Cookie Policy
Translation provided for convenience. In the event of any discrepancy, the Italian version prevails.
Last updated: June 2026.
1. Preamble and scope of application
This Cookie Policy describes the types of cookies and similar technologies used by the website sveahost.com (hereinafter, the "Site"), operated by DecaRoy AB, doing business under the SveaHost trademark (hereinafter, the "Controller"). This document is drawn up in compliance with Directive 2002/58/EC (the so-called ePrivacy Directive), as subsequently amended and implemented in national legal systems, with Regulation (EU) 2016/679 (hereinafter, the "GDPR") and with the guidelines adopted by the European Data Protection Board (EDPB) on consent and tracking technologies.
This policy forms an integral and essential part of the Site's Privacy Policy, to which reference is made for any information concerning the processing of personal data not specifically governed by this document.
2. What cookies and similar technologies are
Cookies are small text files that the websites visited by the user send to and store on the user's device (computer, tablet, smartphone), to be subsequently retransmitted to those same websites on the occasion of later visits. By means of cookies, a website can store information relating to browsing, such as, for example, the preferences expressed or the status of an authenticated session.
Alongside cookies in the strict sense, further similar technologies may be employed – such as, by way of example, identifiers stored in the browser's local memory space (local storage and session storage), tracking pixels (web beacons) and conversion detection technologies – which make it possible to store or access information on the user's device. For the purposes of this policy and of the applicable rules, any reference to "cookies" shall be understood as extended to such similar technologies, in so far as compatible.
Cookies may be distinguished, according to the party that installs them, into "first-party" (proprietary) cookies, managed directly by the Controller, and "third-party" cookies, managed by parties other than the Controller. According to their duration, cookies are further distinguished into "session" cookies, which are automatically deleted upon closing the browser, and "persistent" cookies, which remain on the device until the pre-set expiry or their deletion by the user.
3. Data Controller and contact details
The Controller of the personal data possibly collected through cookies is:
- DecaRoy AB (SveaHost trademark)
- Org.nr (company registration number): 559560-4520
- Registered office: Hantverkaregatan 8, 231 44 Trelleborg, Sweden
- Email address: info@sveahost.com
For any request concerning this Cookie Policy, the exercise of the rights granted by the GDPR or the withdrawal of the consent given, the user may contact the Controller at the details indicated above.
4. Legal basis of the processing
The lawful basis for the storage of information and the access to it by means of cookies varies according to the category to which the individual tools belong.
- Technical and necessary cookies. The installation and use of such cookies are exempt from the obligation to obtain consent, in so far as they are strictly necessary for the provision of the service expressly requested by the user, pursuant to Article 5(3), second sentence, of Directive 2002/58/EC. From the standpoint of any related processing of personal data, the legal basis is identified in the legitimate interest of the Controller in ensuring the proper functioning and security of the Site (Article 6(1)(f) GDPR), or in the performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR), with particular reference to the checkout and customer area functionalities.
- Statistical and marketing cookies (non-necessary). The installation of such cookies is subject to the prior obtaining of the free, specific, informed and unambiguous consent of the user, expressed by means of a positive action through the banner referred to below. The legal basis is therefore the consent of the data subject, pursuant to Article 5(3), first sentence, of Directive 2002/58/EC and Article 6(1)(a) GDPR. In the absence of consent, such cookies are not installed and no processing for statistical or marketing purposes takes place.
5. Categories of cookies used
5.1 Technical and necessary cookies (always active)
The cookies and technical tools listed in the table below are indispensable to the proper functioning of the Site and to the provision of the services requested by the user, including the purchase procedure (checkout), access to the customer area and the storage of the preferences expressed. They are installed regardless of consent and cannot be deactivated by means of the consent management tools, without prejudice to the provisions of paragraph 7 below regarding browser configuration.
| Name / category | Purpose | Type | Duration | Legal basis |
|---|---|---|---|---|
| Technical session cookies | Ensure the proper functioning of the Site, manage the browsing session and the user's authentication in the customer area, ensure the security of the restricted areas | Proprietary | Session (deleted upon closing the browser) | Technical necessity (Article 5(3), second sentence, ePrivacy Dir.); Article 6(1)(b)/(f) GDPR |
| svh_lang | Store the language preference selected by the user, in order to present the Site's content in the chosen language | Proprietary | Persistent | Technical necessity (Article 5(3), second sentence, ePrivacy Dir.); Article 6(1)(f) GDPR |
| svh_consent | Store and give effect to the choice expressed by the user regarding cookies through the banner, avoiding the re-presentation of the notice at each access | Proprietary | Persistent — 12 months | Technical necessity / fulfilment of an obligation connected to the obtaining of consent (Article 5(3), second sentence, ePrivacy Dir.; Article 6(1)(c)/(f) GDPR) |
| Stripe technical cookies (during checkout) | Enable the secure processing of payments and fraud prevention activity on the payment pages managed through the provider Stripe | Third party (Stripe Payments Europe, Ltd. / Stripe, Inc.) | Session and persistent, according to the provider's settings | Technical necessity for the performance of the contract and for fraud prevention (Article 5(3), second sentence, ePrivacy Dir.; Article 6(1)(b)/(f) GDPR) |
It is specified that the cookies attributable to the provider Stripe are installed exclusively on the pages where the payment procedure takes place and are limited to what is strictly necessary for the performance of the transaction and to the related security and anti-fraud requirements. For further information, reference is made to the documentation made available by Stripe on its own institutional website.
