Privacy policy

This following privacy policy:

– explains what we do with the personal data of the Customer* and/or the Buyer;
– explains how we collect, use and protect the personal data of the Customer and/or the Buyer;
– helps the Customer and/or the Buyer understand how their personal data is collected and used and what their rights are in relation to their personal data.
* An Anvol Nordic AB Customer is a person who has registered as a Customer in the e-shop or retail shop without making a purchase.

1. General

The chief processor of personal data is Anvol Nordic AB, registry code 559353-4711, address Wallingatan 34, 111 24 Stockholm.
When processing the personal data of the Customer and/or the Buyer, Anvol Nordic AB follows the legislation of Estonia and the European Union.
All personal data of the Customer and/or the Buyer held by Anvol Nordic AB is collected directly from the Buyer and/or the Customer.
We use the personal data of the Customer and/or the Buyer for the purposes Anvol Nordic AB has collected such data for and to the extent necessary to fulfil these purposes. If the purpose of collecting personal data is met, we will delete excess personal data as follows:
a. Customer card data 7 years after data collection;
b. E-shop user account data 7 years after data collection.
c. Personal data 7 years after the purchase.
Anvol Nordic AB may change the privacy policy at any time in accordance with the requirements of personal data protection.

2. Processing of personal data for direct marketing purposes

a) Anvol Nordic AB’s Customers and Buyers can join direct marketing offers.
b) Direct marketing channels include SMS, e-mail and regular mail.
c) For the purposes of direct marketing, Anvol Nordic AB transmits the Customer’s personal data to direct marketing service providers in accordance with the requirements for the protection of personal data.
d) Anvol Nordic AB’s Customers and Buyers voluntarily consent to the processing of their personal data for the purpose of direct marketing.
e) Consent for direct marketing is given by the Customer and/or the Buyer by marking the relevant consent box.
f) Consent for the processing of personal data for the purpose of direct marketing is given by the Customer and/or Buyer by voluntarily registering as a user in the e-shop, when making a purchase in the e-shop, filling in the necessary fields when visiting the e-shop website or by filling in the necessary fields on the loyalty card registration form.
g) Anvol Nordic AB forwards the personal data of the Buyer and/or the Customer to the partners providing direct marketing services.
h) The Customer and/or Buyer has the right to withdraw their consent for the processing of personal data for the purpose of direct marketing at any time. This does not affect the previous processing of personal data that was based on the Customer and/or Buyer’s consent.
i) Processing of personal data for the purpose of direct marketing will be terminated by revoking the consent given by the Customer and/or Buyer.
j) Anvol Nordic AB’s e-shop uses information technology solutions based on legitimate interest, which enable the Customer and/or Buyer to get personalised offers.
k) A Customer who has registered as a user in the e-shop can revoke their consent to receive direct marketing materials at any time by logging in to the e-shop or contacting the data protection officer at Anvol Nordic AB directly.
l) The Customer and/or Buyer may request the deletion, correction, renewal or suspension of the processing of their personal data collected for the purposes of direct marketing at any time. In order to delete, update or suspend the processing of personal data, the Customer and/or Buyer must e-mail klient@anvol.eu or fill in the inquiry form that can be found here

3. Processing of personal data for the purchase and sale agreement

a) Personal data is collected from the Buyer for signing a purchase and sale agreement.
b) In order to sign a purchase and sale agreement, it is necessary to collect the following personal data from the Buyer: first and last name, phone number, e-mail address and address for delivery of goods.
c) The Buyer’s personal data collected by the purchase and sale agreement may be transferred by Anvol Nordic AB to third party contractual partners (providers of parcel transport service/courier service/direct marketing service).
d) Pursuant to the Accounting Act, the personal data of the Buyer collected upon concluding a purchase and sale agreement will be stored for 7 years.

4. Rights of the Customer and the Buyer

The rights of the Customer and/or Buyer are important to Anvol Nordic AB. In the following we will give an overview of all the rights of Customers and Buyers in relation to their personal data.
Customers and Buyers have the following rights:
a) The Customer and/or Buyer can contact Anvol Nordic AB with questions related to the processing of personal data at any time by e-mailing klient@anvol.eu .
b) The Customer and/or Buyer may contact Anvol Nordic AB to gain access to their personal data at any time.
c) The Customer and/or Buyer have the right to contact Anvol Nordic AB at any time to update their personal data.
d) The Customer and/or Buyer may ask Anvol Nordic AB to delete their personal data (right to be forgotten).
e) The Customer and/or Buyer may ask Anvol Nordic AB to restrict the processing of their personal data or submit objections to the processing of their personal data.
f) The Customer may ask Anvol Nordic AB to transfer their personal data to a new data processor.
g) The Customer and/or Buyer may contact the data protection officer of Anvol Nordic AB with questions concerning the processing of their personal data by e-mailing klient@anvol.eu
h) The Customer and/or Buyer have the right to turn to the Data Protection Inspectorate with complaints concerning the processing of personal data.

5. Transfer of personal data

Anvol Nordic AB transmits the personal data of the Customer and/or the Buyer to the following third parties:
a) Contracted transport or courier service providers;
b) Direct marketing service providers, with consent;
c) The accounting service provider to fulfil obligations arising from the law;
d) Contracted IT service providers;
e) Other parties to fulfil obligations arising from the law.

6. Data protection officer

a) The data protection officer of Anvol Nordic AB is Gert Gross.
b) The data protection officer of Anvol Nordic AB is available by e-mail at klient@anvol.eu .
c) The data protection officer is obliged to respond to the inquiries of the Customer and/or Buyer within 30 days of receipt of the e-mail.

7. Integrated and default data protection

a) Anvol Nordic AB will take all reasonable technical and organisational measures to ensure the security of the Buyer’s personal data.
b) Anvol Nordic AB ensures that the information systems, other technologies and internal work systems used have the relevant and up-to-date security measures that are necessary for the secure processing of personal data.
c) All personal data of the Customer and/or Buyer gathered through visiting and ordering through the e-shop will be treated as confidential information. An encrypted data communication channel with banks ensures the security of the Buyer’s personal data and bank details.

The recipients of personal data are:

Customer orders and invoices:
– Directo (business software)
Suppliers – for delivery:
– Postnord
Payment intermediaries – for payment:
– Bambora Checkout
– Klarna
Statistics collectors – for collection of information with the purpose of improving the user experience in the e-shop:
– Google Analytics
– Hotjar
Marketing channels:
– Omnisend