Privacy Policy

Who is responsible?

People Prosperity AB is the data controller for the processing described here. Markus Amanto handles enquiries on behalf of the company.

Privacy enquiries: This email address is being protected from spambots. You need JavaScript enabled to view it.

When you contact me

The contact form collects your name, email address and message. If you include your organization, telephone number or other information in your message, we also process that information. Email correspondence can include technical message information.

We use this information to answer questions, discuss courses, workshops or coaching, and follow up your enquiry. Our legal basis for general enquiries and contact with representatives of organizations is our legitimate interest in communicating with people interested in our work. When you personally request steps towards a contract, such as a proposal for individual coaching, the legal basis is taking those steps at your request before entering into a contract. Necessary administration of an agreed service is based on performance of that contract.

Contacting us is voluntary. Without an email address or another way to reach you, we may be unable to respond. Please avoid sending personal identity numbers, health information or other sensitive information through the form.

Storage and email delivery

Convert Forms stores submissions in the website's database at HostUp and sends a notification email to Markus Amanto. We use Google Workspace to receive and handle enquiry emails.

We review the form database monthly and delete submissions older than six months. Submissions therefore normally remain in the active database for no more than approximately seven months.

Email correspondence is retained for as long as it is needed to handle the enquiry or an ongoing customer relationship. After that, we assess whether it still serves a necessary purpose or can be deleted. Information needed for a legal obligation, such as accounting, or a specific legal claim may need to be retained longer. Those purposes are assessed separately.

Website operation and security

Delivering pages, investigating errors and protecting the site against misuse involves processing technical information. This can include IP addresses, request times, requested addresses, browser information and error details. The legal basis is our legitimate interest in providing a functioning, secure website and preventing misuse.

• Access logs: HostUp processes the active log nightly. Archived access logs are retained on the hosting account for up to approximately two months.
• PHP error logs: our cleanup routine rotates logs daily and deletes archives after 30 days. New entries therefore normally remain on the active account for up to approximately 31 days. Older history archived when the routine was introduced is deleted 30 days after archiving.
• Admin Tools: blocked requests can be logged with IP address, time, request details and reason for blocking. The daily cleanup is configured to retain the latest 1,000 entries. This is a record limit, not a fixed retention period, and the count may temporarily be higher between runs.

HostUp's Awstats, Webalizer and Analog statistics tools are disabled for this domain, and old reports have been removed. Operational and security logs are separate from Google Analytics and are not switched off by declining optional cookies.

If a cleanup task is delayed or fails, information may temporarily be retained longer. Deleted information may also remain in backups as described below.

Spam protection: Google reCAPTCHA

The contact form uses Google reCAPTCHA to help prevent automated spam and misuse. It loads on the contact page, including before an optional-cookie choice has been made or after optional cookies have been declined.

When it loads, Google receives technical information such as your IP address, browser information and interactions with the service. It can also use cookies. Our legal basis for processing personal information to protect the form is our legitimate interest in maintaining a usable, secure contact channel.

reCAPTCHA is separate from the optional Analytics and External Media controls. You can instead email This email address is being protected from spambots. You need JavaScript enabled to view it. without using the form. Google explains its processing in its Privacy Policy.

We load reCAPTCHA through www.recaptcha.net rather than www.google.com. This avoids sending or setting google.com cookies through this integration. It remains a Google service and still uses its own reCAPTCHA cookie.

Google Analytics, with your consent

If you allow Analytical Cookies, we use Google Analytics to understand use of the site and improve its content and navigation. The information can include page views, clicks, referral sources, times, device and browser information, approximate location, and identifiers distinguishing browsers and sessions. These reports are not necessarily anonymous just because we mainly use summaries.

The legal basis is your consent. Analytics is loaded after approval of that category. The property's retention settings are two months for event data and 14 months for user data, with renewal of the user-data period on new activity enabled. These settings do not determine retention of every aggregated report or the expiry of cookies.

