Privacy policy

Last updated: 28 July 2025

Purpose and scope

At Ecodrift Sweden AB, Swedish company registration number 559539-2076, trading as Ecodrift, we value your privacy. We respect your right to understand and control how your personal data is processed.

Ecodrift Sweden AB is the data controller for the processing of personal data when you use our services or visit www.ecodrift.se.

This policy applies to our customers and visitors to our website.

Definitions

  • Personal data: Information relating to an identifiable living individual.
  • Processing: Activities such as collecting, storing, transferring or deleting personal data.
  • Data controller: The party that determines the purposes and means of processing.
  • Data processor: The party that processes personal data on behalf of the data controller.
  • Data subject: The individual whose personal data is processed.

What personal data we collect and why

Purpose Personal data Legal basis Retention period
Delivery of goods Name, address, email address, telephone number Contract At least one year, or for as long as the warranty applies
Marketing Email address, telephone number Consent Until consent is withdrawn
Customer service and support Name, email address, order history Legitimate interests One year after the enquiry is closed
Accounting Name, address, purchase history Legal obligation Seven years under the Swedish Accounting Act

Cookies

We use cookies to save your preferences, collect usage statistics and improve your experience.

Your rights under the GDPR

You have the right to:

  • Request access to your personal data
  • Request rectification
  • Request erasure
  • Restrict processing
  • Object to processing, particularly direct marketing
  • Data portability

International transfers and service providers

We may share your data with trusted data processors, for example for delivery, payments, IT operations and marketing.

When transferring data outside the EU/EEA, we ensure an appropriate level of protection through:

  • European Commission adequacy decisions
  • Standard contractual clauses
  • Other appropriate safeguards under the GDPR

We have entered into data processing agreements with all our service providers.

Security

We protect your data through:

  • Technical measures: SSL encryption, firewalls and secure servers
  • Organisational measures: Internal guidelines, access controls and training

Complaints

If you believe we are handling your personal data incorrectly, you can contact the Swedish Authority for Privacy Protection (IMY).

Website: www.imy.se
Email: imy@imy.se

Changes to this policy

We reserve the right to update this policy. If changes materially affect your rights, we will notify you in good time by email or on our website.

Contact

If you have questions or would like to exercise your rights, please email support@ecodrift.se.