Data controller

PubliX Group AB
Org. no. 559485-5487
Kungsgatan 37, 8tr
111 56 Stockholm, Sweden
Email: info@publixgroup.io

What data we collect

Contact form

When you submit the contact form we collect: name, email, company, message. Provided directly by you.

Newsletter

When you subscribe we collect: email address. Provided directly by you.

Analytics — opt-in only

We use Google Analytics 4 for aggregated site-usage statistics (page views, referrers, country, device type). GA4 uses cookies (_ga, _ga_F39X0LXQTH) that are set only after you consent via our cookie banner. If you decline, no analytics cookies are set and no analytics data is collected. GA4 does not log or store full IP addresses; Google uses the IP only transiently to derive coarse geolocation and then discards it.

Server logs

Our hosting provider Netlify records standard HTTP access logs (IP address, timestamp, requested URL, user agent) for security and abuse prevention. Retained per Netlify's data policy.

Why we collect it (legal basis)

  • Contact enquiries — Legitimate interest (responding to your request). Article 6(1)(f) GDPR.
  • Newsletter subscription — Consent (your explicit opt-in). Article 6(1)(a) GDPR. You can withdraw consent by unsubscribing at any time.
  • Server logs — Legitimate interest (site security). Article 6(1)(f) GDPR.

How long we keep it

  • Contact enquiries: up to 24 months from last interaction
  • Newsletter subscriptions: until you unsubscribe
  • Server logs: per Netlify's retention (typically 30 days)
  • Analytics: only if you consent. GA4 cookies expire after 2 years; aggregated data retained per Google Analytics defaults.

Data processors

We use the following processors, each bound by GDPR data processing agreements:

  • Netlify, Inc. — website hosting and form submissions (US-based; EU-US Data Privacy Framework)
  • Google Ireland Limited — analytics (Ireland, EU). Sub-processor: Google LLC (United States, under the EU-US Data Privacy Framework). Only when you consent via our cookie banner.

We do not sell your data or share it with advertisers or marketing platforms.

Your rights under GDPR

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Delete your data ("right to be forgotten")
  • Restrict or object to processing based on legitimate interest
  • Receive your data in a portable format
  • Withdraw consent at any time (for consent-based processing)
  • Lodge a complaint with your supervisory authority

To exercise any of these rights, email info@publixgroup.io. We will respond within 30 days.

Swedish supervisory authority: Integritetsskyddsmyndigheten (IMY).

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will reflect the most recent change.