Privacy Policy

Who we are

Cardim IT AB, org.nr 559278-1453, Gothenburg, Sweden, is the data controller for this website. Contact: contact@cardim.se.

What we collect

Contact form: your name, email address and message.

Analytics: usage data through Google Analytics — only if you accept analytics cookies.

Why and legal basis

Answering enquiries: legitimate interest, or steps taken at your request prior to entering into a contract.

Analytics: your consent, which you can withdraw at any time via “Cookie settings” in the footer.

Processors and recipients

Lovable (website hosting).

Supabase (contact form processing) — region [CONFIRM].

Google (Analytics, only after consent).

Our email provider — [CONFIRM: Google Workspace].

Transfers outside the EU/EEA

Some processors may process data outside the EU/EEA. Such transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

Retention

Enquiries: up to 24 months unless a contract follows [CONFIRM].

Analytics data: 14 months [CONFIRM].

Your rights

You have the right to access, rectification, erasure, restriction of processing, objection and data portability, and to withdraw consent at any time. Email contact@cardim.se.

Complaints

You can lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten), imy.se.

Cookies

• _ga — Google Analytics, distinguishes visitors. Set only after you accept. Expires after 2 years.
• _ga_<ID> — Google Analytics, keeps session state. Set only after you accept. Expires after 2 years.
• cookie-consent (local storage) — remembers your choice. No expiry until you clear it.