Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for the processing of your personal data is:

Tacticethau
Hå Kursgård 1, 341 75 Hamneda, Sweden
Phone: +46 372 550 63
Email: ask@tacticethau.world

2. What Data We Collect

We may collect and process the following categories of personal data:

  • Contact information: name, email address, and message content when you submit our contact form.
  • Usage data: information such as IP address, browser type, device type, pages visited, time spent on pages, and referral source, which may be collected through cookies and similar technologies when such tools are active and permitted by your choices.
  • Consent records: records of the consent you provide through our cookie banner and contact form.

3. Purposes of Processing

We process your personal data for the following purposes:

  • To respond to your inquiries submitted through the contact form.
  • To ensure the proper functioning of our website (strictly necessary cookies).
  • To analyze website traffic and usage patterns (analytics cookies, with your consent).
  • To deliver relevant content and measure campaign effectiveness (marketing cookies, with your consent).
  • To comply with legal obligations.

4. Legal Basis for Processing

We process your data based on the following legal grounds under the General Data Protection Regulation (GDPR):

  • Consent (Art. 6(1)(a) GDPR): when you submit the contact form or accept optional cookies.
  • Legitimate interest (Art. 6(1)(f) GDPR): for website security and essential functionality.
  • Legal obligation (Art. 6(1)(c) GDPR): where we are required to retain data by law.

5. Categories of Recipients

Depending on how you use the Website, your personal data may be disclosed to or processed by:

  • Our authorised personnel who need access to handle inquiries or operate the Website.
  • Processors engaged by us (such as hosting, email transmission, or IT security providers), who may process data only on documented instructions and subject to appropriate confidentiality and security obligations under the GDPR.

We do not sell your personal data.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described above:

  • Contact form data: retained for up to 12 months after responding to your inquiry, unless a longer retention period is required by law.
  • Cookie, analytics, and similar usage data: where such tools are used with your consent, typically for up to 26 months from collection, in line with the relevant provider’s settings unless a shorter period applies.
  • Consent records: retained for as long as required to demonstrate compliance, typically up to 3 years.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: you can request a copy of your personal data we hold.
  • Right to rectification: you can request correction of inaccurate or incomplete data.
  • Right to erasure: you can request deletion of your data when there is no compelling reason for continued processing.
  • Right to restrict processing: you can request that we limit how we use your data.
  • Right to data portability: you can request your data in a structured, commonly used, machine-readable format, where processing is based on consent or contract and carried out by automated means.
  • Right to object: you can object to processing based on legitimate interests, including profiling based on those interests.
  • Right to withdraw consent: where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you in relation to the services described on this Website.

To exercise any of these rights, contact us at ask@tacticethau.world. We will respond without undue delay and in any event within one month, which may be extended by two further months where necessary under Article 12(3) GDPR; if we extend the time limit, we will inform you of the reasons.

Providing contact details through the contact form is voluntary; without them we cannot respond to your message via the form.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • HTTPS encryption for all data transmitted between your browser and our website.
  • Access controls to limit who can view personal data.
  • Regular reviews of our data collection and processing practices.

9. Third-Party Services and Data Sources

We may use third-party services for analytics, advertising measurement, or functionality. Where such providers process personal data on our behalf, we use processors that offer sufficient guarantees and, where required, a data processing agreement under Article 28 GDPR. Where they act as independent controllers (for example certain advertising or analytics platforms), their privacy notices apply in addition to this policy. Purposes and storage technologies are described in our Cookie Policy.

We obtain personal data directly from you when you use the contact form or interact with the Website, and indirectly through cookies or similar technologies where you have consented.

10. International Data Transfers

If your data is transferred to countries outside the European Economic Area (EEA) that are not subject to an adequacy decision by the European Commission, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other mechanisms permitted under Chapter V GDPR.

11. Personal Data Breaches

If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the supervisory authority without undue delay and, where required by the GDPR, communicate the breach to you without undue delay.

12. Children

The Website is not directed at children, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete such information.

13. Complaints and Supervisory Authority

Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

In Sweden, the supervisory authority is:

Integritetsskyddsmyndigheten (IMY)
Box 8114, 104 20 Stockholm, Sweden
Website: www.imy.se

14. Swedish Supplementary Legislation

In addition to the GDPR, processing of personal data in Sweden is subject to national rules complementing the GDPR, including the Swedish Data Protection Act (lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning). Certain provisions concern, among other things, processing in relation to freedom of expression and research where applicable.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

16. Contact Us

For any questions or concerns regarding this Privacy Policy or your personal data, contact us at:

Tacticethau
Hå Kursgård 1, 341 75 Hamneda, Sweden
Email: ask@tacticethau.world
Phone: +46 372 550 63