Privacy
What personal data this website collects, why, for how long, who else handles it, and what you can ask of us.
Updated 26 September 2026
1 Who is responsible
Cercle Management (IK Management AB, org. no. 559542-0984), Stockholm, Sweden, is responsible for the personal data handled on this website. Questions about it go to contact@cercle-mgmt.com.
2 What we collect, and why
When you contact us
The contact form asks for your name, your email address and your message, whether you are a brand, a profile, press or something else, and, if you want to give them, your company and phone number. We also note the time and the page you wrote from. We use this only to answer you and to follow up on what you asked about.
Legal basis: our legitimate interest in answering the people who contact us, or, when you write about working together, the steps before an agreement. After 24 months we remove your name, company, email address, phone number and message; what remains is that an enquiry came in, when and from which page, with nothing that identifies you. Messages our spam checks hold back are deleted after 30 days. A copy of each enquiry is emailed to us when it arrives.
When you ask about your data
The data request form asks for your email address, what you want (to see, correct or erase your data) and, if you like, a message. We send a link to that address to make sure the request is yours.
Legal basis: our legal obligation to handle your request and to be able to show that we did. A request that is never confirmed is deleted after 30 days; for the others, your email address and message are removed after 24 months.
Your cookie choice
When you choose in the cookie banner, we record the choice with a random consent ID (the same one kept in your browser), the categories you accepted, the version of the cookie text and the time. We never store your IP address or anything else about you with it.
Legal basis: our legal obligation to be able to show that consent was given. Each record is deleted after 24 months.
Statistics, only with your consent
If you accept analytics, Google Analytics records how the site is used: the pages you visit, roughly where you are, and the kind of device and browser. Google states that it does not log or store IP addresses from users in the EU. Nothing is sent to Google Analytics before you accept, and you can change your mind at any time.
Legal basis: your consent. Google keeps the data for 14 months.
Keeping the site running and safe
Like every website, the servers log each request: your IP address, your browser, the page and the time. These logs are kept for 30 days to find faults and stop misuse. If the site itself has an error, a report goes to our error monitoring with personal data removed before it leaves the site; reports are kept for 90 days. Legal basis: our legitimate interest in a secure, working website.
3 Cookies
A cookie is a small file the site keeps in your browser. Necessary cookies are set without asking, because the site does not work without them. The others are set only if you accept them.
| Cookie | What it is for | Kept for | Kind |
|---|---|---|---|
csrftoken | Protects the forms against misuse from other sites. | 1 year | Necessary |
taylerd_consent | Remembers your cookie choice. Set only after you choose. | 6 months | Necessary |
_ga | Google Analytics: tells visits from different browsers apart. | 2 years | Analytics, with consent |
_ga_HYF6DCLQW0 | Google Analytics: keeps track of the current visit. | 2 years | Analytics, with consent |
You can change your choice at any time under “Cookie settings” at the bottom of every page, or here: Cookie settings. If you switch analytics off, its cookies are deleted.
4 Who else handles the data
A few suppliers run parts of the website for us and handle data only on our instructions: Taylerd AB builds and runs the site; Google Cloud hosts it in Sweden (Stockholm); Postmark sends its emails, such as the copy of your enquiry to us; Sentry receives error reports, with personal data removed; and Google Analytics measures visits, only if you accept it. Some of them are in the United States. Where data goes there, they are certified under the EU–US Data Privacy Framework, and their agreements also include the EU’s standard contractual clauses.
5 Your rights
You can ask to see the personal data we hold about you and receive a copy, to have it corrected, to have it erased, to restrict how we use it, and to object to use based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time; this does not affect what was done before.
The quickest way is our data request form; you can also email contact@cercle-mgmt.com. We reply within a month. If a request is complex, we may need up to two more months, and we will tell you why within the first month.
If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): imy.se, Box 8114, 104 20 Stockholm.
6 Good to know
You do not have to give us any personal data, but without a name and an email address we cannot answer an enquiry. We make no automated decisions about you and build no profiles. The website is served over an encrypted connection, and only the people who need the data can reach it.
If we change how we handle personal data, we update this page and its date. When the cookie text changes, the banner asks you again.