Privacy policy

The short version

We only collect what you type to us yourself: your name and email if you fill in the contact form. We run no analytics, no tracking pixels and no advertising cookies. We never sell your details on.

Who is responsible for your data

FENA Digital AB, Gothenburg, Sweden, is the data controller for the processing described here.

Email: hello@fenadigital.com

What we collect, and why

The contact form. You give us your name and email address, and optionally your company and a message. That goes to our server, gets validated, and is emailed on to us. We use it to reply to you and to talk through the work you might need. Nothing else. The form also has a hidden field that catches spam. You can't see it, and you should never fill it in.

Server logs. Our hosting provider logs technical details about the visit, such as IP address, timestamp and which page was requested. This is standard for running any website and is needed for security and troubleshooting. We don't use the logs to follow you between visits.

Legal basis

For the contact form, we process your data to take steps at your request before a possible contract (Article 6(1)(b) of the GDPR) and on the basis of legitimate interest (Article 6(1)(f)). Our legitimate interest is a simple one: if someone gets in touch about possible work, we need to be able to reply.

The server logs also rest on legitimate interest, namely keeping the site secure and running.

Cookies

The site sets a single cookie of its own, and only if you switch language with the language button. It is called fena-lang, holds nothing but the language you picked and lasts a year, so you land on the same language next time. We have no visitor analytics and no advertising tools.

When you go to fenadigital.com, we pick the language from the country you are visiting from. Vercel works the country out from your IP address, and we do not store it.

Who else sees your data

We don't sell or rent your details, and we never pass them on for anyone else's marketing. To keep the site and the email working, we use a small number of providers:

• Vercel Inc. (a US company). Hosting for the website and its server functions. Our deployment sits inside the EU.
• Resend (a US company). Delivers your contact form message to us as email.

Because these are US companies, data may be processed outside the EU and EEA. Those transfers are covered by the safeguards the GDPR requires, in practice the European Commission's Standard Contractual Clauses or certification under the EU to US data privacy framework, depending on the provider. If you want to know exactly what applies to a particular provider, email us and we'll tell you.

We may also have to hand over data where the law requires it.

How long we keep things

• Enquiries that don't lead anywhere: we clear them out after 24 months at the latest.
• If you become a client: we keep your details for as long as we work together and a reasonable period after. Anything that counts as accounting records we keep for seven years, because Swedish bookkeeping law (bokföringslagen) requires it.
• Server logs: a short period at the provider.

If you'd like us to delete things sooner, just say so.

Your rights

You have the right to:

• find out what data we hold about you and get a copy
• have incorrect data corrected
• have data deleted
• ask us to restrict how we use it
• object to processing we base on legitimate interest
• receive the data you gave us in a format you can take elsewhere

Email hello@fenadigital.com and we'll sort it. You'll hear back as soon as we can and within a month at the latest. It costs nothing.

If you're unhappy

Tell us first, we'd much rather fix it directly. You also always have the right to complain to Integritetsskyddsmyndigheten (IMY), the Swedish authority that supervises how companies handle personal data. You'll find them at imy.se.

What this policy does not cover

This policy covers the website fenadigital.com. It does not cover the systems we build for our clients.

Where there's personal data inside a system we've built, the client is the data controller and we are the processor. What we may and may not do with that data is set out in a data processing agreement (personuppgiftsbiträdesavtal) between us and the client, not here.

If we change this policy

If we change something, we'll put a new date at the top. If the change matters to you and you've already been in touch, we'll tell you.

Contact

Questions about any of this? Email hello@fenadigital.com and a human will answer.