Privacy & cookies

TODO: legal review — this is a plain-language starting point, not legal advice. Add the company's legal name, organisation number and postal address.

Who is responsible

ahedr (TODO: legal name and org. no.), Västerås, Sweden, is the data controller. Contact: use our contact form.

Analytics (Google Analytics 4)

We use Google Analytics 4 only if you click Accept analytics in the cookie banner. Until then, no analytics script is loaded and no analytics cookies are set. If you accept, Google sets the _ga and _ga_* cookies to count visits. We do not use advertising features.

Your choice is stored in a cookie called ahedr_consent for 180 days, shared across ahedr.com subdomains so you only need to answer once. You can change your mind at any time with ; withdrawing removes the analytics cookies.

Forms

When you send a contact or sign-up form we store what you typed, the site and form name, your IP address and browser user agent. We use it to answer you and to stop spam, and keep it for up to 24 months (TODO: confirm). Data is stored on our own server in Google Cloud's Stockholm region (europe-north2, Sweden). A copy is emailed to us through Google Workspace.

Forms are protected by Google reCAPTCHA v3, which is loaded only when you start filling in a form. Google's Privacy Policy and Terms apply.

Legal basis

Analytics: your consent. Forms: our legitimate interest in answering enquiries and preventing abuse, or taking steps at your request before a contract.

Your rights

You can ask for access to, correction or deletion of your data, and object to processing. You may complain to the Swedish Authority for Privacy Protection (IMY).

Server logs

Our web server keeps standard access logs (IP address, time, page requested) for security, for a short period (TODO: confirm retention).