Privacy policy

This policy explains what personal data Crossfell AB collects through crossfell.se, why, and what rights you have. It follows the EU General Data Protection Regulation (GDPR).

Who is responsible

The data controller is Crossfell AB, Flädervägen 10, SE-618 33 Kolmården, Sweden. For anything about your personal data, email hello@crossfell.se.

What we collect and why

When you use the contact form or email us

We receive your name, email address, company (if you give it) and your message. We use them only to reply and to follow up on what you asked about.

Legal basis: our legitimate interest in answering enquiries, or steps you ask us to take before entering into an agreement (GDPR article 6.1 f and 6.1 b). We keep the correspondence for as long as the conversation is active and for up to 24 months after the last contact, unless a longer period is required by accounting or other law.

When you subscribe or download material

We receive your email address, your first name if you give it, and which page you signed up from. We use them to send News from the Trenches and related material you asked for.

Legal basis: your consent (GDPR article 6.1 a). Every email has an unsubscribe link, and you can withdraw consent at any time. We keep your details until you unsubscribe or ask us to delete them.

When you visit the site

Our hosting provider records technical data such as IP address, browser type and the pages requested. This is needed to deliver the site and keep it secure, and is kept for a short period only.

Legal basis: our legitimate interest in running a secure website (GDPR article 6.1 f).

crossfell.se does not use analytics, advertising trackers or cookies of its own.

Embedded videos

Videos on the site are embedded from YouTube in privacy-enhanced mode (youtube-nocookie.com) or from Vimeo with tracking turned off. The video provider receives technical data, such as your IP address, when the player loads, and may set cookies if you play a video. Their own privacy policies apply: Google and Vimeo.

Who we share data with

We never sell or rent personal data. We use a small number of service providers who process data on our behalf and only on our instructions:

• Vercel Inc. hosts the website.
• Resend delivers contact form messages to our inbox.
• Kit (ConvertKit LLC) manages the newsletter list and sends the emails.
• one.com hosts our email.

Some of these providers are based in, or use servers in, the United States. Where data leaves the EU/EEA, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

We may also disclose data where the law requires it.

Our use of Google and YouTube APIs

Crossfell uses its own internal tool, Crossfell Marketing, to upload Crossfell's videos to the Crossfell YouTube channel. The tool uses YouTube API Services and is used only by Crossfell. It does not collect or process data about visitors to crossfell.se or any other YouTube users.

The tool accesses only the Crossfell Google account that signs in to it, and only to upload videos and to read the channel name. Sign-in tokens are stored on Crossfell's own computer and are never shared, sold or used for advertising. Crossfell Marketing's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

By using YouTube features you agree to the YouTube Terms of Service; Google's handling of data is described in the Google Privacy Policy. Access granted to the tool can be revoked at any time on the Google security settings page.

Your rights

You have the right to:

• get a copy of the personal data we hold about you
• have incorrect data corrected
• have your data deleted
• restrict or object to our processing
• receive your data in a portable format
• withdraw consent at any time, without affecting processing that took place before

Email hello@crossfell.se and we will respond within one month.

If you think we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or the supervisory authority in your own country.

Changes

We update this policy when our services change. The date at the top shows the latest version.