Privacy Policy
This Privacy Policy explains how personal data is processed when you use this website (the “Site”). It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and Swedish practice under the supervision of the Swedish Authority for Privacy Protection (IMY).
1. Data controller
The data controller is the operator of this website. Full legal business information is available on the Legal Notice page where required by applicable law.
Privacy contact: privacy@sessaskye.com
2. What we collect and why
Contact form
If you send a message via the contact form, we process your name, email address, optional subject, and message content.
- Purpose: to read and reply to your enquiry (collaborations, media, questions, and similar).
- Legal basis: GDPR Art. 6(1)(f) legitimate interests (responding to voluntary enquiries), and where relevant Art. 6(1)(b) steps prior to entering into a contract.
- Retention: messages are kept for up to 24 months after receipt, unless a longer period is needed for an ongoing matter or legal obligation. You may ask us to delete a message earlier.
Technical and security logs
We process IP addresses and related technical information when necessary — including request URLs and error diagnostics in server or application logs — to keep the Site secure and reliable.
- Purpose: security, abuse prevention, troubleshooting.
- Legal basis: Art. 6(1)(f) legitimate interests.
- Retention: logs are kept only as long as needed for those purposes, then deleted or anonymised.
3. Cookies
We use strictly necessary cookies (session / CSRF protection). See our Cookie Policy for details. We do not use analytics or advertising cookies at this time.
4. Who receives your data
Personal data is stored on our hosting provider’s servers (e.g. Simply.com / UnoEuro in the EU/EEA or as stated by the provider). We do not sell your data. Access to contact messages is limited to the Site operator.
If we use additional processors in the future (for example payment providers when the member platform launches), this policy will be updated and, where required, appropriate agreements will be in place.
5. Transfers outside the EU/EEA
We aim to process data within the EU/EEA. If a transfer outside the EU/EEA becomes necessary, we will ensure appropriate safeguards under GDPR Chapter V.
6. Your rights
Under GDPR you may have the right to access, rectification, erasure, restriction, objection, and data portability, where applicable. To exercise these rights, contact privacy@sessaskye.com. You also have the right to lodge a complaint with IMY (imy.se) or another EU supervisory authority.
7. Children
The Site is intended for adults (18+). Do not submit personal data about children through the contact form. Age confirmation via the age gate is stored in a first-party cookie; see the Cookie Policy.
8. Future member platform
When memberships, chat, or payments are enabled, we will update this policy to describe account data, billing, and related processing before those features go live.
9. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be reflected on this page.
10. Contact
Questions about privacy: privacy@sessaskye.com. You can also use the contact form.