1. Who is responsible
Detroj AB is the data controller for the personal data described in this policy.
Detroj AB, reg. no. 559479-7648
S:t Johannesgatan 2, 211 46 Malmö, Sweden
2. What we collect
When you contact us
If you email or call us, we process your name, email address, phone number and whatever you choose to tell us about your project.
When you visit the site
Our hosting provider processes your IP address, browser information, the time of the request and the page requested. This is needed to deliver the site and protect it against abuse.
Visitor statistics, only with your consent
If you accept cookies, Google Analytics 4 records which pages you view, your approximate location (country and region), your device and browser, and the site that referred you. The data is linked to a random identifier stored in a cookie, which makes it pseudonymous rather than anonymous. Google Analytics 4 does not log or store IP addresses. Nothing is collected before you accept.
3. Why we process it, and on what legal basis
- Answering enquiries and managing customer relationships: legitimate interest (GDPR Art. 6(1)(f)).
- Carrying out work you have ordered: performance of a contract (Art. 6(1)(b)).
- Keeping accounting records: legal obligation under the Swedish Bookkeeping Act (Art. 6(1)(c)).
- Delivering the site securely: legitimate interest (Art. 6(1)(f)).
- Visitor statistics: your consent (Art. 6(1)(a) and chapter 9, section 28 of the Swedish Electronic Communications Act).
4. Service providers
These companies process personal data on our behalf, under data processing agreements:
- Vercel Inc. hosts the site. Vercel’s privacy policy
- Microsoft provides our email. Microsoft’s privacy statement
- Google Ireland Limited provides Google Analytics, only after consent. Google’s privacy policy and data processing terms
5. Transfers outside the EU and EEA
Vercel, Microsoft and Google may transfer data to the United States. These transfers rely on the EU-US Data Privacy Framework or the EU standard contractual clauses.
6. How long we keep it
- Enquiries that don’t lead to work are deleted within 12 months.
- Customer data is kept while we work together.
- Accounting records are kept for seven years, as Swedish law requires.
- Visitor statistics are kept for at most 14 months.
- Server logs are kept by Vercel for a limited period.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data erased (Art. 17)
- restrict processing (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw your consent at any time
Email and we’ll respond within one month.
8. Cookies
Analytics only runs if you accept cookies. Until you choose, no analytics script loads and no cookies are set.
If you accept, Google Analytics sets these cookies:
- _ga: tells unique visitors apart. Expires after 2 years.
- _ga_<id>: keeps track of the session. Expires after 2 years.
You can change your choice at any time with Cookie settings in the footer or the button below. If you then choose Decline, the _ga cookies are deleted and collection stops immediately.
9. Complaints
If you think we handle your personal data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, imy.se.