Who is responsible
This website is operated by M Hermansson AB, a firm incorporated under applicable laws of Sweden, having its registered office at Funbo-Bärby, Berggärden 18, 74152 Uppsala, Sweden. In the language of the General Data Protection Regulation (GDPR), that entity is the controller of the personal data described here.
For anything on this page — including a request to see, correct or delete your data — write to micke@mickehermansson.se.
What the site collects
The contact form
If you fill in the form on the “Work with Micke” page, the site stores what you typed: your name, your email address, the subject you chose, your message, and — where you chose to fill them in — your role or organisation and your rough timing. It also records the date and time of the submission and the IP address it came from.
The IP address is kept as a defence against automated abuse of the form, and for nothing else. The time of submission is used in the same way: a form returned within two seconds of the page loading was not typed by a person, and is discarded.
Your enquiry is stored before any email is attempted, so that a problem with the mail server costs an acknowledgement rather than your message.
What is done with it
- It is emailed to Micke Hermansson, so that your enquiry reaches a person.
- An acknowledgement is emailed to you, so that you know it arrived.
- It is kept so that a conversation begun by email can be picked up again.
It is not used for marketing. You will not be added to a mailing list, and nothing you send through this form is sold, shared or passed to an advertiser.
The legal basis
Handling your enquiry is a legitimate interest under Article 6(1)(f) of the GDPR — you wrote to ask about speaking, training or a partnership, and answering you is the obvious purpose of the message. Where an enquiry turns into a booking, the same data is then processed under Article 6(1)(b), to take steps towards a contract at your request.
How long it is kept
Enquiries are kept for 24 months from the last contact about them, then deleted. An enquiry that becomes a booking is kept for as long as Swedish accounting law requires the related records to be kept.
Cookies and similar technology
This site sets no analytics, advertising or tracking cookies. There is no cookie banner because there is nothing to ask you about.
Two strictly necessary cookies are set when you use the contact form. One identifies your browser session; the other carries a token that proves the form you submitted is the form this site gave you, which is what prevents a third-party site from posting it on your behalf. Both are deleted when you close your browser, and neither can be used to follow you anywhere.
The fonts are served from this site's own server, not from Google Fonts or any other font service, so loading a page tells no one but this site that you visited it.
Third parties your browser may reach
Three things on this site can cause your browser to contact somebody else. None of them happens unless you make it happen, except the last.
- The TEDx video. Until you press play, the video is a still image served from this site. Pressing play loads the YouTube player, at which point YouTube — that is, Google — receives your IP address and may set its own cookies. Their handling of that is covered by Google's privacy policy.
- Links that leave the site. Following one takes you to somebody else's site under somebody else's policy.
- Some book covers are displayed directly from the publishers' own servers rather than copied onto this one, because they are the publishers' artwork. Loading the books section therefore tells those publishers' servers your IP address. Where a cover cannot be loaded, this site draws a typeset substitute instead.
Analytics
At the time of writing, this site loads no analytics or measurement script at all — no Google Analytics, no pixel, no heatmap, nothing. If that changes, this page will say so before it does, and will name what was added.
Who else sees your data
Your enquiry is stored on the server that runs this website and is sent onward by the email provider that delivers its mail. Those two suppliers process it on instructions and may not use it for anything of their own. Nobody else receives it unless the law requires it.
Data is held within the EU/EEA. If that ever ceases to be true, this page will say where it is held and on what legal basis it is transferred.
Your rights
Under the GDPR you may ask for:
- a copy of the personal data held about you;
- a correction, if any of it is wrong;
- its deletion;
- a restriction on what is done with it;
- a copy of it in a portable form;
- and you may object to it being processed on the basis of legitimate interest.
Write to micke@mickehermansson.se and you will have an answer within one month. There is no charge.
If you are not satisfied with the answer, you may complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), which supervises data protection in Sweden.
Children
Much of Micke's work is with schools, but this site is addressed to adults — teachers, school leaders, conference organisers and publishers. It is not aimed at children and does not knowingly collect anything from them. If you believe a child has sent something through the contact form, write and it will be deleted.
Changes to this policy
The date above is when this page last changed. A change that affects what is collected or why will be described here rather than made quietly.