Privacy

Who is responsible

Mooseify AB is the controller for the processing described here.
Mooseify AB, organisation number 559075-8792
Spetsvägen 13, 132 36 Saltsjö-Boo, Sweden

General enquiries: hello@mooseify.net
Privacy enquiries and rights requests: privacy@mooseify.net

What we process

When you visit the website

The website is served from a Linux server operated on Mooseify’s behalf. Delivering and protecting it involves limited technical processing:

• web-server access logs — request time, requested page, response status, referring page and a truncated user-agent string;
• your IP address, as recorded in those logs and used briefly for network security and abuse prevention;
• technical error and deployment information.

We do not use any analytics, advertising or tracking service. The website sets no cookies. Web fonts are served from our own server, so viewing a page does not send a request to a third-party font host. Access logs are retained for a short operational period and are not combined into visitor profiles.

When you contact us

If you use the contact form or email us, we process the topic you select, your message and any later correspondence, together with your name, email address and company where you provide them. When the contact form’s email delivery is enabled, a submission is sent to a Mooseify mailbox through an SMTP mail service; a short-lived, IP-derived key may be used to rate-limit submissions and reject automated abuse. Please do not send contracts, passwords, sensitive personal data, security details or information you are not authorised to share through the general contact form.

Security reports

If you report a potential security issue to security@mooseify.net, we process the contact details and technical information you provide so we can assess and respond. See the Security page.

Why we process it, and the legal basis

We process information to:

• provide, maintain and secure the website (legitimate interests in operating a proportionate company website);
• protect the site, mailbox and contact channel from abuse (legitimate interests in security);
• read, assess and respond to enquiries, and take steps you request before a possible business relationship (legitimate interests, or pre-contractual steps at your request);
• keep records where needed for security, business continuity, legal claims or a legal obligation (legitimate interests or legal obligation).

We do not rely on a generic website consent for the current contact form. If we ever add an optional feature that requires consent, we will ask for it separately and not activate the feature until consent is given.

Service providers

We use a small number of providers to run the site and our communications. Confirmed for this version:

• Hostinger — domain registration and DNS.
• The provider of the server that hosts the website, and the SMTP mail service used to deliver contact-form notifications and to run the @mooseify.net mailboxes.

Providers process data under their own terms and data-processing arrangements. We do not use a content-delivery network, an analytics provider or a bot-verification service on this website.

International transfers

Our providers are chosen to keep processing within the EU/EEA where practical. Where a provider processes data outside the EEA, Mooseify relies on an applicable transfer mechanism, such as an adequacy decision or the standard contractual clauses, together with any supplementary safeguards required.

How long we keep information

• web-server logs and short-lived security data: a limited operational period, then deleted or rotated out;
• enquiries that do not lead to an ongoing relationship: normally deleted within 12 months;
• ongoing business correspondence: kept for as long as needed for the relationship and any applicable accounting, legal or claim periods;
• security reports: kept for as long as reasonably necessary to investigate, fix and document the issue.

Cookies

This website does not set cookies or use similar device-storage technologies.

Automated decisions

We do not use information collected through this website to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Who receives the information

Access is limited to Mooseify and the providers above. We may disclose information where required by law, to protect rights or security, or in connection with a properly managed company transaction. We do not sell personal data or use contact information for third-party advertising.

Your rights

Subject to the applicable conditions, you may have the right to:

• request access to personal data about you;
• ask us to correct inaccurate or incomplete data;
• request deletion or restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a portable format where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority.

To make a request, email privacy@mooseify.net. We may need to verify your identity without collecting more information than necessary. In Sweden the supervisory authority is Integritetsskyddsmyndigheten (IMY).

Security

We use technical and organisational measures appropriate to the limited scope of the website, including HTTPS, browser security headers, server-side validation, restricted logging and data minimisation. No internet service can guarantee absolute security.

Children

This website is not directed to children and is not intended to collect information from them.

Changes

We may update this notice when the website, providers or legal requirements change. The date at the top shows the current version. Material changes are reviewed before the related processing is enabled.

Contact

Questions about this notice can be sent to privacy@mooseify.net.