Privacy Policy

Last updated: 11 October 2026

This policy explains what personal data is processed when you visit hellsoft.se or any site under a *.hellsoft.se subdomain (together, “the Sites”), why it is processed, and what rights you have. It applies to every site and web app we publish under this domain unless that site shows its own, more specific policy.

Who is responsible

The data controller for the Sites is:

Hellman Software AB
Stockholm, Sweden
Email: erik.hellman@hellsoft.se

We are a small company. There is no data protection officer; please direct any questions to the address above.

The short version

• We do not run our own analytics, trackers or user accounts on the Sites.
• The Sites are static pages served by a hosting provider, which keeps ordinary server logs.
• Some Sites show advertising from Google AdSense. Where ads are shown, Google and its partners may set cookies and process identifiers to serve and measure ads. In regions where the law requires it, you will be asked for consent before any advertising cookies are set.
• If you email us, we keep the correspondence for as long as the conversation and any resulting work require.

What data is processed, and why

1. Server logs (all Sites)

The Sites are hosted on GitHub Pages, operated by GitHub, Inc. When your browser requests a page, GitHub’s servers receive and may temporarily log your IP address, the page requested, the time of the request, your browser type and the referring page. This is standard for any website and is needed to deliver the pages and to protect against abuse.

• Legal basis: legitimate interest (Article 6(1)(f) GDPR) in serving the Sites securely.
• Retention: determined by GitHub. We do not receive or store these logs ourselves.
• More information: GitHub Privacy Statement.

2. Web fonts (all Sites)

The Sites load typefaces from Google Fonts. To deliver a font file, Google receives your IP address and basic browser information. Google states that it does not use Fonts requests for profiling or advertising.

• Legal basis: legitimate interest (Article 6(1)(f) GDPR) in consistent presentation of the Sites.
• More information: Google Fonts privacy and data collection.

3. Advertising via Google AdSense (some Sites)

Some Sites display advertisements served by Google AdSense, operated by Google Ireland Limited for users in the European Economic Area. Google and its advertising partners may:

• set and read cookies and similar identifiers in your browser,
• process your IP address and device and browser information,
• use that data to select, deliver and measure advertisements, including personalised advertising where you have consented.

Consent. In the EEA, the United Kingdom and Switzerland, you will see a consent prompt before any advertising cookies are set. You can choose non-personalised ads or decline, and you can change your choice later through the link in the site footer or by clearing your browser’s cookies.

Your controls. You can manage how Google personalises ads at Google Ads Settings, and opt out of interest-based advertising from many networks at youronlinechoices.eu or aboutads.info.

• Legal basis: your consent (Article 6(1)(a) GDPR) for personalised advertising and advertising cookies; legitimate interest for strictly necessary processing such as fraud prevention and basic ad delivery.
• More information: How Google uses information from sites that use its services and Google’s advertising cookie types.

4. Email contact

If you write to us, we process your name, email address and whatever you include in the message in order to reply and, where relevant, to prepare or deliver work you have asked about.

• Legal basis: legitimate interest in answering your enquiry (Article 6(1)(f) GDPR), and performance of a contract or pre-contractual steps where the conversation concerns an engagement (Article 6(1)(b) GDPR).
• Retention: for as long as the correspondence is relevant. Correspondence that forms part of a business relationship is kept as required by Swedish accounting law.

Cookies

hellsoft.se itself sets no cookies. Sites that show AdSense advertising use cookies set by Google and its partners as described in section 3 above, and only after consent where consent is required. We do not use any other cookies, local storage or fingerprinting techniques for tracking.

Who receives your data

We do not sell personal data. Data is shared only with the service providers named in this policy, who process it to provide their services:

Transfers to the United States rely on the EU–US Data Privacy Framework and, where applicable, the European Commission’s Standard Contractual Clauses.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you,
• rectify inaccurate data,
• erase your data in certain circumstances,
• restrict or object to processing based on legitimate interest,
• withdraw consent at any time, without affecting processing that took place before withdrawal,
• data portability for data you provided to us,
• lodge a complaint with a supervisory authority.

To exercise any of these rights, email erik.hellman@hellsoft.se. In practice, the only personal data we hold ourselves is email correspondence; data processed by Google or GitHub is best addressed through the controls linked above.

The supervisory authority in Sweden is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se. You may also complain to the authority in the EU country where you live or work.

Children

The Sites are not directed at children under 16, and we do not knowingly collect personal data from them. Google’s advertising on the Sites is configured not to serve personalised ads to users Google identifies as under the age of consent.

Changes to this policy

We may update this policy when the Sites change or when the law requires it. The date at the top shows when it was last revised. Substantive changes will be reflected here; we do not notify visitors individually.