Privacy Policy
Here we describe how we collect, use, and protect personal data on this website. The content is automatically updated based on which features are active.
General
This privacy policy describes how Den Gröna Guiden (Den Gröna Guiden) collects, uses, and stores your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable legislation.
The policy applies when you visit our website or use our services that refer to this policy.
You should always feel secure when providing personal data to us. We process your data lawfully, fairly, and transparently.
Data Controller
Den Gröna Guiden (address: Lessebovägen 119, 122 47 Enskede, Sweden, email: stefan@dengronaguiden.se, telephone: 070 741 77 84) is the data controller for the processing of your personal data and is responsible for ensuring that it is carried out in accordance with applicable law.
Data Processor: The website is produced and hosted by Wivid Arc, which processes personal data only on behalf of and in accordance with instructions from the data controller.
When is data processed?
We process personal data when you:
- Visit our website
- Send an inquiry via contact forms
- Subscribe to newsletters (if available)
- Book or purchase services (if available)
- Create a customer account (if available)
- Otherwise communicate with us
What data?
Visitors: technical information (browser, device), visited pages, and pseudonymized session statistics.
Contact: name, email, telephone, and message as provided by you.
Additional categories are described in the sections applicable to each respective feature on the website.
Newsletter
When subscribing to our newsletter, we process your email address and potentially your name. We may record consent metadata (timestamp, IP, browser) to document your consent.
You can unsubscribe at any time via the link in the mailings or by contacting us.
Contact Form
Data you submit via forms (name, email, telephone, message, etc.) is processed to answer your inquiry and provide customer service.
Forms may be protected with Google reCAPTCHA to prevent abuse.
Web Statistics
We collect pseudonymized statistics on how the website is used (visited pages, referrer, approximate geography, browser/device). IP addresses are not stored in plain text but are used to generate a daily session hash.
The purpose is to improve the website and understand its usage.
Bot Protection (reCAPTCHA)
We use Google reCAPTCHA v3 on forms. Google may process technical information in accordance with Google's Privacy Policy.
Cookies
We use cookies and similar technologies in the categories of necessary, functional, statistics, and marketing depending on your choices.
Upon your first visit, a cookie banner is displayed where you can consent to or decline non-necessary cookies. You can change your choices at any time via our cookie policy.
More information is available on the Swedish Post and Telecom Authority's website.
Legal grounds
Contract – processing necessary to fulfill a booking, purchase, or respond to inquiries.
Legitimate interest – pseudonymized web statistics and security logs where our legitimate interest outweighs the privacy intrusion.
Consent – newsletters, non-essential cookies, and certain marketing activities. Consent can be withdrawn at any time.
Legal obligation – accounting and payment-related obligations.
Are you obliged to provide information?
When you book, purchase, or contact us, certain information is necessary for us to enter into or perform a contract, or to respond to your inquiry. If you do not provide this information, we cannot provide the requested service.
Subscribing to newsletters and accepting non-essential cookies is always voluntary.
Storage period
Personal data is not stored longer than necessary for the purpose. Customer and booking details are normally stored for up to 24 months after the last interaction, unless longer storage is required by law (e.g., the Swedish Accounting Act, 7 years for accounting records).
Web statistics are aggregated and raw data may be deleted according to internal routines.
Transfer and subprocessors
We never sell your personal data.
We use the following categories of subcontractors (data processors):
- Supabase – database, authentication, and file storage (EU)
- Resend – email delivery
- Vercel – hosting and performance monitoring
- Upstash – rate limiting and security
- Google – analytics, tag management, and/or bot protection (reCAPTCHA)
- Google (Gemini) – AI-assisted translation and content generation in the administration panel (USA, standard contractual clauses)
Transfer outside the EU/EEA only occurs when necessary and with appropriate safeguards, e.g., the European Commission's standard contractual clauses (SCC).
AI-assisted content
Parts of the content on the website may be AI-assisted. We use generative AI (Google Gemini) in the administration panel as a support tool to, for example, machine-translate texts into other languages and create alternative text for images and search engine optimized text.
You do not interact directly with an AI chatbot or an AI-based decision-making system on the website. AI-assisted content is reviewed and published under the responsibility of the website owner.
The processing of personal data in AI tools is described in the service's terms. Read more in Google's Privacy Policy.
Automated decision-making and profiling
We do not use automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you (Article 22 GDPR).
Your rights
You have the right to access, rectification, erasure, restriction, objection, and data portability under the GDPR.
For processing based on consent, you have the right to withdraw your consent at any time. For direct marketing, you can object at any time.
Contact us at stefan@dengronaguiden.se or 070 741 77 84. You also have the right to lodge a complaint with the supervisory authority, the Swedish Authority for Privacy Protection (IMY).
Protection
We take technical and organizational measures to protect personal data, including encryption, access control, and firewalls where appropriate.
Children's personal data
Our services are not directed to children. We do not knowingly collect personal data from children under 13 years of age without parental consent. If we become aware that such data has been provided, we will delete it.
Changes
We may update this policy. In the event of significant changes, we will inform you via the website or email.
Contact
Den Gröna Guiden
Lessebovägen 119, 122 47 Enskede, Sweden
Email: stefan@dengronaguiden.se
Phone: 070 741 77 84
Production
The website is produced and hosted in Sweden by Wivid Arc.