Privacy policy

[företagsnamn], a sole trader in France, is the controller responsible for processing your personal data.

• Address: [adress]
• Email: [e-post]

Contact us at [e-post] if you have questions about how we process your data.

When you shop with us, we process:

• your name
• your email address
• your mobile number
• your delivery address
• what you ordered, prices and the delivery option you chose
• payment status, meaning whether your payment went through, and a payment reference
• what you write to us when you contact customer service

We get this data from you. From the payment service provider, we receive the payment status and the contact details you entered on the payment page. We never receive your card details.

• To carry out your purchase: receive and deliver your order, receive your payment, send the order confirmation and handle withdrawals and complaints. Legal basis: contract (Article 6(1)(b) GDPR).
• To comply with bookkeeping rules, which require us to keep records of our sales. Legal basis: legal obligation (Article 6(1)(c) GDPR).
• To reply when you contact customer service. Legal basis: contract when your question concerns a purchase, otherwise our legitimate interest in being able to answer questions (Article 6(1)(f) GDPR).
• To prevent fraud and misuse of payments. Legal basis: our legitimate interest in protecting you and us against fraud (Article 6(1)(f) GDPR).

We need this data to receive and deliver your order. Without it, you cannot shop with us.

We do not send newsletters or marketing emails. We do not make decisions about you based solely on automated processing.

We share data with the recipients needed to carry out your purchase:

• Our payment service provider, which receives your payment. It receives the order number, items and amount from us, and you enter your payment details directly on its payment page. The provider may itself be a controller for part of the processing, for example to prevent fraud and to comply with payment regulations.
• The email service Brevo (France, EU), which sends order confirmations and other emails about your order.
• The carriers that deliver your order. They receive your name, delivery address and mobile number, and sometimes your email address, so that they can deliver your parcel and notify you.
• Our hosting provider in the EU, where the online shop and its database are hosted.

If a recipient processes data outside the EU/EEA, this only happens with the safeguards required by the GDPR, such as the European Commission's standard contractual clauses.

We may also be required to disclose data to public authorities when the law requires it.

• Data that forms part of our accounting records, for example about your order and payment, is kept for 10 years because French law requires it.
• Other data about your order, for example your email address and mobile number, is kept for as long as you can make a complaint about the goods, that is 3 years after delivery, and longer only if a case is ongoing.
• Emails to customer service are kept while the case is open and then for as long as you can make a complaint about the goods.

After that, we delete the data or make it anonymous.

We do not use cookies for tracking, statistics or advertising, and we use no analytics or advertising tools.

Your cart is saved in your browser's local storage (localStorage) on your device, so that it is still there when you move between pages or come back later. This storage is needed for the cart to work, so it does not require consent. You can empty your cart at any time or clear the site data in your browser settings.

When you pay, you are on the payment service provider's payment page, where the provider's own information about personal data and cookies applies.

You have the right to:

• know what data we hold about you and get a copy of it
• have incorrect data corrected
• have your data erased, except data we must keep by law
• ask us to restrict the processing of your data
• receive the data you have given us in a machine-readable format (data portability)
• object to processing based on our legitimate interest

Email us at [e-post] if you want to use any of your rights.

Do you think we are processing your personal data incorrectly? Please contact us first. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or with the French data protection authority CNIL (Commission nationale de l'informatique et des libertés).

If we change how we process personal data, we will update this policy and the date at the top of the page.