Privacy Policy

Last updated 10 November 2026

In short: this website does not use analytics, does not set its own cookies and has no forms. The only personal data processed is the technical data needed to deliver the website to your browser, and anything you choose to send us by email.

1. Who we are

This policy applies to davidvongries.com only. Other websites linked from here (for example Sweden Adventure, MapSteps or our product websites) have their own privacy policies.

The controller responsible for this website is:

2. What data we process, why, and on what legal basis

2.1 Hosting and server logs

This website is hosted on Cloudflare Pages, and its domain is managed through Cloudflare. When you visit the website, Cloudflare automatically processes technical data that your browser sends, such as your IP address, the date and time of the request, the page requested, your browser and operating system, and the referring website.

This is necessary to deliver the website and to protect it against attacks and misuse. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR). Cloudflare keeps this data only for a short time, as described in Cloudflare's privacy policy.

2.2 Cookies

This website does not set its own cookies. To protect the website against bots and attacks, Cloudflare may set a strictly necessary security cookie. It is not used for tracking or advertising. The legal basis is our legitimate interest in a secure website (Art. 6(1)(f) GDPR), and no consent is required for strictly necessary cookies.

2.3 No analytics, forms or embedded content

We do not use analytics or tracking tools, there are no contact forms, and no third-party content (such as videos or social media widgets) is embedded. Fonts are loaded from your own device, not from an external service.

2.4 Contacting us by email

If you email us, we process your email address, your name if you include it, and the content of your message. We use this data only to read and answer your message.

The legal basis is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR) or, if your message is about a possible contract, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Our email is hosted by Zoho. We keep emails as long as needed to handle your request, normally no longer than 12 months, unless the law requires us to keep them longer.

2.5 Links to other websites

This website contains links to other websites, such as YouTube and Instagram. Data is only sent to those services once you click a link and visit them. Their own privacy policies apply there.

3. Who receives your data

We do not sell your data. The technical data described above is processed by our hosting provider Cloudflare, Inc. on our behalf. Emails you send us are stored by our email provider Zoho on our behalf. We may also disclose data if required by law or by a public authority.

4. Transfers outside the EU/EEA

Cloudflare, Inc. is based in the United States, and both Cloudflare and Zoho may process data outside the EU/EEA. Such transfers rely on the EU-US Data Privacy Framework or on the EU Standard Contractual Clauses. You can contact us for more information about these safeguards.

5. How long we keep data

We do not store any visitor data from this website ourselves. Technical data processed by Cloudflare is kept only as long as needed for the purposes above and is then deleted or anonymised. For emails, see section 2.4.

6. Your rights

Under the GDPR, you have the right to:

• access the personal data we process about you,
• have incorrect data corrected,
• have your data erased,
• restrict the processing of your data,
• object to processing based on legitimate interest,
• receive your data in a portable format.

To use any of these rights, email us at connect[at]mapsteps.com. We will answer within one month.

You can also file a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at www.imy.se, or with the supervisory authority in your own EU/EEA country.

7. Children

This website is not directed at children, and we do not knowingly collect data from children.

8. Changes to this policy

We may update this policy from time to time. The latest version is always available on this page, with the date shown at the top.