Privacy Policy

Effective from 3 September 2026. Version 2026-09-03.1.

This policy explains how personal data is processed when you visit killandermusicrecords.com, contact KMR Studios or use website features.

Controller and contact details

Killander Music Records AB, Swedish company registration number 559349-8479, S:t Olofsgatan 10A, 753 12 Uppsala, Sweden, is the controller for processing on KMR Studios.

Send privacy questions or requests to exercise your rights to info@killandermusicrecords.com.

Data processed and where it comes from

Data from you and your device

Data is obtained mainly from you and from your browser or device when you use the website.

• When you use a form or contact KMR Studios, the information you choose to provide is processed, such as your name, contact details, organisation, message and information needed to answer an enquiry or prepare a quotation.
• When you visit the website, the processing may include your IP address, time of access, pages visited, referring page, device and browser information, technical identifiers, form and security signals and information about your consent choice.
• If you consent to analytics or marketing, usage events, advertising and campaign information and pseudonymous browser identifiers may be processed.
• If you enable Trustpilot or a newsletter form, the provider may receive technical data and information that you submit. A newsletter subscription requires a separate, active choice.

When a web form marks information as required, it must be provided for the form to be submitted and for us to process the enquiry or take the requested steps before a possible contract. If required information is not provided, we cannot submit or process the form. There is no statutory obligation to use the form; you may contact us by email instead.

Purposes and legal bases

Where processing relies on legitimate interests, the company’s interests have been balanced against your privacy rights. You may object to that processing.

Recipients and service providers

Data is disclosed only to recipients needed for the purposes above. They may include website hosting, email, form and security suppliers, professional advisers, or authorities where disclosure is required by law. A provider’s role may vary between services and is governed by the service and agreement in force.

Forms may use Forminator and hCaptcha with Cloudflare support. In its default setup, Forminator stores form submissions locally in WordPress and does not automatically send them to WPMU DEV; active email or other integrations are treated separately. See information about Forminator, hCaptcha’s Privacy Policy and Cloudflare’s Privacy Policy.

Depending on your choice, Google may receive data through Google Analytics, Google Ads and Google Tag Manager. See Google’s Business Data Responsibility information, how Google uses information from partner sites and Google’s Privacy Policy.

Optional features may use Trustpilot and MailerLite. Polylang operates locally in WordPress in the observed standard chain. See Polylang’s Privacy Policy, Trustpilot’s privacy information and MailerLite’s Privacy Policy.

An up-to-date, more technical list is provided in the Cookie Policy.

Transfers outside the EU and EEA

Google, hCaptcha, Cloudflare, Trustpilot and MailerLite may process data outside the EU and EEA or give group companies and subprocessors in other countries access. Their public standard frameworks use an adequacy decision where available, the EU–US Data Privacy Framework for a certified US recipient where applicable, or standard contractual clauses with supplementary safeguards. MailerLite states that subscriber data for EEA customers actually served by MailerLite Limited remains in the EU; this must be checked against KMR’s active account. The exact recipient and mechanism depend on the active service, account and agreement. Contact info@killandermusicrecords.com for current information and a copy of the relevant safeguard.

How long data is kept

• Contact and quotation enquiries are normally kept for no more than 24 months after the last contact. Data may be kept longer if it becomes part of a customer relationship or is needed for accounting, legal requirements or claims.
• Customer data is kept for the contractual relationship and afterwards for as long as obligations or claims require. Under Swedish law, accounting records are retained for seven years after the end of the calendar year in which the financial year ended.
• A newsletter subscription is processed until you unsubscribe or the processing must otherwise end. The information needed to respect an opt-out and comply with legal requirements may then be retained.
• The local consent choice and its metadata are kept for no more than 365 days. For necessary documentation, a pseudonymous local consent reference is kept until cookie settings are reset, an unsent receipt queue until delivery succeeds and a failure status until the next receipt is stored. A pseudonymous server-side receipt is kept for 760 days.
• Google Analytics event-level and user-level data are deleted according to the actually active property setting. Aggregated reports may remain available for longer. Statistics cookies in the browser can remain for up to two years as shown in the Cookie Policy.
• Security logs, form data and provider data are kept only as long as needed for the relevant purpose, incident handling, contractual requirements and legal obligations. The actual period depends on the data type, risk, active matter or subscription and the configuration and deletion routine actually used; no shorter fixed period is asserted here.

Your rights

Where the conditions in data protection law are met, you may request access to, correction or erasure of your personal data, restriction of processing and data portability. You may also object to processing based on legitimate interests and always object to direct marketing.

You may withdraw consent at any time. For website choices, select “Anpassa” (“Customise”) in the first banner or use the persistent cookie icon with the accessibility name “Anpassa cookieinställningar” (“Customise cookie settings”). Withdrawal does not affect processing that was lawful before it. You can also unsubscribe from a newsletter using the link in the message. You may contact info@killandermusicrecords.com.

If you believe that data has been processed incorrectly, you may lodge a complaint with the Swedish Authority for Privacy Protection, IMY.

Security

Technical and organisational measures are used according to the risk of the processing, including access restrictions, updates, security controls and form protection. No internet transmission is entirely risk-free. A personal data breach is handled and notified in accordance with applicable rules.

Children

The website is not directed specifically at children and there is no intention to knowingly collect children’s personal data through forms, analytics, newsletters or marketing without the authorisation required. A parent or guardian who believes that a child has submitted data may contact KMR Studios for assessment and erasure.

Automated decisions

KMR Studios does not make decisions based solely on automated processing that produce legal or similarly significant effects for you. Analytics and advertising tools may create segments or measurement results after consent, but the company does not use them for such decisions.

Changes to this policy

The policy is updated when processing, providers or requirements change. The current version and effective date are shown at the top. If a change materially affects processing based on consent, a new choice will be requested where needed.