Privacy policy
Balkongföreningen takes your privacy seriously. This page describes which personal data we process when you use bf.nu, why we do so and what rights you have. For cookies specifically, see our cookie policy.
Data controller
BalkongföreningenHäradsvägen 5, 364 95 Älghult, Sweden
Company registration number 829502-8362
fredrik@bf.nu · +46 (0)705 – 22 79 40
What data we process
We only collect data that you provide yourself in one of the site's forms. There is no registration, no accounts for private individuals and no profiling.
Membership application
Name, email address, phone number, company, company registration number and address.
The contact form
Name, email address and whatever you write in the message.
Complaints and warranty cases
Name, email address, company, any project or property, and your description of the case. The form is in the password-protected section for certified installers.
Technical information
Our web server automatically logs IP address, time and which page was requested. This is used for operations and troubleshooting and is retained briefly by our hosting provider. We do not link these logs to you as an individual.
Purposes and legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Process a membership application | To send the application form and information, and to assess the application | Steps prior to entering a contract, Art. 6(1)(b) GDPR |
| Reply to a message from the contact form | To answer your question | Legitimate interest, Art. 6(1)(f) GDPR |
| Handle a complaint or warranty case | To investigate and follow up the case within the association's quality work | Contract and legitimate interest, Art. 6(1)(b) and (f) GDPR |
| Operations, security and troubleshooting | To keep the website running and protect it from misuse | Legitimate interest, Art. 6(1)(f) GDPR |
How long we keep the data
- Membership applications: for the duration of processing and thereafter for as long as the membership continues. Rejected or withdrawn applications are deleted no later than 24 months after processing ends.
- Contact messages: as a rule no more than 12 months after the matter is closed.
- Complaints and warranty cases: for as long as needed to demonstrate how the case was handled, taking into account the liability period in construction contracts.
- Server logs: for a short period, as part of operations at our hosting provider.
Who we share data with
We never sell personal data and do not share it for marketing purposes. To run the website we use the following suppliers, who process data on our behalf as processors:
| Supplier | Role | What is processed |
|---|---|---|
| Vercel | Web hosting and operations | Server logs, and form data during the brief moment it passes through the server |
| Sanity | Content management system and case archive | Submitted form cases, so that the association can follow them up |
| Resend | Email delivery | The content of the message sent to the association |
Some of these suppliers are established outside the EU/EEA. Transfers then take place under a valid transfer mechanism, such as the European Commission's standard contractual clauses.
Data may also be disclosed where we are required to do so by law or by a decision of a public authority.
How we protect the data
- All traffic to and from the website is encrypted over HTTPS.
- Internal documents sit in password-protected sections. Files are not released until the password has been verified, and the session is short-lived.
- Sign-in cookies are signed and cannot be read by scripts in the browser.
- Access to submitted cases is limited to the association's administration.
Your rights
You have the right to
- know which data we process about you and receive a copy of it,
- have inaccurate data corrected,
- have data erased when it is no longer needed,
- request that processing be restricted,
- object to processing based on legitimate interest, and
- in certain cases receive your data in a machine-readable format (data portability).
Contact us at fredrik@bf.nu if you wish to exercise any of these rights. We will respond as soon as we can, and within one month at the latest.
If you believe we are processing your personal data incorrectly, you have the right to lodge a complaint with theSwedish Authority for Privacy Protection (IMY).
Changes to this policy
If we change how we process personal data, we will update this page and change the last-updated date at the top.