Privacy Policy

1. Who we are

This Privacy Policy explains how Grayscale Season AB (“we”, “us” or “our”) processes personal data when you visit https://grayscaleseason.com.

The controller responsible for the processing of personal data through this website is:

Grayscale Season AB
434 79 Vallda
Sweden
Email: grayscaleseason@gmail.com

2. Personal data we process

We do not provide user accounts, a newsletter registration form or a contact form on this website.

Depending on how you use the website, we may nevertheless process the following categories of personal data:

• Contact information: your name, email address and any information you voluntarily provide if you contact us by email.
• Technical information: IP address, browser type, device information, operating system, date and time of access, requested pages, referring URLs and similar technical connection data.
• Cookie and online identifiers: identifiers and consent preferences associated with cookies and similar technologies.
• Usage and advertising information: information about page views and interactions may be processed through advertising or embedded third-party technologies where you have given the required consent.

3. Website hosting and server logs

When you access our website, technical information may automatically be transmitted to and recorded by the web server and our hosting provider. This may include your IP address, browser and device information, requested pages, referring URL and the date and time of access.

This processing is necessary for the technical operation, stability and security of the website, including the detection and prevention of misuse and security incidents.

The legal basis for this processing is our legitimate interest in securely operating and maintaining our website in accordance with Article 6(1)(f) GDPR.

4. Contact by email

If you contact us using the email address provided on this website, we process the information contained in your message, including your email address, name where provided, the content of your message and associated communication data.

We process this information in order to respond to your enquiry and manage related correspondence.

Depending on the nature of your enquiry, the legal basis is Article 6(1)(b) GDPR where the communication relates to a contract or steps requested before entering into a contract, or Article 6(1)(f) GDPR based on our legitimate interest in responding to business and other legitimate enquiries.

5. Cookies and consent management

Our website uses cookies and similar technologies. Some cookies are necessary for the website and our consent-management system to function. Optional cookies and tracking technologies are used only where the required consent has been obtained.

We use CookieYes, a consent-management service provided by CookieYes Limited, to record and manage your cookie preferences.

In connection with consent management, CookieYes may process information such as the website domain, date and time of consent, a consent ID, consent status, category-specific consent choices, jurisdiction or location information and a pseudonymised or partially masked IP address.

The processing of consent information is necessary to remember your privacy choices and to demonstrate compliance with applicable privacy and cookie laws.

You can change or withdraw your consent at any time through the cookie settings available on our website. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

More detailed information about the individual cookies used on this website, their purposes, providers and storage periods can be found in our Cookie Policy .

More information about CookieYes is available in the CookieYes Privacy Policy .

6. Meta Pixel

With your consent, this website uses the Meta Pixel, an advertising and measurement technology provided by Meta Platforms Ireland Limited.

The Meta Pixel helps us understand how visitors interact with our website, measure the effectiveness of advertising campaigns and create or optimise audiences for advertising on Meta services such as Facebook and Instagram.

Depending on your interaction with the website and your browser or device settings, information transmitted to Meta may include:

• IP address and device information;
• browser information;
• page URLs and referring URLs;
• date and time of visits;
• page views and website interactions;
• cookie identifiers and similar online identifiers.

Meta may process this information in accordance with its own privacy policies and may combine information received through its business tools with other information available to Meta.

The legal basis for our use of the Meta Pixel is your consent pursuant to Article 6(1)(a) GDPR and, where applicable, the rules governing access to or storage of information on your device.

You can refuse or withdraw your consent at any time through our cookie settings. Refusing consent does not prevent you from accessing the main content of this website.

More information about how Meta processes personal data is available in the Meta Privacy Policy .

7. Embedded YouTube videos

Our website contains videos embedded from YouTube, a service provided in the European Economic Area by Google Ireland Limited.

When an embedded YouTube player is loaded, your browser may establish a connection with Google and YouTube servers. In this context, information such as your IP address, browser and device information, the page you are visiting and information about your interaction with the video may be transmitted to Google.

