Privacy Policy

Dahlfjord Privacy Policy

Your privacy is important to Dahlfjord Group AB (“Dahlfjord” or “we”). In this policy, we want to inform you about how we process your personal data and what rights you have. Personal data is information that can be linked to you as an individual, such as your name and contact information.

In summary, we process your personal data:

To the extent necessary to process and deliver your order.
To provide you with offers and inspiration through newsletters, text messages, targeted personalised marketing on social media, and other online and offline channels.
To communicate with you and answer your questions.
To ask you about Dahlfjord and your experience with us.
To remind you about an abandoned “shopping cart”.
To create and maintain a customer account.
To comply with laws and regulations (e.g. consumer and accounting legislation).

You have several rights under data protection legislation. For example, you always have the right to object to marketing. You can also read about how you can influence our processing of your personal data and what rights you have. Would you like to know more? Please read our detailed explanations below. You can read about how, why and for how long we process your personal data.

Who is responsible for processing your personal data?

Dahlfjord, with company registration number 559538-5112, is the data controller responsible for processing your personal data. Please note that our payment solution providers process personal data that they obtain from our website when purchases are made and are independently responsible for their processing.

Contact details

If you would like to contact us about the processing of your personal data, please contact us at info@dahlfjord.com.

From whom or where do we obtain your personal data?

We process personal data that you have shared with us or that we obtain from you in connection with your purchase and when you visit our website.

Who may access your personal data?

Your personal data is mainly processed by us at Dahlfjord. We will never sell your personal data. In certain cases, we share your personal data. Further details about the purposes for which we share specific personal data are provided below. Among other things, we may need to share your personal data in order to fulfil our obligations to you properly and efficiently, for example:

To ensure that you pay us, our payment solution providers will have access to your personal data.
To deliver your products to your home address or collection point and to process returns, we will share your personal data with our shipping companies.
To collect and publish your reviews on our website, we share your personal data with the provider that supplies us with the technical solutions used to collect and publish reviews.
To market relevant products and make our website as relevant as possible, we share your personal data with providers of marketing services, such as Google and Facebook.
We will share your personal data with IT providers that process the personal data on our behalf as processors to assist us with IT services.

Do we transfer your personal data outside the EU/EEA?

Dahlfjord generally processes your personal data within the EU/EEA, but in individual cases we use providers from countries outside the EU/EEA. When we transfer your personal data outside the EU/EEA, we ensure that an adequate level of protection is in place to ensure that the transfer is carried out in accordance with the GDPR. Dahlfjord may transfer your personal data to the United States, to our newsletter provider and to our providers that supply services for marketing relevant products and making our website as relevant as possible. Contact us if you have any questions about how we share your personal data.

How can you influence the processing of your personal data?

Under data protection legislation, you have several rights that allow you to influence our processing of your personal data. More detailed information about your rights is provided below. If you have any questions about this or wish to exercise any of these rights, you are welcome to contact us.

Right to withdraw consent

Where we base the processing of your personal data on consent, you have the right to withdraw your consent to the processing of your personal data at any time. Your withdrawal will take effect from the time you withdraw your consent.

Right to object

You have the right to object at any time to the processing of your personal data based on legitimate interests, on grounds relating to your particular situation. Read more below about what a balancing of interests means. You always have the right to object to direct marketing from us, such as newsletters. In certain other cases, the right to object does not apply (e.g. where we are legally required to retain your personal data).

Right of access

You have the right to obtain confirmation as to whether we process personal data relating to you. You can send your request to info@dahlfjord.com. If we process your personal data, you have the right to access a copy of the personal data we process and information about the processing.

Right to rectification

You have the right to have inaccurate personal data relating to you corrected and to ask us to complete incomplete personal data.

Right to erasure (“right to be forgotten”) and restriction of processing

Under certain circumstances, you have the right to have your personal data erased. This applies, for example, if the personal data is no longer necessary for the purpose for which it was collected or processed, or if you withdraw the consent on which the processing is based and there is no other legal basis for continuing the processing. You also have the right to request that Dalfjord restrict the processing of your personal data. This applies, for example, when you contest the accuracy of the personal data or if the processing is unlawful and you oppose the erasure of the personal data and instead request that its use be restricted. It also applies while we assess the balancing of interests in cases where you object to our processing of your personal data.

Right to lodge a complaint with a supervisory authority

You always have the right to lodge a complaint with a supervisory authority. You may do so in the specific EU/EEA Member State where you reside, where you work or where an alleged infringement of applicable data protection legislation has occurred. In Sweden, the Swedish Authority for Privacy Protection (IMY) is the supervisory authority.

How and why do we process your personal data?

Our goal is to be as transparent as possible about how and why we process your personal data. In the tables below, you can find more detailed information about why we process your personal data (the purposes of the processing), which personal data we process, our legal basis for processing your personal data and how long we process your personal data for each purpose.

Processing required to complete purchases

We process your personal data so that we can complete your purchase and, for example, deliver the product. Please note that our payment solution providers also process your personal data to administer payment for your order. Our payment solution providers are independent data controllers for such processing. Some of our payment solution providers allow you to choose a simpler way to complete purchases by automatically filling in your personal data or remembering you on your device.

Purpose of the processing	Personal data processed	Legal basis for the processing	How long do we retain the data?
Your profile with Dahlfjord and your history of orders, communications and service cases.	Name, contact details, personal identity number, and information about your history of orders, communications and service cases	Performance of a contract	Until you choose to delete your profile
Newsletters and targeted advertisements	Name, address, telephone number, email address, purchase history	Consent	Until you withdraw your consent (opt out)
Interaction with Dahlfjord	Name, contact details, reviews, questions and answers	Legitimate interests	Until you choose to delete your information
To administer your purchase and deliver goods	Name, contact details, order information, delivery address, account details	Performance of a contract (B2C), legitimate interests (B2B)	36 months + delivery time
Communication with customer service	Name, contact details, information provided in the customer service case.	Legitimate interests	36 months
Accounting for transactions	Name, contact details, order and payment information	Legal obligation	From the time you complete your purchase and for seven to eight (7–8) years in accordance with Swedish accounting legislation and five to ten (5–10) years under anti-money laundering legislation.