GDPR Information

GDPR Information — Maca Development

Version: 3.0

Last updated: 2026-07-06

Applies to: maca WP Plugin Demo (https://demo.maca.se/)

1. Purpose

This page provides the information required under GDPR Articles 13–14 when we collect personal data via the website.

This notice fulfills the information obligation under GDPR Articles 13 and 14 when personal data is collected via the website.

2. Data controller

| | |

|—|—|

| Name | Maca Development |

| Email | web@maca.se |

| Website | https://demo.maca.se/ |

3. Processing activities

Web server and operational logs

  • Data: IP address, timestamp, URL, browser, referrer
  • Purpose: Operation, troubleshooting, and security
  • Legal basis: Legitimate interest (GDPR Art. 6(1)(f))
  • Retention: Hosting provider — typically 30–90 days in access logs
  • Recipients: Hosting provider
  • Transfer outside EU/EEA: May occur depending on server location

Comments

  • Data: Name, email, IP address, comment text
  • Purpose: Publish and moderate comments
  • Legal basis: Legitimate interest (GDPR Art. 6(1)(f))
  • Retention: As long as the comment remains on the site
  • Recipients: Hosting provider

maca DownList

  • Source: maca DownList
  • Data: E-post och ev. namn vid e-postgrind, nedladdningslogg (fil, tidpunkt, IP-adress kan loggas)
  • Purpose: Tillhandahålla filnedladdningar och spåra nedladdningar enligt sajtägarens inställningar
  • Legal basis: Legitimate interest (GDPR Art. 6(1)(f))
  • Retention: Nedladdningslogg enligt plugin-inställningar; e-postgrind-session tillfälligt
  • Recipients: Webbplatsens personal
  • Transfer outside EU/EEA: Behandlas normalt inom EU/EES via ert webbhotell

WPForms

  • Source: WPForms Lite
  • Data: Formulärinnehåll enligt konfigurerade fält
  • Purpose: Samla in förfrågningar, bokningar eller registreringar
  • Legal basis: Legitimate interest (GDPR Art. 6(1)(f))
  • Retention: Enligt plugin-inställningar och intern gallringsrutin
  • Recipients: Webbplatsens personal
  • Transfer outside EU/EEA: Kan förekomma om WPForms molntjänster används
  • Vendor privacy policy: https://wpforms.com/privacy-policy/

4. Purposes and legal bases

Each processing activity must have a valid legal basis under GDPR Article 6:

Legal bases

  • Legitimate interest (Art. 6(1)(f)) — security, operations, spam protection, responding to inquiries, after balancing interests.
  • Consent (Art. 6(1)(a)) — optional cookies, newsletters, marketing where consent is required. You may withdraw at any time.

5. Sources

We collect data from you directly (forms, orders, accounts) and automatically (logs, cookies per your consent). Partners may provide data for orders.

6. Retention

We retain personal data only as long as needed for the purpose or as required by law, then delete or anonymize securely.

7. Recipients

Data may be shared with hosting, CDN, email, payment, analytics, and support providers under processor agreements.

8. Your rights

You have the following rights when we process your personal data:

Your rights

  • Right of access (Art. 15)
  • Rectification (Art. 16)
  • Erasure (Art. 17)
  • Restriction (Art. 18)
  • Objection (Art. 21)
  • Data portability (Art. 20)
  • Withdraw consent (Art. 7(3))
  • Lodge a complaint with a supervisory authority (Art. 77)

To exercise your rights, contact us at web@maca.se.

We respond without undue delay and within one month (extendable by two months for complex requests under Art. 12(3)).

Supervisory authority

You may lodge a complaint with your local data protection authority if you believe processing violates GDPR.

9. Automated decision-making

We generally do not use automated decision-making or profiling with legal or similarly significant effects.

10. Cookies

See our cookie policy and privacy policy.

Related documents