Your privacy,
our responsibility.
Here we describe which personal data Gandelle Trading AB processes when you visit gandelle.se, contact us or shop with us – why we do it and what rights you have.
Only what is needed
We collect the information needed to reply to you, handle your order and improve the website.
We never sell your data
Data is only shared with suppliers who help us run the business.
You decide
Statistics, marketing and newsletters are based on your consent – and you can change your mind at any time.
Your rights
You can request access, rectification or erasure by contacting us.
Data controller
Gandelle Trading AB, Swedish corp. reg. no. 559599-7866, is the controller for the processing of your personal data. Gandelle Lumière is the brand the company uses on gandelle.se.
What data we process
Which data we process depends on how you are in contact with us.
Contact details – name, email address and phone number.
Company details – company name, corporate registration number, line of business and contact person for B2B inquiries.
Messages – what you write in contact and inquiry forms or in emails to us.
Order and delivery details – products ordered, delivery and billing address, and payment status.
Newsletter – email address and information about your consent.
Technical data – IP address, device, browser, cookie ID and how you use the website.
The data comes primarily from you. Technical data is collected via cookies and similar technologies, see our cookie policy.
Purposes and legal basis
We only process personal data when we have a legal basis under the General Data Protection Regulation (GDPR).
Purpose
Data
Legal basis
Answering questions and inquiries
Contact details, company details, message
Legitimate interest
Handling orders, payment, delivery and complaints
Contact, order and delivery details
Contract
Bookkeeping and accounting
Order and payment records
Legal obligation
Sending newsletters
Email address
Consent
Visitor statistics (Google Analytics)
Technical data, cookie ID
Consent
Measuring and tailoring marketing (Meta, TikTok)
Cookie ID, events on the website
Consent
Security, operations and troubleshooting
IP address, technical logs
Legitimate interest
How long we keep the data
We keep personal data for as long as it is needed for the purpose and then erase or anonymise it.
Questions and inquiries – up to 24 months after the most recent contact.
Customer and order data – for as long as the customer relationship lasts and then up to 36 months so that we can handle complaints.
Accounting records – seven years in accordance with the Swedish Accounting Act.
Newsletter – until you unsubscribe.
Statistics and marketing data – according to the lifetime of each cookie, see the cookie policy.
Who we share data with
We never sell your personal data. We only share it with recipients who need it for us to be able to run the business:
Providers of web hosting, operations, email and newsletters.
The payment providers Stripe and Klarna, which handle payments and are independently responsible for their processing of payment data.
Carriers that deliver your order.
Providers of statistics and marketing – Google, Meta and TikTok – if you have consented to it.
Bookkeeping and accounting services.
Public authorities, when we are required to do so by law.
Suppliers that process data on our behalf are data processors and may only use the data in accordance with our instructions.
Transfers outside the EU/EEA
We aim to process personal data within the EU/EEA. Some suppliers, for example Google, Meta, TikTok and Stripe, may process data in countries outside the EU/EEA. In such cases, the transfer is based on an adequacy decision from the European Commission or the European Commission’s standard contractual clauses.
Cookies
We use cookies and similar technologies on gandelle.se. Necessary cookies are always used, while statistics and marketing cookies are only used if you have given your consent. Read more in our cookie policy.
Your rights
Under the GDPR you have the right to:
find out which personal data we process about you and receive a copy of it,
have incorrect data rectified,
have data erased when it is no longer needed or when you withdraw your consent,
request that the processing be restricted,
object to processing based on legitimate interest and to direct marketing,
receive data you have provided to us in a machine-readable format (data portability),
withdraw your consent at any time, for example via the cookie settings or the unsubscribe link in the newsletter.
Contact us at [email protected] if you wish to exercise your rights. We will reply without undue delay and within one month at the latest.
Security
We take technical and organisational measures to protect your personal data against loss, unauthorised access and unlawful use. The website uses an encrypted connection (HTTPS) and access to the data is limited to those who need it for their work.
Complaints
If you believe that we are processing your personal data incorrectly, you are welcome to contact us. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, www.imy.se.
Changes and contact
We may update this privacy policy. The latest version is always available on this page, with the date of the most recent update at the top.
If you have any questions, you are welcome to contact Gandelle Trading AB at [email protected] or 076-777 71 79.
Do you have questions?
Contact us if you have questions about how we process your personal data or wish to exercise your rights.
076-777 71 79 · [email protected]