Regulatory Alignment &
Protocol Compliance

1. Data Controller

The data controller responsible for the processing of personal data collected through this website is HarborVectorLabs, registered at 214 24, Bergsgatan 15, Malmo, Sweden. For all privacy-related inquiries, please contact [email protected].

2. Categories of Personal Data

We collect and process the following categories of personal data through this platform:

• Contact Data: Name, email address, telephone number, and physical address provided through our inquiry form.
• Technical Data: IP address, browser type and version, operating system, device identifiers, page visit timestamps, and referral source URLs collected automatically via server logs.
• Usage Data: Page interaction patterns, session duration, navigation pathways, and feature engagement metrics collected through privacy-respecting analytics.
• Cookie Data: Session identifiers and preference tokens stored locally in your browser, subject to your explicit consent as detailed in our Cookies Policy.

3. Legal Basis for Processing

All personal data processing activities are grounded in the following legal bases as defined by Article 6 of the EU General Data Protection Regulation (GDPR):

• Consent (Art. 6(1)(a)): For non-essential cookie deployment and analytics tracking. You may withdraw consent at any time through our cookie configuration panel or by contacting us directly.
• Contractual Necessity (Art. 6(1)(b)): For processing data required to respond to your inquiries, prepare service proposals, and execute contractual obligations arising from our engagement.
• Legitimate Interest (Art. 6(1)(f)): For website security monitoring, fraud prevention, service quality improvement, and internal administrative purposes that do not override your fundamental rights.

4. Data Retention

Personal data is retained only for the duration necessary to fulfill the purpose for which it was collected: inquiry-related data is retained for 24 months following the last communication; technical logs are retained for 12 months; and cookie consent records are retained for 36 months to demonstrate compliance. Upon expiration of the retention period, data is irreversibly deleted or anonymized.

5. Data Subject Rights

Under the GDPR, you possess the following rights regarding your personal data:

• Right of Access (Art. 15): Obtain confirmation of whether your data is being processed and receive a copy of all personal data held.
• Right to Rectification (Art. 16): Request correction of inaccurate personal data or completion of incomplete records.
• Right to Erasure (Art. 17): Request deletion of personal data where processing is no longer necessary, consent is withdrawn, or processing is unlawful.
• Right to Restriction (Art. 18): Request limitation of processing in specific circumstances including contested accuracy or pending objection review.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
• Right to Object (Art. 21): Object to processing based on legitimate interests, including direct marketing profiling.

To exercise any of these rights, contact our designated data protection officer at [email protected]. We will respond to all requests within 30 calendar days in accordance with regulatory requirements.

6. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission, binding corporate rules, or other legally recognized transfer mechanisms as required under Chapter V of the GDPR.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include TLS 1.3 encryption for data in transit, AES-256 encryption for data at rest, access control lists with role-based permissions, regular security audits, and employee training on data protection protocols.

8. Supervisory Authority

If you believe that the processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority. For data processing activities conducted from our Swedish office, the relevant authority is the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, Sweden.

1. Cookie Usage Overview

This website uses cookies and similar tracking technologies to ensure platform functionality, enhance user experience, and gather anonymized analytics data. Cookies are small text files stored on your device by your web browser when you visit our website.

2. Categories of Cookies Deployed

• Strictly Necessary Cookies: These cookies are essential for the website to function correctly. They enable core features such as session management, security token verification, and navigation state persistence. These cookies do not require consent as they are necessary for the service explicitly requested by the user (Art. 5(3) ePrivacy Directive).
• Functional Cookies: These cookies remember your preferences and choices (such as language selection or cookie consent status) to provide a more personalized experience. They are deployed only with your explicit consent.
• Analytics Cookies: These cookies collect anonymized, aggregated information about how visitors interact with our website, including pages visited, time spent, and navigation patterns. All analytics data is processed in aggregate and cannot be used to identify individual users. These cookies are deployed only with your explicit consent.

3. Cookie Management

Upon your first visit, our cookie consent banner provides clear options to accept or decline non-essential cookies. You may modify your cookie preferences at any time by revisiting the consent banner through the link in our website footer. Additionally, you can control cookies through your browser settings. Most browsers allow you to block or delete cookies, though this may affect certain website functionalities.

4. Third-Party Cookies

We do not deploy third-party advertising or tracking cookies. Any third-party content embedded on our website (such as mapping services) may set their own cookies according to their respective privacy policies. We encourage users to review the cookie policies of any third-party services linked from our platform.

5. Cookie Retention Periods

• Session Cookies: Automatically deleted when you close your browser.
• Consent Cookies: Retained for 36 months to record your cookie preferences.
• Analytics Cookies: Retained for a maximum of 13 months in accordance with CNIL guidelines and European Data Protection Board recommendations.

1. General Refund Principles

At HarborVectorLabs, we are committed to delivering exceptional digital services that meet the specifications outlined in our project agreements. This Refund Policy establishes the terms under which refunds may be requested and processed for services rendered through our platform.

