Data controller
Registered contact
Eneriearthio, Krukmakargatan 13, 118 51 Stockholm, Sweden. Contact: infocenter@eneriearthio.world.
Data we collect
We may collect identifiers (name, email, phone if provided), order-related messages, technical logs (IP address, browser type, device category), and cookie signals described in our Cookie Policy.
Purposes and lawful bases
- Order handling and responding to requests — contract and legitimate interests in operating our business.
- Compliance with accounting and tax rules — legal obligation.
- Optional analytics or marketing — consent, where required.
- Security monitoring and abuse prevention — legitimate interests.
Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability, and objection where applicable. You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.
Retention
Order records are kept for the period required by Swedish commercial and tax law, typically up to seven years unless a shorter period applies. Marketing data is kept until you withdraw consent or object. Technical logs are rotated on a short cycle unless needed for security investigations.
Security
We apply proportionate technical and organisational measures, including encrypted transport (HTTPS), access control, and vendor review. No online transmission is completely risk-free.
International transfers
If processors are located outside the EU or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses where required.
Children
Our services are directed to adults. We do not knowingly collect data from children without parental authority.
Updates
We may revise this policy to reflect legal or product changes. Material updates will be indicated by the date below.