Privacy & data

Plain version: I collect the email you give me, use it to send the free mini-course and related emails about Cowork for HR, and that is it. I never sell your data, and I never share it for anyone else's marketing.

The rest of this page is the detail the GDPR asks me to give you, in normal language.

Who is responsible

The data controller is Johannes Sundlo, FullStackHR (Sweden). Questions, or any request about your data, go to johannes@fullstackhr.io.

What I collect

• The email address you type into the form.
• A consent record: the exact wording you agreed to, plus the date, time, IP address and browser, so I can prove your consent was freely given if I am ever asked.
• Email engagement: whether an email was opened and which links were clicked, through my email provider.
• Site analytics: cookieless, anonymous visit counts (Vercel Web Analytics, no personal data, no tracking across sites), plus an advertising pixel that measures visits and sign-ups so I can see whether an ad worked. See the "Advertising pixel" section below.

Why I use it, and the legal basis

I use your email to send you the mini-course, a few follow-ups, and the occasional offer about Cowork for HR and the bootcamp. The legal basis is your consent (GDPR Article 6(1)(a)), given by ticking the box on the form. You can withdraw it at any time, which does not affect anything sent before you withdrew.

Who processes it for me

• Resend stores the contact and sends the emails. Data is processed in the EU.
• Vercel hosts this page and runs the sign-up function.
• Meta (Facebook/Instagram) receives the advertising-pixel signals described below, only if you accept.
• PostHog (EU region) records product analytics and session replay, only if you accept.

These are processors acting on my instructions. I do not sell your data and I do not share it for any third party's own marketing.

Cookies and tracking (your choice)

The only tracking that runs before you choose is anonymous, cookieless visit counting. Everything else waits for your consent through the banner:

• Meta Pixel tells Meta that a visit and a sign-up happened so I can measure my ads. This can transfer data to Meta in the US under standard EU safeguards.
• PostHog session analytics and replay records how the page is used (clicks, scrolling, a replay of the visit with form inputs masked) so I can improve it. Data is processed in the EU.

If you decline, neither loads and no cookies are set. You can change your mind by clearing this site's data in your browser, which brings the banner back.

How long I keep it

I keep your email and consent record while you are subscribed, and remove them within a reasonable period after you unsubscribe, except where I must keep the consent record longer to show past compliance. Ad-measurement data follows Meta's own retention.

Your rights

Under the GDPR you can ask me to give you a copy of your data, correct it, delete it, restrict or object to its use, or hand it to another provider. You can withdraw consent at any time using the unsubscribe link in any email, or by writing to johannes@fullstackhr.io. Unsubscribing also cancels any follow-up emails still scheduled for you.

Complaints

If you think I have mishandled your data, you can complain to the Swedish authority, Integritetsskyddsmyndigheten (IMY), at imy.se.

Cowork for HR · FullStackHR · Controller: Johannes Sundlo · Last updated 4 July 2026