Privacy Policy

This Privacy Policy describes how Shrixxenvorthral processes your personal data when you visit shrixxenvorthral.world or submit an order. We are committed to the principles of the EU General Data Protection Regulation (GDPR) and applicable Swedish law.

1. Data Controller

Shrixxenvorthral
Bonnorpsgatan 3, 5, 582 73 Linköping, Sweden
Phone: +46 851 766 000
Email: officeteam-ask@shrixxenvorthral.world

2. Data We Collect

We may collect and process the following categories of personal data:

Identity data: first name, last name.
Contact data: email address, telephone number (if provided).
Order data: product selection, delivery address, order history.
Communication data: messages sent via our contact form.
Technical data: IP address, browser type, device type, pages visited, time of visit (collected via cookies and server logs).

We do not collect special categories of personal data (health, biometric, genetic data, etc.).

3. Purposes & Legal Basis

We process your personal data for the following purposes:

Processing your order — legal basis: performance of a contract (GDPR Art. 6(1)(b)).
Communicating with you regarding your enquiry — legal basis: our legitimate interest (GDPR Art. 6(1)(f)).
Legal compliance — e.g. retention of accounting records — legal basis: legal obligation (GDPR Art. 6(1)(c)).
Improving our website through analytics cookies — legal basis: your consent (GDPR Art. 6(1)(a)).
Marketing and promotional communications — only with your explicit consent (GDPR Art. 6(1)(a)).

4. Retention Periods

Order and transaction records: 7 years (Swedish Bookkeeping Act / Bokföringslagen).
Marketing consent records: until withdrawn, plus 1 year thereafter.
Contact form messages: 12 months from receipt.
Technical / log data: up to 90 days.
Cookie-based analytics data: as defined in our Cookie Policy.

We do not sell your personal data. We may share your data with:

Payment processors — to process payments securely.
Logistics and delivery partners — to fulfil your order.
IT service providers — hosting, email, and analytics platforms acting as data processors under appropriate data processing agreements.
Regulatory authorities — if required by applicable law.

6. International Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms in accordance with Chapter V of the GDPR.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure ("right to be forgotten") (Art. 17)
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to object to processing (Art. 21)
Right to withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise your rights, contact us at officeteam-ask@shrixxenvorthral.world. We will respond within 30 days.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten — IMY): imy.se.

8. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data transmissions are encrypted via HTTPS/TLS.

9. Cookies

We use cookies and similar tracking technologies. For detailed information, please refer to our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated Policy.

11. Contact Us

For any questions, complaints, or requests relating to your personal data: