Privacy Policy
Effective Date: 01-02-2025 Last Updated: 02-02-2025
Kulan (https://villakulan.eu
) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights under GDPR. By using this website, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Who We Are
This website (https://villakulan.eu
) is operated by Dennis & Amalie, based in Sweden. For any privacy-related questions, you can contact us at: dennis@villakulan.eu
2. Data We Collect and Why
We only collect personal data necessary to operate our website and services. The types of data we collect include:
a) Information You Provide Directly
We collect personal information when you:
- Subscribe to our newsletter (email address).
- Leave a comment on blog posts (name, email, IP address).
- Contact us via contact forms (email, message).
b) Automatically Collected Information
When you visit our site, some information is automatically collected:
- IP address (for security & spam protection).
- Browser type & settings (to optimize site performance).
- Page visit duration & clicks (to improve content).
c) Cookies & Tracking
We do NOT use tracking cookies (Google Analytics, Facebook Pixel, etc.). Our website only uses essential cookies for login sessions and security.
3. Legal Basis for Processing Data (GDPR)
We process personal data under the following legal bases:
- Consent (Article 6(1)(a) GDPR) – When you subscribe to the newsletter.
- Legitimate Interest (Article 6(1)(f) GDPR) – To protect our website from spam & improve content.
- Contract (Article 6(1)(b) GDPR) – If you register as a user.
- Legal Obligation (Article 6(1)(c) GDPR) – If required by law (e.g., fraud prevention).
4. Third-Party Services That Process Data
We use trusted third-party providers to operate our website securely:
a) Mailgun (Email Services)
- Purpose: Sending newsletters & transactional emails
- What data is processed: Email addresses of newsletter subscribers
- Data storage location: European Union (EU region)
- Privacy Policy: https://www.mailgun.com/privacy-policy/
- Data Processing Agreement (DPA) Available: Yes
- All email data is processed within the EU and is not transferred to third countries.
b) Cloudflare (Security & Performance)
- Purpose: Protecting our website from DDoS attacks & improving speed
- What data is processed: IP addresses for security reasons
- Privacy Policy: https://www.cloudflare.com/gdpr/
- Data Processing Agreement (DPA) Available: Yes
- Cloudflare only processes data for security purposes and does not track users.
We do NOT sell or share personal data with third parties for marketing.
5. Your GDPR Rights
If you are in the EU/EEA, you have the right to:
- Access – Request a copy of your personal data.
- Rectification – Correct any inaccurate data.
- Erasure ("Right to be Forgotten") – Request deletion of your data.
- Restrict Processing – Limit how your data is used.
- Data Portability – Request your data in a machine-readable format.
- Object to Processing – Opt-out of data collection in certain cases.
To exercise these rights, email dennis@villakulan.eu. We will respond within 30 days as required by GDPR.
6. Data Retention Policy
We only keep your personal data for as long as necessary:
- Newsletter Subscribers: Until you unsubscribe.
- Comments: Stored indefinitely unless you request removal.
- Contact Form Messages: Deleted after 6 months unless needed for legal reasons.
You can request deletion at any time.
7. Data Transfers
We do not transfer personal data outside the EU. All data related to email processing (Mailgun) is stored and processed within the European Union (EU region).
8. How We Protect Your Data
We take appropriate technical measures to protect your data, including:
- SSL encryption on all website traffic.
- Regular security updates to prevent vulnerabilities.
- No third-party tracking (no Google Analytics, Facebook Pixel, etc.).
9. Supervisory Authority for GDPR Complaints
If you believe we have not handled your data properly, you can file a complaint with:
Swedish Data Protection Authority (Integritetsskyddsmyndigheten – IMY) https://www.imy.se/ imy@imy.se Box 8114, 104 20 Stockholm, Sweden
10. Changes to This Privacy Policy
We may update this policy. If changes are significant, we will notify you via email or a notice on our website.
11. Contact Information
If you have any questions about this Privacy Policy, you can contact us at: