Privacy Policy

Dario Dario ("we", "us", "our") respects your privacy. This policy explains how we collect, use, and protect personal data in accordance with the EU General Data Protection Regulation (GDPR) and Swedish law.

1. Data controller

Dario Dario
Östermalmsgatan 26A, 114 26 Stockholm, Sweden
Company reg.: 559576-4415
Email: hello@dariodario.com

2. What we collect

• Contact. When you email us or submit a form: name, email, company, and the message you send.
• Newsletter. If you subscribe: email address and the time of signup.
• Client portal. If you log in: email, authentication data, and session information.
• Technical data. Logs, IP address, browser type, and approximate location, to operate and secure the service.
• Analytics. Aggregated usage statistics via Google Analytics 4 — pageviews, referrer, device type, and approximate location based on anonymized IP.
• Visiting organizations. IP addresses from corporate networks are matched against a company database via Instantly to identify the organization visiting — not individual people.

3. Purposes and legal basis

• Responding to inquiries — legal basis: legitimate interest and, where applicable, contract.
• Sending the newsletter — legal basis: consent, which you may withdraw at any time.
• Providing the client portal — legal basis: contract.
• Security, operations, and improvement — legal basis: legitimate interest.
• Legal obligations — e.g. accounting and tax law.

4. Recipients and processors

We share data with vendors who process it on our behalf under data processing agreements. Current subprocessors include:

• Cloudflare (hosting, CDN, security)
• Supabase (database and authentication)
• Google (OAuth sign-in and Google Analytics)
• Instantly (B2B visitor identification)
• Email service provider for outbound and support

5. Transfers outside the EEA

Some vendors may process data outside the EEA. Where this happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision (e.g. the EU-US Data Privacy Framework).

6. Retention

We retain data only as long as necessary for the stated purpose: inquiries up to 24 months, newsletter subscriptions until you unsubscribe, client accounts for the duration of the engagement, and financial records per Swedish bookkeeping law (typically 7 years).

7. Your rights

You have the right to:

• access the data we hold about you,
• request correction of inaccurate data,
• request erasure ("the right to be forgotten"),
• request restriction of processing,
• object to processing based on legitimate interest,
• request data portability,
• withdraw consent at any time.

You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

8. Cookies and analytics tools

We use only the cookies and trackers needed to operate the site, understand usage, and identify visiting companies. No advertising or profiling cookies are set.

• Strictly necessary. Session and language preference (e.g. dd_intl). Required for the site to function.
• Google Analytics 4. Aggregated usage statistics. Sets _ga and _ga_*. IPs are anonymized. Data is processed by Google LLC in the US under the EU-US Data Privacy Framework. Legal basis: legitimate interest. You can opt out via Google's opt-out or in your browser.
• Instantly. Identifies visiting organizations — not individuals — by matching IP addresses against a company database. Used for B2B outbound. Legal basis: legitimate interest following a balancing test. You can object by emailing us.

9. Changes

We may update this policy. The latest version is always published here, with the date at the top.

10. Contact

Questions about this policy or how we handle your data? Email us at hello@dariodario.com.