Privacy
This website has no analytics, advertising or tracking, and loads no third-party scripts or fonts. This notice explains the little personal data that is handled, and your rights.
Who is responsible
Malin Pierre Craft AB is responsible for the personal data described here. Contact: info@malinpierre.se or +46 73 852 60 90.
What we collect and why
- Contact form. When you send a message, we receive your name, email address and message so that we can answer you. The message is delivered to our email inbox; the website itself does not store it.
- Email correspondence. If you email us, or we reply to you, we keep the correspondence for the same purpose.
- Server logs. When you visit the site, our hosting provider automatically records technical data such as your IP address, the page requested, the time and your browser type, to deliver the site, fix errors and prevent misuse.
- Spam protection. Before a message is sent, your browser solves a small calculation on your device that shows it is not an automated program. To limit how many messages can be sent, and so that each calculation is used only once, we keep coded (hashed) forms of your email address, your IP address and the calculation for 24 hours. They cannot be turned back into the addresses without a key kept on our server.
We do not use automated decision-making or profiling.
Legal basis
- Answering you: our legitimate interest in replying to people who contact us (GDPR Article 6(1)(f)). If you ask about buying or commissioning a work, we process your details to take the steps you request before an agreement (Article 6(1)(b)).
- Server logs and spam protection: our legitimate interest in running a secure, working website (Article 6(1)(f)).
- Bookkeeping: if a purchase follows, we keep the records Swedish law requires (Article 6(1)(c)).
Giving us your details is voluntary, but we need your email address to reply.
Who processes data for us
These providers process data only on our instructions, under data processing agreements:
- Vercel Inc. (USA) hosts the website and keeps the server logs.
- Resend (USA) delivers contact-form messages to our inbox.
- Simply.com (Denmark) hosts our email.
- Supabase (USA, with the data stored in the EU) runs the website’s database, including the coded addresses used for spam protection.
Vercel and Resend are certified under the EU–U.S. Data Privacy Framework, which the European Commission has found to give an adequate level of protection. Their agreements with us also include the EU standard contractual clauses; contact us for a copy. We never sell your data.
How long we keep it
- Messages and correspondence: as long as needed to handle your enquiry and any follow-up, and no longer than 24 months after our last contact. Resend keeps a copy of each delivered message for up to 30 days.
- Purchase records: as long as Swedish bookkeeping law requires (until the end of the seventh year after the year in which the financial year ended).
- Server logs: a short period; the request logs available to us are deleted automatically within 30 days.
- Spam protection: the coded addresses are kept for 24 hours and deleted automatically within the following hour.
Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict its processing and, where applicable, to receive it in a portable format.
You also have the right to object at any time to processing based on our legitimate interests.
To use your rights, email info@malinpierre.se. It is free, and we will reply within one month.
Complaints
You have the right to complain to the Swedish Authority for Privacy Protection (IMY) — imy.se (opens in a new tab) — or to the data protection authority where you live or work in the EU.
Changes
We update this notice when the website or our providers change. The current version is always on this page.