Privacy policy

1. Introduction

Put and Take Sverige processes personal data under the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Swedish Act (2018:218) with complementary provisions to the EU data protection regulation. This policy describes what is collected, why, for how long and which rights you have.

2. Controller

The controller is the natural person who runs putandtakesverige.se. Contact via the contact form. The email address is not published on the site, so that it is not scraped. If you request access or other rights under the GDPR, the contact details needed to handle the matter are provided.

3. Which data we process

The site has no account and no newsletter. Via the contact form you can send name, email, subject and message. The inbox address we receive on is not published in HTML.

Technical data that may be processed:

• IP address, time and requested address in the host’s logs (Hostinger)
• corresponding technical data at map providers when your browser fetches map tiles
• if you have accepted statistics: technical data that Google Analytics collects (among other things approximate location, device, pages you look at). IP anonymisation is on
• your statistics choice in the browser’s local storage (not a cookie), so we do not ask the same thing every time

If you send the form we process the data you yourself enter so we can reply. We do not knowingly collect special-category personal data. Do not send health data or other people’s personal identity numbers in the form.

Published water pages describe lakes, species and permit links. We do not name private individuals as contact persons on the pages. Clubs, facilities and shops may be named.

The site is aimed at adults. We do not offer an account for children and do not intentionally ask for data from anyone under 13.

4. Purposes and legal basis

• Operation, security and fixing of the site, including server logs — legitimate interest (Article 6.1 f GDPR)
• Showing the map — legitimate interest / necessary function (Article 6.1 f). Fonts are hosted on our own server
• Answering messages you send via the form — legitimate interest in being able to reply to a request you yourself initiate (Article 6.1 f). A correction about a water and similar is also part of running the site
• Statistics on how the site is used (Google Analytics) — consent via the cookie box (Article 6.1 a). You can withdraw consent at any time. That does not affect processing that has already taken place

5. Retention

Server logs are kept as long as Hostinger and operation require, normally a short time. Form messages are kept in the inbox as long as the matter requires, at most 24 months unless law requires otherwise. Google Analytics stores events according to Google’s setting for the property, normally up to 14 months. The statistics choice in the browser stays until you clear it or change the choice.

6. Recipients

We do not sell personal data. Data may be processed by processors: the web host (Hostinger) and the subcontractors needed for DNS, certificates and content delivery. Map providers (OpenStreetMap, Esri) are independent controllers for calls to their servers. Form messages are sent to an inbox at Google (Gmail). Google is then a recipient of the data you sent. If you have accepted statistics, Google is also a recipient via Google Analytics.

AI tools are used internally to write and publish the site. They should not get your emails or logs as training data from us. Published site text may on the other hand be read by search engines like other open web.

7. Transfers outside the EU/EEA

Google Analytics (after consent), Gmail and some map calls to Esri may mean a transfer to the USA or other countries outside the EU/EEA. Such transfer takes place under the applicable safeguard at the provider, for example the EU–US Data Privacy Framework or standard contractual clauses. Hostinger is an EU-based provider for the hosting. Fonts are fetched from our own server, not from Google Fonts.

8. Your rights

You have the right of access, rectification, erasure, restriction, objection to processing based on legitimate interest, and data portability to the extent the GDPR gives. The right to erasure does not apply if we must keep the data by law. You can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

Send a request via the contact form. We may need to confirm your identity before we disclose data.

9. Cookies

See the cookie policy. Accept and Reject in the box only control statistics, not whether you may use the site.

10. Changes

The policy is updated when the processing changes. The date at the bottom shows the latest version.