Privacy Policy — maca.se

Version: 3.0

Last updated: 2026-06-28

Applies to: maca.se (https://maca.se/)

1. Introduction

We respect your privacy. This policy describes what personal data we process, why, on what legal basis, retention, recipients, and your rights.

This policy explains how maca.se («we», «us») processes personal data when you visit or use our website, in accordance with:

Regulation (EU) 2016/679 (GDPR)
Applicable national data protection law in your country
EPrivacy rules on cookies and similar technologies (see our cookie policy)

2. Data controller

| | |

|—|—|

| Organization | maca.se |

| Website | https://maca.se/ |

| Privacy contact | web@maca.se |

The controller determines purposes and means of processing. We may use processors (hosting, email, analytics) under contracts and instructions.

3. Scope

This policy applies to visitors, customers, and others interacting with the website.

4. What data we process

We only process personal data that is adequate, relevant, and necessary for the purposes below. Processing identified on this website based on installed extensions and integrated services is listed per activity.

Web server and operational logs

Data: IP address, timestamp, URL, browser, referrer
Purpose: Operation, troubleshooting, and security
Legal basis: Legitimate interest (GDPR Art. 6(1)(f))
Retention: Hosting provider — typically 30–90 days in access logs
Recipients: Hosting provider
Transfer outside EU/EEA: May occur depending on server location

Comments

Data: Name, email, IP address, comment text
Purpose: Publish and moderate comments
Legal basis: Legitimate interest (GDPR Art. 6(1)(f))
Retention: As long as the comment remains on the site
Recipients: Hosting provider

Fluent Support

Source: Fluent Support
Data: Namn, e-post, ärendetitel, meddelanden, bilagor, status, ev. kund-ID och teknisk metadata (IP, webbläsare)
Purpose: Hantera kundsupportärenden och spara konversationer i supportsystemet
Legal basis: Legitimate interest (GDPR Art. 6(1)(f))
Retention: Så länge ärendet är aktivt och därefter enligt plugin-inställningar (normalt upp till 24 månader)
Recipients: Webbplatsens supportpersonal
Transfer outside EU/EEA: Lagras i WordPress-databasen på ert webbhotell; kan förekomma vid e-postintegrationer
Vendor privacy policy: https://fluentsupport.com/privacy-policy/

maca DownList

Source: maca DownList
Data: E-post och ev. namn vid e-postgrind, nedladdningslogg (fil, tidpunkt, IP-adress kan loggas)
Purpose: Tillhandahålla filnedladdningar och spåra nedladdningar enligt sajtägarens inställningar
Legal basis: Legitimate interest (GDPR Art. 6(1)(f))
Retention: Nedladdningslogg enligt plugin-inställningar; e-postgrind-session tillfälligt
Recipients: Webbplatsens personal
Transfer outside EU/EEA: Behandlas normalt inom EU/EES via ert webbhotell

Google Site Kit

Source: Site Kit by Google
Data: Webbstatistik och sökdata beroende på aktiverade Google-tjänster (Analytics, Search Console m.m.)
Purpose: Statistik, sökordsanalys och webbplatsoptimering
Legal basis: Consent (GDPR Art. 6(1)(a))
Retention: Enligt respektive Google-tjänst — se Googles dokumentation
Recipients: Google LLC
Transfer outside EU/EEA: Kan innebära överföring till USA beroende på tjänst
Vendor privacy policy: https://policies.google.com/privacy

WPForms

Source: WPForms Lite
Data: Formulärinnehåll enligt konfigurerade fält
Purpose: Samla in förfrågningar, bokningar eller registreringar
Legal basis: Legitimate interest (GDPR Art. 6(1)(f))
Retention: Enligt plugin-inställningar och intern gallringsrutin
Recipients: Webbplatsens personal
Transfer outside EU/EEA: Kan förekomma om WPForms molntjänster används
Vendor privacy policy: https://wpforms.com/privacy-policy/

Forms on the website

Fluent Support — ärendeportal — fields: namn, e-post, ämne, meddelande, bilagor, ärendehistorik
maca DownList e-postgrind — fields: e-post, ev. namn
WPForms — fields: fält enligt konfigurerat formulär

Required form fields are needed to handle your request or order.

