you select, your note and any images you attach.

We do not ask for identity documents, bank details or other sensitive paperwork, and we ask that you do not send them. We do not knowingly collect data about children.

Our servers process ordinary technical request data, such as an IP address and browser type, to serve the pages and to keep the enquiry form from being abused.

To read and answer your enquiry, and to keep a record of our correspondence about a specimen or a research question.

To protect the site: simple rate limiting and hidden-field checks on the form, so automated messages can be discarded.

The legal basis is our legitimate interest in replying to you and in keeping the site secure, and your consent when you send the enquiry. We never use your data for advertising or profiling, and we do not sell or rent it.

Enquiries are read by the JDBG GEMS office. They are not shared with third parties for marketing.

Technical service providers that host this site and deliver our email process the data on our behalf, under contract and only for that purpose. Where such a provider operates outside the EEA, transfers rely on the European Commission's standard contractual clauses.

We may disclose data if the law requires it, for example a valid order from a competent authority.

Enquiries are kept for as long as the matter is open and for up to 24 months afterwards, so we can follow up on a specimen or a research thread. After that they are deleted.

Messages judged to be automated abuse are discarded without being read. You can ask us to delete your enquiry sooner at any time.

You can ask what we hold about you, ask for a copy, ask for a correction, ask for deletion, ask us to limit how we use it, or object to our use of it.

Write to the office through the enquiry form and we will handle the request ourselves, normally within 30 days. If you are in the EU or EEA and are not satisfied with our answer, you may complain to your national data protection authority; in Sweden this is Integritetsskyddsmyndigheten (IMY).

The site is served over an encrypted connection and enquiry data is limited to the fields listed above, kept to the smallest set of people who need to read it.

No website can promise absolute security. If you believe you have found a security problem here, describe it through the enquiry form and we will look into it.

If our practices change we will update this page and the date shown above. Material changes will be described in plain terms rather than buried in the text.

See also the Cookie Policy for how this site behaves in your browser.