Privacy
Privacy policy.
Last updated 25 October 2026.
Data controller
ITKoncept Sverige AB, company registration number 556713-9901, Ringvägen 56 a, 133 35 Saltsjöbaden, Sweden, is responsible for the processing described here. Questions: info@itkoncept.se.
When you contact us
We process your name, email address, optional organisation and message to respond to and assess your enquiry. The legal basis is our legitimate interest in handling incoming business enquiries. Only include the details needed for an initial conversation.
Domain customers (.se and .nu)
When you register or manage a .se or .nu domain name with us, we process the holder details required by the terms and conditions of registration: full company name and contact person, or first and last name, company registration or personal identity number, phone number and email address. We also process records of which registration services you have requested and that you have accepted the terms and conditions, because the registrar agreement requires us to document this. The legal basis is our contract with you. We transfer the holder details to Internetstiftelsen, which is the data controller for the domain name registry. We process the data for as long as the domain name is registered with us. Read more in Internetstiftelsen's privacy policy for .se and .nu. Internetstiftelsen's privacy policy for .se and .nu
Form and email
When the form is available, your enquiry is saved on our server when you submit it. Confirmation is shown only after it has been saved. The message is then transferred to our shared Microsoft 365 inbox. Microsoft processes email data as our service provider. If delivery temporarily fails, the enquiry remains in the queue for another attempt. Email links open your own email application.
Retention
Once the email service has accepted the message, the name, email address and message are removed from the server’s delivery queue. Enquiries that could not be transferred are retained until they have been handled. A technical receipt with a reference number and checksum is kept for 30 days. Enquiries in the inbox are reviewed regularly and deleted when no longer needed for the contact or an assignment.
Protection against abuse
The website uses no tracking cookies. To limit automated submissions, the form uses protected fingerprints of IP and email addresses. These are used for limits within a 24-hour window; older values are cleared on the next submission. Enquiry contents are not written to application logs.
Cloudflare Turnstile
When the spam check is shown in the contact or collaboration form, Cloudflare’s script and iframe are loaded. Cloudflare processes your IP address, browser and device signals, widget key and website origin to protect the form against spam and automated abuse. For our use of Turnstile to protect the website, Cloudflare acts as our processor. The legal basis is our legitimate interest in this protection. During server verification we also send your IP address to Cloudflare when it is available. Data may be transferred outside the EU/EEA, including to the United States. According to its Turnstile Privacy Addendum, Cloudflare also acts as a controller when processing signals to improve Turnstile’s bot detection capabilities. This applies only when the check is shown. Read more in Cloudflare’s Turnstile Privacy Addendum. Cloudflare Turnstile Privacy Addendum
Your rights
You may request access, correction or erasure of your personal data. You may also object to processing or request restriction under the GDPR. Contact info@itkoncept.se. You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).