Privacy policy
This privacy notice describes how the organisation that operates this website (“we”, “us”) processes personal data when you visit the site, contact us, shop, or use related online services. It reflects core GDPR and ePrivacy expectations for websites, including cookie consent.
Note. This is an informative starter template for the website — not legal advice. Adapt company details and have counsel review it before production go-live.
Controller
The company named on this website (see Contact / About) is the controller for personal data processed through the public site. Contact us using the details on the Contact page if you have privacy questions or wish to exercise your rights.
What we process
- Contact forms and messages (for example name, email, phone, and your message).
- Order, booking, or account details when you buy or register (as applicable to this site).
- Technical logs needed to secure and operate the site (for example IP address, timestamps, and security events).
- Cookie consent choices and, after consent, data from optional analytics or marketing tools if enabled.
Cookies and similar technologies
Cookies are small text files stored by your browser. They may be session cookies (expire when you close the browser) or persistent cookies (remain until they expire or you delete them). First-party cookies are set by this website; third-party cookies are set by other services (for example analytics or advertising) if those tools are enabled.
Under the ePrivacy Directive and the GDPR, cookies that are not strictly necessary require your consent before use. We ask for consent in the cookie banner before optional categories are activated. You can still use the site if you refuse optional cookies. Withdrawing consent is as easy as giving it — use Cookie settings.
Cookie categories on this website
Strictly necessary
Required for the site to work (for example session/security storage, CSRF protection, and remembering your cookie choice). These do not require consent but are described here for transparency.
Preferences
For example loading optional third-party fonts or remembering language/display choices beyond what is strictly necessary.
Analytics
Help us understand how the site is used (aggregated traffic, which pages are visited). Enabled only after consent.
Marketing
Used for more relevant offers or ads if such tools are connected. Enabled only after consent; boxes are not pre-ticked.
Your choice is stored locally (first-party) so we can respect it on later visits. You can change or withdraw consent at any time via Cookie settings in the footer or banner.
Legal bases (GDPR)
We process personal data only where a lawful basis under Article 6 GDPR applies, for example:
- Consent — e.g. optional cookies or newsletters when you have actively agreed.
- Contract — when processing is needed to deliver an order, account, or service you requested.
- Legal obligation — e.g. bookkeeping and tax requirements.
- Legitimate interests — e.g. securing the site, preventing abuse, and improving the service, without non-essential tracking before consent.
Retention
We keep personal data only as long as needed for the purpose or as required by law. Cookie consent is stored locally until you clear storage or change your choice.
Recipients and transfers
Data may be shared with providers that help us run the website (for example hosting) under agreements that protect the data. If personal data is transferred outside the EU/EEA, we use appropriate safeguards under the GDPR (such as the European Commission’s standard contractual clauses) where required.
Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to certain processing. Where processing is based on consent you may withdraw it at any time without affecting the lawfulness of prior processing. You may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
Updates
We may update this notice when our processing or the law changes. The version published on this page applies. Adapt company-specific details (controller name, processors, retention periods) before relying on this text in production.