Privacy Policy

Last updated: 28 October 2026

1. Who is responsible?

Hartfors AB, Swedish corporate registration number 559607-6546, is the controller for the company website hartfors.com. Correspondence address: Västra Kanalgatan 11, 652 24 Karlstad, Sweden. Contact: info@hartfors.com.

2. Data we process

When you contact us by email, we process your email address, message, any information you supply, our response and related correspondence. Our hosting and network providers may process technical data such as IP addresses, request dates, browser information and security logs when you access this website. The site itself is an informational company website, not a user-account or online-checkout service.

3. Purposes and legal bases

We use communications to respond to enquiries and maintain business relationships under our legitimate interests (GDPR Article 6(1)(f)); where necessary to take requested steps before a contract, Article 6(1)(b); and where required for bookkeeping, regulatory or legal obligations, Article 6(1)(c). Technical information is processed for website delivery, reliability and security, where relevant under Article 6(1)(f).

4. Recipients and international access

Information may be handled by email, web-hosting and infrastructure providers providing services to us. This website uses GitHub Pages. Some service providers may be located outside the EEA or permit access from outside it; transfers are subject to applicable adequacy decisions or other lawful safeguards where required. We do not publish correspondence submitted to us without an appropriate basis.

5. Retention

We retain business correspondence only as long as reasonably necessary to deal with enquiries, protect legitimate legal interests and comply with applicable law. Records forming part of Swedish accounting are normally kept until the end of the seventh year following the calendar year in which the financial year ended. Provider security logs are retained according to the relevant provider arrangements. We do not promise immediate deletion where a legal duty requires retention.

6. Cookies and website data

The present static company website does not intentionally set advertising or analytics cookies and has no sign-in functionality. Our hosting provider may still receive ordinary technical requests. If tracking, embedded services or optional storage are introduced, this notice and any required consent mechanism will be updated before use.

7. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability, object to legitimate-interest processing, or withdraw consent where consent applies. We may need to verify your identity and may have lawful grounds to retain some records. Contact info@hartfors.com. You can complain to the Swedish Authority for Privacy Protection (IMY) or another competent supervisory authority.

8. Rebornly is a separate service

This policy applies only to hartfors.com. Our product Rebornly has its own policies for its website and app, available at rebornlyapp.com/privacy/ and rebornlyapp.com/app-privacy/.