Website privacy policy
Controller and scope
Parotid AB, registration number 559361-2590, Stockholm, Sweden, is responsible for personal data handled through this website, its contact form and correspondence. Contact [email protected] for questions and rights requests. Apps have separate privacy policies.
Information and purposes
We process your name, email, selected contact area, message and subsequent correspondence to answer enquiries. Name, email, area and a message are required by the form. Avoid unnecessary sensitive data or information about others. Technical connection data is processed for operation and abuse prevention.
Legal basis
Ordinary enquiries and security are based on legitimate interests (Article 6(1)(f)). Pre-contract steps requested by an individual contracting personally may rely on Article 6(1)(b). Legal obligations use Article 6(1)(c). Contacting us does not subscribe you to marketing.
Providers and transfers
Cloudflare provides hosting and D1 message storage. Apple iCloud or Google email services may handle correspondence where used. International processing requires a valid GDPR transfer mechanism and appropriate safeguards for the actual service. Ask [email protected] for relevant recipients, countries and copies of safeguards. Do not assume EU-only processing or unverified processor agreements.
AI assistance
AI tools may assist only with genuinely anonymized material that cannot identify a person directly or indirectly. Identifiable messages must not be sent under this workflow. People review replies; there are no solely automated decisions with legal or similarly significant effects.
Retention
Enquiries that do not become projects are normally deleted within 12 months after the last contact, sooner when unnecessary. Opening or archiving does not extend retention. This includes corresponding email copies. Necessary project, accounting or legal-claim records may need separate justified retention. Contact rate-limit identifiers are deleted within 24 hours; raw IPs are not stored with messages. Supplier logs have service-specific limited retention. D1 Free Time Travel backups currently expire after seven days; deletions must be reapplied following restoration.
Cookies and security
The website code does not use analytics or marketing cookies or persist demo activity. The form loads when opened. Suppliers may process technical connection data. We use encrypted transport, protected administration and limited access.
Your rights
You may request access, correction, erasure, restriction and object to legitimate-interest processing. Portability applies where its conditions are met. Consent for any separate processing can be withdrawn. Email [email protected]; we normally respond within one month and explain any lawful extension in that month. Rights may be limited by legal obligations or others’ rights. You may complain to IMY at imy.se or another competent supervisory authority.
Updates
We update this policy as processing changes and publish its current version and date here.