Privacy policy:what we do with your data

1. Who is responsible for your data

Tizfai Technologies (org.nr 559184-7379), Kumminvägen 1, 611 46 Nyköping, Sweden, is the data controller for the personal data described in this privacy policy. You can reach us at info@tizfai.com. How we work with clients is set out in our terms and conditions.

We are established in Sweden, so this policy follows the EU General Data Protection Regulation (GDPR) and Swedish data protection law.

2. What we collect, and why

When you send an inquiry

Our contact form asks for your name, email address, company, phone number, the kind of project, a budget range and your message. We use this to answer you and, if it goes further, to prepare a quote.

Legal basis: your consent, which you give by ticking the box before you send, and our legitimate interest in responding to people who contact us.

When you subscribe to the newsletter

We store your email address, the language you chose and the dates you subscribed and confirmed. We send the newsletter ourselves — your address is not passed to a third-party mailing service.

Signing up is not enough on its own: we email you a confirmation link, and you only join the list once you click it. If you never click, nothing is sent and the address is not used. This also means nobody can add your address without your knowing.

Each newsletter contains a small invisible image, and its links pass through our own server before taking you on. These let us see how many people opened a letter and which links were of interest, so we can write better ones. We record that a given subscription opened or clicked, and which link — not your IP address, your location, or what you do afterwards. Many mail apps block or preload these images, so the numbers are indicative rather than exact.

If you would rather not be counted, most mail apps let you block remote images. The unsubscribe link at the bottom of every letter works either way.

Legal basis: your consent, given by clicking the confirmation link. Every email includes a one-click unsubscribe link, and unsubscribing takes effect immediately.

When you visit the site

Our server records the usual technical details of a request: IP address, browser and operating system, the page requested and the time. These logs exist to keep the site running and to detect abuse.

We also use analytics to understand which pages are read and where visitors leave. Analytics runs only if you allow it — see section 4 of this privacy policy.

We also count visitors without cookies, to see how many people are on the site right now. Your IP address is not stored: together with your browser type it is turned into a one-way code, using a key that changes every day, and the code is deleted after 35 minutes.

Legal basis: legitimate interest for server logs and the visitor count; consent for analytics.

When you email us or use WhatsApp

If you write to info@tizfai.com, we keep the conversation in the same way as an inquiry (see section 3). The WhatsApp button on the site opens WhatsApp, which is run by WhatsApp Ireland Limited; what you write there is also handled under WhatsApp's own privacy policy.

What you have to give us

Nothing, to read this site. To answer an inquiry we need the details the form marks as required — without them we cannot reply. Everything else is up to you.

3. How long we keep it

• Inquiries: 24 months from your last message, so we can pick up a conversation you started. If the inquiry becomes a project, the contract governs instead.
• Newsletter: until you unsubscribe, then 30 days so we do not add you back by mistake. If you sign up but never confirm, the address is deleted after 30 days.
• Newsletter opens and clicks: 12 months, then deleted with the campaign they belong to.
• Your cookie choice: six months, on your device only.
• Server logs: 90 days.
• Visitor count: 35 minutes.
• Analytics: 14 months, in aggregated form.
• Accounting records: seven years, as Swedish bookkeeping law (Bokföringslagen) requires.

4. Cookies

The site sets three kinds of cookie. The first is always on; the other two run only if you say yes, and nothing about the site changes if you say no.

Necessary cookies keep the site working — they remember your language, protect forms against abuse, and store the cookie choice itself. These cannot be switched off, and they do not identify you.

Analytics cookies count which pages are read and where people leave, so we can fix what is confusing. We use Google Analytics for this, with IP anonymisation on.

Marketing cookies measure whether our advertising brings the right people here. They would be set by Google, Meta or LinkedIn. At the time of writing we run no advertising, so nothing in this category is active — the choice is there for when that changes.

These are the cookies the site can set:

• tizfai_consent (necessary) — remembers your cookie choice. Six months.
• Next-Locale (necessary) — remembers the language you chose. Until you close the browser.
• _ga and _ga_* (analytics, only with your consent) — Google Analytics, to tell one visit from the next. 13 months.

No marketing cookies are set today.

Your choice is stored in a cookie on your own device for six months; we do not keep a record of it on our servers. You can change your mind at any time through Cookie settings at the bottom of any page — it is one click, the same as saying yes was.

5. Who else sees your data

We do not sell personal data, and we do not share it for advertising.

Two parties process data on our behalf, both under written agreements that bind them to our instructions:

• Hetzner Online GmbH (Germany) hosts our servers. Your data stays within the EU.
• Google Ireland Limited (Google Analytics), which receives page views, approximate location and device type — never your name or email — and only if you allow analytics cookies.

We may also disclose data where a Swedish authority requires it by law.

6. Where your data is stored

Everything we store ourselves — inquiries, newsletter subscriptions and server logs — stays on servers inside the European Union.

Analytics data is the exception. If you allow analytics cookies, Google may process that data in the United States. Google LLC is certified under the EU–US Data Privacy Framework, which the European Commission has found to give adequate protection, and Google also uses the Commission's standard contractual clauses.

If anything else ever moves outside the EU, we will update this privacy policy first. We will only use a country the European Commission considers adequate, or put standard contractual clauses in place.

7. Your rights

Under the GDPR you can ask us to:

• Show you what we hold about you, as a copy.
• Correct anything that is wrong.
• Delete it, where we have no legal reason to keep it.
• Limit what we do with it while a dispute is settled.
• Hand it over to you or another company in a machine-readable format.
• Stop processing based on legitimate interest, by objecting.
• Withdraw consent at any time, which does not affect what happened before.

Write to info@tizfai.com and we will answer within one month. There is no charge.

We do not make decisions about you by automated means alone, and we do not build profiles of you.

If you think we have handled your data badly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se), or to the supervisory authority where you live.

8. Keeping data safe

Traffic to this site is encrypted (HTTPS). Access to personal data is limited to the people who need it, protected by two-factor authentication. We keep backups, and we test that they restore.

No system is perfect. If a breach puts your rights at risk, we will tell the authority within 72 hours and tell you without undue delay.

9. Children

This site is for businesses. We do not knowingly collect data from anyone under 16. If you believe a child has sent us data, write to us and we will delete it.

10. Changes to this privacy policy

We update this privacy policy when what we do changes, or when the law does. The date at the top tells you when the text last changed. If a change materially affects you, we will say so on the site before it takes effect.