COOKIES and PRIVACY POLICY regarding LakeHouse Media and its sub brands Midlife in Italy, Flytta till Fjällen etc.

Last updated: February 26, 2026

1. Introduction

This Privacy Policy explains how LakeHouse Media and its sub brands (”we," "us," "our"), collects, uses, stores, and protects your personal data when you visit our website, subscribe to our newsletter, purchase our products or services, or otherwise interact with us.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable Swedish data protection legislation, including the Swedish Data Protection Act (Dataskyddslagen, SFS 2018:218).

These terms apply to all transactions concluded through the websites and platforms of the LakeHouse Media network, including but not limited to: lakehousemedia.se, midlifeinitaly.com, flyttatillfjallen.se, and any other websites operated under the LakeHouse Media umbrella.

2. Data Controller

The data controller responsible for processing your personal data is:

Company:

LakeHouse Media and sub brand as Midlife in Italy, Flytta till Fjällen etc.

Legal form:

Enskild firma (Sole proprietorship)

Proprietor:

Pernilla Öberg

Organisation number:

690203-4625

VAT number:

SE690203462501

Address:

Vallrun 508, 835 63 Follinge, Sweden

Email:

info@lakehousemedia.se

Website:

https://www.lakehousemedia.se/

As a small business, we are not required to appoint a Data Protection Officer (DPO). For any questions or requests regarding your personal data, please contact us at adm@lakehousemedia.se.

3. What Personal Data We Collect

We collect different categories of data depending on how you interact with us.

3a. When you visit our website:

• Technical data: IP address, browser type and version, operating system, device type, referring URL

• Usage data: pages visited, time spent on pages, click behavior

• Cookie data: see Section 9 below

3b. When you subscribe to our newsletter:

• Email address

• First name 

• Subscription date and source

3c. When you purchase a digital product or service:

• First and last name

• Email address

• Billing address

• Company name and organisation number (if applicable, for B2B invoicing)

• Payment information (processed by Stripe or PayPal - we do not store your full card details)

• Transaction history and order details

3d. When you contact us:

• Name and email address

• Any information you include in your message

We do NOT collect sensitive personal data and we do NOT routinely collect Swedish personal identity numbers (personnummer).

4. Why We Process Your Data and Our Legal Basis

Under the GDPR, we must have a lawful basis for processing your personal data. Below is an overview of each processing purpose and its corresponding legal basis:

Purpose and Legal basis:

• Delivering purchased digital products and services: Performance of contract (Art. 6(1)(b))

• Processing payments: Performance of contract (Art. 6(1)(b))

• Sending order confirmations and delivery emails: Performance of contract (Art. 6(1)(b))

• Maintaining accounting and financial records: Legal obligation (Art. 6(1)(c)) - Swedish Bookkeeping Act

• Sending newsletters and marketing emails: Consent (Art. 6(1)(a))

• Responding to inquiries and providing customer support: Legitimate interest (Art. 6(1)(f))

• Analyzing website usage to improve our services: Consent (Art. 6(1)(a))

• Displaying targeted advertising (Facebook Pixel, remarketing): Consent (Art. 6(1)(a))

• Preventing fraud and ensuring security: Legitimate interest (Art. 6(1)(f))

Where processing is based on consent, you have the right to withdraw your consent at any time (see Section 7).

5. How Long We Keep Your Data

We retain personal data only as long as necessary for the purpose for which it was collected:

Data category, Retention period

• Accounting and financial records (invoices, transactions): 7 years from the end of the financial year, as required by the Swedish Bookkeeping Act

• Customer account and order data: Duration of the customer relationship + 24 months, unless longer retention is required by law

• Newsletter subscriber data: Until you unsubscribe, after which data is deleted within 30 days

• Customer support correspondence: 24 months from the date of the last communication

• Website analytics data: 14 months (Google Analytics default)

• Cookie data: See Section 9

After the applicable retention period has expired, we securely delete or anonymize your data.

6. Who We Share Your Data With

We never sell your personal data to third parties. We may share your data with the following categories of recipients, solely for the purposes described in this policy:

Recipient, Role, Purpose and Location

• Systeme IO (ITACWT Limited): Data processor, Website hosting, email marketing, course delivery, sales funnels, Ireland (EU) - data stored on AWS servers in Ireland

• Stripe: Data processor, Payment processing, USA - certified under the EU-US Data Privacy Framework

• PayPal: Data processor, Payment processing, USA/EU - uses Standard Contractual Clauses and DPF

• Google (Analytics): Data processor, Website analytics, USA - certified under the EU-US Data Privacy Framework

• Meta (Facebook Pixel, Comments): Joint controller / Data processor, Advertising, social commenting, USA - certified under the EU-US Data Privacy Framework; uses SCCs

To our knowledge all third-party processors have appropriate data processing agreements (DPAs) in place and provide adequate safeguards for your personal data.

7. International Data Transfers

Some of our third-party service providers are based in the United States. When your data is transferred outside the EU/EEA, we rely on one or more of the following safeguards:

• EU-US Data Privacy Framework (DPF): Stripe, Google, and Meta are certified under the DPF, which has been recognized by the European Commission as providing an adequate level of data protection.

