Who is responsible for your data?
Provkollen is operated by Refik Mert Burge as a private individual, not through a registered company. Refik Mert Burge is the data controller and can be reached by post at Hamngatan 32A, 172 66 Sundbyberg, Sweden.
Privacy questions and requests concerning your data should be sent to privacy@provkollen.se.
Data we process
When you practise without an account
Your selected language, colour theme, saved questions and practice results may be stored locally in your browser. This information remains on the device and cannot be linked to you by Provkollen. You can delete it by clearing site data in your browser.
As with most websites, the hosting service may temporarily process your IP address, time of access, requested page and technical information to deliver the site, prevent abuse and troubleshoot problems.
If you choose to create an account
The account feature may process:
- your user ID, email address and display name from the sign-in service,
- synced progress, saved questions and test results, and
- basic security and administrator logs.
We do not ask for your Swedish personal identity number, citizenship case details or information you have submitted to a public authority.
Why we process data
- Providing the service
- To display the website, save your choices and, if you request it, sync progress to your account.
- Security
- To prevent intrusion, automated abuse and technical failures.
- Consent
- For optional analytics or advertising features. Consent-dependent functions must follow the choice you make through the consent platform.
- Legal obligation
- When the law requires us to retain or disclose certain information.
The legal basis will normally be providing the service you request, legitimate interests in secure operation, your consent or compliance with a legal obligation.
Service providers and international transfers
The website is published with OpenAI Sites. Its technical delivery uses Cloudflare infrastructure for web traffic, security and the D1 database, among other functions. These providers may therefore process IP addresses and technical logs and, when account synchronisation is active, account data and practice results stored in the database.
Clerk is used for sign-in. Clerk may process a user ID, email address, display name, session data and security information. Google processes sign-in data if you choose Google as your sign-in method. The Google AdSense code is installed throughout the site. Whether Google serves ads depends on Google's review and the site owner's AdSense settings. Where consent is required, a Google-certified consent management platform manages your choices for advertising. We do not sell personal data.
If a provider processes data outside the EU or EEA, the transfer must be protected by a valid adequacy decision, the EU Standard Contractual Clauses or another lawful mechanism.
How long data is kept
- Local practice data remains until you clear the site data.
- Your account profile and synced progress are kept while the account is in use or until you request deletion.
- After a deletion request, data is erased or anonymised without undue delay, normally within 30 days, unless security or legal requirements require it to be retained.
- Technical logs are retained only as long as needed for operation and security.
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction or data portability, or object to processing. You may withdraw consent at any time without affecting processing that was lawful before the withdrawal.
When the account feature is active, you can also obtain a machine-readable copy and delete the profile, progress and test history stored by Provkollen under My progress. Deleting this data does not delete your account with the external sign-in provider.
Contact privacy@provkollen.se. We may need to verify that a request comes from the correct person. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Changes
This policy is updated when the service or its providers change. Material changes will be clearly announced on the website, and fresh consent will be requested when required by law.