Last updated: 2026-02-11
This Privacy Policy explains how Happy Hour Media AB (“we”, “us”, or “our”) collects, uses, stores, and protects personal data when users access https://nolimity.com (the “Website”).
This policy complies with:
- EU General Data Protection Regulation (GDPR)
- Swedish Data Protection Act (Dataskyddslagen 2018:218)
- Applicable EU data protection and privacy legislation
If you are located in Sweden or another EU/EEA country, this policy applies to you in full.
1. Data Controller
Happy Hour Media AB
Erik Dahlbergsgatan 20b
Sweden
2. Personal Data We Collect
a) Data You Provide Voluntarily
- Email address (e.g., contact forms, waiting list, or newsletter sign-up)
- Messages or inquiries submitted via the Website
- Consent status and communication preferences
b) Automatically Collected Data
- IP address
- Device and browser information
- Operating system
- Referring URLs
- Pages visited
- Interaction events (e.g., clicks, navigation patterns, form submissions)
This data is collected via cookies and similar technologies as described in our Cookie Policy.
3. Legal Bases for Processing (GDPR Article 6)
We process personal data only where a lawful basis applies:
- Consent – for analytics cookies, marketing cookies, advertising measurement, and optional communications
- Legitimate interest – for operating, securing, and improving the Website
- Legal obligation – where required under applicable law
- Contractual necessity – where responding to user requests
Where we rely on legitimate interest, we conduct a balancing assessment to ensure that our interests do not override your fundamental rights and freedoms.
You may withdraw consent at any time without affecting prior lawful processing.
4. Purpose of Data Processing
We process personal data for clearly defined purposes:
- Operating and maintaining the Website
- Ensuring security, fraud prevention, and system integrity
- Responding to user inquiries
- Measuring website performance and usage (analytics)
- Measuring advertising effectiveness and conversions (only with consent)
- Complying with legal obligations
We do not sell personal data.
Analytics data is used solely for statistical and performance analysis and is not used for advertising, remarketing, profiling, or behavioural targeting purposes unless you provide separate marketing consent.
5. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy and in accordance with applicable law.
Typical Retention Periods
- Email sign-ups / waiting list data: retained until you unsubscribe or withdraw consent, or up to 24 months after last interaction (whichever occurs first).
- User inquiries and correspondence: up to 24 months after resolution.
- Server logs and security logs (including IP addresses): typically 30–90 days, unless required longer for security investigations.
- Analytics data (where consent has been given): retained for up to 14 months, after which data is deleted or anonymized where possible.
- Advertising and conversion tracking data (where marketing consent is given): retained for up to 13 months for campaign measurement and reporting purposes.
- Consent records (cookie and marketing consent status): retained for up to 3 years after consent withdrawal or last recorded interaction, to demonstrate GDPR compliance.
Where legal obligations require longer retention, data may be stored accordingly.
6. Cookies, Analytics, and Advertising
We use cookies and similar technologies in accordance with your choices in our cookie banner.
Cookie Categories
Strictly Necessary Cookies
Required for basic Website functionality and security. No consent required.
Analytics Cookies (Statistics)
Used to measure Website performance and user behavior in aggregated form.
Activated only after user consent.
Marketing Cookies (Advertising & Conversion Tracking)
Used to measure advertising performance, campaign effectiveness, and (where enabled) remarketing.
Activated only after explicit user consent.
If you consent to analytics but not marketing, marketing cookies will not be set.
Non-essential cookies are not activated before consent is obtained.
7. Advertising and Conversion Tracking
If you consent to marketing cookies, we may use advertising and conversion tracking technologies to:
- Measure whether advertising campaigns resulted in Website actions (e.g., form submissions)
- Improve campaign performance
- Prevent fraud
- Support remarketing where applicable
Data Processed May Include:
- Event data (page views, form confirmations, button clicks)
- Device and browser information
- Cookie identifiers
- Approximate geographic information derived from IP address
Typical Providers May Include:
- Microsoft Advertising (UET tag)
- Google Ads conversion tracking
- Meta Pixel
These providers may act as independent data controllers or processors depending on configuration and applicable law.
Marketing technologies are activated only after consent.
8. Consent Records and Accountability
When you provide or withdraw consent via our cookie banner, we store a record of:
- Consent status
- Categories accepted or rejected
- Date and time
- Consent identifier
These records are maintained to demonstrate compliance with GDPR and are retained according to the retention periods described above.
You may modify or withdraw consent at any time.
9. Third-Party Processors
We share limited personal data with trusted third-party service providers, including:
- Hosting providers
- Analytics providers
- Advertising measurement providers
- Security and performance monitoring services
All third parties process data under Data Processing Agreements (DPAs) in accordance with GDPR.
10. International Data Transfers
Some service providers may process data outside the EU/EEA.
Where this occurs, we ensure appropriate safeguards, including:
- EU Standard Contractual Clauses (SCCs)
- Additional technical and organizational security measures
You may request further details regarding these safeguards.
11. Records of Processing Activities
We maintain records of processing activities in accordance with GDPR Article 30, including:
- Categories of data processed
- Purposes of processing
- Retention periods
- Security measures
12. Your Rights Under GDPR
If you are located in Sweden or the EU/EEA, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
We respond within GDPR deadlines (generally one month).
13. Right to Lodge a Complaint (Sweden)
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Swedish supervisory authority:
Integritetsskyddsmyndigheten (IMY)
Website: https://www.imy.se
Phone: +46 8 657 61 00
14. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, misuse, loss, or alteration.
Security measures are reviewed regularly.
15. Children’s Privacy
This Website is not intended for persons under the age of 18.
We do not knowingly collect personal data from minors.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect legal, technical, or operational changes.
The latest version will always be available on this page.