Privacy Notice

This Privacy Notice explains how Boldfinch HB processes personal data when you visit https://boldfinch.net.

1. Controller

The controller responsible for the processing of personal data described in this Privacy Notice is:

Boldfinch HB
Registered in Sweden
Organisation number: 969803-9444
Represented by: Antonia Gesch and Oliver Gesch
Website: https://boldfinch.net

For privacy-related questions, requests, or to exercise your data protection rights, you can contact:

Email: info@boldfinch.net

2. Scope of this Privacy Notice

This Privacy Notice applies to visits to the website https://boldfinch.net and the pages made available under this domain.

At the time of publication, this website is a static website. It does not provide user accounts, contact forms, newsletters, waitlists, or other interactive user features.

3. Categories of personal data processed

When you access the website, personal data and technical information may be processed automatically in order to deliver the website securely and reliably. This may include:

• IP address
• Date and time of the request
• Requested URL and transferred data volume
• Browser type and browser version
• Operating system and device information
• Referrer URL, where transmitted by your browser
• Server, network, routing, and security-related log data

4. Purposes of processing

Personal data is processed for the following purposes:

• Providing the website to visitors
• Ensuring the stability, security, and availability of the website
• Preventing misuse, fraud, abuse, and malicious traffic
• Detecting, mitigating, and responding to technical or security incidents
• Maintaining and improving the technical delivery of the website

5. Legal basis

The legal basis for the processing described in this Privacy Notice is Article 6(1)(f) GDPR.

The legitimate interests pursued are the secure, stable, and efficient operation of the website, protection against abuse and attacks, and the reliable delivery of content to visitors.

Where strictly necessary cookies or similar technical mechanisms are used for security, load balancing, or technical delivery, they are used only to the extent permitted under applicable law and only where they are necessary for operating the website.

6. Hosting, delivery, and processors

The website is hosted and delivered with the support of Cloudflare.

Cloudflare may process personal data on behalf of Boldfinch HB in its role as a processor, in particular in connection with content delivery, network security, traffic routing, and technical protection of the website.

Depending on the technical operation of the service, Cloudflare may process technical and log-related data such as IP addresses, request information, routing data, and security event data.

Cloudflare's Data Processing Addendum forms the contractual basis for processor-related data protection obligations where applicable.

7. International data transfers

As Cloudflare operates an international infrastructure, personal data may be transferred to or accessed from countries outside the European Economic Area.

Where required, such transfers are based on appropriate safeguards, including the EU Standard Contractual Clauses, and, where applicable, an adequacy mechanism or certification recognised under applicable data protection law.

8. Retention period

Personal data is stored only for as long as necessary for the purposes described in this Privacy Notice, in particular for website delivery, IT security, error analysis, and the defence against misuse.

The exact retention period may vary depending on the type of log data, the relevant technical system, and legal, regulatory, or operational requirements.

9. Recipients

Personal data may be disclosed to service providers and processors insofar as this is necessary for operating, securing, and maintaining the website.

Recipients may include in particular:

• Cloud infrastructure and content delivery providers
• IT security and technical service providers
• Professional advisers where disclosure is necessary for legal compliance or defence of claims
• Public authorities where there is a legal obligation to disclose data

10. Obligation to provide data

The provision of certain technical data, especially the IP address and request-related metadata, is necessary in order to access and deliver the website.

Without this data, the website cannot be made available securely and reliably.

11. Your rights under the GDPR

Subject to the applicable legal requirements, you have the following rights:

• The right of access to your personal data
• The right to rectification of inaccurate personal data
• The right to erasure
• The right to restriction of processing
• The right to data portability
• The right to object to processing based on Article 6(1)(f) GDPR
• The right to withdraw consent at any time, where processing is based on consent

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or with another competent supervisory authority in the European Union.

12. No marketing tracking

At the time of publication, the website does not intentionally use analytics or marketing tracking tools.

If this changes in the future, this Privacy Notice will be updated accordingly and, where required by law, additional consent mechanisms will be implemented.

13. External links

This website may contain links to external websites. This Privacy Notice does not apply to the websites of other providers.

The respective provider is solely responsible for the processing of personal data on its own website.

14. Changes to this Privacy Notice

This Privacy Notice may be updated from time to time to reflect legal, technical, or organisational changes.

The current version will be published on this website.