5.2 Statistical cookies (prepared, activated only upon consent)
Statistical cookies make it possible to collect information, in aggregated or pseudonymized form, on the ways in which users use the Site, in order to measure its audience and improve its performance. At present, the Site does not install any statistical cookie. Such tools are prepared for any future use and will be activated exclusively following the granting of consent by the user through the banner.
| Name / category | Purpose | Type | Duration | Legal basis |
|---|---|---|---|---|
| Statistical / analytical cookies | Aggregated analysis of traffic and of users' interactions with the Site, for the purposes of measuring and optimizing performance | Proprietary and/or third party (possible) | Variable according to the tool; it will be specified at the time of activation | Consent of the data subject (Article 5(3), first sentence, ePrivacy Dir.; Article 6(1)(a) GDPR) |
5.3 Marketing and profiling cookies (prepared, activated only upon consent)
Marketing cookies are used to deliver advertising messages in line with the preferences expressed by the user and to measure the effectiveness of advertising campaigns, including by means of conversion detection technologies (so-called conversion pixels). At present, the Site does not install any marketing or profiling cookie. The Site is, however, prepared for future advertising campaigns: the relevant tools will be activated solely following the user's consent, by means of a consent management mode (Consent Mode) which makes the activation of advertising tags subject to the choice expressed.
| Name / category | Purpose | Type | Duration | Legal basis |
|---|---|---|---|---|
| Marketing / profiling cookies (incl. conversion pixels) | Delivery of targeted advertising, retargeting and measurement of conversions within advertising campaigns | Third party (possible, according to the advertising platforms employed) | Variable according to the tool; it will be specified at the time of activation | Consent of the data subject (Article 5(3), first sentence, ePrivacy Dir.; Article 6(1)(a) GDPR) |
6. Absence of Google Fonts and the privacy by design principle
In keeping with the principle of data protection by design (privacy by design) enshrined in Article 25 GDPR, the Controller has adopted technical solutions aimed at minimizing the communication of data to third parties. In particular, the typographic characters (fonts) used by the Site are hosted directly on the Controller's own domain (so-called self-hosted fonts): the Site does not make any call to the Google Fonts service nor to similar external font-provision services. Consequently, the mere display of the pages does not entail the transmission of the user's IP address or of other data to third-party providers for purposes connected to the loading of the fonts.
7. How to give and withdraw consent
7.1 Consent management banner
Upon the first access to the Site, the user is presented with a banner which, following a first-level notice and a reference to this Cookie Policy, makes it possible to express their choice by means of the following commands:
- "Accept all": the user consents to the installation of all categories of cookies, including statistical and marketing cookies (where and when activated);
- "Necessary only": the user consents to the use of technical and necessary cookies only, to the exclusion of statistical and marketing cookies.
The choice expressed is recorded, for the purposes of its implementation, by means of the technical cookie svh_consent, which has a duration of twelve (12) months, upon the expiry of which the banner is presented again. Until a choice is expressed, no statistical or marketing cookie is installed.
7.2 Withdrawal and modification of the choice
The consent given may be withdrawn or modified at any time, with the same ease with which it was granted. To this end, the user may delete the cookies stored on their device – including the svh_consent cookie – thereby causing the banner to reappear at the next access, or act through the settings of their browser. The withdrawal of consent does not affect the lawfulness of the processing based on consent given prior to the withdrawal.
7.3 Managing cookies through browser settings
The user may manage, limit or disable cookies by acting directly on the settings of their browser. It is noted that disabling technical and necessary cookies may compromise the proper functioning of the Site and access to certain functionalities, such as checkout and the customer area. The references to the instructions made available by the main browsers are set out below:
- Google Chrome: Settings menu > Privacy and security > Cookies and other site data;
- Mozilla Firefox: Settings menu > Privacy & Security > Cookies and Site Data;
- Apple Safari: Preferences / Settings menu > Privacy > Manage Website Data;
- Microsoft Edge: Settings menu > Cookies and site permissions > Manage and delete cookies and site data.
For mobile devices, the user is invited to consult the privacy settings of their operating system and of the browser used.
8. Transfers of data to third countries
The use of certain third-party cookies, or recourse to service providers such as Stripe for the processing of payments and – where activated in the future – statistical analysis and advertising platforms, may entail the transfer of personal data to countries located outside the European Economic Area (EEA), including the United States of America.
In such cases, the Controller ensures that the transfer takes place in compliance with the safeguards provided for by Chapter V of the GDPR. In particular, where there is no adequacy decision of the European Commission pursuant to Article 45 GDPR, or where no other appropriate mechanism is applicable (such as the provider's adherence to the EU–U.S. Data Privacy Framework), transfers are supported by the Standard Contractual Clauses (SCC) adopted by the European Commission pursuant to Article 46(2) GDPR, where appropriate supplemented by additional measures of a technical and organizational nature. The user may request from the Controller, at the details indicated in paragraph 3, information regarding the safeguards adopted and a copy thereof.
9. Retention period and updates to this policy
The duration of each cookie is indicated in the tables referred to in paragraph 5. Persistent cookies remain on the user's device until the pre-set expiry or their deletion by the user; session cookies are deleted upon closing the browser.
The Controller reserves the right to amend and update this Cookie Policy at any time, including in order to bring it into line with subsequent legislative provisions, with indications of the supervisory Authorities, or with changes to the cookies and tools actually employed by the Site – with particular reference to the possible future activation of statistical and marketing cookies. The changes are effective from the moment of their publication on the Site. The user is therefore invited to consult this document periodically.
10. Reference to the Privacy Policy
For any information concerning the processing of personal data collected through the Site, the purposes and arrangements of the processing, the rights granted to the data subject by Articles 15–22 GDPR and the relevant arrangements for their exercise, as well as the right to lodge a complaint with the competent supervisory Authority, reference is made to the extended notice available on the Privacy Policy page, of which this Cookie Policy forms an integral part.