Privacy

Controller

Legal entity

Aktiebolaget Grundstenen 179519

Organisation number

559597-3636

Registered seat

Stockholm

Email

contact@tyruos.com

The company identified above is responsible for the processing described here.

Questions about personal data can be sent to contact@tyruos.com.

Enquiries

When you send the form, we process your name, email address, selected project area, language, source page, submission time and the problem you describe. If supplied, we also process your company and information about your current environment. If you email us directly, we process your email address and the content and technical metadata of your message. Sending the form is voluntary, but we cannot handle a form enquiry unless you select a project area and provide a name, email address and problem; company and current environment are optional.

We use the information to receive, assess and answer your enquiry and, where relevant, take steps you request before a possible agreement. The legal basis is Article 6(1)(b) GDPR where those pre-contract steps apply. Otherwise, including form security, we rely on our legitimate interests in answering business enquiries and protecting the service.

Service providers and transfers

Vercel hosts the website and processes technical request data to deliver and protect it. We rely on our legitimate interest in operating and protecting the website. Resend sends form messages to the configured Tyruos business inbox. That inbox and direct email are handled in Google Workspace. Each provider processes data as part of delivering its service.

These providers may process data outside the EU/EEA, including in the United States. Their published data-protection terms describe transfer safeguards, including European Commission standard contractual clauses where required. Information about those safeguards, or available copies, can be requested using the email above.

Retention

Enquiry information is kept as long as needed to answer the enquiry, manage any resulting business relationship, comply with law, or establish, exercise or defend legal claims.

For form security, the request IP address is used as a key in a bounded, volatile in-memory rate limiter. It is not written to an application database, but the in-memory key has no fixed deletion time: it remains until it is evicted from the bounded map or the server instance is recycled. Vercel may also retain technical request and runtime logs under the project's platform configuration.

Browser storage

• Language preference cookie (tyruos_locale): written only when you choose a language; stores en, no or sv for one year. It is first-party, host-only, Secure and SameSite=Lax.
• Theme preference (tyruos-theme): local storage written only when you choose light or dark mode; kept until changed or browser data is cleared.

The country supplied by Vercel is used only to choose a first root language when no manual preference exists; geography is not saved as a preference. We do not use advertising, analytics or tracking technologies.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal data, object to processing, and receive portable data. Contact us using the email above.

You may also complain to the Swedish Authority for Privacy Protection IMY.