Privacy policy
Last updated: 24 September 2026
This policy explains how Entit AB ("Entit", "we") collects, uses, and protects personal data when you visit this website or contact us, and the rights you have under the EU General Data Protection Regulation (GDPR).
Who is responsible for your data
The data controller is Entit AB, org. nr 559022-4472, Sandgärdsgatan 12B, 352 30 Växjö, Sweden. For any privacy matter, contact info@entit.se or +46 70 698 73 48.
What data we collect
- Contact form. The name, email address, company name, and message you submit.
- Technical data. Standard server request data such as your IP address, browser type, and pages visited, processed transiently by our hosting to deliver the site securely and keep short-lived operational logs.
- Analytics (only with consent). Privacy-friendly, aggregated usage statistics — loaded only if you accept analytics cookies. We do not use advertising or cross-site tracking.
We do not knowingly collect special-category data, and the site is not directed at children.
Why we use it, and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Respond to your enquiry and manage the ensuing business relationship | Legitimate interest / steps prior to a contract (Art. 6(1)(f)/(b)) |
| Operate and secure the website | Legitimate interest in a functioning, secure site (Art. 6(1)(f)) |
| Optional analytics | Your consent (Art. 6(1)(a)) |
| Meet legal and accounting obligations | Legal obligation (Art. 6(1)(c)) |
How long we keep it
We keep contact enquiries for 24 months and then delete them, unless they become part of a contract or must be kept longer to meet a legal obligation (for example accounting records). Operational server logs are short-lived.
Who we share it with
We do not sell your data. We use a small number of carefully chosen processors:
| Recipient | Purpose | Location |
|---|---|---|
| Cleura (Sweden) | Cloud hosting of the website | EU / EEA |
| Email hosting (Sweden) | Delivering the contact-form email to us | EU / EEA |
| Self-hosted analytics | Aggregated usage statistics (consent only) | EU / EEA |
Fonts are served from our own servers — no data is sent to Google or other font CDNs.
International transfers
All processing takes place within the EU/EEA — we do not transfer your personal data to third countries. If that ever changes, we will update this policy and put an appropriate safeguard under GDPR Chapter V in place first.
Cookies
We set only strictly necessary cookies by default; analytics cookies are set only after you consent. You can change or withdraw your choice at any time via the Cookie settings link in the footer.
| Cookie | Purpose | Type | Retention |
|---|---|---|---|
entit_consent | Remembers your cookie choice | Necessary | 180 days |
.AspNetCore.Antiforgery.* | Protects the contact form against cross-site request forgery | Necessary | Session |
entitweb-affinity | Keeps your session on one server so the page stays responsive | Necessary | Session |
| Analytics | Aggregated, privacy-friendly usage statistics | Optional (consent) | Set only after consent |
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected, or incomplete data completed;
- have your data erased, or its processing restricted;
- object to processing based on legitimate interests;
- receive your data in a portable format; and
- withdraw consent at any time, without affecting prior processing.
To exercise any of these, email info@entit.se.
Complaints
If you believe we have handled your data unlawfully, you can lodge a complaint with the Swedish supervisory authority, the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), at imy.se.
Automated decisions
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
Changes
We may update this policy from time to time. The current version and its date are always shown on this page.
Contact
Questions about this policy? Email info@entit.se.