Support pages and ticket handling

This website provides support pages or a ticket portal where you can submit requests. Information you provide there (e.g. name, email, messages, and attachments) is stored so we can handle and follow up on your case.

Ticket data is typically stored in the site database (WordPress) or a connected support tool until the case is closed and per our internal retention routine.

Detected support pages:

Support tools:

Fluent Support (Fluent Support)

You may request access, correction, or deletion of data in your support tickets by contacting us.## 5. Sources of data

We collect data from you directly (forms, orders, accounts) and automatically (logs, cookies per your consent). Partners may provide data for orders.

6. Legal bases

Each processing activity must have a valid legal basis under GDPR Article 6:

Legal bases

Legitimate interest (Art. 6(1)(f)) — security, operations, spam protection, responding to inquiries, after balancing interests.
Consent (Art. 6(1)(a)) — optional cookies, newsletters, marketing where consent is required. You may withdraw at any time.

7. Retention

We retain personal data only as long as needed for the purpose or as required by law, then delete or anonymize securely.

8. Recipients and processors

Data may be shared with hosting, CDN, email, payment, analytics, and support providers under processor agreements.

9. Cookies and similar technologies

Necessary cookies may be stored without consent. Non-essential cookies (e.g. statistics and marketing) are enabled only after your consent via our cookie banner.

See our cookie policy for the full list and consent management.

10. Transfers outside the EU/EEA

Some providers may process data outside the EU/EEA. This occurs only with a valid transfer mechanism.

We rely on EU Standard Contractual Clauses, supplementary measures, and adequacy decisions where applicable.

11. Security

We implement appropriate technical and organizational measures under Art. 32 GDPR.

12. Automated decision-making

We generally do not use automated decision-making or profiling with legal or similarly significant effects.

AI systems and transparency

This website uses AI-based tools (e.g. chatbot or content generation). Data you submit to these features may be processed by an external AI provider. We describe the purpose, provider, and your rights in the table above. Under the EU AI Act, certain AI systems must be transparent — if a system is classified as high-risk, we follow requirements for information and human oversight.

13. Your rights

You have the following rights when we process your personal data:

Your rights

Right of access (Art. 15)
Rectification (Art. 16)
Erasure (Art. 17)
Restriction (Art. 18)
Objection (Art. 21)
Data portability (Art. 20)
Withdraw consent (Art. 7(3))
Lodge a complaint with a supervisory authority (Art. 77)

To exercise your rights, contact us at web@maca.se.

We respond without undue delay and within one month (extendable by two months for complex requests under Art. 12(3)).

Supervisory authority

You may lodge a complaint with your local data protection authority if you believe processing violates GDPR.

14. Children

This website is not directed at children under 16. We do not knowingly collect children's data without parental consent.

15. Changes

We may update this policy when the website, tools, or legal requirements change.

Manual review

The following plugins are active but lack detailed policy text — review manually:

AI Provider for OpenAI (ai-provider-for-openai)

All-in-One WP Migration and Backup (all-in-one-wp-migration)

Easy Updates Manager (stops-core-theme-and-plugin-updates)

Fluent Forms (fluentform)

JetBackup (backup)

Maca Co (maca-co)

maca Licensserver (maca-licensserver)

maca Njuvs (maca-njuvs)

Maca Sec (maca-sec)

Maca Tjatt (maca-tjatt)

maca-MediaList (maca-medialist)

Maintenance (maintenance)

Plugin Check (PCP) (plugin-check)

Post SMTP (post-smtp)

SVG Support (svg-support)

W3 Total Cache (w3-total-cache)

Privacy Policy