Controller
CDDS – Continuous Delivery and DevOps Services AB
Krångvägen 40, 883 70 Ramsele, Sweden
info@cdds.se
Website and form
The site serves locally embedded pages and assets. It uses no analytics, advertising, non-essential cookies, remote fonts or third-party browser scripts. The form sends your email address, optional name and message through Microsoft 365 to our mailbox so we can reply. The website itself does not store the form data. We do not use automated decision-making or profiling.
Purpose and legal basis
We process a general business enquiry in order to reply and to keep the service secure, on the basis of legitimate interests under GDPR Article 6(1)(f); these interests include handling enquiries, preventing abuse and operating the service safely. When a person explicitly asks for steps to be taken before a possible contract, the legal basis is GDPR Article 6(1)(b). Required fields are marked; without an email address and a message, we cannot reply through the form.
Recipients and transfers
Hosting: Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The server is located in Helsinki, Finland. The web server keeps no access logs.
Delivery and protection: Cloudflare, Inc., USA. All requests to the website pass through Cloudflare, which processes technical access data such as IP address, time, requested address and browser details to deliver the website and protect it against attacks. Transfers to the USA are based on the European Commission's standard contractual clauses.
Email: Microsoft Ireland Operations Limited (Microsoft 365). The form data reach our mailbox through Microsoft 365 and are stored there. For transfers to the USA, Microsoft is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses apply in addition.
Data processing agreements under Article 28 GDPR are in place with all three providers.
Retention
An enquiry is kept in our mailbox only for as long as is needed to handle it and to meet legal obligations. An IP address temporarily used for abuse protection is held only in the server's memory and removed when its entry expires after no more than ten minutes of inactivity. How long Cloudflare keeps technical access data is governed by its terms.
Your rights
You may request access, rectification, erasure and restriction and, where applicable, object. Data portability applies where its legal conditions are met. You may complain to the Swedish Authority for Privacy Protection (IMY): imy.se.
Contact
For privacy questions, email info@cdds.se. This notice describes the processing performed by the website.