Privacy Policy

Skolshield AB, org. no. 559596-9287, is the data controller for the processing of personal data on this website. If you have questions about how we handle your data, or want to exercise your rights, contact us at info@skolshield.se.

The contact form

When you send an enquiry via the contact form we process your name, email address, organisation (if provided) and your message. The data is used solely to answer your enquiry and is sent as an email to our mailbox — it is not stored in any database on the website. We keep the correspondence for as long as the matter requires.

The customer area

Existing customers sign in to the customer area with their Microsoft account. We then process the name and email address of the contact persons the customer has registered, along with the invoices and files shared there. This processing is carried out to fulfil the customer agreement.

Server logs

The web server logs IP addresses and technical information about requests. The logs are used for operations, troubleshooting and security (e.g. detecting abuse) and are purged continuously.

The website uses no tracking, analytics or advertising cookies, and we share no visitor data with third parties. Only technically necessary cookies are used:

• Session cookie — signing in to the customer area
• CSRF cookie — protection against forged form submissions
• Language cookie — remembers whether the site is shown in Swedish or English

We keep visitor statistics with Umami on our own server in the EU: page views, referring site, country, browser type and which demo films are played. The collection is cookieless, the IP address is never stored, no individual visitor can be identified and the data never leaves our operation.

That is why there is no consent banner: under the Swedish Electronic Communications Act consent is required only for cookies that are not needed for the service you asked for, and there are none here. The same holds inside the Skolshield service itself — a session, CSRF and language cookie plus one that remembers your chosen colour theme, no tracking cookies and no visitor statistics on the schools' instances.

• Contact form and server logs: legitimate interest — answering enquiries and keeping the website secure (Art. 6(1)(f) GDPR)
• Customer area: performance of the agreement with the customer (Art. 6(1)(b) GDPR)

We never sell personal data and do not share it with third parties for marketing. The providers that process data on our behalf are:

• Hetzner (EU) — server hosting, with storage within the EU
• Microsoft 365 — email and customer-area sign-in, with data storage within the EU

You have the right to request access to, rectification of or erasure of your personal data, to object to or request restriction of the processing, and to receive a copy of your data. Contact us at info@skolshield.se and we will help you.

If you are unhappy with how we process your data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.