Privacy Policy
Who is responsible for your information?
This policy describes how personal information is handled in connection with matsjan.com, a personal website featuring writing and activities by Mats-Jan Söderberg.
Data controller: Mats-Jan Söderberg.
Privacy contact: Use the contact form and select “Privacy request”.
Information processed when you visit
Your browser sends technical information to the hosting service when you request a page or image. This may include your IP address, the requested address, date and time, browser and operating system information, referring page, and the response or error status. The hosting service may record some of this information in access and security logs.
The website is hosted through NuNames.SE (Manufrog infrastructure). The provider’s published privacy notice identifies NuNames.SE and Köksteam Riab AB and describes its role as processor for customer-hosted information. Its current service information states that its servers are in Stockholm, Sweden. See the hosting provider’s privacy notice.
Why information is used
Technical information is used to deliver website content, maintain availability, diagnose faults and protect against misuse. Where the GDPR applies, the legal basis is legitimate interests under Article 6(1)(f): operating a reliable and secure website, balanced against visitors’ rights. Information required by a specific legal obligation may be processed under Article 6(1)(c).
When you use the contact form, we collect your name, email address, selected subject and message. These details are needed to reply to you and manage your enquiry, including privacy requests. Your email address is not published. Messages are delivered through the hosting and email services used by the site operator. Where applicable, the basis is the legitimate interest in responding to enquiries, or steps requested before entering a contract. Please do not send sensitive information unless it is necessary.
Cookies, analytics and embedded content
The current website code does not set advertising or analytics cookies, include analytics or advertising trackers, or provide accounts, comments or newsletter signup forms. A contact form is provided on the Contact page. Images and other website assets are served from this website rather than embedded from LinkedIn.
When you close our privacy notice, we store a single preference in your browser’s local storage (mj-privacy-notice-v1) so that the notice stays closed on later visits. It is not sent to us or used to track you. It remains until you clear your browser’s site data or the notice is updated. You can read the Privacy Policy at any time from the footer. The form uses a short-lived, keyed hash of your network address to limit automated submissions. It does not use tracking cookies. If optional tracking or embedded services are added, this policy and any required consent controls will be updated before they are used.
External links
The site links to LinkedIn and other websites, including original newsletter articles. Following a link takes you to a separate service that processes information under its own privacy policy. A subscription made on LinkedIn is managed there; this website does not receive your LinkedIn password or automatically import your subscriber details.
Who may receive information?
Information may be accessible to the hosting provider and authorised people who maintain the website, only as needed for their work. Information may also be disclosed where required by law or necessary to address legal claims. No advertising, data-sale or behavioural profiling feature is included in the current website.
International processing
The hosting provider states that it does not transfer personal information outside the EU. Enquiries are also handled through the email services used by authorised correspondence staff. If a service involves a transfer outside the EEA, applicable GDPR transfer requirements must be met, such as an adequacy decision or appropriate safeguards. You may request information about the arrangements relevant to your enquiry through the contact form.
How long information is kept
Information should be kept only as long as needed for the stated purpose and any applicable legal requirements.
- Access and security logs: Technical records are retained for the period needed to operate the hosting service, investigate faults or security incidents, and meet applicable legal requirements. The hosting provider manages its log rotation; specific information can be requested through the contact form.
- Correspondence: Messages are retained while an enquiry is active and afterwards only where needed for related follow-up, legal obligations or establishing or defending claims. They should be deleted when those purposes no longer apply.
- Backups: The hosting provider’s published policy states that its backups are retained for up to one month, apart from statutory accounting records. Deletion from live systems may therefore precede expiry from hosting backups. Email-service copies follow the relevant mailbox retention arrangements.
- Form abuse prevention: keyed network identifiers expire after one hour and are cleaned up when the form processes later requests; message content is not stored in this rate-limit record.
Your privacy rights
Depending on applicable law and the circumstances, you may request access, correction, deletion, restriction of processing, or portability of information you provided. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. These rights have legal conditions and exceptions.
Use the contact form and select “Privacy request” to make a request. We may ask for information reasonably needed to verify your identity. Under the GDPR, requests are normally answered within one month; a permitted extension will be explained within that period.
You may complain to the Swedish Authority for Privacy Protection (IMY), or another competent supervisory authority, including the authority where you live or work in the EEA. You do not have to contact us first.
Security and automated decisions
The website uses HTTPS to encrypt traffic in transit. No service can guarantee absolute security. The current website does not make automated decisions with legal or similarly significant effects and does not profile visitors.
Changes to this policy
This policy will be revised when the website’s handling of personal information changes. The final published version will show its last updated date.