Privacy & data protection
Privacy policy
This site sets no cookies, uses no tracking and does not profile you. Here is what personal data we may still come into contact with, why, and for how long.
Last updated: 20 October 2026
1. Data controller
The controller for personal data on this website is Sjölin IT & Foto AB, registration number 559321-8687 (“we”, “us”). Questions about privacy or exercising any of your rights? Contact us at [email protected].
2. Summary
- We use no cookies and therefore need no cookie banner.
- We use cookieless traffic statistics from our hosting provider Cloudflare. No tracking scripts, no pixels, no profiling.
- Fonts and all other content are served from our own server. The only external request is Cloudflare's measurement beacon, which sets no cookie.
- Details you send through the form, through an AI assistant or by email are used only to answer your enquiry.
- We never sell personal data and never use it for marketing without your consent.
3. What we process
| Data | When | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Name, email, company, phone and the description you provide | When you send a request, through the form, an AI assistant (MCP) or email | To answer your enquiry and, if relevant, prepare a proposal | Legitimate interest (Art. 6.1.f) or consent where you provide it | Up to 12 months after the dialogue ends |
| Aggregated traffic statistics (page views, referring address, country, load time) | When you visit the site | To understand how the site is used and improve it | Legitimate interest (Art. 6.1.f) | Aggregated; no identifier stored in your browser |
| Server logs with IP address | When you visit the site | Operations, security and troubleshooting | Legitimate interest (Art. 6.1.f) | Normally 30 days |
4. Cookies and local storage
This site sets no cookies and uses no local storage in your browser for tracking. There is therefore no cookie banner and no consent needed to read the page.
We use cookieless traffic statistics from our hosting provider Cloudflare (Cloudflare Web Analytics). It counts page views, referring address, country and load time in aggregate form. No cookies are set, no identifier is stored in your browser, and a visitor cannot be followed across websites or over time. The data is used only to understand how the site is used and is not shared with anyone else. Cloudflare is a processor under agreement, on the same terms as for operating the site.
5. Recipients and transfers
We share personal data only with suppliers who help us operate the site and answer enquiries – primarily our hosting provider Cloudflare. Processor agreements are in place. Where a supplier processes data outside the EU/EEA, it is done under the European Commission's standard contractual clauses or another valid transfer mechanism.
Requests submitted through the site's form or through our MCP service are stored with our hosting provider (Cloudflare) and deleted automatically after twelve months. No third party has access to them, and they are never used for marketing.
6. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict processing, to object and to data portability. Contact us at [email protected] and we will respond within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
7. Security
We use encryption in transit, strict security headers, access control and logging. Data is stored in the EU where possible, and access is limited to those who need it for their work.
8. Changes to this policy
We update this policy when something changes in how we process data. The date at the top shows when it was last updated. The Swedish version is the authoritative text.
9. Want to know more?
Read more about our approach in the services, or contact us directly.
Next step
Questions about privacy?
Ask us. Data protection is part of what we do every day, so we are happy to explain how we handle your data.