2. Cancellation Before Project Commencement

If a service engagement is cancelled before any work has commenced, a full refund of any advance payment will be processed within 14 business days. Cancellation requests must be submitted in writing to [email protected]. No cancellation fees apply at this stage.

3. Cancellation During Active Projects

For projects in active development, refunds are calculated proportionally based on the milestone completion status:

• Pre-Milestone Completion: Refund of 100% of payments allocated to unstarted milestones, minus any non-recoverable third-party costs already incurred.
• In-Progress Milestones: A proportional refund based on the percentage of the current milestone completed. Detailed progress documentation will be provided alongside the refund calculation.
• Post-Completion: No refund is available for services fully delivered and accepted. Acceptance is confirmed through formal project sign-off or 14 calendar days of undisputed delivery without written objection.

4. Quality Disputes

If delivered work does not conform to the agreed-upon specifications as documented in the project scope, you must submit a written quality dispute within 14 days of delivery. We will review the dispute within 5 business days and either remediate the identified discrepancies at no additional cost or negotiate a fair partial refund proportional to the scope deviation. Disputes not raised within the 14-day window are considered accepted deliverables.

5. Refund Processing

All approved refunds are processed via the original payment method within 10–14 business days. Refund amounts are denominated in the same currency as the original transaction. Transaction fees charged by payment processors are non-refundable and will be deducted from the refund amount where applicable.

6. Exceptions

Refunds are not available for: (a) custom domain registrations or third-party license purchases already provisioned; (b) completed discovery, audit, or scoping phases where deliverables have been provided; (c) services suspended due to client-side non-responsiveness exceeding 30 calendar days without written notice of delay.

1. Agreement Scope

These Terms of Service ("Terms") govern all engagements between HarborVectorLabs, registered at 214 24, Bergsgatan 15, Malmo, Sweden, and any individual or entity ("Client") that engages our services through this website or via direct contractual agreement. By engaging our services, the Client acknowledges and accepts these Terms in their entirety.

2. Service Engagement Process

All service engagements begin with a discovery phase to establish mutual understanding of project scope, objectives, and deliverables. A formal Statement of Work ("SOW") document will be provided prior to any work commencing, detailing the specific deliverables, timeline, acceptance criteria, and pricing. No work will begin until the SOW is countersigned by both parties.

3. Payment Terms

• Milestone-Based Billing: Invoices are issued at agreed milestone checkpoints as defined in the SOW. Payment is due within 14 calendar days of invoice date unless otherwise specified.
• Late Payment: Invoices outstanding beyond 30 days incur a late fee of 1.5% per month on the outstanding balance. We reserve the right to suspend all active work upon 7 days' written notice if payment remains unresolved beyond 45 days.
• Currency: All prices are quoted and invoiced in Euros (€) unless explicitly agreed otherwise in writing.

4. Intellectual Property

Upon full payment of all invoiced amounts, the Client receives full ownership and intellectual property rights to all custom deliverables produced specifically for the project as defined in the SOW. This includes source code, design assets, written content, and custom configurations. HarborVectorLabs retains ownership of pre-existing tools, frameworks, libraries, methodologies, and general knowledge developed independently of the specific engagement. Each party retains all rights to their respective pre-existing intellectual property.

5. Confidentiality

Both parties agree to maintain strict confidentiality regarding all proprietary information shared during the engagement. This obligation survives termination of the agreement for a period of 24 months. Confidential information includes, but is not limited to, business strategies, technical architectures, user data, financial information, and unpublished product plans.

6. Limitation of Liability

To the maximum extent permitted by applicable law, HarborVectorLabs's total aggregate liability under any engagement shall not exceed the total fees paid by the Client for the specific service giving rise to the claim. Neither party shall be liable for indirect, incidental, consequential, special, or punitive damages, including loss of profits, data, or business opportunities, regardless of the cause of action or theory of liability.

7. Force Majeure

Neither party shall be liable for delays or failures in performance resulting from causes beyond reasonable control, including but not limited to natural disasters, pandemics, governmental actions, power outages, internet disruptions, or cybersecurity incidents. The affected party must provide written notice within 7 days of the force majeure event and use commercially reasonable efforts to mitigate its impact.

8. Term and Termination

Either party may terminate the agreement with 30 days' written notice. Termination does not relieve the Client of payment obligations for work completed and accepted prior to the termination effective date. All deliverables completed up to the termination date will be delivered to the Client upon receipt of final payment.

9. Governing Law and Dispute Resolution

These Terms are governed by the laws of the Kingdom of Sweden. Any disputes arising from or in connection with these Terms or the services provided shall first be attempted to be resolved through good-faith negotiation between the parties for a period of 30 days. If negotiation fails, disputes shall be submitted to the exclusive jurisdiction of the courts of Malmö, Sweden.

10. Amendments

HarborVectorLabs reserves the right to amend these Terms at any time. Material changes will be communicated via email to registered Clients at least 30 days before taking effect. Continued use of our services following the effective date of any amendment constitutes acceptance of the modified Terms.