Who is responsible
The controller is Qwiqflow AB, registered in Gothenburg, Sweden. That means we decide why and how the data is processed, and that we are the ones you turn to. Write to andreas@qwiqflow.se.
When you are only visiting the site
Then you give us no data at all. We have no analytics, no Google Analytics and no cookies that follow you onwards. That is also why there is no cookie banner here. There is nothing to consent to.
The server delivering the page processes your IP address at the moment the page is fetched. That is technically necessary in order to send the content to the right computer and to stop attacks. We do not read those logs to follow individual visitors.
When you book a meeting
Booking happens in Cal, which opens in a window on top of the page. You provide your name, your email address and whatever you write in the fields. The data is used to create the calendar invitation and a meeting link, nothing else.
When you use the contact form
The form on the contact page sends nothing to us through the site. When you click send, a pre-written email opens in your own email program instead, which you then choose to send or not. The site therefore stores no data at all from the form. If you do send the email, it lands in our inbox like any other email.
Legal basis and how long we keep it
If you contact us, we process the data in order to reply and to prepare a possible contract (GDPR article 6(1)(b)), and otherwise on the basis of our legitimate interest in handling contact with whoever got in touch (article 6(1)(f)).
We keep correspondence and bookings for as long as the conversation is running and after that for at most 24 months from the last contact, unless you ask us to delete it earlier. If you become a client, the data processing agreement we sign for the engagement applies instead.
Who else sees the data
We use the following suppliers to run the site and handle contact. There are no others.
| Supplier | What they do | Where |
|---|---|---|
| Cloudflare | Delivers the site and runs the domain. Processes IP addresses for delivery and protection. | Global infrastructure |
| Cal | Handles bookings. Processes name, email and your answers in order to create the invitation. | EU (cal.eu) |
| Google Workspace | Our email and calendar. Emails you send and bookings you make end up there. | Google, under its data protection terms for EU customers |
Google is a US supplier. Transfers of data take place under the data protection terms Google applies for customers inside the EU. If you would rather avoid that entirely, calling works just as well. Get in touch and we will give you a number.
Your rights
Under the GDPR you have the right to:
- find out what data we hold about you,
- have incorrect data corrected,
- be erased,
- receive your data in a standard format,
- object to processing based on legitimate interest,
- complain to the Swedish Authority for Privacy Protection if you think we are getting it wrong.
Email andreas@qwiqflow.se and we will sort it within 30 days.
Client engagements
The above applies to this website. If we build a workflow for you we are a processor rather than a controller, and then the agreement we sign before the build starts applies. What we commit to there is summarised in our AI policy.
Changes
If we change anything material we update the date at the bottom. This version replaces an earlier policy that described a waiting list and an analytics setup the site no longer has.
This is a translation of the Swedish original. If the two versions differ, the Swedish integritetspolicy is the one that applies.