Privacy Policy
Last updated: 23 March 2026
This privacy policy describes how Corely ("we", "us") collects, uses and protects your personal data when you visit corely.se (the "Website").
1. Data controller
The data controller is:
Corely
Email: hello@corely.se
Contact us at the address above if you have questions about how we handle your personal data.
2. Data we collect
Contact details
If you contact us by email, we collect your email address and the content you send. This information is used solely to respond to your enquiry.
Analytics data
With your consent, we collect anonymised analytics data through Google Analytics 4 (pages visited and approximate session duration). This helps us understand how the Website is used and improve it. If you decline analytics cookies, no tracking events are recorded.
3. Lawful basis for processing
| Purpose | Lawful basis (GDPR Article 6) |
|---|---|
| Responding to contact enquiries | Legitimate interests — Article 6(1)(f) |
| Website analytics (Google Analytics) | Consent — Article 6(1)(a) |
4. Data processors
We share data with the following third-party providers:
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Hosting and edge functions | USA / EU |
| Google Analytics | Website analytics (with consent) | USA |
5. International data transfers
Google Analytics is based in the USA. When personal data is transferred outside the EU/EEA, we rely on standard contractual clauses (SCCs) approved by the European Commission.
6. Retention periods
| Data | Retention period |
|---|---|
| Email correspondence | Until the matter is closed, for a maximum of 2 years |
| Analytics events (Google Analytics) | 14 months (GA4 default) |
7. Your rights
Under the GDPR, you have the right to:
- Access — request a copy of the personal data we process about you.
- Rectification — ask us to correct inaccurate information.
- Erasure — ask us to erase your personal data (subject to legal obligations).
- Restriction — request that we restrict processing in certain circumstances.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — withdraw your consent to analytics cookies at any time using the "Cookie preferences" link in the footer. This does not affect the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact us at hello@corely.se. We will respond within 30 days.
8. Supervisory authority
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.
9. Changes to this policy
We may update this policy. The "Last updated" date at the top of the page shows when it was most recently revised.