Privacy
Describes this version of the website. Still a draft in substance: legal identity details are missing.
This text describes what this website actually does. It is not a claim that every part of the personal-data handling has been legally reviewed, and it does not say that Siteora is “GDPR compliant”.
Who is responsible
Controller: Siteora (sole trader), Växjö, Sweden. Contact for questions about personal data: [email protected].
What the form collects
The contact form receives your name, email address, company, phone number if you enter one, the service you have in mind, a budget if you choose one, your message, the fact that you ticked consent, and whether the form was filled in in Swedish or English.
A hidden field should be left empty. It is only used to reject automated spam and is not kept as a detail about you. A reference id is created in the browser so the same attempt is not sent twice.
Please don’t write sensitive personal data, or information about other people, in the message.
Why the details are used
The details are used to read the enquiry and reply, and to talk about a possible project. Which legal basis should be relied on is not settled on this page.
Who receives them
The form is received by a Cloudflare Pages function and sent as email through Resend to [email protected]. We do not keep a database of our own for the forms. The details live in the email and with the email provider.
Resend delivers the email. The company is American, so an enquiry may be processed outside the EU/EEA. A data-processing agreement is not published here.
Cloudflare runs the website, the function that receives the form, and Turnstile, the spam check. Cloudflare may process technical details about the request, such as an IP address, for that check and for operating and protecting the service.
Language choice in the browser
If you switch language, the choice is stored in localStorage under the key siteora-lang, with the value sv or en. It stays in your browser. It is not sent to the server. Crawlers are not redirected because of that choice. You can delete it in the browser.
Cookies, logs and measurement
The site has no analytics service, no advertising and no marketing cookie that we have added. Cloudflare and Turnstile may still use a cookie needed for the spam check or to protect the service. That should be looked at in a browser once the site is published. This text does not claim the website is free of cookies.
How long the details are kept
An enquiry that does not lead to a project is kept for at most 12 months from the last contact and is then deleted from the inbox. Details needed for a contract or for bookkeeping are kept for as long as the law requires, for example under the Swedish Bookkeeping Act.
What you can ask for, and complaints
You can write to [email protected] and ask for access, correction or deletion, and where it applies for restriction, to object, or to receive a copy. That these possibilities exist in law is not the same as the routines being finished.
A complaint can be made to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).