Cookie Policy
- Organisation
- Nyttio Demo AB
- Registration number
- 556799-1234
- Address
- 1 Main Street
SE-111 22 Stockholm, Sweden - Website or digital service
- https://example.com and its customer portal
- Contact email
- privacy@example.com
- Phone
- 08-123 45 67
- DPO or privacy contact
- Privacy contact: privacy@example.com
- Policy version
- 1.0
- Last updated
- 2026-07-17
- Effective date
- 2026-07-17
1. About this cookie policy
This policy describes how Nyttio Demo AB uses cookies and similar technologies on the following websites, apps, and digital services:
https://example.com and its customer portal
The policy explains which technologies are used, their purposes, the data processed, retention periods, providers, consent, and how to change your choice.
- Privacy policy
- https://example.com/integritetspolicy
2. What are cookies and similar technologies?
A cookie is a small information file that a website can store in or read from your browser or device. Session cookies are normally deleted when the browser closes, while persistent cookies remain for a stated period or until you delete them. First-party technology is controlled by the service you visit; third-party technology is controlled by another party.
The term cookies and similar technologies also covers local storage, pixels, scripts, tags, SDKs, device and browser identifiers, cache identifiers, URL-based identifiers, and embedded content.
3. When is consent required?
We do not activate technology requiring consent before you have made a freely given, specific, informed, and active choice. Consent is normally required for analytics, A/B testing, non-essential personalisation, advertising measurement, targeted marketing, profiling, cross-service tracking, and non-essential external content.
Consent is not required where the technology is necessary for transmitting electronic communications or for a function or service you have expressly requested. Each technology and purpose is assessed separately. Data protection law also applies where personal data is processed.
4. Our categories
Necessary technologies
Necessary technologies are used for functions required for the service to operate securely or to provide a function you have expressly requested. They may, for example, handle sign-in, sessions, security, load balancing, payment flows, and storage of your cookie choice. They are activated without consent only where the exception genuinely applies.
Preference and functional technologies
Language, display mode, and optional interface settings.
They are used without consent only where necessary for an expressly requested function. Otherwise, they are activated only after consent.
5. Detailed cookie and technology inventory
The inventory covers technology before and after consent, on authenticated pages, in forms, payment flows, apps, embedded services, and relevant subdomains.
Purposes must be described specifically. Technologies may be grouped only where purposes, activation conditions, recipients, retention, and processing are comparable.
6. How you make your choice
On your first visit, you can accept all optional categories, reject all non-essential categories, or customise your choices. Accepting and rejecting must be equally easy. No optional categories are preselected.
Continued use, scrolling, closing, or inactivity does not constitute consent. You can give separate consent for different purposes.
7. How to change or withdraw consent
You can change or withdraw your consent at any time through: The Cookie settings link in the website footer
When consent is withdrawn, future activation and future processing based on consent stop. Our solution may remove identified first-party cookies; some third-party cookies may need to be deleted in the browser or through the provider. Withdrawal does not affect the lawfulness of processing already carried out.
- Delete or block cookies
- Use your browser settings to block or delete cookies. See the browser help pages for current instructions.
8. How we store your choice
To remember and honour your choice, we may store a necessary consent setting. The record may include a pseudonymous identifier, timestamp, accepted and rejected purposes, and versions of the policy and consent solution. The information is not used for marketing.
- Retention
- 12 months
The choice applies only to the current browser and device.
9. Renewal of consent
We may ask you to make a new choice when a purpose, category, provider, processed data, or processing changes materially, when the previous consent can no longer be demonstrated, or when it can no longer reasonably be considered current.
- Normal interval
- 12 months or earlier following a material change
The interval is an organisational setting and does not mean that consent can always be relied on for the full period.
10. Third-party providers and responsibility
A provider may be a processor, an independent or joint controller, or may not process personal data in the specific case. The role is assessed from the actual configuration and who determines purposes and means.
No external providers have been specified for the current configuration.
11. Tag management and consent platform
- Consent management platform
- In-house solution
- Tag manager
- None
- Server-side tag management
- No
A tag manager can activate other scripts and services. Each such service is listed separately in the inventory. Non-essential tags must be technically blocked until relevant consent has been given.
12. Transfers outside the EU/EEA
No transfer outside the EU/EEA has been identified for the technologies listed in this policy.
13. Browser settings and signals
You can block or delete cookies and restrict third-party technology through your browser settings. Blocking necessary technologies may prevent parts of the service from working. We do not claim to honour browser signals unless this has been technically implemented and verified.
14. Security and data minimisation
We limit use to what is needed for each purpose through reasonable retention periods, data minimisation, access control, provider agreements, control of activated tags, recurring inventories, and removal of technology that is no longer needed.
15. Changes to the policy
The policy may be updated when technologies, purposes, providers, retention periods, allocation of responsibility, legislation, or regulatory guidance changes. New consent is requested where a change means that previous consent is no longer sufficiently specific or informed.
- Current policy
- https://example.com/cookiepolicy
- Previous versions
- Available on request
16. Contact us
- Company name
- Nyttio Demo AB
- Registration number
- 556799-1234
- Address
- 1 Main Street
SE-111 22 Stockholm, Sweden - Email
- privacy@example.com
- Phone
- 08-123 45 67
- DPO or privacy contact
- Privacy contact: privacy@example.com
17. Complaints and supervision
In Sweden, the Swedish Post and Telecom Authority (PTS) supervises the rules on storing or accessing information in terminal equipment. Where the technology involves processing personal data, you may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY). You are welcome to contact us first so that we can investigate the matter.
