Privacy policy

Who is responsible?

Kader Cadre AB, company registration number 559576-6097, registered in Rättvik, Sweden, is the data controller. Dalanovum is the company's brand. Send any questions about personal data to hello@dalanovum.se.

This policy follows the EU General Data Protection Regulation (GDPR) and the Swedish Data Protection Act (2018:218). It was last updated on 4 November 2026.

What data do we handle?

When you visit the website

The server writes a line to a log for every request: IP address, time, the address requested, the browser's name and the host name of the page you came from. We use the log to keep the website secure and running, and to count how many people in total open the links in our emails. The log clears itself: the oldest lines are deleted once it reaches 50 MB.

The website sets no cookies and stores nothing in your browser. The one exception is the cookie that opens the Byråindex report for those who asked for it (see below). Fonts, images and videos come from our own server, so no requests go to Google or any other third party.

When you email us

We keep what you write, your email address and your name so we can reply. If it turns into a project, we also keep the quote, the contract and the invoices. Swedish accounting law requires us to keep accounting records for seven years.

The quick check

The form for the free quick check sends your details to aeo.dalanovum.se. There you can read how the quick check handles personal data (in Swedish).

The Byråindex report

To get the full Byråindex report, you provide your email address and organisation, and you may also provide your name and role. We keep these details. We also keep the time you requested the report, the version of the consent text you accepted and a hash of your IP address (not the address itself). We use the hash only to stop misuse of the form. The report comes as a personal link that works for 30 days. The link shows a button. When you press it, your browser gets a cookie that opens the report and works only at the report's address. The cookie is needed to deliver the report you asked for and is used for nothing else. We keep when each browser was allowed to open the report and when the report was opened. Every page of the report is marked with your organisation, the date and a code that belongs to the link. We store the details encrypted and delete them after 13 months. If you tick the box to get an email when the next Byråindex is out, we keep that as a separate consent, which you can withdraw at any time.

Measurements and emails to companies

We measure public websites for our reports and articles, and sometimes email companies about the results. The data comes from the companies' own websites and public registers. For most companies none of it is personal data, but for a sole trader the business name and email address can be. We never publish anything about an individual sole trader, and every email has a link to stop further emails.

Why, and on what legal basis?

• The server log. Security, operations and aggregate statistics. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Emails and projects. Answering questions, writing quotes and fulfilling contracts. Legal basis: contract (Art. 6(1)(b)) and legitimate interest.
• Accounting. Invoices and contracts are kept for seven years. Legal basis: legal obligation (Art. 6(1)(c)).
• The Byråindex report. Sending the link to the report and, if you want, an email when the next index is out. Legal basis: consent (Art. 6(1)(a)). You can withdraw your consent at any time.
• Measurements and emails. Reports on websites and contact with companies. Legal basis: legitimate interest. You can object at any time.

Who else sees the data?

The website and the log are on a server in Sweden that we run ourselves. Email goes through our email provider in Sweden. We never sell personal data and never pass it to advertisers.

What are your rights?

You have the right to know what data we hold about you, to have mistakes corrected, to have data deleted, to restrict how we use it, to object to processing based on legitimate interest and to receive data you have given us yourself. Write to hello@dalanovum.se and we'll reply within a month.

If you're not happy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection, IMY.