Privacy Policy
Last updated: 6 November 2026
This policy explains how Vulkan Studios collects and uses personal data when you visit vulkan-studios.com, contact us, book a meeting or work with us, and which rights you have under the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
Vulkan Studios is the business name of Victoria Szerdi, who runs the business as a sole proprietorship (enskild firma) in Sweden. She is the data controller for the personal data described in this policy.
- Address: Mjölnerbacken 21, 174 48 Sundbyberg, Sweden
- Email: info@vulkan-studios.com
- Website: vulkan-studios.com
2. What we collect, why, and for how long
Contact form
When you send the contact form we receive your name, email address, your message and the services you select. We use them to answer your enquiry and, if you ask for it, to prepare a proposal. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)). Form submissions are delivered to our inbox and stored in our website administration. We keep them for up to 24 months after our last contact, unless they become part of a client relationship.
Booking a meeting
The “Book a meeting” and “Book a diagnosis” buttons take you to Calendly, a scheduling service. The details you enter there (such as your name, email address and chosen time) are processed by Calendly and shared with us so we can hold the meeting. Calendly’s own privacy policy also applies. Legal basis: steps prior to a contract (Art. 6(1)(b)). Retention: as for the contact form.
Email and client work
When you email us or become a client, we process your contact details, project information and, for invoicing, billing details. We use them to deliver the agreed work, communicate with you and meet our legal obligations. Legal bases: performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)). Accounting records are kept for seven years, as required by the Swedish Accounting Act (bokföringslagen). Other client data is kept for as long as the relationship lasts and for up to 24 months afterwards.
Website statistics
With your consent we use Google Analytics to understand how visitors use the website, for example which pages are viewed. Google Analytics is only activated if you accept statistics cookies in our cookie banner. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time. Statistics data is kept for no longer than 14 months.
Spam protection
The contact form is protected by Google reCAPTCHA, which analyses technical information about your visit to tell people from automated spam. Legal basis: our legitimate interest in keeping the website and our inbox secure (Art. 6(1)(f)).
Embedded content and cookies
Some pages show videos from Vimeo and YouTube and a feed from Instagram. Details about these services and the cookies they may set are in our Cookie Policy.
3. Who we share data with
We do not sell personal data. We only share it with providers that help us run the business, and only as far as needed:
- our web hosting provider (Hostinger), which stores the website and form submissions;
- our email provider, which handles messages sent to our addresses;
- Google, for Analytics (only with consent) and reCAPTCHA;
- Calendly, for meeting bookings;
- Vimeo, YouTube and Instagram, when their content is shown on the website;
- authorities such as the Swedish Tax Agency (Skatteverket), when the law requires it.
4. Transfers outside the EU/EEA
Some of these providers, such as Google, Calendly, Vimeo and Meta (Instagram), may process data in the United States. In those cases the transfer relies on the EU–US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.
5. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have incorrect data corrected;
- have your data erased;
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing that took place before.
To use any of these rights, email info@vulkan-studios.com. We answer within one month. You can change your cookie choices at any time with the “Manage consent” tab on the website.
If you think we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.
6. Security
The website uses an encrypted connection (HTTPS), and access to personal data is limited to the people who need it to do their work.
7. Automated decisions
We do not make decisions about you based solely on automated processing, and we do not use profiling.
8. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last updated.
9. Legal information
- Business name: Vulkan Studios
- Owner: Victoria Szerdi
- Legal form: Sole proprietorship (enskild firma), Sweden
- Address: Mjölnerbacken 21, 174 48 Sundbyberg, Sweden
- Email: info@vulkan-studios.com