Data Protection and Privacy

General Information and Mandatory Disclosures

Data Controller

The data controller responsible for data processing on this website is:

Karoline Chivasa

Pilotgatan 46

12832 Skarpnäck

The data controller determines, alone or jointly with others, the purposes and means of the processing of personal data (e.g. names, contact details, or similar).

Withdrawal of Your Consent to Data Processing

Certain data processing operations are only possible with your express consent. You may withdraw your consent at any time with effect for the future. An informal notification by email is sufficient to withdraw consent. The lawfulness of any data processing carried out prior to your withdrawal remains unaffected.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Sweden, the supervisory authority for data protection matters is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY):

Integritetsskyddsmyndigheten (IMY)

Box 8114

104 20 Stockholm, Sweden

Phone: +46 (0)8-657 61 00

Email: imy@imy.se

Website: www.imy.se

Right to Data Portability

You have the right to receive personal data that we process on the basis of your consent or in fulfilment of a contract, in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another controller, where this is technically feasible.

Right of Access, Rectification, Restriction, and Erasure

You have the right, at any time and free of charge, to obtain information about the personal data we hold about you, its origin, recipients, and the purpose of the processing. You may also have a right to rectification, restriction of processing, or erasure of this data. For these and any other questions regarding personal data, you may contact us at any time using the contact details provided above.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content that you send to us as the website operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar and by the lock icon displayed in the browser bar.

Cookies

Our website uses cookies. Cookies are small text files that your web browser stores on your device. They help us make our website more user-friendly, effective, and secure.

Some cookies are "session cookies." These are automatically deleted when you close your browser. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise you when you return to our website.

Important: Under Swedish law (the Electronic Communications Act, Lag (2022:482) om elektronisk kommunikation) and the GDPR, we are required to obtain your consent before placing any non-essential cookies on your device. When you first visit our website, you will be presented with a cookie consent banner offering you a clear and equal choice to accept or reject non-essential cookies. Strictly necessary cookies — those required for the website to function properly (e.g. session cookies) — do not require consent.

You can also control cookies through your web browser settings. Most browsers allow you to monitor, restrict, or block cookies entirely. Please note that disabling cookies may limit certain features of our website.

The use of strictly necessary cookies is based on Article 6(1)(f) GDPR (legitimate interest). As the operator of this website, we have a legitimate interest in storing cookies that are technically necessary for the proper functioning of our services. All other cookies (e.g. analytics) are only placed with your prior consent under Article 6(1)(a) GDPR.

Your Cookie Choices

When you first visit our website, you will see a cookie consent banner with equally prominent options to accept or reject non-essential cookies. In accordance with guidance from the Swedish Authority for Privacy Protection (IMY), the accept and reject options are presented with equal visual prominence — no dark patterns, misleading colours, or hidden choices.

You can change your cookie preferences at any time by clicking the "Cookie settings" link in the website footer. Withdrawing consent is as simple as giving it.

We store a record of your consent choice (including a timestamp and what was accepted or rejected) for up to five years, in line with IMY guidance on consent logging.

Website Analytics

Google Analytics

Our website uses functions of the web analytics service Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that enable an analysis of your use of our website. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server.

Legal basis: Google Analytics cookies are only placed with your express consent (Article 6(1)(a) GDPR). No analytics data is collected unless you actively accept analytics cookies via the cookie consent banner.

IP Anonymisation

We use Google Analytics with the IP anonymisation function activated. This ensures that your IP address is truncated by Google within the European Economic Area before being transmitted to the USA. In exceptional cases, the full IP address may be transmitted to a Google server in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide us with other services related to website and internet usage. The IP address transmitted by Google Analytics will not be merged with other data held by Google.

Browser Plugin

You can also prevent Google from collecting data related to your use of the website (including your IP address) by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout

Objection to Data Collection

You can prevent the collection of your data by Google Analytics at any time by withdrawing your cookie consent via the "Cookie settings" link in the website footer. You can also find details on how Google handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245

Data Processing Agreement

To ensure full compliance with data protection requirements, we have concluded a data processing agreement with Google.

International Data Transfers

Where personal data is transferred to countries outside the European Economic Area (EEA) — for example through the use of services such as Google Analytics — we ensure that appropriate safeguards are in place. These may include the EU-US Data Privacy Framework, EU Standard Contractual Clauses, or other measures recognised under the GDPR (Chapter V).

Applicable Legislation

This privacy policy is governed by the following legislation:

• General Data Protection Regulation (EU) 2016/679 (GDPR)

• Swedish Data Protection Act (2018:218) — Lag med kompletterande bestämmelser till EU:s dataskyddsförordning

• Swedish Electronic Communications Act (2022:482) — Lag om elektronisk kommunikation (cookies and e-privacy)

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. Any significant changes will be communicated via our website. The date at the top of this document indicates when it was last updated.