Privacy policy
Last updated: 3 November 2026
This page explains what personal data we handle when you visit backendata.com or email us, why, and what rights you have.
Who is responsible
The controller is BackenData AB, a Swedish limited company (aktiebolag), organisationsnummer 559488-8298, with its registered office in Stockholm.
For any privacy question, email contact@backendata.com.
No cookies, analytics or tracking
This website sets no cookies, uses no local storage and runs no analytics or tracking tools, so there is no cookie banner. It has no forms or JavaScript, and everything it loads, fonts included, comes from this site itself, not from Google Fonts or any other third party.
Website access data
What: When you open a page, our hosting provider processes technical request data, such as your IP address, browser type, the page requested, the time of the request and the referring page.
Why: To deliver the site and protect it against abuse and attacks.
Legal basis: Our legitimate interest in running a working, secure website (Article 6(1)(f) GDPR).
Who processes it: The site is hosted on Firebase Hosting, a Google service. Google acts as our processor under the Firebase Data Processing and Security Terms. Because the site is served from a global network, this data may be processed in several countries.
How long: We have not enabled Firebase's optional request logging, so we do not access or keep copies of this data. Google retains it for a limited period under its own terms.
Email enquiries
What: Your name, email address, the content of your message and anything else you choose to include.
Why: To answer you and, where relevant, to prepare or carry out an engagement with you or your organisation.
Legal basis: If you contact us about an engagement for yourself: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). Otherwise, including when you write on behalf of an organisation: our legitimate interest in answering business enquiries (Article 6(1)(f) GDPR).
Who processes it: Our email runs on Google Workspace, provided by Google Cloud EMEA Limited (Dublin, Ireland), which acts as our processor. We share it with no one else.
How long: As long as needed to answer your enquiry and handle any engagement that follows. Otherwise we delete it no later than 24 months after our last contact. If your enquiry becomes part of a business relationship, some information may have to be kept longer to meet legal obligations, such as Swedish bookkeeping rules.
You do not have to email us, but we need your email address to reply.
Transfers outside the EU/EEA
Google may process data outside the EU/EEA, including in the United States. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as adequate. Where that does not apply, Google's data processing terms use the European Commission's standard contractual clauses. You can ask us for more information about these safeguards.
What we do not do
- We do not sell your personal data.
- We do not use enquiry emails for marketing or newsletters.
- We do not profile you or make automated decisions about you.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- have our use of your data restricted;
- object at any time to processing based on our legitimate interest;
- receive data you gave us in connection with a contract, or steps towards one, in a portable format.
Some rights have legal limits, for example where we must keep data by law. To use them, email contact@backendata.com. We may ask you to confirm your identity first.
You can also complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY), at www.imy.se.
Changes to this policy
We may update this policy, for example when the site changes. The current version, with its date, is always on this page.