If you are signed in to a Google or YouTube account, Google may be able to associate your interaction with that account in accordance with its own privacy practices.

Where consent is required, YouTube content and associated technologies are loaded only after you have given the relevant consent through our cookie banner.

The legal basis for this processing on our website is your consent pursuant to Article 6(1)(a) GDPR.

More information about Google’s processing of personal data is available in the Google Privacy Policy .

8. External links and third-party services

Our website contains links to external websites and services, including music streaming platforms, social networks and video platforms such as Spotify, YouTube, Instagram and Facebook.

A standard external link does not cause us to transmit your personal data to the destination service merely because the link is displayed on our website. When you choose to follow an external link, you leave our website and the privacy practices of the respective third party apply.

We do not control how external websites or services process your personal data. We recommend reviewing the privacy information provided by the relevant service.

9. Legal bases for processing

Depending on the processing activity, we rely on one or more of the following legal bases under Article 6 GDPR:

• Consent – Article 6(1)(a) GDPR: for optional cookies, advertising technologies, the Meta Pixel and third-party embedded content where consent is required.
• Contract or pre-contractual measures – Article 6(1)(b) GDPR: where you contact us in relation to a contract or request steps prior to entering into a contract.
• Legal obligations – Article 6(1)(c) GDPR: where processing or retention is required by applicable law.
• Legitimate interests – Article 6(1)(f) GDPR: for operating, maintaining and securing our website, preventing abuse and security threats, and responding to legitimate business enquiries and communications.

10. Sharing of personal data

We do not sell your personal data.

Personal data may be disclosed to service providers or other recipients where necessary for the purposes described in this Privacy Policy. These may include our website hosting provider, CookieYes, Meta and Google/YouTube.

We may also disclose personal data where required by law, a binding legal request or court order, or where necessary to establish, exercise or defend legal claims.

11. International data transfers

Some of the service providers described in this Privacy Policy operate internationally. As a result, personal data may be processed in countries outside Sweden, the European Union or the European Economic Area.

Where personal data is transferred to a country for which the European Commission has not adopted an adequacy decision, the relevant provider or parties involved in the transfer may rely on appropriate safeguards recognised under the GDPR, such as the European Commission’s Standard Contractual Clauses, where applicable.

12. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.

Email correspondence is retained for as long as necessary to handle the relevant enquiry or business relationship and, where applicable, to comply with legal obligations or establish, exercise or defend legal claims.

Technical server data is retained according to the security and operational requirements of our hosting environment.

Cookie and consent information is retained according to the applicable cookie duration, consent-management settings and requirements for documenting consent. Third-party providers may apply their own retention periods to personal data they process under their responsibility.

When personal data is no longer required, it will be deleted or anonymised unless further retention is required by law.

13. Automated decision-making

We do not use personal data to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

14. Your rights under the GDPR

Subject to the requirements and limitations of applicable law, you may have the following rights regarding your personal data:

• the right to obtain information about the processing of your personal data;
• the right of access to your personal data;
• the right to rectification of inaccurate or incomplete personal data;
• the right to erasure of personal data;
• the right to restriction of processing;
• the right to object to processing based on legitimate interests;
• the right to data portability where applicable;
• the right to withdraw consent at any time where processing is based on consent; and
• the right to lodge a complaint with a competent data protection authority.

To exercise your rights in relation to processing carried out by Grayscale Season AB, please contact us at grayscaleseason@gmail.com .

In Sweden, the competent supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). Further information is available at https://www.imy.se/ .

15. Children

This website is not specifically directed at children and we do not knowingly collect personal data from children through user accounts, registration forms or similar services.

If you believe that a child has provided personal data to us and would like us to review or delete that information, please contact us using the details provided below.

16. Security

We take appropriate technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmission or storage on the internet can be guaranteed to be completely secure.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when we change the services or technologies used on the website or when legal requirements change.

The current version will always be published on this page. The effective date shown at the top of this Privacy Policy indicates when it was last materially updated.