Privacy Policy

Rillion’s privacy policy was updated on October 22nd, 2026.

In this statement we offer information about how we collect, store and process personal data received through our website – and what purposes we have for the processing and storing of personal data.


Data controller

Data controller of personal data that you submit on our website is Rillion AB (“Rillion”), Swedish company registry number 556341-9182, headquartered at Sveavägen 13, 111 57 Stockholm, Sweden. Rillion has appointed a Data Protection Officer (DPO). If you have any questions about how we process your personal data, you can contact us and our DPO at privacy@rillion.com.

We comply with the General Data Protection Regulation (2016/679, “GDPR”) and other regulations in force related to storage and processing of personal data.

Purposes and legal bases of processing your personal data

Rillion processes your personal data for the purposes of maintaining its customer relationships, responding to customer contacts and support requests, administering newsletters, information and invitations, marketing its products and services, analyzing and developing its business and operations and ensuring the functionality, security and development of our website.

Consent

Rillion’s website uses cookies and similar technologies to analyze your behavior on the website, to measure our advertising and to recognize which companies visit our website. If you consent to the usage of these cookies when browsing the website, we store website visitor behavior such as which links you click and when. We store website traffic information as provided by your web browser such as browser type, language and the address of the referring website and other traffic information such as IP address.

This processing is based on consent (Article 6(1)(a) of the GDPR). You can refuse cookies and withdraw your consent at any time via the cookie settings on our website.

Legitimate interest

Rillion processes your personal data based on legitimate interest (Article 6(1)(f) of the GDPR) when processing is necessary for Rillion’s legitimate interest to market its products and services, and to analyze and develop its business and operations. Rillion processes your information based on legitimate interest when you act as customer contact for our existing and potential customers, in answering a contact/support request, and administering newsletters, information and invitations to you or to receive requested information.

Further Rillion processes your personal data based on legitimate interest when you interact with Rillion’s website. Rillion processes your data if you are signing up for a webinar or a newsletter, interacting with chatbot, filling out a contact form, downloading educational content or other content from our web pages. The legitimate interest is to provide you with correct content, hold webinars and events, conduct marketing, administrate your requests and ensure the functionality, security and development of our website. Rillion can also combine this information with the possible customer relationship we might have with your company.

One of Rillion’s legitimate interests is the processing of personal data for direct marketing purposes, such as e-mail marketing. You will always have the possibility to opt out from these messages.

Recruitment process

By sending us your application you acknowledge that your personal data will be processed according to Candidate Privacy Policy.

What personal data we process and where it comes from

Rillion’s products and services, website content, and events and webinars are generally used for work-related purposes, and your behavior in connection to Rillion’s products, services, website, and events do not give us information about your personal life. We do not intentionally collect sensitive personal data. Your personal data is processed from a business perspective in a way that does not conflict with your freedom and rights as an individual.

The type of personal data that Rillion processes about you may be:

  • Your contact details, such as name, address, telephone number and email address
  • Your job title, position including preferences and interests in a professional context and your company’s name
  • Website traffic information as provided by your web browser such as browser type, language and the address of the referring website and other traffic information such as IP address
  • Website visitor behavior such as which links you click and when
  • Any other information that you provide to us when you are communicating with us

Rillion may collect personal data directly from you when you act as customer contact for our existing and potential customers, in answering a contact/support request, and administering newsletters, information and invitations to you according to your wishes to be contacted or to receive requested information.

On Rillion’s websites you can fill in forms to access downloadable content, interact with a chatbot, subscribe to our newsletters, sign up to our events and webinars, and fill in contact request forms.

Rillion may also collect information about you from other sources, including publicly available databases and business data providers, such as 6sense, from whom we have purchased data, and combine it with information Rillion already has. This helps us to update and expand our records, identify new prospects for marketing, and provide information about our products and services that you may be interested in.

Providing personal data to us is voluntary. If you choose not to, we may not be able to answer your request or give you access to certain content.

Profiling and company identification

If you consent to marketing and statistics cookies, we use tools that recognize which company a visitor probably works for, based on IP address and cookies. We combine this with the pages you visit and the forms you submit to understand which companies are interested in our services and to prioritize our follow-up and tailor our marketing. The tools we use for this are 6sense, Snitcher, Leadfeeder (Dealfront) and Dreamdata, as described in the Cookies section.

We do not make decisions that have legal effects on you, or similarly significantly affect you, based solely on automated processing. You can withdraw your consent at any time in the cookie settings on our website, and you can object to this processing by contacting us at privacy@rillion.com.