Embedded videos, with your consent

Some pages contain YouTube or Vimeo videos. Allowing External Media loads the external player. The provider then receives information such as your IP address, the page involved, browser information and interactions with the player. It may use cookies and other browser storage, and may associate activity with an account you hold with it.

The legal basis for our use of these optional embedded services is your consent. Information about provider storage and links to their policies are on Cookies and Your Choices.

You can change your cookie preferences and withdraw consent at any time. Save your choices and reload the page. Withdrawal does not affect processing already carried out lawfully, automatically erase information already collected, or necessarily remove existing provider cookies.

Records of cookie choices

Web357, our cookie manager, records cookie decisions, the time, selected categories and whether the visitor is a guest or registered user in the website database. IP logging for these decisions is switched off; older records may contain IP addresses until deleted.

We use these records to document and follow up consent handling. Where consent must be demonstrated, the legal basis is our legal obligation to be able to demonstrate it. Daily cleanup is configured to delete records older than 90 days, so they normally remain on the active site for up to approximately 91 days.

Providers and recipients

We do not sell your personal information. Access is limited to people and providers who need it for the purposes described here. We use data processing agreements where a provider processes information on our behalf.

• HostUp: website hosting, database, hosting logs and account backups within the EU. Its data processing agreement forms part of the hosting subscription.
• Google Workspace: receiving and handling enquiry emails.
• Amazon Web Services: our additional website backups in Amazon S3 in Ireland.
• Google: reCAPTCHA, consent-based Analytics and YouTube video services.
• Vimeo: embedded video services when External Media is allowed.

Information may also be disclosed where required by law or where necessary to establish, exercise or defend legal claims.

International processing

Google's services and external video services can involve processing outside the EU/EEA, including in the United States. Hosting a website or collecting information in Europe does not mean every provider processes it only in Europe.

Google describes its reliance on adequacy decisions, including the EU–US Data Privacy Framework for covered certified recipients, and standard contractual clauses where required. See Google's transfer safeguards. For Vimeo, see its Privacy Policy, including its international transfer information. Contact us for information about the safeguards applicable to your information or how to obtain a copy where available.

Backups

Backups support recovery after technical problems. HostUp makes daily backups of the hosting account, including files, databases, hosted email and logs, and retains the latest 14 days of restore points. Deleted account information can therefore remain in these backups for up to 14 days. Google Workspace email is separate from email stored in the hosting account.

We also make weekly Akeeba backups of the website's files and database to Amazon S3 in Ireland, retaining them for up to six months. Deleted database information can remain in these copies for up to six months after removal from the active website.

Backups are used for recovery rather than ordinary access to deleted records. If an older backup is restored, previously required deletions need to be applied again.

Course platforms and other linked websites

This page covers the public MarkusAmanto.com website and enquiries described above. Our course school at app.markusamanto.com uses Zenler. Visiting that school, creating an account, enrolling or purchasing involves additional processing governed by the school's Privacy Policy. Zenler provides the platform; it is not the hosting provider for this public Joomla website.

Udemy and other linked websites, including LinkedIn and MarkusAmanto.se, have their own privacy and cookie information. Following a link opens that service; your cookie choices here do not automatically apply there. No course account or purchase is required to browse this public website.

Your rights

You can ask for access to your personal information and correction of inaccurate information. Depending on the processing and the conditions in the GDPR, you can also request deletion, restriction or portability of information you have provided, object to processing based on legitimate interests, and withdraw consent for future processing.

These rights are subject to conditions; for example, information needed for a legal obligation may have to be retained. We may need enough information to confirm that we are responding to the correct person. Requests are normally answered within one month, with any lawful extension explained.

Email This email address is being protected from spambots. You need JavaScript enabled to view it. to ask a question or exercise your rights. We do not use information described here for solely automated decisions with legal or similarly significant effects.

You may complain to the Swedish Authority for Privacy Protection, IMY, or another competent supervisory authority.

Last updated: 4 November 2026. We update this page when the website or our processing changes.