In short

  • Controller: Glänne & Söner, a Swedish sole trader owned by Mikael Glännström.
  • Where data goes: hosting on Cloudflare Pages, bookings via Cal.com, analytics via Google Analytics – the last two only with your consent.
  • Health data: quiz results, mood log and similar are stored only in your browser and deleted automatically after 30 days.
  • Your rights: access, correction, deletion, data portability, objection, and withdrawing consent at any time.

This page is an English summary, not a legal document. The Swedish privacy policy and cookie page are the binding versions. If anything on this page differs from those, the Swedish text applies.

Who is responsible, and how to contact us

Glänne & Söner (a Swedish sole trader, organisation number 771110-5655), owned by Mikael Glännström, is the data controller for the personal data processed on CoachOnline.se.

If you have questions about how we handle your data, email kontakt@coachonline.se. You can also use the contact page (in Swedish).

What data we collect

We may collect the following types of personal data.

Data you give us

  • Contact form: name, email address, message.
  • Newsletter: email address.
  • Booking: name, email address, phone number (via Cal.com).

Data collected automatically

  • Technical data: IP address, browser type, operating system.
  • Usage data: pages visited, time on page, clicks – only with your consent.
  • Cookies and local storage: see the cookies section below.

Why we use your data, and the legal basis

We use your personal data to:

  • Answer questions and enquiries.
  • Book and carry out coaching sessions.
  • Send a newsletter, if you subscribe to one.
  • Improve the website and our services.
  • Meet our legal obligations.

We rely on the following legal bases:

  • Consent: for the newsletter and analytics tools.
  • Contract: to carry out a service you have ordered.
  • Legitimate interest: to improve our services.
  • Legal obligation: for bookkeeping and tax purposes.

Who receives your data

We never sell your personal data. We may share data with:

  • Cloudflare Pages (hosting): processes technical data such as your IP address and browser type in order to deliver the site and protect it against attacks. This is based on legitimate interest and does not require consent.
  • Cal.com (booking): handles booking details (name, email, phone). A data processing agreement is in place. Servers are located in the EU/US, covered by the EU's Standard Contractual Clauses.
  • Google Analytics: an analytics tool that only runs with your consent, with IP anonymisation switched on. Google processes the data as our processor; some data may be transferred to Google LLC in the US under the EU's Standard Contractual Clauses.
  • Web3Forms: delivers messages from the contact and newsletter forms to us (name, email address, message). Used only to pass your enquiry on to us.
  • Email provider: to send the newsletter.
  • Authorities: where we are required to by law.

How long we keep your data

We keep personal data only for as long as necessary:

  • Contact enquiries: 2 years.
  • Booking data: 7 years (bookkeeping requirement).
  • Newsletter: until you unsubscribe.
  • Analytics cookies: 26 months.
  • Health data (quiz results, mood log, thought diary): 30 days, deleted automatically.
  • Crisis plan: kept until you delete it yourself.
  • Functional preferences: 1 year.
  • Consent preferences: 1 year.

Children

CoachOnline.se is aimed at adults. The service is not intended for children under 16, and we do not knowingly collect personal data from children under 16. If you are under 16, you need a guardian's consent before booking a session or submitting personal data through our forms. If you are a parent or guardian and believe a child has given us data, contact us and we will delete it.

Your rights

Under GDPR you have the right to:

  • Access: find out what data we hold about you.
  • Rectification: correct inaccurate data.
  • Erasure: have your data deleted.
  • Restriction: limit how we use your data.
  • Data portability: receive your data in a machine-readable format.
  • Objection: object to certain processing.
  • Withdrawing consent: withdraw any consent you have given, at any time.

To exercise these rights: data stored locally in your browser can be viewed, exported and deleted using the data management tool (in Swedish). For data stored on our servers, contact us by email or via the contact form (in Swedish).

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. The website uses HTTPS for secure data transfer.

How to complain

If you believe we are processing your personal data incorrectly, you have the right to lodge a complaint with Integritetsskyddsmyndigheten (the Swedish Authority for Privacy Protection), known as IMY: www.imy.se.

Cookies and local storage

Cookies are small text files saved on your device when you visit a website. We also use localStorage, which keeps larger amounts of data only in your browser; unlike a cookie, it is never read by our servers and never sent anywhere.

You choose which categories of cookies and local storage we may use. These are the same four categories shown in the consent banner:

Necessary (always on)

Required for the website to work, including remembering your consent choices. These cannot be turned off.

Statistics (requires consent)

Google Analytics, used to understand how visitors use the site, with IP anonymisation switched on. This category also covers campaign attribution: if you arrive via an advert or a newsletter link, the campaign tags in that link are kept in your browser's session storage so we can see which campaigns lead to bookings. They are deleted automatically when you close the tab, contain no data that identifies you personally, and are not stored at all unless you consent to this category.

Functional (requires consent)

Enables booking via Cal.com, saved articles, dark mode and other preferences.

Personalisation / Health data (requires explicit consent)

This category includes sensitive health data under GDPR Article 9, such as quiz results, your mood log, your thought diary and the crisis plan you can fill in on the crisis plan page (in Swedish). All of this data is stored only in your browser and deleted automatically after 30 days. It is never sent to our servers.

One exception: your crisis plan stays until you delete it yourself. A safety plan should still be there the day you need it, so it is not covered by the 30-day rule. You can delete it at any time, either with the button on the crisis plan page or via the data management tool (in Swedish). If you have not consented to this category, the crisis plan is not saved at all – you can still fill it in and print it.

Changing your settings

You can change your consent choices at any time via Privacy settings in the footer of every page, or with the button below.

Manage my data (in Swedish)

For the full technical list of cookie and storage names, purposes and exact durations, see the Swedish cookie page.

Struggling right now? In an emergency, call 112. Mind Självmordslinjen (the suicide helpline) is open 24 hours a day: 90101. For medical advice, call 1177 – in some regions you can get help in English.