Regular disclosures of data

Rillion does not sell personal data. Personal data can be accessed by service providers that process it on our behalf, by providers of website analytics and advertising as described in the Cookies section, and by authorities and professional advisers where the law requires or permits it. Rillion uses agreements to ensure that service providers acting as data processors only process personal data in compliance with Rillion’s instructions and this Privacy Policy. Advertising platforms such as Google, Meta and LinkedIn act as independent controllers for the data they collect through their own cookies and pixels. Below you find a list of the most important service providers that act as data processors on behalf of Rillion.

HubSpot CRM & Content Hub

When you submit a web form, interact with the chat, or send us an email, your contact details will be stored in our CRM.

Dreamdata

We use Dreamdata, a B2B revenue attribution platform provided by Dreamdata ApS, https://dreamdata.io/. On behalf of Rillion AB (data controller), Dreamdata collects information about how website visitors interact with our website and other digital properties. Read more about Dreamdata and their privacy policy on: Privacy Policy | Dreamdata.

Cookies

We use cookies and similar technologies, such as local storage and tracking pixels, on rillion.com. A cookie is a small text file stored on your device. Session cookies are deleted when you close your browser. Persistent cookies stay on your device for a set period or until you delete them.

We use Cookiebot, provided by Usercentrics A/S, to ask for your consent. When you first visit our site, a banner lets you accept all cookies, reject non-essential cookies, or choose by category. Except for strictly necessary cookies, we set cookies only after you consent. Our legal basis is your consent under Article 6(1)(a) of the GDPR. Strictly necessary cookies rely on our legitimate interest under Article 6(1)(f) in running a secure and working website.

You can change or withdraw your consent at any time through the cookie settings on our site. You can also delete or block cookies in your browser settings, but parts of the site may then stop working.

Types of cookies we use

Necessary. These keep the site secure and working and store your consent choice. They are set by Cookiebot, Cloudflare and HubSpot.

Preferences. These test whether your browser supports cookies and remember technical settings.

Statistics. These help us understand how visitors use the site, so we can improve it. We use Google Analytics, Google Tag Manager, Microsoft Clarity, Hotjar/Contentsquare, Amplitude and HubSpot analytics. We receive the results in aggregated form.

Marketing. These measure our advertising, recognize returning visitors and show us which companies visit our site. We use Google Ads, LinkedIn, Microsoft Advertising (Bing), Meta, 6sense, Dreamdata, Leadfeeder (Dealfront), Snitcher, G2, Capterra (Gartner Digital Markets) and ClickCease, which helps us detect invalid ad clicks. Embedded YouTube videos and Storylane product demos may also set cookies when you play them.

The table at the end of this section lists each cookie and similar storage item we use, its provider and how long it is kept. Retention periods range from the length of your visit to two years.

Third-party providers

Some providers process data outside the EU/EEA. See the section on transfer of data outside the EU or EEA. For how each provider handles data, see its privacy policy:

Cookie list

Category Cookie / storage name Provider Retention
Necessary CookieConsent Cookiebot Persistent
Necessary __cf_bm, _cfuvid Cloudflare (also set through HubSpot, G2 and LinkedIn embeds) 1 day / session
Necessary hs-cta-interactions, hubspot-modern-theme, __hmpl HubSpot Session / persistent
Preferences AMP_TEST, AMP_TLDTEST, __tld__, __sn_tld_probe, _lfa_test_cookie_stored, _hjTLDTest Amplitude, Snitcher, Leadfeeder (Dealfront), Hotjar/Contentsquare (cookie-support tests) Session
Statistics _ga, _ga_# Google Analytics 2 years
Statistics __hstc, hubspotutk, __hssrc, __hssc, __ptq.gif HubSpot analytics Session to 180 days
Statistics AMP_#, AMP_MKTG_#, AMP_unsent_#, AMP_remote_config_#, AMP_PAGE_VIEW, AMP_URL_INFO, AMP_diagnostics_# Amplitude Session to 1 year
Statistics _hjSessionUser_#, _hjSession_#, hjViewportId, hjActiveViewportIds Hotjar/Contentsquare Session to 1 year
Statistics _clck, _clsk, _cltk, MUID, MR, ANONCHK, SM, c.gif Microsoft Clarity / Bing Session to 1 year
Marketing _gcl_au, _gcl_ls, IDE, test_cookie, pagead/1p-user-list, ccm/conversion Google Ads / DoubleClick 1 day to 400 days
Marketing bcookie, lidc, li_gc LinkedIn Insight Tag 1 day to 1 year
Marketing _uetsid, _uetvid, _uetsid_exp, _uetvid_exp, SRM_B Microsoft Advertising (Bing UET) Persistent to 1 year
Marketing _fbp, lastExternalReferrer, lastExternalReferrerTime Meta (Facebook) 3 months / persistent
Marketing 6suuid, _gd_visitor, _gd_session, _gd_svisitor, v1/beacon/img.gif 6sense _gd_session 4 hours, others about 2 years
Marketing dd_anonymous_id, dd_user_id, ajs_anonymous_id, ajs_user_id Dreamdata Session to 1 year
Marketing _lfa, _lfa_expiry, tr.lfeeder.com pixel Leadfeeder (Dealfront) 1 year
Marketing snitcher_device_id, snitcher_device_id_expires, snitcher_session, snitcher_session_expires, radar_sn_ped, radar_sn_sh, radar_sn_sg, radar_sn_de, radar_sn_rs Snitcher Session / persistent
Marketing g2tracking G2 Persistent
Marketing YSC, VISITOR_INFO1_LIVE, __Secure-YNID, __Secure-ROLLOUT_TOKEN, __Secure-BUCKET, __Secure-YEC, yt-icons-last-purged, LAST_RESULT_ENTRY_KEY, TESTCOOKIESENABLED, YtIdbMeta, LogsDatabaseV2, ServiceWorkerLogsDatabase YouTube (embedded videos) Session to 180 days
Marketing cookietest, eid, demoplayer-muted Storylane (demo embeds) Session / persistent

