Data controller

YOURWEB DGN (trading as YourWeb) is the data controller for information collected through this website.

What personal data do we process?

We only process data needed for each purpose:

  • Contact details – name, company, email, phone, preferred callback time and message when you contact us.
  • Newsletter – email address, optional first name, language, sign-up source, and records of when and to which wording you gave and confirmed consent.
  • Technical data – IP address, browser type, device type, language preference and pages visited. For consented event measurement we store a daily pseudonymous HMAC derived from IP address and user agent, event type, page path and label, but not raw IP address or user agent in the event table.
  • Cookies and similar technology – information stored locally in your browser for functionality, security and, with your consent, analytics and marketing.

Legal basis and purposes

We only process personal data when a legal basis applies:

  • Contract or steps requested before a contract – when you personally request a quote or order a service as the customer.
  • Legitimate interest – to answer an enquiry from a business representative, handle a requested chat, prevent abuse, protect the site and administer customer relationships. Our interests are relevant communication and secure operation; you may object to this processing.
  • Legal obligation – when we must retain information under accounting or other applicable law.
  • Consent – for newsletters, analytics and marketing measurement, and separately for Intercom chat storage. You can withdraw consent without affecting earlier lawful processing.

Cookies and similar technologies

We use cookies for the website to work securely and smoothly. Essential cookies are stored without consent. For analytics and marketing cookies we ask for your consent through our cookie banner. You can change or withdraw your consent at any time via the Manage cookies link in the footer.

Read more in our Cookie policy.

Contact form, callbacks and chat

When you request a call, we use your phone number and preferred time to follow up on your request. Resend delivers the request to us. A callback request is not added to a marketing list.

When you submit the contact form, we process the details to answer your enquiry. Name, email address and message are required so we can reply; company, phone and other project details are optional. Without the required fields the form cannot be sent. Resend delivers the message to us and sends you an acknowledgement. Form enquiries and replies to the acknowledgement are also handled in Intercom for follow-up and customer support. The acknowledgement queue keeps your email address for up to seven days for delivery and retries. A project enquiry is not automatically added to a marketing list.

The card that opens when you click “Ask us” shows that YOURWEB chat uses an AI assistant, that the chat opens in Intercom (the assistant is Intercom's Fin) and what Intercom stores in your browser. Intercom Messenger loads only after you reply in that card, by choosing a topic or sending a question of your own; what you chose or wrote is then filled in as your first message (with “Something else” the chat opens empty). You then speak first with an AI assistant. Intercom may process the conversation, contact details you choose to provide and technical data needed for the chat. If the AI assistant cannot answer or you ask for a person, the enquiry is passed to YourWeb during staffed chat hours.

Newsletter via Resend

You receive YourWeb newsletters only if you actively sign up and press the confirmation button on the page opened by our email link. Your email address is required to deliver the newsletter; first name is optional. Consent covers web, AI and cybersecurity insights and occasional offers. Cookie choices and project enquiries do not count as newsletter consent. We keep a record of the sign-up and confirmation to show how consent was given.

Resend handles the recipient list and delivery. We do not automatically use project enquiries, purchased lists or scraped addresses for advertising. Any future individual open or click tracking must be described here and assessed separately before use. Every marketing email contains an unsubscribe link. Resend stops future broadcasts immediately when you unsubscribe; we check our local status against Resend regularly. You may also withdraw consent by emailing info@yourweb.se. To demonstrate the basis for previous emails, local subscription and consent records are deleted no later than 730 days after we detect an unsubscribe, unless a legal obligation requires longer retention. You may request earlier erasure under the GDPR.

Your rights

Under the GDPR you have the following rights:

  • Right of access – request a copy of the personal data we hold about you.
  • Right to rectification – request that inaccurate data is corrected.
  • Right to erasure – request deletion when data is no longer needed.
  • Right to restriction – request limited processing under certain conditions.
  • Right to data portability – receive your data in a structured format.
  • Right to object – object to processing based on legitimate interest, including direct marketing.

To exercise your rights, contact us at info@yourweb.se.

You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Security and retention

We apply appropriate technical and organisational security measures. Unconfirmed newsletter requests are removed no later than seven days after the 48-hour link expires. Confirmed subscriptions are processed while active; the period after unsubscribe is stated above. Consented events in our own web statistics are pruned after at most 90 days when a new event is recorded. Contact emails and chats are kept while the enquiry or customer relationship needs handling; we review closed matters and delete them when no open contract, legal claim or statutory duty requires them. Accounting material is kept as required by law.

Third parties and transfers

We do not sell your personal data to third parties. Technical providers such as hosting, Resend and Intercom may process data on our behalf. Resend's primary processing takes place in the United States; transfers are covered by its Data Processing Addendum and EU Standard Contractual Clauses. Our Intercom workspace is EU hosted for Fin and Messenger; the provider's regional processing description and data processing terms describe further processing and subprocessors. Any transfer outside the EU/EEA requires appropriate GDPR safeguards.

Changes to this policy

We update this policy when necessary. The latest change date is shown at the bottom of the page. Visitors are informed of material changes through the website.

Last updated: 9 October 2026.