PRIVACY & DATA PROTECTION

Kompass kafferosteri AB

At Kompass Kafferosteri, we value your privacy and want you to feel safe when shopping with us or visiting our website, www.kompasskafferosteri.se . This policy explains how we collect, use, store, and protect your personal data, as well as your rights.

1. DATA CONTROLLER
Kompass Kafferosteri AB is the data controller responsible for the processing of your personal data.

Company registration number: SE559030706101
Address: Koppargatan 19, 271 39 Ystad, Sweden
E-mail: hej@kompasskafferosteri.se

Please contact us if you have any questions or wish to exercise your rights.

2. WHAT PERSONAL DATA DO WE COLLECT?
We collect personal data when you make a purchase, contact us, or use our website:

  • Name
  • Address
  • E-mail address
  • Phone number
  • Payment information (processed by our payment provider; we do not store card details)
  • Order history
  • IP address and information about how you use our website (via cookies and analytics tools)

3. PURPOSE OF PROCESSING
We process your personal data in order to:

  • Manage and deliver your order
  • Communicate with you regarding your order
  • Handle customer service inquiries
  • Handle returns, complaints, and refunds
  • Send newsletters and offers (if you have given consent)
  • Improve our website, services, and offerings
  • Comply with legal obligations (e.g. accounting requirements)

4. LEGAL BASIS FOR PROCESSING
We process your personal data based on:

  • Contract – to fulfill purchases and deliveries
  • Legal obligation – e.g. bookkeeping laws
  • Consent – for newsletters and cookies
  • Legitimate interest – to improve our services and prevent misuse

5. SHARING OF PERSONAL DATA
We only share your data with parties necessary to provide our services:

  • Payment providers (e.g. Qliro)
  • Shipping companies (e.g. DHL, PostNord)
  • IT and analytics providers (e.g. Google Analytics)

These parties process data either as data processors or as independent data controllers. We never sell your personal data to third parties.

6. TRANSFER TO THIRD COUNTRIES
Some of our service providers (e.g. Google) may process personal data outside the EU/EEA.
In such cases, we ensure appropriate safeguards are in place, such as the use of the European Commission’s Standard Contractual Clauses (SCCs).

7. DATA RETENTION
We retain your personal data only as long as necessary:

  • Order and payment data: up to 7 years (in accordance with accounting laws)
  • Customer service enquiries: for as long as necessary to handle your enquiry and any follow-up matters.
  • Newsletter data: until you withdraw your consent
  • Analytics data: up to 26 months

8. COOKIES
We use cookies to ensure that our website functions properly, analyse website traffic, and improve your browsing experience. You can change or withdraw your consent at any time through the cookie settings on our website.

9. YOUR RIGHTS
Under the GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (“right to be forgotten”)
  • Request restriction of processing
  • Object to processing
  • Request data portability
  • Withdraw consent at any time

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

To exercise your rights, please contact us at hej@kompasskafferosteri.se för att utöva dina rättigheter.

10. SECURITY
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration.

11. CHANGES TO THIS POLICY
We may update this policy when necessary. The latest version is always available on our website.

Thank you for shopping with Kompass Kafferosteri — we want your experience, both online and in the cup, to be enjoyable, safe, and delightful.