Privacy Policy

1. Introduction

Zephyroxoeghimia ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website zephyroxoeghimia.world or interact with our services.

We comply with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Swedish Act with Supplementary Provisions to the EU General Data Protection Regulation (SFS 2018:218), and other applicable data protection rules in Sweden and the European Union.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Zephyroxoeghimia
  • Address: Fältvägen 8, 855 97 Indal, Sweden
  • Email: response@zephyroxoeghimia.world

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

  • Full name
  • Email address
  • Phone number (if provided)
  • Messages or inquiries you submit
  • Order and transaction information

3.2 Information Collected Automatically

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on our website
  • Referring website addresses
  • Cookie data (subject to your consent)

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

  • Order Processing: To process and fulfill your orders (Legal basis: Contract performance)
  • Customer Service: To respond to your inquiries and provide support (Legal basis: Legitimate interest)
  • Communication: To send order confirmations and updates (Legal basis: Contract performance)
  • Legal Compliance: To comply with legal obligations (Legal basis: Legal obligation)
  • Analytics: To analyze website usage and improve our services (Legal basis: Consent or Legitimate interest)
  • Marketing: To send promotional content if you have opted in (Legal basis: Consent)

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order data: 7 years (for accounting and tax purposes)
  • Customer inquiries: 2 years after resolution
  • Marketing consent records: Until consent is withdrawn
  • Website analytics data: 26 months (anonymized)

6. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time
  • Right Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects, where applicable

We do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you.

To exercise any of these rights, please contact us at response@zephyroxoeghimia.world. We will respond to your request without undue delay and in any event within one month of receipt (this period may be extended by two further months where necessary, in line with Article 12 GDPR).

7. Data Sharing and Third Parties

We may share your personal data with:

  • Payment processors: To process transactions securely
  • Shipping providers: To deliver your orders
  • IT service providers: For website hosting and maintenance
  • Analytics providers: To analyze website performance (with your consent)

All third-party service providers are contractually bound to protect your data and process it only according to our instructions.

8. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for data transmission
  • Secure server infrastructure
  • Access controls and authentication
  • Regular security assessments
  • Employee training on data protection

10. Cookies

We use cookies and similar technologies on our website. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

11. Children's Privacy

Our website and services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). You may also contact the supervisory authority in the EU Member State of your habitual residence or place of work.

IMY (Sweden): Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm, Sweden. Website: www.imy.se

14. Contact Us

For any questions or requests regarding this Privacy Policy or your personal data, please contact us:

  • Email: response@zephyroxoeghimia.world
  • Address: Fältvägen 8, 855 97 Indal, Sweden