Privacy

This website is deliberately built to collect as little as possible. It is a set of static pages: it has no login, no forms and no advertising, and the one thing it stores on your device is described below. What follows is the complete list of what happens anyway.

Tradifood AB, Bondegatan 65, 116 34 Stockholm, Sweden. Registered in Sweden, company registration number 556545-1621, with its registered office in Stockholm.

Tradifood AB is the controller for the processing described here. For anything on this page, write to info@tradifood.com.

The site is served by Cloudflare, which processes your IP address and the request itself in order to deliver the page to you. This is unavoidable: it is how the web works, and no page can reach you without it. Cloudflare acts as our processor under a data processing agreement.

The legal basis is our legitimate interest in operating a website that functions (GDPR Art 6(1)(f)). We do not combine this with anything else, and we do not use it to identify you.

We keep no logs of our own. This site is a set of static files with no server behind it, so nothing on our side records that you were here, and on the plan we use we have no access to records of individual requests either.

Cloudflare keeps what it needs for no longer than it needs it: to deliver pages, and to defend the network from attack. It sets those periods itself and publishes no single figure for them, so what we can give you is the purpose that limits them rather than a number of days.

Two things, and only if you do something that calls for them.

If you agree to play a film, we keep a record that you agreed. It is the word "granted" and nothing else — no identifier, no record of which film, no record of when. It stays until you withdraw it. If you never play a film, or close the notice, nothing is written at all: we do not record a refusal either, because a record of "no" is still something kept on your device.

If your browser asks for a language this site has while you are reading a page in another one, a line appears offering it. If you dismiss that line, the site notes it in your browser's session storage so it does not come back while you are here. That note is gone when you close the tab.

Neither needs consent of its own. ePrivacy Art 5(3) — in Swedish law LEK — exempts storage that is strictly necessary for a service you have asked for, and both of these are the record of a choice you made yourself, kept in order to honour it.

Nothing else is stored on your device by the site itself. The paragraph on videos below covers the one case where somebody else does the storing.

Some pages carry films hosted by YouTube, a Google service. These are not loaded when you open the page. Each one is a still image and a link until you choose to play it, so if you never press play, nothing is requested from Google and nothing is stored on your device.

If you consent and press play, Google receives your IP address and information about your device and browser, and stores identifiers on your device. Google determines its own purposes for that data and is a separate controller for it, not our processor. What Google does with it is described in its own privacy policy.

The legal basis is your consent (GDPR Art 6(1)(a)). We ask for it at the film itself, the first time you ask to watch one: a short notice says what playing it here means, and offers to send you to YouTube instead. That consent also covers the storage on your device required by ePrivacy and the Swedish Electronic Communications Act.

We remember that you agreed, so that you are not asked again every time. You can withdraw it whenever you like, from the link at the foot of any page, which stops any further loading and makes the films ask again.

We want to know roughly how many people visit and which pages they read. We use Cloudflare Web Analytics for this — the same company that already delivers this page to you, so measuring it involves nobody who was not already involved.

It sets no cookies and stores nothing on your device. There is no identifier of any kind, so we cannot recognise you between visits or across sites, and we do not try to. Cloudflare states that it collects only timing metrics and does not track individual visitors across the sites it serves.

The small script that reports this is loaded from a Cloudflare address, static.cloudflareinsights.com. What it measures is sent back to this site's own address rather than to a third party.

Because nothing is stored on or read from your device, this needs no consent under ePrivacy Art 5(3) — in Swedish law LEK — and it sits outside the cookie notice. The legal basis for the processing itself is our legitimate interest in knowing whether the site is read at all (GDPR Art 6(1)(f)).

These figures are counts and timings with no identifier attached, so there is nothing in them that is about you — nothing to keep, and nothing to delete.

If you email us, we receive what you send and keep it as long as needed to deal with it. Our mail is hosted by Microsoft 365, which processes it on our behalf as our processor.

The legal basis is our legitimate interest in answering correspondence, or the steps towards a contract where you are writing about business (GDPR Art 6(1)(f) and 6(1)(b)).

Cloudflare, Google and Microsoft are United States companies and may process data outside the EU/EEA. Transfers rely on the EU–US Data Privacy Framework and, where that does not apply, on the European Commission's standard contractual clauses.

You have the right to ask what personal data we hold about you, to have it corrected or erased, to object to or restrict our processing of it, and to receive it in a portable form. Where processing rests on consent, you may withdraw it at any time without affecting what was lawful before.

In practice we hold very little that could identify you, and usually nothing at all unless you have written to us.

To exercise any of these, write to info@tradifood.com.

If you believe we are handling your data wrongly, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), at imy.se.

If this page changes, the new version appears here. We do not keep an archive of previous versions.