Data controller
Skolshield AB, org. no. 559596-9287, is the data controller for the processing of personal data on this website. If you have questions about how we handle your data, or want to exercise your rights, contact us at info@skolshield.se.
What data we process
The contact form
When you send an enquiry via the contact form we process your name, email address, organisation (if provided) and your message. The data is used solely to answer your enquiry and is sent as an email to our mailbox, it is not stored in any database on the website. We keep the correspondence for as long as the matter requires.
The customer area
Existing customers sign in to the customer area with their Microsoft account. We then process the name and email address of the contact persons the customer has registered, along with the invoices and files shared there. This processing is carried out to fulfil the customer agreement.
Server logs
The web server logs IP addresses and technical information about requests. The logs are used for operations, troubleshooting and security (e.g. detecting abuse) and are purged continuously.
Cookies
The website uses no tracking, analytics or advertising cookies, and we share no visitor data with third parties. Only technically necessary cookies are used:
- Session cookie: signing in to the customer area
- CSRF cookie: protection against forged form submissions
- Language cookie: remembers whether the site is shown in Swedish or English
We keep visitor statistics with Umami on our own server in the EU: page views, referring site, country, browser type and which demo films are played. The collection is cookieless, the IP address is never stored, no individual visitor can be identified and the data never leaves our operation.
That is why there is no consent banner: under the Swedish Electronic Communications Act consent is required only for cookies that are not needed for the service you asked for, and there are none here. The same holds inside the Skolshield service itself, a session, CSRF and language cookie plus one that remembers your chosen colour theme, no tracking cookies and no visitor statistics on the schools' instances.
The demo environment
The demo at demo.skolshield.se and kommun-demo.skolshield.se is a shared trial environment with made-up schools, students and staff. You enter as a ready-made role and do not have to tell us anything about yourself, and what you type can be seen by other visitors until the environment is rebuilt every night. So never enter real personal data there.
The demo stores no IP address, browser details or location about you in its database, nor in the log that in a school's Skolshield shows who opened what. The web server's logs are handled as for the website above.
On the demo we keep the same cookie-free visitor statistics with Umami as on the website, to see which parts visitors try. If you choose a guided tour, a cookie is also set for 90 days that remembers how far you got and the choices you made in the tour, so the next chapter can build on them. It holds nothing about you as a person.
If you would like us to get in touch, you can choose to leave your e-mail address in the demo. We then store the address, the role and the school or municipality you state, what you consented to (contact about the service, giving your views on the product, or both) and when. The details are not stored in the demo. They are sent to our website, where they are stored and passed on as an e-mail to our mailbox. We use them only for what you ticked and keep them until you withdraw your consent, at most 24 months. You withdraw it by writing to info@skolshield.se.
Legal basis
- Contact form and server logs: legitimate interest: answering enquiries and keeping the website secure (Art. 6(1)(f) GDPR)
- Customer area: performance of the agreement with the customer (Art. 6(1)(b) GDPR)
- The demo and its visitor statistics: legitimate interest, letting visitors try the product and seeing which parts are used (Art. 6(1)(f) GDPR)
- Contact details you choose to leave in the demo: consent (Art. 6(1)(a) GDPR)
Recipients and storage location
We never sell personal data and do not share it with third parties for marketing. The providers that process data on our behalf are:
- Hetzner (EU): server hosting, with storage within the EU
- Microsoft 365: email and customer-area sign-in, with data storage within the EU
Your rights
You have the right to request access to, rectification of or erasure of your personal data, to object to or request restriction of the processing, and to receive a copy of your data. Contact us at info@skolshield.se and we will help you.
If you are unhappy with how we process your data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
This policy may be updated as the website evolves, significant changes are published on this page. Last updated: 13 November 2026.