Privacy policy

Summary

• We set no cookies, and we do not track you across websites, build profiles or show advertising.
• We count visits with Cloudflare Web Analytics, a cookie-less service that gives us aggregated statistics.
• As with any website, our hosting provider keeps server logs to deliver the site and keep it secure.
• If you email us, we use your details to answer you.
• We never sell personal data.

Who is responsible

Gaetir AB is the controller of the personal data described in this policy.

What we process, why, and on what legal ground

Server logs

Our website is hosted by Hostinger, which also runs a content delivery network in front of it. As with any website, the hosting provider’s servers process your IP address, your browser type, the pages you request and the time of each request. They record this in server logs. This is needed to deliver the website to you and to keep it secure.

Visit statistics

We use Cloudflare Web Analytics, a service of Cloudflare, Inc., to count visits. It reports the page you visited, the website that referred you, your country, your type of device, your browser and operating system, and how fast the page loaded.

It does not use cookies. Cloudflare states that the service does not use client-side state, such as cookies or local storage, and does not fingerprint visitors through their IP address or user agent.

To send these statistics, your browser loads a small script from Cloudflare. The script reads the address of the page, the page that referred you, the version of your browser and operating system, and loading times from your browser, and sends them to Cloudflare. Like any web request, this request carries your IP address. Cloudflare states that it discards the IP address and does not store it in its databases or logs. We see only aggregated statistics, never individual visitors.

Our legitimate interest is to know how many visits the website gets, where visitors come from and how fast the pages load, so that we can improve the website.

Emails you send us

There is no contact form on this website. You can contact us only by email, for example through the “Book a pilot” links.

When you email us, we process your name, your email address, your organisation if you give it, and the content of your message. Our email runs on Microsoft 365, a service of Microsoft.

We use your details to answer your enquiry. If you ask for a pilot or an offer, we also use them to take the steps you ask for before a contract is made.

Search statistics

We use Google Search Console and Bing Webmaster Tools. They show us aggregated statistics about the searches that lead people to our website. They rely on data that the search engines collect on their own services, and they add nothing to the pages of gaetir.com.

We do not make automated decisions about visitors, and we do not sell personal data.

Cookies

gaetir.com sets no cookies. It does not use local storage, session storage or any other way to store information in your browser.

Our visit counter, Cloudflare Web Analytics, works without cookies and stores nothing on your device. Its script reads the information described under “Visit statistics” above from your browser and sends it to Cloudflare, which turns it into aggregated statistics for us.

We do not show a cookie consent banner. The website stores nothing on your device, and the script reads only that information, to count visits and to measure how fast pages load.

If we ever start using cookies that are not strictly necessary, we will update this notice and ask for your consent first.

Your browser may keep copies of files from our website, such as images and fonts, in its normal cache so that pages load faster. This cache is not used to identify anyone.

Who receives the data

We use these service providers. They process the data on our behalf under their data processing terms.

• Hostinger: hosting and content delivery for the website.
• Cloudflare, Inc.: visit statistics (Cloudflare Web Analytics).
• Microsoft: email (Microsoft 365).

Cloudflare’s terms also allow it to use data derived from the traffic on its network for its own purposes, such as providing and improving its services. For that processing, Cloudflare is itself a controller. See Cloudflare’s privacy policy.

We do not share personal data with anyone else unless the law requires it.

Transfers outside the EU/EEA

Cloudflare processes the visit statistics in the United States and in other countries where it has data centres. Our other providers may also process data outside the EU/EEA.

For Cloudflare, the transfer to the United States relies on the European Commission’s adequacy decision for the EU–US Data Privacy Framework (Implementing Decision (EU) 2023/1795). Cloudflare, Inc. is certified under that framework. If the decision or the certification stops applying, the European Commission’s standard contractual clauses apply instead. Those clauses, and the terms for transfers to other countries, are in Cloudflare’s data processing addendum. You can check the certification in the Data Privacy Framework list.

For our other providers, a transfer outside the EU/EEA relies on a decision by the European Commission that the country ensures an adequate level of protection, such as the EU–US Data Privacy Framework for certified companies, or on the European Commission’s standard contractual clauses.

To get a copy of the safeguards for a transfer, email us at hello@gaetir.com.

How long we keep it

• Server logs are kept for a limited period set by our hosting provider.
• Visit statistics: Cloudflare states that it keeps the full data for each page view for 7 days and then reduces it to a sample of about 10%. We can see statistics for the previous six months.
• Emails are kept for as long as we need them to handle your enquiry and any business relationship that follows. We delete them when they are no longer needed, unless the law requires us to keep them, for example under accounting rules.

Your rights

Under the GDPR, you have the right to:

• get access to the personal data we hold about you;
• have incorrect personal data corrected (rectification);
• have your personal data erased;
• have the processing of your personal data restricted;
• receive personal data you have given us in a structured, machine-readable format (data portability), where this right applies.

To use your rights, email us at hello@gaetir.com.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), or with the data protection authority in the EU country where you live or work. IMY’s website is www.imy.se.

Links to other websites

Our website links to other websites, such as LinkedIn and the websites of our customers and partners. When you follow such a link, that website’s own privacy policy applies.

The Gaetir service

This policy covers the website gaetir.com only. How Gaetir handles email data in the Gaetir service on behalf of customers is governed by the agreements between Gaetir and its customers and partners, not by this policy.

Changes to this policy

When something changes, we update this page and the “Last updated” date at the top.