Privacy policy

Who we are

Delmius AB, org. no. 559492-9498, is responsible for the personal data described here, on delmius.com and in the short links we share. You can reach us at legal@delmius.com.

What we collect

When you write to us

When you write to us, we get your name and email, your company and phone number if you add them, your message or project answers, and the language you used the site in. We use this to reply and to talk about your project. We need your name and email to reply, and everything else is optional. We do this because we have a legitimate interest in answering people who contact us, also when you write on behalf of a company. If you ask about a project as a private person, it's also part of the steps you've asked for before we might make an agreement. We also save the campaign tags in the link you followed, the first page you saw and the site that sent you here. When a message comes in, we send these to our analytics provider along with which form and language you used. We send them again if your message turns into a project or looks likely to. We do this whether or not you accept analytics, because we have a legitimate interest in knowing which campaigns and sites bring in messages. Without your consent, nothing we send identifies you. If you accept analytics, your message is also linked to your visit, so we can see which pages led to it. That part is based on your consent.

Spam protection

Our forms have spam protection that looks for signs of automated traffic. It uses your IP address and some details about your browser and device. The spam-protection provider also uses these signals to get better at spotting bots, and is itself responsible for that use. The check is automatic, but if it stops a form you can always email us instead, so no decision about you rests on it alone. We do this because we have a legitimate interest in keeping spam out of the forms.

Running the site

Our hosting provider delivers and protects the site. To do that, it handles technical details like your IP address and browser type. We also keep short technical logs that help us fix errors. We do this because we have a legitimate interest in a site that works and stays secure.

Analytics, only if you accept

We use analytics to see what works on the site and fix what doesn't. Our analytics provider records which pages are visited, what's clicked, how far you get in a form, how fast pages load and which page sent you here. It also notes your device and browser, a random ID that links your visits, and your approximate location. The location is worked out from your IP address, and the address itself is never stored. Analytics also includes session interaction analysis, explained below, and the occasional short survey question. If you answer one, your answer is kept. When you accept, we also save that you did and when, so we can show your consent. All of this is based on your consent. You can withdraw it at any time under Cookie settings, and withdrawing doesn't affect what was collected before.

How session interaction analysis works

Session interaction analysis shows us where the site is confusing or doesn't work. It isn't a video or a screen recording. Nothing is filmed, and your camera, microphone and screen are never used. This is how it works.

• While you're on delmius.com, the page keeps notes on how it's laid out and what you do on it, like where the pointer moves, what you click and how far you scroll.
• From those notes we can rebuild the page and follow the steps of a visit, a bit like reading a log of clicks and scrolls.
• It only covers delmius.com, never other tabs, apps or anything else on your device.
• The forms and anything you type are always left out.
• The notes are deleted after 30 days.

Blog post views

When someone opens a blog post, we add one to its count for the language it's read in. To leave out reloads, link previews and bots, we check the browser's name and how the post was opened, but save neither. The count is all we keep, nothing is stored in the browser and it can't be linked to you. We do this because we have a legitimate interest in knowing which posts are read.

Cookie choices

When you choose Accept or Decline in the cookie banner, we add one to that day's count for your choice. The count is kept per language and notes whether you changed an earlier choice. We also count how many times the banner is shown, per day and language, so we can see how many visitors don't answer. We count it as we send the page, so your browser sends nothing extra for this and nothing is stored in it. To leave out bots, we check the browser's name and how the page was requested, but don't save them, and the counts can't be linked to you. We do this because we have a legitimate interest in knowing how many visitors answer the banner and accept analytics.

Short links

We also share short links. When someone opens one, we count the visit and send our analytics provider the link, where it leads and the page it was opened from. We also send the browser's name, version and operating system, and an approximate location down to the city, as estimated by our hosting provider. No IP address is sent, nothing is stored in the browser, and visits aren't linked to each other or to delmius.com. We do this because we have a legitimate interest in knowing which links are used.

Who else handles it

We use these service providers, and they handle data on our behalf.

• A hosting provider, which runs the site
• A database provider, which stores form submissions
• A spam-protection provider, which checks the forms for bots
• An analytics provider, used only if you accept, which also counts short-link visits and incoming messages
• An email provider, which stores our conversations if we continue by email

The spam-protection provider also uses its signals to get better at spotting bots, and is itself responsible for that. Ask us if you'd like to know who the providers are. We don't sell personal data or use it for advertising.

Where it's stored

Form submissions are stored with our database provider, and analytics on servers in the EU. Our providers are US companies, so they may access data from outside the EU/EEA. When they do, the EU–US Data Privacy Framework or the EU's standard contractual clauses cover the transfer. Ask us if you'd like a copy of the clauses.

How long we keep it

Form submissions are deleted once they're 12 months old, and they're gone from backups 30 days after that. Emails we've exchanged are deleted once the conversation is 12 months old. If we start working together, we keep what the work needs under our agreement. Accounting records are kept for seven years after the end of the year they belong to, as the Swedish Bookkeeping Act requires. Analytics, including short-link visits and survey answers, is deleted after a year, and session interaction data after 30 days. Post view counts are kept as long as the post is. Our technical logs are kept for at most 7 days. Our hosting provider's own security logs follow its own policy.

Your rights

You can ask to see the data we have about you, correct it, have it deleted, limit how it's used or get a copy to take elsewhere. We delete on request unless the law requires us to keep something, like accounting records. Write to legal@delmius.com and we'll answer without undue delay, within a month. If a request is complicated and needs longer, we'll tell you. We may need to confirm who you are before we act on it.

You also have the right to object at any time to what we do based on our legitimate interest. That's replying to you, keeping spam out, keeping the site secure, noting where messages come from and counting short-link visits, post views, cookie banner views and cookie choices. If you object, we'll stop, unless we have compelling reasons to continue or need the data for a legal claim.

If you think we've handled your data wrongly, you can complain to IMY, the Swedish Authority for Privacy Protection, at imy.se. You can also turn to the data protection authority in the EU country where you live or work.

Changes

When this policy changes, the date at the top changes with it, and the new version applies from that date. If a change needs your consent again, we'll ask before it applies.