Privacy policy

Data controller

The controller of the processing is FBZ AB. That is the legal entity responsible for making sure the data is handled in line with this policy and with the General Data Protection Regulation (GDPR).

Questions about personal data are answered via the contact form on this website.

What data is collected

When you submit the form, the answers you provided are stored:

• Company name and a description of the business.
• Details about the website you want: goal, services, language, any links.
• Name, email address and, if you fill it in, phone number.
• Any files you choose to upload, for example a logo and images.
• Technical details needed to store the enquiry: timestamp, form version, site language and a shortened (hashed) representation of the sender’s IP address, used to limit abuse.

Whether you have to provide the data

Submitting the form is voluntary. Your name and email address are however needed in order to produce and send you a proposal, so without them the enquiry cannot be handled.

Why the data is processed

• To produce and send you a free website proposal. Legal basis: steps taken at your request prior to a possible contract.
• To answer questions and handle contact about the proposal. Legal basis: legitimate interest in being able to communicate about your enquiry.
• To protect the form against abuse and spam. Legal basis: legitimate interest in operating the service.
• To send newsletters, but only if you actively ticked the box. Legal basis: consent, which you can withdraw at any time.

How long the data is kept

Enquiries that do not lead to a purchase are deleted no later than twelve months after they were received. If a purchase is made, the material is kept for as long as it is needed to fulfil the agreement and thereafter in line with Swedish bookkeeping law. Uploaded files are deleted together with the enquiry.

Who may receive the data

The data is stored with Google (Firebase/Google Cloud), acting as a processor. Storage is configured to a region within the EU. If email notification is enabled, a message is sent via the email service set in the configuration; that service is then also a processor.

If you have consented to measurement, Google (Google Tag Manager and Google Analytics 4) and Microsoft (Clarity) process visit data as processors. They receive no free text, email address or phone number.

When you submit a form, the request is checked against Cloudflare (Turnstile) to stop automated submissions. Cloudflare receives your IP address and technical details about the browser, acts as a processor and sets no cookies. The check is necessary in order to offer the form and is carried out whether or not you have consented to measurement.

The data is not sold and is not shared with anyone other than the above, unless required by law.

Transfers outside the EU/EEA

Storage of enquiries is configured to a region within the EU. For support or operations the provider may in exceptional cases need access from a third country.

The measurement tools and the spam protection may involve transfers to the United States. Google, Microsoft and Cloudflare are covered by the European Commission’s adequacy decision for the EU-US Data Privacy Framework, and the transfers additionally rely on the European Commission’s standard contractual clauses.

Contacting us

If you send a message through Contact us, your name, your email address and what you wrote are stored together with the time. They are used only to reply to you and are handled in the same way as a request sent through the form.

The form runs entirely on our own website without third-party services. Nothing you write is stored in your browser and none of the content is sent to the measurement tools.

Cookies and measurement

The website loads no analytics or advertising tags before you have given consent in the cookie dialogue. If you reject, no measurement is loaded at all. You can change your choice at any time via the link in the footer.

If you consent, Google Tag Manager and Google Analytics 4 are used to measure how the pages are used, and Microsoft Clarity to see how the pages are used in general, for example how far visitors scroll. The form fields are masked and no free text, email address, phone number or uploaded file name is sent to the measurement tools. If you withdraw your consent, measurement stops.

Your consent choice is stored locally in your browser so that you do not have to decide on every visit. That is necessary for the site to work and does not itself require consent.

Automated decision-making

No automated decisions with legal effects for you are made, and no profiling takes place.

Your rights

You have the right to, subject to the limits set by law:

• Request a copy of the data held about you.
• Request correction of inaccurate data.
• Request erasure, unless there is an obligation to keep the data.
• Object to processing based on legitimate interest.
• Withdraw a consent you have given, for example for newsletters.
• Complain to the Swedish Authority for Privacy Protection (IMY) if you believe the processing is incorrect.

Get in touch via the contact form on this website if you want to exercise any of these rights. A reply is normally given within one month.