Last updated: 2026-04-28
Arelion values the privacy of its customers and end-users, and complies with all applicable data protection laws and regulations, including the EU General Data Protection Regulation (GDPR). The GDPR gives individuals within the European Union more insight into how their personal data is processed – and it also gives individuals rights to their data. You can learn more about GDPR by visiting the European Commission’s information site at www.europa.eu/dataprotection.
Arelion is an international provider of telecommunication services and as a part of our business we collect and store information about the services we provide. As we are in the wholesale part of the telecoms industry, our customers are always other companies rather than people.
Like other providers in the wholesale industry we assist local operators to reach other local operators around the world so that their customers, end-users with subscriptions, can communicate with each other.
In the table below, we explain what personal data we have, where we receive it from and why we process it.
Type of data
Information about international phone calls and use of mobile data when sent through our wholesale network. For example: caller-ID, called phone number, point in time and/or amount of data used.
|
Source |
From our carrier counterparties with whom the end user’s local operator contracts, or directly from their telecommunications operator |
|---|---|
|
Purpose |
We need the information to be able to deliver our services and to bill our customers for them. |
|
Legal ground |
To fulfill our legal obligations as a service provider, and to fulfill the contracts that we have with the telecommunications operator. |
Type of data
Basic information of representatives of our customers and suppliers. E.g. Name, business contact details, job title.
|
Source |
From employees of our customers, suppliers, or business partners. |
|---|---|
|
Purpose |
We use this information to manage our business relationships, communicate with our customers and suppliers in relation to the provision of services, and to inform them about relevant developments, events, and offerings relating to our services and the telecommunications sector. |
|
Legal ground |
Processing is based on Arelion’s legitimate interests in maintaining and developing business relationships, provided that those interests are not overridden by the rights and freedoms of the individuals concerned. Where required by applicable law, Arelion will obtain prior consent before sending marketing communications. |
Type of data
Business contact information used for marketing. E.g. Name, business contact details, job title.
|
Source |
|
|---|---|
|
Purpose |
To inform individuals about developments in our services, events, and other marketing related content relevant to Arelion’s business. |
|
Legal ground |
You can object to marketing communications at any time. |
Type of data
Basic personal information provided in online communications
|
Source |
From members of the public when they contact us via online form available at arelion.com |
|---|---|
|
Purpose |
Our customers and third parties can contact Arelion using an online form in our website. We use the data to respond to these queries. |
|
Legal ground |
On the consent given when sending information over online form. |
Type of data
Cookies that collect information about users browsing in our website
See our cookie policy at Cookie policy page
|
Source |
From a visitor’s browser when they visit our website, unless they have prohibited us from doing so |
|---|---|
|
Purpose |
We want to make sure that user’s experience on our website is the best possible. If you don’t want to share your cookies with us, let us know, for example, by changing your browser settings. |
|
Legal ground |
On the consent given to accept cookies on our website, which can be withdrawn at anytime. |
The exact retention period depends on the type of personal data and the purpose of processing. Arelion only keeps personal data for as long as it is necessary and proportionate in accordance with applicable data protection laws.
When we process your personal data because you are a contact person for one of our customers or business partners, we keep the data for as long as the business relationship exists or until we are informed that it should be updated or deleted. Where personal data is processed for marketing purposes, we send information only to individuals who have indicated interest and continue to do so until you opt out, after which your personal data is deleted from our marketing systems.
We may share personal data with:
We may also disclose personal data to competent authorities where required by law or in response to valid legal requests.
We process and store personal data both within the EU and in third countries. Where personal data is transferred outside the EU/EEA, Arelion ensures that appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, to protect individuals’ rights.
Safeguarding your personal data is of the utmost importance to Arelion. We continuously work to protect personal data through appropriate technical and organisational security measures.
Our security efforts cover the protection of information, systems, networks, personnel, and physical facilities, with particular attention given to personal data. These measures are designed to prevent unauthorised access, loss, misuse, or disclosure of personal data.
We regularly assess risks and review our security controls to ensure an appropriate level of protection, taking into account applicable legal requirements, contractual obligations, available technology, and the nature of the data processed.
You have rights under the GDPR, including the right to:
In relation to international calls carried over Arelion’s network, your local telecommunications operator may be better placed to provide you with detailed information, as they have a direct relationship with you and may hold more complete data. When international calls pass through our network, Arelion typically processes technical information such as phone numbers and does not have information that directly identifies the individual using a specific number.
You can exercise your rights by contacting Arelion using the contact details below. We may request proof of identity to ensure that personal data is not disclosed to the wrong person.
If you no longer wish to receive marketing or other non-service related communications from Arelion, you can opt out at any time by using the unsubscribe or opt out option included in the communication or by contacting us directly. This applies to both automated marketing communications and direct sales communications.
You can find more information about your rights under the GDPR at:
https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en
If you are not satisfied with how Arelion processes your personal data, you have the right to lodge a complaint with your local supervisory authority. A list of EU data protection authorities is available at:
http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080
If you have questions about this Privacy Notice or about how Arelion processes personal data, please contact:
Arelion Data Protection Officer
Email: dpo@arelion.com
Address: Arelion Sweden AB, Gustav III: s Boulevard 134, 169 70 Solna, Sweden
