Privacy Policy

This policy explains what personal data Tonrik AB collects when you visit tonrik.com or contact us, why we collect it, and what rights you have under the EU General Data Protection Regulation (GDPR).

Who is responsible for your data

Tonrik AB (org. no. 559208-3660) is the controller of the personal data described in this policy.

Tonrik AB
Herserudsvägen 9F
181 50 Lidingö, Sweden
Phone: 08-12 10 48 48

For any questions about this policy or your personal data, you can use our contact form or reach us at the address or phone number above.

What we collect and why

When you contact us

When you send a message through our contact form, we collect your name, email address and the content of your message. We use this information only to answer your enquiry and to continue any conversation that follows from it.

  • Legal basis: our legitimate interest in responding to people who contact us (GDPR Art. 6(1)(f)), or steps taken at your request before entering into an agreement (Art. 6(1)(b)).
  • Retention: we keep your message for as long as needed to handle your enquiry, and no longer than 24 months after our last contact, unless it leads to an assignment, in which case it may be retained in line with our accounting and contractual obligations.

The form is delivered by Formspree, which processes the submission on our behalf and forwards it to us by email.

Website statistics (only with your consent)

If you accept Analytics cookies, we load Google Tag Manager and Google Analytics. These help us understand which pages are visited and how visitors move around the site. Google Analytics sets cookies in your browser and collects information such as pages viewed, approximate location (derived from a shortened IP address), browser and device type, and how you arrived at the site.

  • Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time; see Managing your cookie choices below.
  • Retention: Google Analytics data is kept for up to 14 months.

If you do not accept analytics cookies, these scripts are not loaded at all.

Anonymous performance measurement

We use Vercel Web Analytics and Speed Insights to measure visitor numbers and page load performance. These tools do not use cookies and do not identify you or track you across websites. Visitors are counted using a hash of the request that is discarded after 24 hours, and the data we see is aggregated.

  • Legal basis: our legitimate interest in keeping the website working well (GDPR Art. 6(1)(f)).

Server logs

Our hosting provider, Vercel, processes technical data such as your IP address and browser information when it delivers the website to you. This is necessary to serve pages securely and to protect against abuse, and the logs are kept only for a short period.

Cookies and local storage

Name Purpose Type Duration
Silktide consent choice Remembers your cookie choices so we don't ask again Essential (local storage) Until you clear your browser data
_ga Google Analytics: distinguishes visitors Analytics (consent only) 2 years
_ga_<id> Google Analytics: keeps session state Analytics (consent only) 2 years

Essential storage is needed for the site to remember your privacy choice and cannot be switched off.

Managing your cookie choices

You can change or withdraw your consent at any time by clicking the cookie icon in the bottom-right corner of any page. You can also delete cookies through your browser settings.

Who we share data with

We do not sell your personal data. We share it only with service providers who process it on our behalf:

  • Vercel Inc.: website hosting and anonymous analytics
  • Formspree, Inc.: contact form delivery
  • Google Ireland Ltd / Google LLC: Google Tag Manager and Google Analytics (only with your consent)

Some of these providers are based in, or may transfer data to, the United States. Such transfers are covered by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you
  • have inaccurate data corrected
  • have your data erased
  • restrict or object to our processing of your data
  • receive your data in a portable format (data portability)
  • withdraw your consent at any time, without affecting processing that took place before

To exercise any of these rights, contact us using the details above. We will respond within one month.

If you believe we handle your personal data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.

Changes to this policy

We may update this policy when our website or services change. The date below shows when it was last revised.

Last updated: