Data controller
We who run plainsite.se are the data controller for the processing described here. Get in touch if you have questions or want to exercise any of your rights.
What we collect
Only what you write yourself, plus what is technically needed for the site to work:
- Name, email address, company and message when you fill in the contact form.
- IP address and timestamp in the server logs, as part of operations and protection against abuse.
- A session cookie if you submit a form or sign in.
- Nothing else. No analytics, no pixels, no advertising tools.
Legal basis
Contact details are processed so we can reply to you, which is a legitimate interest under Article 6(1)(f) GDPR. If it turns into work, the details are processed to perform the contract instead, Article 6(1)(b). Server logs are kept for operations and security, also legitimate interest.
How long
Enquiries that do not lead to work are deleted after twelve months. If they do, the documentation is kept for the life of the contract plus seven years, because the Swedish Accounting Act requires it. Server logs are cleared after ninety days.
Cookies
The site sets exactly one cookie, and only when you submit a form or sign in. It is strictly necessary for the function and therefore requires no consent under Chapter 6, Section 18 of the Swedish Electronic Communications Act. That is also why you are not met by a cookie banner.
| Name | Purpose | Retention |
|---|---|---|
plainsite_sess |
Holds the form security token and a signed-in session together. | Until the browser closes |
No other cookies are set, by us or by anyone else. We also load no fonts, maps or scripts from other servers - everything sits on our own.
Who else sees the data
Our web host, which stores the site and the email for us and acts as data processor. Nothing is transferred outside the EU/EEA. We do not pass details to anyone else, and we do not sell them.
Your rights
You have the right to:
- know what data we hold about you and get a copy
- have incorrect data corrected
- have data erased, unless we are required by law to keep it
- object to processing based on legitimate interest
- ask for processing to be restricted
Come to us first - we answer within a month. If you are still not satisfied you can complain to the Swedish Authority for Privacy Protection, imy.se.
Security
The site runs over HTTPS only. Passwords are stored hashed with Argon2id. Forms are protected against forged submissions, and access to administration is restricted and logged.