Privacy Policy

Overview

BITBRUK, operated by Lidfeldt Lantbruk AB, respects your privacy. This policy explains what data we collect and how we handle it.

Product-Specific Policies

This policy covers the bitbruk.com website. BITBRUK products have their own privacy policies describing product-specific data handling. For the Smart Bookmarks AI Chrome extension, see the Smart Bookmarks AI privacy policy.

What We Collect

This website has no forms, accounts, cookies, or analytics. The only personal data it involves are the hosting server logs described below and, if you email us, your email address and message content, which we store solely to respond to your inquiry.

Legal basis: both rest on our legitimate interests under GDPR Article 6(1)(f) -- operating and securing the website, and answering the messages you send. Where an email concerns a purchase, we process it to perform our contract with you under Article 6(1)(b).

Cookies

This website does not use cookies or tracking technologies.

Data Processors

This website is hosted on Cloudflare Pages. Cloudflare may process standard server logs (IP addresses, timestamps) as part of hosting. See Cloudflare's privacy policy for details.

Cloudflare, Inc. (US) acts as a sub-processor for hosting and CDN delivery. Cloudflare is covered by a Data Processing Addendum (DPA), which incorporates the EU Standard Contractual Clauses, and is certified under the EU-U.S. Data Privacy Framework; these safeguard any transfer of server logs to the United States. For details, see Cloudflare's DPA page.

We retain server logs only as long as necessary for security and operational purposes, typically no longer than 30 days.

Email to bitbruk.com addresses is handled by Google Workspace, provided by Google Cloud EMEA Limited (Ireland) as our processor under Google's Cloud Data Processing Addendum. Google may store and process email outside the EU/EEA, including in the United States; those transfers rely on the addendum's EU Standard Contractual Clauses or on the EU-U.S. Data Privacy Framework, under which Google LLC is certified.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• access the personal data we hold about you
• correct inaccurate or incomplete personal data
• request deletion of your personal data (right to be forgotten)
• restrict how we process your personal data
• receive your personal data in a structured, machine-readable format
• object to processing based on legitimate interests
• not be subject to solely automated decision-making that produces legal effects
• withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected].

Jurisdiction

This policy is governed by Swedish law. Supervisory authority: Integritetsskyddsmyndigheten (IMY).

DATA RETENTION

We retain personal data only for as long as necessary to fulfill the purposes described in this policy. Email correspondence is retained for the duration of the business relationship and deleted upon request.

Updates

We may update this policy. Changes take effect when published on this page.