Privacy policy

Draft. Complete and have this page reviewed before going live. It applies to all websites of ef.next AB under ef-next.com, including its subdomains, so it exists once.

1. Controller

ef.next AB, to follow, Sweden · [email protected]

2. Hosting and server logs

Hosting provider: Cloudflare, Inc. (Cloudflare Pages; EU data centres where possible to follow: confirm). The web server records technical access data (IP address, time, requested page, referrer, browser) in log files in order to deliver the pages and operate them securely. Retention period: to follow.

3. No cookies, no tracking

These sites set no cookies and use no analytics, advertising or tracking services. Your light/dark preference is stored in your own browser only (local storage) and is never transmitted.

4. Fonts

to follow: as long as fonts are loaded from Google Fonts, your browser contacts Google's servers and transmits your IP address. Once the fonts are self-hosted, the pages make no third-party requests; remove this section then.

5. Contact by e-mail and contact form

Messages you send to [email protected] or [email protected] are processed to answer them and are kept for as long as the correspondence requires.

The contact forms on ef-next.com and on the Security Framework site send the fields you enter (name, company, e-mail address, topic, message) to a function running on our hosting provider's infrastructure, which forwards them as one e-mail to our mailbox through the same provider's e-mail sending service (Cloudflare Email Service); no further service provider is involved. The function stores nothing except a short-lived counter per connection used to limit abuse (deleted after one hour). Legal basis: our legitimate interest in answering enquiries and, where an enquiry precedes a contract, the preparation of that contract. If the form cannot be used, you can send the same information from your own e-mail program.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority (for ef.next AB: the Swedish Authority for Privacy Protection, IMY).

Last updated: to follow