Privacy policy

The short version

We only collect what you type to us yourself: your name and email if you fill in the contact form or book a call. We run no analytics, no tracking pixels and no advertising cookies. We never sell your details on.

Who is responsible for your data

FENA Digital, Gothenburg, Sweden, is the data controller for the processing described here.

Email: hello@fenadigital.com

What we collect, and why

The contact form. You give us your name and email address, and optionally your company and a message. That goes to our server, gets validated, and is emailed on to us. We use it to reply to you and to talk through the work you might need. Nothing else. The form also has a hidden field that catches spam. You can't see it, and you should never fill it in.

Booking a call. If you click “Book a time”, a booking window from Calendly opens. Whatever you enter there, usually a name and an email address, goes to Calendly and on to us. It never passes through our own servers.

Server logs. Our hosting provider logs technical details about the visit, such as IP address, timestamp and which page was requested. This is standard for running any website and is needed for security and troubleshooting. We don't use the logs to follow you between visits.

Legal basis

For the contact form and the booking, we process your data to take steps at your request before a possible contract (Article 6(1)(b) of the GDPR) and on the basis of legitimate interest (Article 6(1)(f)). Our legitimate interest is a simple one: if someone gets in touch about possible work, we need to be able to reply.

The server logs also rest on legitimate interest, namely keeping the site secure and running.

Cookies

The site sets no cookies of its own. We have no visitor analytics and no advertising tools.

If you open the booking window, Calendly may set its own cookies in your browser so the booking works. Calendly only loads when you choose to book, never before. If you'd rather avoid that, email us instead of booking.

Who else sees your data

We don't sell or rent your details, and we never pass them on for anyone else's marketing. To keep the site and the email working, we use a small number of providers:

• Vercel Inc. (a US company). Hosting for the website and its server functions. Our deployment sits inside the EU.
• Resend (a US company). Delivers your contact form message to us as email.
• Calendly (a US company). Scheduling, and only if you open the booking window yourself.

Because these are US companies, data may be processed outside the EU and EEA. Those transfers are covered by the safeguards the GDPR requires, in practice the European Commission's Standard Contractual Clauses or certification under the EU to US data privacy framework, depending on the provider. If you want to know exactly what applies to a particular provider, email us and we'll tell you.

We may also have to hand over data where the law requires it.

How long we keep things

• Enquiries that don't lead anywhere: we clear them out after 24 months at the latest.
• If you become a client: we keep your details for as long as we work together and a reasonable period after. Anything that counts as accounting records we keep for seven years, because Swedish bookkeeping law (bokföringslagen) requires it.
• Server logs: a short period at the provider, normally a few weeks.

If you'd like us to delete things sooner, just say so.

Your rights

You have the right to:

• find out what data we hold about you and get a copy
• have incorrect data corrected
• have data deleted
• ask us to restrict how we use it
• object to processing we base on legitimate interest
• receive the data you gave us in a format you can take elsewhere

Email hello@fenadigital.com and we'll sort it. You'll hear back as soon as we can and within a month at the latest. It costs nothing.

If you're unhappy

Tell us first, we'd much rather fix it directly. You also always have the right to complain to Integritetsskyddsmyndigheten (IMY), the Swedish authority that supervises how companies handle personal data. You'll find them at imy.se.

What this policy does not cover

This policy covers the website fenadigital.com. It does not cover the systems we build for our clients.

Where there's personal data inside a system we've built, the client is the data controller and we are the processor. What we may and may not do with that data is set out in a data processing agreement (personuppgiftsbiträdesavtal) between us and the client, not here.

If we change this policy

If we change something, we'll put a new date at the top. If the change matters to you and you've already been in touch, we'll tell you.

Contact

Questions about any of this? Email hello@fenadigital.com and a human will answer.