Privacy policy

Storsint Consulting AB (Swedish corporate identity number 559582-8087) is the data controller. Send questions about how we handle personal data, and requests to exercise your rights, to [email protected].

We build websites and software for companies, and sometimes contact companies we think could benefit from them. We only approach limited companies and partnerships: never sole traders, and never companies that have registered a block on direct marketing (reklamspärr).

What we hold

• Information about the company: its name, corporate identity number, address, industry and key figures from its annual report, such as its number of employees and revenue.
• The company's website and what we see on it, for example whether it works on phones and whether its contact details are easy to find.
• The email address we write to, usually the company's shared address, such as info@.
• If the company's website shows them: a contact person's name, role and email address.

Most of this is about the company and is not personal data. Personal data is what identifies a person: a contact person's name, role and email address.

Where it comes from

From Statistics Sweden's business register (SCB), the Swedish Companies Registration Office (Bolagsverket) and the company's own website. We only use information that is public or that the company has published itself. How we visit websites is described at storsint.com/bot/en.

Why, and on what legal basis

We use the information to offer the company our services. The legal basis is legitimate interest (Article 6(1)(f) of the General Data Protection Regulation). We have weighed our interest in contacting companies about services that may be relevant to them against the contact person's interests: we only use information that belongs to the professional role and that the company itself has made public, we send few and considered emails, and it is easy to say no.

How long we keep it

If nothing comes of it, we delete the details of contact persons and the content of our emails no later than six months after the last contact. Information about the company, which is public, we may keep longer.

If you ask us not to contact you again, we put the email address, and where needed the company's domain and corporate identity number, on a block list, so that we never contact you again. We keep the block list for as long as we send this kind of email, because otherwise we couldn't respect your no.

Saying no

Reply to our email that you don't want to be contacted, or write to [email protected], and we'll never contact you again. You can object to our use of your information for marketing at any time, without giving a reason.

If you email us, we process your name, your email address and what you write, so that we can reply and handle your matter. The legal basis is our legitimate interest in replying to what you send us or, for a quote or a contract, entering into or performing the contract (Article 6(1)(b)).

We keep the correspondence for at most 24 months after the matter is closed. Emails that belong to a contract or an invoice we keep for as long as the law requires, for example the Swedish Bookkeeping Act.

This website uses no cookies and no analytics or tracking. To deliver the site and protect it from attacks, our hosting provider and our DNS and network protection provider process technical information about your visit, such as your IP address. It stays in their logs for a limited time. The legal basis is legitimate interest.

Some providers process personal data on our behalf (processors), under agreements that limit what they may do with it:

Google

Email (Google Workspace)

Railway

Hosting of the website and of the systems where we store the data

Cloudflare

DNS and protection of the website

We never sell personal data and don't share it with anyone but these providers, unless the law requires it.

The providers above are American companies, so data may be processed in the United States. Transfers rely on the European Commission's decision on the EU–US Data Privacy Framework for providers certified under it, and otherwise on the Commission's standard contractual clauses.

You have the right to:

• find out what personal data we hold about you and get a copy of it,
• have incorrect data corrected,
• have your data erased,
• ask us to restrict how we use it,
• object to processing based on legitimate interest, and to marketing at any time, without giving a reason,
• receive data you have given us yourself in a machine-readable format, when the processing is based on a contract.

Write to [email protected]. We reply within one month.

If you're unhappy with how we handle your personal data, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or to the data protection authority in the country where you live or work.

We update this policy when we change how we handle personal data. The date at the top shows when it last changed.