This Website Privacy Annex supplements the Master Privacy Policy and applies only to visitors of revorg.se. It describes the specific cookies, analytics, and contact-form handling used on this website.
Where this annex does not address a topic, the master Privacy Policy applies.
1. Cookies and Local Storage
The website uses the minimum set of cookies and browser storage required to operate the site and — only with your consent — to measure how the site is used.
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
revorg-consent | Local storage (essential) | revorg.se | Remembers your choice on the cookie banner so the banner does not appear again. | Until you clear browser site data for revorg.se. |
_ga | First-party cookie (analytics) | Google Analytics 4 (via gtag.js) | Identifies a returning visitor for aggregate usage statistics. Only set after you click “Accept” on the banner. | Up to two (2) years from the last visit. |
No advertising cookies, tracking pixels, or third-party trackers are used on the website.
2. Google Analytics 4
The website uses Google Analytics 4 (“GA4”), provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to understand aggregate visitor behaviour — for example, which pages are most read and whether visitors reach the contact form.
Strict consent gating. The GA4 library (gtag.js) is not loaded on page load. It is loaded only after you click “Accept” on the on-site consent banner. If you decline, no Google domain is contacted and no data leaves your device.
Data processed by GA4 (only if you accept):
- Anonymised IP address (IP anonymisation is enabled at collection via the
anonymize_ipflag) - Page paths visited and time on page
- Referrer (the page or site that linked to us)
- Device and browser metadata (type, OS, language, screen size)
- A randomised first-party identifier stored in the
_gacookie
Not processed: name, email, address, or any data you have not voluntarily submitted via the contact form (see Section 3 below). GA4 on this website is not configured with Google Signals, advertising features, or cross-device personalisation.
Legal basis: Consent — Article 6(1)(a) GDPR; Swedish Electronic Communications Act (LEK) Chapter 9, Section 28.
International transfer: GA4 data is transferred to Google in the United States. Google LLC participates in the EU–U.S. Data Privacy Framework and Revorg relies on this framework, supplemented by Google’s Standard Contractual Clauses, as the safeguard for this transfer. See Section 6 of the Master Privacy Policy for the general transfer framework.
Retention: The _ga cookie persists on your device for up to two years from your last visit, or until you clear site data. Aggregate GA4 reports are retained in Google’s systems for the period configured by Revorg (currently 14 months) and then deleted automatically.
3. Contact Form
The contact form on the website is submitted to Formspree (Formspree, Inc., 2261 Market Street #4274, San Francisco, CA 94114, USA), which acts as a processor on Revorg’s behalf for the sole purpose of relaying your message to Revorg by email.
Data processed when you submit the form:
- Name (if provided)
- Email address
- Company / organisation (if provided)
- The free-text content of your message
- Submission timestamp and the originating IP address (collected by Formspree for anti-spam)
Legal basis:
- Contractual / pre-contractual measures — Article 6(1)(b) GDPR, where your message concerns a potential or existing engagement;
- Legitimate interest — Article 6(1)(f) GDPR, in responding to general enquiries and operating the form securely (anti-spam).
A hidden honeypot field (website-url) is included for anti-spam purposes; it is not visible to legitimate users and submissions that fill it are silently discarded.
International transfer: Form data is transferred to Formspree, Inc. in the United States under Standard Contractual Clauses and Formspree’s stated security and DPA terms.
Retention: Messages are retained for as long as necessary to handle your enquiry and any resulting engagement, and thereafter as required by Swedish bookkeeping and tax legislation (typically seven (7) years for records that form part of a commercial relationship). General enquiries that do not lead to engagement are deleted within twenty-four (24) months.
No marketing use. Email addresses submitted via the contact form are not added to any newsletter or marketing list. We do not operate one.
4. How to Withdraw or Change Your Consent
You may change your mind at any time:
- Open your browser’s site-data settings for revorg.se.
- Clear cookies and site data for this domain.
- Reload the page. The consent banner will appear again and you can make a new choice.
Withdrawing consent does not affect the lawfulness of processing carried out while consent was in effect. After withdrawal, the GA4 library will no longer be loaded on subsequent visits, and the _ga cookie will not be re-set.
5. No Server-Side Logging Beyond Hosting
The website is delivered as static HTML from Wasmer Edge. Standard edge request logs (IP, user-agent, requested path, timestamp) are retained by the hosting provider for short-term operational and security purposes (typically up to 30 days) and are not used by Revorg for analytics. We do not operate our own server-side tracker.
6. Your Rights and How to Contact Us
Your rights — including access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with a supervisory authority — are described in Section 8 of the Master Privacy Policy.
For website-specific privacy questions, including requests to delete data submitted via the contact form, contact us at wecare@revorg.se.