- +46 (0)370 69 95 68
- service@herber.se
This website processes personal data in accordance with the EU General Data Protection Regulation GDPR and applicable national data protection legislation. The data controller is responsible for ensuring that the processing is lawful, fair and transparent and that personal data is protected against unauthorized access, loss or misuse.
Personal data is processed only for explicitly stated and legitimate purposes and is not stored longer than necessary.
The data controller is the legal or natural person who operates the website and determines the purposes and means of the processing of personal data.
Contact details of the data controller shall be provided on the website so that data subjects can easily exercise their rights.
What personal data is collected
Depending on how the website is used, the following personal data may be processed:
Name, email address and, where applicable, website name submitted via comments or contact forms.
IP address, timestamp and technical information about browser and device.
Information provided when registering a user account, if applicable.
Content of comments or messages that the user chooses to submit.
Data generated through cookies and similar technologies.
Only data that is necessary for the respective purpose is processed.
Personal data is processed for the following purposes:
To provide, administer and secure the website.
To manage comments, contact requests and user accounts.
To prevent spam, fraud and other security incidents.
To improve the functionality, performance and user experience of the website.
To comply with legal obligations.
Personal data is not processed for purposes that are incompatible with these.
The processing of personal data is based on the following legal grounds under GDPR:
Consent, for example when voluntarily using cookies or forms.
Contract, where processing is necessary to perform a contract or to take steps prior to entering into a contract.
Legal obligation, where processing is required by law.
Legitimate interest, for example for the operation, security and improvement of the website, following a balancing of interests.
Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
Personal data is stored only for as long as necessary for the purpose of the processing:
Comments and associated metadata may be stored indefinitely to enable moderation and follow-up.
Data related to user accounts is stored for as long as the account remains active.
Data required by law is stored for the period required by applicable legislation.
Regular reviews are carried out to ensure that personal data is not stored longer than necessary.
Personal data may be shared with data processors that provide technical services such as web hosting, email services, spam filtering or system operation.
Such sharing takes place only to the extent necessary and is subject to data processing agreements that comply with GDPR requirements.
Personal data is never sold to third parties.
Certain technical services may involve the processing of personal data outside the EU or EEA. In such cases, appropriate safeguards are ensured, for example through the European Commission’s standard contractual clauses or other approved mechanisms.
The data subject has the right to:
Receive information about how personal data is processed.
Request access to their personal data.
Request rectification of incorrect or incomplete data.
Request erasure of personal data where there is no legal basis for processing.
Request restriction of processing.
Object to processing based on legitimate interest.
Request data portability where processing is based on consent or contract.
Requests shall be handled without undue delay and no later than within one month.
If the data subject considers that personal data is processed in violation of applicable data protection legislation, they have the right to lodge a complaint with the Swedish Authority for Privacy Protection IMY.
The website uses cookies and similar technologies to ensure functionality, security and user friendliness.
Cookies may be categorized as:
Necessary cookies required for the website to function properly.
Functional cookies that store user preferences.
Analytics cookies used for statistics and improvement.
Third-party cookies related to embedded content or external services.
Cookies that are not strictly necessary are used only after consent. Consent is obtained via a cookie banner or equivalent solution at the first visit.
Consent may be withdrawn at any time through browser settings or via the website’s cookie settings.
Cookies may be session-based or stored for a longer period depending on their purpose. The retention period is specified in the respective cookie or in the website’s cookie settings.