Privacy Policy

1. Introduction

This Privacy Policy explains how Grozelonnnezox ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at grozelonnnezox.world (the "Website") or use our services. We are committed to protecting your privacy and ensuring transparency in our data processing practices.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws in Sweden and the European Union.

2. Data Controller Information

Company Name: Grozelonnnezox

Registered Address: Karolinska vägen 37A, 171 64 Solna, Sweden

Contact Email: notifyuse@grozelonnnezox.world

Contact Phone: +46 8 524 800 00

We are the data controller responsible for your personal information. If you have any questions about this Privacy Policy or our data practices, please contact us using the information provided above.

3. Information We Collect

3.1 Information You Provide Directly

When you interact with our Website or place an order, we may collect the following personal information:

• Contact Information: Full name, email address, phone number, and postal address
• Order Information: Product selections, quantities, preferences, and any messages or special requests you provide
• Communication Data: Records of correspondence when you contact us via email, phone, or contact forms
• Payment Information: Billing address and payment method details (note: we do not store complete credit card numbers; payment processing is handled by secure third-party payment processors)

3.2 Information Collected Automatically

When you visit our Website, we automatically collect certain technical information:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referring website addresses
• Location Data: General geographic location based on IP address
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies (see our Cookies Policy for details)

3.3 Information from Third Parties

We may receive information about you from third-party services, including:

• Payment processors who confirm transaction details
• Delivery services who provide shipping and tracking information
• Analytics providers who help us understand website usage patterns
• Marketing platforms that help us reach potential customers

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you when you place an order or use our services
• Consent: You have given explicit consent for specific processing activities, such as marketing communications or optional cookies
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, network security, and improving our services, provided these interests do not override your fundamental rights
• Legal Obligations: Processing is required to comply with legal obligations, such as tax laws, accounting requirements, or responding to lawful requests from authorities

5. How We Use Your Information

We use your personal information for the following purposes:

5.1 Order Processing and Fulfillment

• Processing and completing your orders
• Communicating with you about your order status
• Arranging delivery and shipping
• Handling returns, refunds, and exchanges
• Providing customer support

5.2 Service Improvement

• Analyzing website usage to improve functionality and user experience
• Conducting research and development for new products or services
• Testing new features and optimizing existing ones
• Gathering feedback and conducting surveys

5.3 Communication

• Sending order confirmations and shipping notifications
• Responding to your inquiries and requests
• Providing customer service and support
• Sending administrative information about policy changes or service updates
• Sending marketing communications (only with your consent, and you may opt out at any time)

5.4 Legal and Security

• Preventing fraud and unauthorized transactions
• Protecting against security threats and abuse
• Complying with legal obligations and regulatory requirements
• Enforcing our terms and conditions
• Resolving disputes and investigating complaints

5.5 Marketing and Analytics

• Personalizing your experience on our Website
• Showing relevant advertisements (with your consent)
• Analyzing customer behavior and preferences
• Measuring the effectiveness of marketing campaigns

6. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information with the following categories of recipients:

6.1 Service Providers

We engage trusted third-party companies to perform services on our behalf, including:

• Payment processors for secure transaction handling
• Shipping and logistics companies for order delivery
• Cloud hosting providers for data storage
• Email service providers for communications
• Analytics providers for website performance analysis
• Marketing platforms for advertising campaigns
• Customer support tools and CRM systems

These service providers are contractually obligated to protect your data and use it only for the specific purposes we authorize.

6.2 Legal Requirements

We may disclose your information when required by law or in response to:

• Court orders, subpoenas, or other legal processes
• Requests from government authorities or law enforcement
• Legal claims or disputes
• Protection of our rights, property, or safety, or that of others

6.3 Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have regarding your information.

6.4 With Your Consent

We may share your information with other parties when you have given us explicit consent to do so.

7. International Data Transfers

Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding Corporate Rules for intra-group transfers
• Your explicit consent for specific transfers

We take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Retention Periods

• Order and Transaction Data: Retained for 7 years to comply with accounting and tax obligations
• Customer Account Information: Retained while your account is active and for 2 years after account closure
• Marketing Communications: Retained until you withdraw consent or opt out
• Website Analytics Data: Typically retained for 26 months
• Customer Support Records: Retained for 3 years after the last interaction
• Legal Claims Data: Retained for the duration of any legal proceedings plus applicable limitation periods

8.2 Deletion

After the retention period expires, we will securely delete or anonymize your personal information. You may also request deletion of your data at any time, subject to our legal obligations to retain certain information.

9. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal information we hold about you, along with information about how we use it.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information.

9.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or if you withdraw consent.

9.4 Right to Restriction of Processing

You have the right to request that we limit the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.

9.6 Right to Object

You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes.

9.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, workplace, or where an alleged infringement occurred. In Sweden, the supervisory authority is:

Integritetsskyddsmyndigheten (IMY)
Box 8114
104 20 Stockholm, Sweden
Phone: +46 8 657 61 00
Website: www.imy.se

9.9 Exercising Your Rights

To exercise any of these rights, please contact us at notifyuse@grozelonnnezox.world or write to us at Karolinska vägen 37A, 171 64 Solna, Sweden. We will respond to your request within one month, though this may be extended by two additional months for complex requests. We may request verification of your identity before processing your request.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: We use SSL/TLS encryption for data transmission and encrypt sensitive data at rest
• Access Controls: Strict access controls ensure only authorized personnel can access personal information
• Secure Infrastructure: Our systems are hosted on secure servers with regular security updates and patches
• Employee Training: Our staff receives regular training on data protection and security practices
• Regular Audits: We conduct periodic security assessments and vulnerability testing
• Incident Response: We have procedures in place to detect, respond to, and report data breaches
• Third-Party Security: We require our service providers to maintain appropriate security standards

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

11. Children's Privacy

Our Website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Website. For detailed information about the cookies we use, how we use them, and your choices regarding cookies, please refer to our Cookies Policy.

13. Third-Party Links

Our Website may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party sites you visit.

14. Marketing Communications

With your consent, we may send you marketing communications about our products, services, promotions, and news. You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at notifyuse@grozelonnnezox.world
• Updating your communication preferences in your account settings

Please note that even if you opt out of marketing communications, we will still send you transactional and service-related messages, such as order confirmations and account notifications.

15. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. If we implement such processing in the future, we will update this Privacy Policy and provide you with information about the logic involved and the significance and consequences of such processing.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this policy. If we make material changes, we will provide prominent notice on our Website or send you an email notification. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: notifyuse@grozelonnnezox.world
Phone: +46 8 524 800 00
Postal Address: Grozelonnnezox, Karolinska vägen 37A, 171 64 Solna, Sweden

We will respond to your inquiry as promptly as possible, typically within 30 days.