Transfer of data outside the EU or the EEA

Rillion may transfer personal data outside the European Union or the European Economic Area in accordance with data protection legislation and the limits set therein. Where the recipient is certified under the EU-US Data Privacy Framework, we rely on the European Commission’s adequacy decision for that framework. Otherwise we use Standard Contractual Clauses approved by the European Commission, supplemented with additional safeguards as needed. If the legal position changes, we will update the safeguards and this policy. You can ask for a copy of the safeguards by contacting privacy@rillion.com.

How long we keep your data

We keep personal data only for as long as needed for the purpose it was collected for.

Contacts in our CRM that we created more than 365 days ago and that show no recorded website visit, marketing email opening or other engagement with us are deleted automatically. Personal data about contacts at our customers is kept for the duration of the customer relationship, and afterwards for as long as needed to meet legal requirements and to establish or defend legal claims. Recruitment data is handled as described in our Candidate Privacy Policy. How long each cookie is kept is shown in the cookie list in the Cookies section.

Data subject rights

As a data subject, you have certain rights as explained in more detail below. You can exercise these rights by sending an email to privacy@rillion.com.

Right of access

You are entitled to, upon request, receive information if Rillion processes personal data about you, and to receive a copy of such data. The right of access can be refused on the grounds set out in law. Exercising the right of access is generally free of charge.

Right to request rectification, erasure or restriction of processing

You are entitled to, upon request, have erroneous information which relates to you rectified. Under certain circumstances, you are entitled to have information which relates to you erased. For example, you can request us to delete personal data that we no longer need for the purpose it was collected for, or that we process based on your consent and you withdraw your consent. Under certain circumstances, you are entitled to request that the processing of your personal data is restricted, e.g., while you are waiting for Rillion’s response to a request for the rectification or erasure of the data.

Right to object

You have the right to object to processing of your personal data which is based on our legitimate interest on grounds related to your particular situation. When presenting your request, you must specify the particular situation based on which you are objecting to the processing. Rillion can refuse to comply with the objection on the grounds set out in law. You always have the right to object to direct marketing from Rillion. Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. Marketing is mainly carried out via email, and you can opt out of receiving further emails from us at any time.

Right to data portability

Where we process your personal data based on your consent or on a contract with you, and the processing is carried out by automated means, you have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format.

Right to withdraw consent

Where processing is based on your consent, you can withdraw it at any time, for example through the cookie settings on our website. Withdrawal does not affect the lawfulness of processing carried out before you withdrew your consent.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a supervisory authority if you are of the opinion that we have not complied with the data protection regulations. As Rillion AB is established in Sweden, the competent authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): imy.se. You can also contact the supervisory authority in the country where you live or work. In Finland, for example, this is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Security

Rillion AB uses technical and organizational security measures to protect your personal data from tampering, loss, destruction, or unauthorized access. Where appropriate, personal data that you provide to Rillion AB is encrypted to prevent it from being misused by third parties. Our security procedures are continuously revised and based on the latest technological developments.

Changes to this policy and questions

Rillion may revise this privacy policy. The current version is always published on this page, with the date of the latest update. We recommend that you review it regularly if you are a frequent visitor to our website. Questions regarding our Privacy Policy and data subject rights should be directed in English to privacy@rillion.com, which is also the contact address for our Data Protection Officer.