Privacy

Who is responsible

The data controller is Joakim Höglund, operating under the brand Black Plague Water Company. Black Plague Water Company is a brand, not a limited company.

Privacy and general contact: hello@blackplaguewater.com

Email enquiries

If you email us, we process the content of your message and the details you choose to include, such as your name, email address and any company or venue you mention.

Purpose: to read, assess and answer your enquiry, and to keep a record of the correspondence.

Legal basis: legitimate interests (Article 6(1)(f) GDPR) in handling enquiries addressed to us, or the performance of, or steps towards, a contract (Article 6(1)(b)) where the enquiry concerns a possible business relationship.

Email is handled through Google Workspace (Google Ireland Limited), which processes the message on our behalf as our email provider.

Retention: messages are kept for as long as needed to handle the enquiry and any resulting business relationship, and are deleted when there is no longer a business or legal reason to keep them.

Visiting the website

The site is published through the Lovable platform and delivered over Cloudflare's edge network. When you load a page, your IP address, the requested address, timestamp, and information sent by your browser (such as user agent and referrer) are processed by that hosting and delivery infrastructure to serve the page and to protect the service against attacks and abuse.

Legal basis: legitimate interests (Article 6(1)(f) GDPR) in providing a working, secure website.

We do not have access to a server log interface for this site and do not use these logs for analysis or profiling. Retention of such technical logs is determined by the hosting and delivery providers.

Cookies and similar storage

The public website sets no analytics, advertising or profiling cookies. No analytics tool, advertising pixel or session recording is installed in the site's code.

Fonts and images are served from this site's own domain, so loading a page does not send requests to third-party font or media services.

Cloudflare and the hosting platform may set strictly necessary cookies for security and correct delivery of the site. These are used only to run and protect the site, not to track you across sites, and they do not require consent.

Because no optional tracking is used, no cookie consent banner is shown. If optional analytics or marketing tools are added later, this notice will be updated and prior consent will be requested.

Note: the Lovable editor and preview environment, used by us while building the site, may store data in the browser of a logged-in editor. That is separate from an ordinary visit to the published site.

Recipients

Google Ireland Limited (Google Workspace) — email hosting, acting as our processor for message content and as controller for parts of its own service operation.

Lovable Labs Incorporated — website hosting and publishing platform.

Cloudflare, Inc. — content delivery, network and security layer for the published site.

We do not sell personal data or share it for advertising purposes.

Transfers outside the EU/EEA

The providers above are groups with operations and parent companies outside the EU/EEA, including in the United States, so personal data may be accessed or processed outside the EU/EEA. Such transfers rely on the safeguards published by those providers, typically the EU Commission's standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

We have not verified provider-specific transfer documentation for this site beyond what those providers publish. You can ask us for the current details at hello@blackplaguewater.com.

Your rights

You have the right to request access to your personal data, rectification, erasure, restriction of processing, and data portability, and to object to processing based on legitimate interests.

To exercise a right, email hello@blackplaguewater.com. We may need to ask for information to confirm who you are. We answer without undue delay and normally within one month.

Complaints

If you believe your personal data is handled incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY).

Children

The site is not directed at children, and we do not knowingly process children's personal data.

Changes

If how we process personal data changes, this notice is updated and the date below is changed.