מדיניות פרטיות

Last updated: November 23, 2024

This Privacy Policy explains how Cavaier AB ("Cavaier", "we", "us", or "our") collects, uses, and discloses your personal data when you visit or buy from cavaier.com and our country-specific domains, or otherwise communicate with us (together, the "Services"). It also explains your rights under the EU General Data Protection Regulation (GDPR) and Swedish data-protection law.

Data controller

Cavaier AB is the controller of your personal data.

• Cavaier AB
• Birger Dahlerus Väg 12, 176 69 Järfälla, Sweden
• Company registration number (org. nr): 559267-9541
• VAT: SE559267954101
• Email: info@cavaier.com

If you have any questions about this policy or how we handle your data, contact us at the email above.

What personal data we collect

Information you give us directly:

• Contact details — name, address, phone number, email.
• Order information — name, billing and shipping address, email, phone number, and payment confirmation.
• Account information — username, password, and related security details.
• Customer-support information — whatever you include when you contact us.

Information we collect automatically: when you use the Services we collect usage data through cookies and similar technologies, which may include device and browser information, your IP address, network information, and how you interact with the Services. Non-essential cookies are only used with your consent (see "Cookies" below).

Information from third parties: we may receive data from providers who support the Services, such as Shopify (our store platform) and our payment processors, who collect the payment details needed to process your order.

How we use your data, and our legal bases

• To provide the Services — processing and fulfilling your orders, arranging shipping, managing your account, and handling returns, exchanges and withdrawals. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
• Marketing — we send marketing communications (such as email newsletters) only with your consent, for example when you subscribe. Where you are already a customer, we may send you information about our own similar products under the limited "soft opt-in", and you can object at any time. You can unsubscribe from any marketing message using the link it contains. Legal basis: your consent (Art. 6(1)(a)) and, for existing customers, our legitimate interest within the soft opt-in (Art. 6(1)(f)), in line with Swedish marketing law.
• Security and fraud prevention — to detect and prevent fraudulent, illegal or malicious activity. Legal basis: our legitimate interest in keeping the Services secure (Art. 6(1)(f)).
• Customer support and improving the Services — to respond to you and improve what we offer. Legal basis: our legitimate interest in serving you well (Art. 6(1)(f)).
• Legal compliance — to meet our legal and regulatory obligations. Legal basis: compliance with a legal obligation (Art. 6(1)(c)).

Cookies

We use cookies and similar technologies on our Site. Cookies that are strictly necessary for the Site to function are always active. All other cookies — including analytics and advertising cookies (such as those used by our analytics and advertising partners) — are set only after you give consent through our cookie banner. You can review and change your choices at any time via our cookie settings / Cookie Declaration. For details of the cookies used to power our store with Shopify, see https://www.shopify.com/legal/cookies.

How we disclose personal data

We share personal data only as needed to run the Services:

• Service providers (processors) acting on our behalf — for example IT, payment processing, analytics, customer support, cloud storage, and order fulfillment and shipping. They may process your data only on our instructions and under a data-processing agreement.
• Marketing and advertising partners, where you have consented, who use your data under their own privacy notices.
• Where you direct or consent — for example to ship your order or through social media or login integrations.
• Legal and business reasons — to comply with legal obligations (such as lawful requests from authorities), to enforce our terms, to protect our rights and those of others, or in connection with a business transaction such as a merger.

International transfers

To fulfill your order, order data (such as your name, shipping address and contact details) is transferred to and processed by our own fulfillment operation located outside the European Economic Area, including in China, where our inventory is stored and your order is dispatched.

We also use service providers — for example for email and SMS, analytics, advertising, reviews and payments — some of which are located outside the EEA, including in the United States. As a result, your personal data may be processed outside the EEA.

Where we transfer personal data outside the EEA to a country that has not been recognised by the European Commission as providing an adequate level of protection, we rely on appropriate safeguards, in particular the European Commission's Standard Contractual Clauses (and, for certified US providers, the EU–US Data Privacy Framework), together with additional measures where required. You can request more information about these safeguards using the contact details above.

Retention

We keep your personal data only as long as necessary for the purposes set out in this policy — for example to maintain your account, provide the Services, comply with our legal obligations (such as accounting and tax record-keeping), and resolve disputes or enforce our agreements. When data is no longer needed, we delete or anonymise it.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten"), in certain circumstances;
• restrict our processing of your data;
• data portability — receive your data in a portable format or have it transferred, where applicable;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• withdraw consent at any time where we rely on consent (this does not affect processing already carried out).

To exercise any of these rights, contact us at info@cavaier.com. We will respond within the time limits set by law. We may need to verify your identity before acting on a request.

Complaints

If you have a concern about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with a data-protection supervisory authority. In Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se. If you live elsewhere in the EEA, you may contact your local supervisory authority.

Children

The Services are not intended for children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. We will post the updated version here and revise the "Last updated" date above.

Contact

Cavaier AB Birger Dahlerus Väg 12, 176 69 Järfälla, Sweden Org. nr: 559267-9541 VAT: SE559267954101 Email: info@cavaier.com