Privacy Policy

INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA BY TRE FYRA POSTERS

Tre Fyra Posters is committed to protecting your personal integrity. This includes transparency regarding the processing of personal data, refraining from selling personal data to third parties, and complying with applicable data protection legislation, including the General Data Protection Regulation (GDPR).

This document describes how your personal data is processed, your rights as a data subject, and how to contact us with questions or concerns.


DATA CONTROLLER

Tre Fyra Posters, registration number 901130-2792, is the data controller responsible for the processing of your personal data.


PROCESSING OF PERSONAL DATA

Tre Fyra Posters processes personal data in a lawful, fair, and transparent manner. We ensure that you receive clear and comprehensible information regarding how your personal data is collected, used, stored, and protected.

You may contact us at any time if you have questions regarding our processing of personal data.


CATEGORIES OF PERSONAL DATA COLLECTED

We collect personal data when you visit the Tre Fyra Posters website as an identified customer, place an order, or otherwise interact with us. Such data may include, but is not limited to:

  • Full name

  • Billing and delivery address

  • Email address and telephone number

  • Payment information

  • Purchase, order, and usage history

  • IP address

  • Images and other information provided in connection with customer service inquiries

Payment card information is processed securely by our payment service providers. Tre Fyra Posters does not store or have access to your credit card details. All payment data is transmitted and stored on encrypted servers.

Personal data is transferred via secure servers using SSL encryption.

The webshop is hosted by Shopify Inc., which provides the e-commerce platform. Personal data is stored through Shopify’s data storage systems in accordance with Shopify’s privacy policy.


PURPOSES AND LEGAL BASES FOR PROCESSING

Personal data is processed for the following purposes and legal bases:

  • Performance of a contract (order management, delivery, and payment processing)

  • Legitimate interest (customer service, service improvement, fraud prevention)

  • Consent (marketing communications, competitions, and events)

  • Legal obligation (accounting, tax, product safety, and regulatory compliance)


DISCLOSURE OF PERSONAL DATA

Personal data is disclosed only when required by law or permitted under applicable legislation. We may share personal data with data processors such as logistics providers, payment service providers, and marketing partners. Data processing agreements are in place to ensure appropriate safeguards.

Transfers of personal data outside the EU/EEA are minimized and carried out in accordance with applicable legal safeguards.

Personal data may also be disclosed to independent data controllers, such as public authorities or payment providers.


DATA RETENTION

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

  • Purchase history: retained for up to 3 years unless legal requirements apply

  • Customer service data: retained until case closure or up to 3 years

  • Consent-based data: retained for up to 5 years or until consent is withdrawn

Consent may be withdrawn at any time, after which the data will be erased without undue delay and no later than within six (6) months.


DATA SECURITY

Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, loss, or misuse. Access is restricted to authorized personnel only.


DATA SUBJECT RIGHTS

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability where applicable. Requests must be submitted in writing, and identity verification may be required.

You have the right to object to direct marketing and profiling at any time.


COMPLAINTS

Complaints may be submitted to Tre Fyra Posters or to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).


CONTACT INFORMATION

For questions regarding personal data processing, please contact:
Support@trefyraposters.se