Cookie Policy

Cookie Policy

Last Updated: 2026/6/30

This Cookie Policy explains how SustainAX AB uses cookies and similar technologies on our websites and subdomains. This Cookie Policy should be read together with our Privacy Policy.

1. Who we are

SustainAX AB is a Swedish company providing ESG research, ESG risk analysis, SaaS solutions and related services for professional and institutional users. Legal entity: SustainAX AB Swedish organisation number: 559300-8195 Registered address: Anckargripsgatan 3, 211 19 Malmö, Sweden Privacy contact: privacy (at) sustainax.com This Cookie Policy applies to our websites and subdomains, including: • www.sustainax.com; • research.sustainax.com; • solutions.sustainax.com; • intel.sustainax.com; • infra.sustainax.com.

2. What are cookies?

Cookies are small text files stored on your device when you visit a website. Cookies may allow a website to recognise your device, remember your preferences, maintain login sessions, measure website performance or understand how visitors use the website. Similar technologies may include pixels, tags, scripts, local storage, session storage and other identifiers that store or access information on your device. In this Cookie Policy, we use the term “cookies” to refer to cookies and similar technologies.ore consistent experience. 2.4 Marketing Cookies (if applicable) Used only when enabled to evaluate campaign effectiveness or display relevant content.

3. Why we use cookies

We use cookies for the following purposes: • to make our websites function properly; • to provide secure access to our SaaS services; • to remember cookie choices and user preferences; • to maintain login sessions and authentication; • to protect our websites and SaaS services from misuse; • to understand how visitors use our websites; • to improve website content, performance and user experience. We do not use cookies to sell personal data.nd resolve technical issues

4. Types of cookies we use

We use the following categories of cookies. Strictly necessary cookies Strictly necessary cookies are required for website operation, security, cookie consent management, SaaS login, authentication, session management and user preferences. These cookies do not require consent where they are technically necessary. Functional cookies Functional cookies are used to remember choices or settings that improve functionality. These cookies require consent unless they are strictly necessary for a function specifically requested by the user. Analytics cookies Analytics cookies are used to understand website traffic, usage patterns and website performance. These cookies require consent. Marketing cookies Marketing cookies are used for marketing, tracking or advertising purposes. These cookies require consent. Unclassified cookies Unclassified cookies are cookies that are being analysed and have not yet been categorised. Consent should be obtained for unclassified cookies unless they are confirmed as strictly necessary.

5. Strictly necessary cookies

Strictly necessary cookies are required for our websites and SaaS services to work properly. These may include cookies used for: • website security; • load balancing; • cookie consent management; • session management; • login and authentication; • 2FA/MFA-related access processes; • remembering essential user preferences; • preventing misuse or unauthorised access. These cookies cannot normally be disabled through our cookie banner because they are necessary for the website or service to function. You may still disable cookies in your browser, but parts of the website or SaaS service may not work correctly.

6. Analytics cookies

Subject to your consent, we may use analytics cookies to understand how our websites are used and to improve website performance, content and usability. Analytics tools may include: • Google Analytics; • Google Tag Manager; • Hotjar. These tools may collect information such as: • pages visited; • time spent on pages; • interactions with website elements; • browser and device information; • approximate location derived from technical data; • referral source; • anonymised or pseudonymised identifiers; • cookie identifiers. Analytics cookies are used only where you have given consent through our cookie consent tool.

7. Google Analytics and Google Tag Manager

We may use Google Analytics to measure website traffic and understand how visitors interact with our websites. We may use Google Tag Manager to manage website tags and scripts. Google Tag Manager itself does not create user profiles for SustainAX, but it can be used to deploy other tools, such as Google Analytics, depending on your consent choices and website configuration. Google Analytics and related tags should only be activated where you have given the relevant consent.

8. Hotjar

Subject to your consent, we may use Hotjar to understand how visitors interact with our websites. Hotjar may help us analyse user behaviour, improve page structure and identify usability issues. Depending on configuration, Hotjar may collect information such as device information, browser information, interactions with pages, clicks, scrolling behaviour and technical usage data. Hotjar should only be activated where you have given the relevant consent.

9. Marketing cookies

We do not currently use LinkedIn Insight Tag, Meta/Facebook Pixel or similar advertising pixels based on the current website setup. If we introduce marketing cookies or advertising pixels in the future, we will update this Cookie Policy and request consent where required before such cookies are used.

10. Cookiebot consent management

We use Cookiebot as our cookie consent platform. Cookiebot helps us: • display a cookie banner; • collect and store cookie consent choices; • allow visitors to accept or reject non-essential cookies; • allow visitors to change or withdraw consent; • maintain a cookie declaration; • document consent choices. You can change or withdraw your cookie consent at any time by opening the cookie settings on our website.

11. Legal basis

Strictly necessary cookies are used because they are required to provide the website or SaaS service requested by the user, maintain security, manage consent choices or operate essential functionality. For non-essential cookies, including analytics cookies and any future marketing cookies, we rely on your consent. Where cookies involve the processing of personal data, the processing is also described in our Privacy Policy.

12. Third-party cookies

Some cookies may be set by third-party service providers whose tools are used on our websites. These may include providers such as: • Google; • Hotjar; • Cookiebot; • Vercel or other hosting/infrastructure providers; • SaaS authentication or infrastructure providers, where relevant. Third-party providers may process information according to their own privacy and cookie documentation. We recommend reviewing the relevant third-party information where applicable.

13. International transfers

Some third-party providers may process cookie-related personal data outside the EU/EEA, including in the United States or other countries. Where this happens, we take steps to ensure that appropriate safeguards are in place, such as EU Standard Contractual Clauses, transfer impact assessments, supplementary measures or other lawful transfer mechanisms where required. More information about international transfers is available in our Privacy Policy.

14. How long cookies remain on your device

Cookies may be session cookies or persistent cookies. Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a defined period or until you delete them. The exact duration of each cookie depends on the cookie, provider and configuration. Details should be available in our cookie declaration generated through Cookiebot.

15. Managing your cookie preferences

You can manage your cookie preferences through the cookie banner or cookie settings available on our websites. You can normally: • accept all cookies; • reject non-essential cookies; • choose specific cookie categories; • change or withdraw consent later. You can also control cookies through your browser settings. Most browsers allow you to block, delete or restrict cookies. However, if you block strictly necessary cookies, some parts of our websites or SaaS services may not function properly.

16. Cookie declaration

Our detailed cookie declaration is provided through Cookiebot and lists the cookies detected on our websites, including information such as: • cookie name; • provider; • purpose; • category; • expiry period; • type of cookie. The cookie declaration should be reviewed and updated regularly, especially when we add, remove or change website tools. Cookiebot cookie declaration here: https://www.cookiebot.com/en/cookie-declaration/

17. Changes to this Cookie Policy

We may update this Cookie Policy from time to time, for example if we change the cookies or tools used on our websites, introduce new analytics or marketing technologies, or change our consent management setup. The latest version will be published on our website with the date of the latest update.

18. Contact

If you have questions about this Cookie Policy or our use of cookies, please contact: SustainAX AB Anckargripsgatan 3 211 19 Malmö Sweden privacy (at) sustainax.com

From manual research to automated ESG risk intelligence.

Book a demo to see how SustainAX helps teams move faster and work smarter.