Privacy.

Who is responsible

DataLivia AB (organisation number 559601-1014), whose registered office is in Stockholm, Sweden, is the controller of the personal data described on this page.

For any privacy question or request, contact us at contact@datalivia.se.

What we collect and why

We collect only what is needed for the purposes below.

• Contact form and email: your name, email address, organisation (optional), area of interest and your message, including anything you choose to write. We use this to read and answer your enquiry. Our legal basis is our legitimate interest in answering business enquiries, and, where you ask about working with us, taking steps at your request before an agreement.
• Technical data when you visit the website: for example your IP address, browser and device information, the page requested and the time. Our hosting provider processes this to deliver the website, keep it secure and prevent abuse. Our legal basis is our legitimate interest in running and securing the website.
• Abuse protection on the contact form: to stop repeated submissions, a one-way hash of your IP address is used briefly as a counter key by our hosting provider's rate-limiting service. We do not store your IP address or this hash ourselves. Our legal basis is our legitimate interest in protecting the contact form and the website from spam and misuse.

Providing information is voluntary

You choose whether to contact us. If you use the contact form, we need your name, a valid email address and your message in order to read and answer your enquiry; without them we cannot reply. Organisation is optional. You can also email us instead.

What we do not do

• We do not use analytics, advertising or tracking technologies on this website.
• We do not sell personal data.
• We do not carry out automated decision-making or profiling that has legal or similarly significant effects on you. The contact form uses automatic checks (a hidden field, a minimum completion time and a limit on repeated submissions) only to filter out automated spam.
• We use your data only for the purposes described in this notice.
• We do not store contact form messages on the website itself. They are sent to our email inbox.

Please do not send sensitive information

Do not submit patient data, medical or health information, personal identity numbers or other sensitive information through the contact form or by email. If we receive such information by mistake, we will delete it from our mailbox as soon as we can. Copies held by our service providers are removed under their own retention periods.

Who we share data with

We use a small number of service providers that process data on our behalf, and they may use sub-processors of their own:

• Cloudflare, which hosts the website and delivers it securely.
• Google (Google Workspace), which hosts our email mailboxes, where we receive and keep messages.
• Resend, which delivers contact form messages to our inbox as email. We use Resend's EU region. Resend may keep a log of the messages it sends for a limited period.

Transfers outside the EU/EEA

Some of these providers are based in, or process data in, countries outside the EU/EEA, including the United States. Where this happens, the transfer is covered by safeguards provided under data protection law, such as an adequacy decision by the European Commission or standard contractual clauses. You can ask us for information about the safeguards that apply, including a copy where one is available, by contacting contact@datalivia.se.

How long we keep data

• We keep enquiries for as long as needed to answer them and follow up, and delete them from our mailbox within 12 months after our last contact with you, unless we need to keep them longer to carry out an agreement, to meet a legal obligation, or to establish, exercise or defend legal claims.
• Technical logs are kept by our hosting provider for the period set by that provider.
• Delivery logs of contact form messages are kept by our email delivery provider for the period set by that provider.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain cases;
• restrict how we use your data in certain cases;
• object to processing that is based on our legitimate interest;
• receive your data in a portable format where the right applies.

Questions and complaints

To use any of these rights, email contact@datalivia.se. We respond to requests without undue delay and in any case within one month of receiving them; in some cases the law allows this period to be extended. If you are not satisfied with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.

Changes to this notice

We may update this notice. The date of the latest update is shown at the top of this page.