Privacy policy

Publisher and manager

Wood Plastic Composite Solutions
Klågerupsv. 361, 212 36 Malmö, Sweden

Data controller: Wood Plastic Composite Solutions

info@woodplasticcomposite.net

Information we process

We process your chosen display name, contribution, article reference, dates, moderation status and consent record. Technical records may include IP addresses, browser details and security events. Guest discussions use hashed browser/network identifiers for management and abuse prevention. Local accounts additionally hold email, display name, password hash and session records. Direct enquiries include your contact details and message.

Public names and comments

Posting is voluntary. You may use a pseudonym or an organisation name you are authorised to represent. Names are not verified. Company names may identify individuals. Approved names, messages and replies are public worldwide and may appear in search engines. Pending submissions remain private. Do not submit sensitive, confidential or other people's personal information.

Purposes and legal bases

Consent under GDPR Article 6(1)(a) covers storing, reviewing and publishing your contribution. Website delivery, moderation, account security, correspondence and abuse prevention rely on legitimate interests under Article 6(1)(f). Applicable legal obligations rely on Article 6(1)(c). Reading requires no contribution. Security checks do not constitute solely automated decisions with legal or similarly significant effects; editors approve publication.

Hosting and recipients

The application and database are hosted by Hetzner in Germany. Access is limited to authorised staff and necessary service providers, subject to appropriate confidentiality and processing arrangements. We do not sell personal data or provide it for third-party advertising. Disclosure may be necessary to comply with law or establish or defend legal claims.

DNS and international access

Cloudflare supplies DNS only, not website proxying: submissions go to our hosting server. DNS-related processing is governed by Cloudflare's privacy information and is not guaranteed to remain in the EU. We do not intentionally transfer private contribution records outside the EU/EEA. Public posts are accessible worldwide. Any restricted provider transfer requires an applicable GDPR transfer mechanism; external links have their own policies.

Google Analytics and your choice

Optional Google Analytics 4 (G-D4X4CD4GSS) is used only after your consent under GDPR Article 6(1)(a). No Google analytics script or consent ping is sent before acceptance. It measures page visits, sessions and engagement using cookie identifiers, browser/device information and approximate location derived by Google from the connection IP address. Google states that GA4 does not log or store individual IP addresses. This integration sends public page paths without query strings or fragments and does not deliberately send names, email addresses or comment content. Google Signals, advertising personalisation and advertising consent are disabled. Necessary login, discussion and theme storage remains separate. Closing the settings does not give consent. Rejecting or withdrawing analytics does not prevent use of the site.

Google and international transfers

Wood Plastic Composite Solutions is the controller. The application and database remain hosted by Hetzner in Germany; Cloudflare provides DNS only. Consented analytics is processed by Google, including Google Ireland Limited and Google LLC and authorised subprocessors. Processing may occur outside the EU/EEA, including in the USA. Applicable Google data-processing terms and transfer safeguards apply, including the EU–US Data Privacy Framework for covered certified recipients or standard contractual clauses where appropriate. Consent to analytics is not a substitute for transfer safeguards. Data is not sold. Contact info@woodplasticcomposite.net to exercise your rights, request safeguard information or seek deletion; you may complain to IMY.

Analytics storage and retention

wpc_analytics_consent_v1 stores your choice, policy version, decision time and expiry locally for 180 days; it is not sent to Google. If browser storage is unavailable the choice lasts only for the current page. After acceptance, first-party _ga and _ga_D4X4CD4GSS cookies last up to 180 days with renewal on visits disabled. Use Cookie settings → Reject analytics to withdraw; this stops future collection, removes these cookies and reloads the page if needed. It does not erase previously collected data or affect earlier lawful processing. The required GA4 setup uses two-month user/event retention with reset on new activity disabled. Aggregated reports may be retained longer; that setting does not delete all reports. Contact us about earlier data. Old wpc_cookie_notice_v1 preferences are not analytics consent.

Retention

Pending contributions expire after 90 days; approved contributions expire 365 days after approval. Guest rate-limit records expire within approximately two days, with periodic cleanup. Account data remains while needed for the account; contact us for removal. Logs are retained only as needed for operation, investigating incidents and claims. Correspondence is kept until resolved and any necessary follow-up or claim period ends. Backup copies remain until rotation and must not restore deleted contributions to public view. Contact us for the applicable schedule. Specific legal obligations may require limited longer retention.

Your rights and contact

You may request access, correction, erasure, restriction and, where applicable, portability; object to legitimate-interest processing; or withdraw consent without affecting earlier lawful processing. Use the contribution controls or contact us. Clearing a browser cookie may remove self-service access; contact us instead. We may request proportionate verification. We normally respond within one month, explaining any permitted extension. You may complain to IMY in Sweden or your competent supervisory authority. Appropriate safeguards protect data, but absolute security cannot be guaranteed.

Changes and reports

Report privacy issues, harmful content, suspected rights infringement or material errors to the contact below. Include the relevant URL and enough detail for review; avoid unnecessary sensitive data. We update these policies when processing or functionality changes. Mandatory applicable law continues to apply.

Links and supervision

Privacy contacts and complaints do not require posting a public comment. The links below provide provider information and the Swedish supervisory authority's complaint procedure.