• Standard Contractual Clauses (SCCs): Where applicable, we rely on SCCs approved by the European Commission as an additional or alternative transfer mechanism.

Your primary data in our email list, our website content and our course content is stored by Systeme IO on Amazon Web Services servers located in Ireland, within the European Union.

8. Your Rights Under the GDPR

You have the following rights regarding your personal data:

• Right of access - Request a copy of the personal data we hold about you

• Right to rectification - Request correction of inaccurate or incomplete data

• Right to erasure ("right to be forgotten") - Request deletion of your data, subject to legal retention requirements

• Right to restriction of processing - Request that we limit how we use your data in certain circumstances

• Right to data portability - Receive your data in a structured, commonly used, machine-readable format

• Right to object - Object to processing based on legitimate interest, including direct marketing

• Right to withdraw consent - Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at adm@lakehousemedia.se. We will respond to your request within one month.

Right to lodge a complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection:

Integritetsskyddsmyndigheten (IMY)

Box 8114

104 20 Stockholm, Sweden

www.imy.se

imy@imy.se

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. A cookie is a small text file stored on your device that helps us provide and improve our services.

9a. Types of cookies we use:

Cookie type, Purpose, Consent required

• Strictly necessary: Essential for the website to function (e.g., session management, security), No

• Analytics (Google Analytics): Understanding how visitors use our website, identifying popular content, detecting errors, Yes

• Marketing/Advertising (Facebook Pixel, Google Ads remarketing): Displaying relevant advertising on social media platforms based on your browsing behavior, Yes

• Third-party/Embedded content: Cookies set by embedded content (e.g., YouTube videos, social media plugins), Yes

9b. Cookie consent:

When you first visit our websites, you will be presented with a cookie consent banner. Non-essential cookies (analytics, marketing) are only activated after you have given your explicit consent. You may change or withdraw your cookie preferences at any time by clicking the cookie settings button in the footer of our websites.

You can also configure your browser to block or delete cookies. Please note that blocking essential cookies may impair website functionality.

9c. Facebook Pixel:

We use Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram and to show you relevant content. When enabled (with your consent), Meta Pixel collects data about your browsing behavior on our website and shares it with Meta. For more information, please see Meta's Privacy Policy.

9d. Google Analytics:

We use Google Analytics 4 (GA4) to analyze website traffic and usage patterns. When enabled (with your consent), GA4 collects anonymized usage data. IP anonymization is enabled by default in GA4. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. For more information, see Google's Privacy Policy.

10. Embedded Content

Our website may include embedded content from third-party platforms (e.g., YouTube videos, Canva, social media posts). Embedded content behaves as if you had visited the third-party website directly. These platforms may collect data about you, use cookies, and monitor your interaction with the embedded content, particularly if you are logged into an account with that platform.

11. Newsletter and Email Communication

When you subscribe to our newsletter through one of our opt-in forms, you give your explicit consent for us to store your email address and send you emails containing information, tips, stories, and occasional promotional offers related to LakeHouse Media and its sub brands such as Midlife in Italy, Flytta till Fjällen etc.

Your email data is stored and processed by our email platform provider, Systeme IO, on servers located in Ireland (EU).

You can unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of every email, or by contacting us at adm@lakehousemedia.se.

12. Testimonials and References

We may display testimonials, quotes, images, or videos from customers or community members who have given us their prior, explicit consent. These are retained until they are replaced or until the individual requests removal. To request removal of your testimonial, please contact us at adm@lakehousemedia.se.

13. Comments

The comment function on our website is provided by Meta's embedded comment plugin. To leave a comment, you must be logged into your Facebook account. Meta processes your data in accordance with their own privacy policy. We have no control over the data Meta collects through this plugin.

14. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. These measures include:

• Encrypted data transmission via SSL/TLS (visible as the lock icon in your browser's address bar)

• Use of reputable, security-certified hosting and service providers

• Password-protected access to administrative systems

• Regular backups

• Antivirus protection and up-to-date software

While we take all reasonable precautions, no method of transmission or storage is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

15. Whether Providing Data Is Required

Providing your personal data is not a statutory requirement. However:

• If you wish to purchase a product or service, we need your name, email, and payment details to fulfill the contract. Without this data, we cannot process your order.

• If you wish to subscribe to our newsletter, we need your email address. Without it, we cannot send you emails.

• Browsing the website without providing any personal data is possible if you decline all non-essential cookies.

16. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you. Any targeted advertising (via Facebook Pixel or Google Ads) is managed by those platforms and subject to their respective privacy policies and your consent.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legislation. When we make material changes, we will update the "Last updated" date at this page. We encourage you to review this page periodically.

18. Contact

If you have any questions about this policy or how we handle your personal data, please contact us:

Email: adm@lakehousemedia.se

Address: LakeHouse Media, Vallrun 508, 835 63 Föllinge, Sweden

Last updated: February 26, 2026