Privacy Policy

Last updated: October 19, 2026

This is a translation. If the Swedish and English versions differ, the Swedish version applies.

1. Data controller

Ekria, a sole proprietorship in Jönköping run by Emma Karlsved, is the data controller for the processing described here.

Contact: Emma Karlsved, emma.karlsved@ekria.se

2. What data may be processed

Ekria processes data that you provide yourself when you get in touch via the form, by email or in another way, for example:

• name
• email address
• a link to your LinkedIn profile, if you choose to provide it
• the content of your message and anything else you choose to share
• proof of enrollment or your diploma, if you order at the student price

For me to be able to reply, I need your name and your email address. Everything else is optional.

When you visit the website, Netlify processes your IP address to deliver the pages and protect the website. This is based on Ekria’s legitimate interest in a working and secure website.

If you accept analytics, data about how the website is used is also processed, such as page views, approximate location, device type and browser. See section 7.

3. Why the data is processed

• to receive, read and respond to your request
• to follow up on contact that you have initiated
• to assess which service or setup suits you
• to administer and develop the website
• if you have accepted it: to understand how the website is used and improve its content

4. Legal basis

When you get in touch, the data is processed on the basis of legitimate interest: the interest in being able to receive and respond to requests that you have sent yourself. If the processing is necessary prior to entering into an agreement with you, it is also carried out on that basis.

Analytics through Google Analytics is based on your consent. Without consent, it is not used. Notes of calls are taken with Granola only if you have said yes, and this is also based on your consent.

Invoices and other accounting records are kept because Ekria is required to do so under the Swedish Bookkeeping Act. The legal basis is then a legal obligation.

5. Forms and external providers

The website runs on Netlify. When you submit the form, the data is received and stored via Netlify Forms, and Ekria reads it from there.

If you accept analytics, Google Analytics 4 is used to see which pages are visited and how visitors find the website.

The fonts are hosted on the website’s own server, so no data is sent to Google Fonts.

Netlify and Google are US companies, so data may be transferred to the United States. Netlify, Inc. and Google LLC are certified under the EU–US Data Privacy Framework, which the European Commission has found to provide an adequate level of protection, and the transfer is based on that framework. If the framework ceases to apply, the European Commission’s standard contractual clauses in the providers’ data processing agreements are used instead.

6. When you are a client

When you are a client, Ekria saves what you send: your answers to the questionnaire, the information in your CV and the texts written for you. They are needed to carry out the engagement, and the legal basis is that they are necessary to perform the contract with you.

Emails and files are stored in Google Workspace, and calls take place on Google Meet. If you say yes, notes of the call are taken with the tool Granola, so that nothing you say is missed. Granola is a US company, so the notes may be transferred to the United States. The transfer is based on the European Commission’s standard contractual clauses in Granola’s data processing agreement.

Your data is deleted twelve months after the engagement is completed, except the invoice, which under the Swedish Bookkeeping Act is kept until the end of the seventh year after the year in which the financial year ended.

7. Cookies and analytics

The first time you visit the website, you choose whether to accept analytics. Until you have chosen, nothing is loaded from Google.

• If you accept, Google Analytics is loaded, which sets cookies with names beginning with _ga to count visits and page views. The cookies are kept in your browser for up to two years, unless you delete them or change your choice.
• If you decline, nothing is loaded from Google and no analytics cookies are set.

Your choice is saved in your browser, so you won’t be asked again next time. You can change your choice at any time via Cookie settings at the bottom of every page. If you change your mind, the analytics cookies are removed.

Google Analytics deletes event-level data after 2 months and data linked to a user no later than 14 months after your last visit. Aggregated statistics, such as the number of visits per page, are kept longer.

8. How long the data is kept

Data from requests is kept for as long as it is needed to handle, follow up on and document the contact. For clients, section 6 applies. After that, the data is deleted, unless longer storage is required by law or needed to establish, exercise or defend legal claims.

9. Sharing of data

Ekria does not sell personal data. Data may be processed by providers on Ekria’s behalf: Netlify for the website and the form, Google for email, files and video calls, Granola for call notes if you have said yes, and Google Analytics for analytics if you have accepted it.

10. Your rights

Where the conditions are met, you have the right to:

• find out what data is processed about you
• have inaccurate data corrected
• have data deleted
• request that processing be restricted
• object to certain processing
• in some cases, receive your data (data portability)
• withdraw a consent at any time, to analytics or to notes of calls being taken with Granola. This does not affect processing that took place before you withdrew it.

Email emma.karlsved@ekria.se if you want to exercise any of these rights.

11. Complaints and contact

Send questions about the policy or about how Ekria processes personal data to Emma Karlsved, emma.karlsved@ekria.se.

If you believe your data is being processed in breach of the rules, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

12. Changes to the policy

Ekria may update the policy when needed. The latest version is always available here.