Integritetspolicy

Last Updated:

Data Controller

The data controller responsible for your personal data is Siftingflora, with place of business at Drottninggatan 7, 111 51 Stockholm, Sweden. For data protection enquiries you may contact us at ember@siftingflora.world or at the address above.

This policy is provided in accordance with the EU General Data Protection Regulation (GDPR) and the Swedish supplementary legislation, including the Act on Supplementary Provisions to the GDPR (Lag med kompletterande bestämmelser till EU:s dataskyddsförordning, SFS 2018:218).

Introduction

This Privacy Policy describes how we collect, use, and protect your personal information when you visit our website or use our services related to reusable glass bottles and carafes.

Information We Collect

We may collect the following types of information:

Contact information such as name and email address when you submit forms
Usage data including pages visited and time spent on our website
Device information such as browser type and operating system

How We Use Your Information

We use collected information to:

Respond to your inquiries and provide customer support
Improve our website and services
Send you updates about our products and services if you have consented
Comply with legal obligations

Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

Consent: When you have given clear consent for specific processing activities
Contract: When processing is necessary for the performance of a contract
Legal obligation: When processing is required to comply with legal obligations
Legitimate interests: When processing is necessary for our legitimate business interests, provided these do not override your rights

Sharing and Disclosure of Information

We do not sell your personal information. We may share your information in the following circumstances:

With service providers who assist us in operating our website and conducting our business
When required by law or to protect our rights and safety
In connection with a business transfer or merger
With your explicit consent

Data Protection

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

International Data Transfers

Your information may be transferred to and processed in countries outside the EU/EEA (for example by Google in the USA). Where we transfer data to such countries, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision, in accordance with Chapter V of the GDPR.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. When data is no longer needed, we securely delete or anonymize it.

Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Third-Party Services

We use various third-party services that may collect information about you:

Google Ads Conversion Tracking: Tracks conversions from our advertising campaigns
Remarketing: Uses cookies to show relevant ads to visitors who have previously visited our website
Google Analytics: Analyzes website traffic and user behavior to improve our services
Google Maps API: Displays interactive maps on our contact page

These services have their own privacy policies. We encourage you to review their policies to understand how they handle your data.

Your Rights

Under the GDPR and Swedish data protection law, you have the right to:

Access your personal data (Art. 15 GDPR)
Rectify inaccurate data (Art. 16 GDPR)
Request erasure of your data (Art. 17 GDPR)
Restrict processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing (Art. 21 GDPR)
Withdraw consent at any time
Lodge a complaint with a supervisory authority

In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). You may submit a complaint to IMY if you consider that our processing of your personal data infringes applicable law. See www.imy.se for contact details and how to file a complaint.

Cookies

We use cookies to enhance your browsing experience. For detailed information about our use of cookies, please see our Cookies Policy.

Policy Updates

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.

Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at ember@siftingflora.world or Besök vår plats at Drottninggatan 7, 111 51 Stockholm, Sweden.