Last updated 26 October 2026

Privacy Policy

In short: this site uses no cookies, no analytics, no tracking and no third-party scripts, fonts or embeds, and it has no forms. The only personal data involved is the technical data that any web server records when a page is requested.

Who is responsible

Niklas Löthstam, Sweden, is the controller for the processing described here. You can contact me by email at hello@lothstam.eu or by message on LinkedIn.

What data is processed

Server logs. When you visit the site, the web server automatically records technical data about the request: your IP address, the date and time, the page or file requested, the response status, the referring page if your browser sends one, and your browser and operating system as reported by your browser (user agent).

• Purpose: to deliver the site and to keep it secure and working, for example to detect abuse and fix errors.
• Legal basis: legitimate interest (Article 6(1)(f) GDPR) in running and securing a website.
• Retention: logs are kept for a limited period according to the log rotation of the hosting provider and are then deleted. I do not use them to profile or identify visitors.

Nothing else. The site does not set cookies, does not use local storage or similar technologies on your device, does not run analytics or advertising, and does not load resources from third parties. The portrait photo and all files are served from this site.

Who receives the data

The web hosting provider that runs the server processes the server logs on my behalf. I do not sell or share your data with anyone else. Hosting providers may operate servers inside or outside the EU/EEA; any transfer outside the EU/EEA has to meet the requirements of GDPR Chapter V.

External links

The site links to LinkedIn and to the DiVA portal. These links are only followed if you click them, and they are set up so that no referring address is passed on. Once you are on those sites, their own privacy policies apply.

If you contact me

If you email me at hello@lothstam.eu, the message is processed by my email service provider. If you message me on LinkedIn, LinkedIn processes it under its own terms. I use your message and contact details only to reply to you, and keep them only as long as needed to handle the conversation.

Your rights

Under the GDPR you have the right to request access to your personal data, rectification, erasure, restriction of processing, and to object to processing based on legitimate interest. Because server logs identify a visit only by IP address and time, I may need that information from you to find your entries.

If you think your data is handled incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se.

Changes

If the site starts to use anything that affects this policy, for example analytics or a contact form, I will update this page first. The date at the top shows when it was last changed.