Privacy policy
How we handle your data when you make an enquiry, buy, receive an invoice or cancel a purchase.
Controller
Speedshine AB · company reg. no. 556978-8911
Address Rusas Ängväg 1, 432 64 Bua, Sweden
webshop@speedshine.se · +46 340 170 77
What data we process
When you send an enquiry, you give your name, email address and the details you choose to fill in: phone number, which product the enquiry is about, boat model, swim platform depth, tender and outboard, and your own text.
When you buy in the online shop, you give your name, email address, phone number and delivery address. If you buy as a business, you also give the company name, billing address and VAT registration number. We keep what you bought, the price, the payment method and the payment reference.
We never receive your card number or your bank details. You give them directly to Stripe or Klarna.
When you are a business customer or receive an invoice, we hold the company name, company registration and VAT registration numbers, addresses, contact person, email address, phone number, payment terms and discount, and our invoices and payments. Previous customers are in the customer register with the details from our earlier business.
When you cancel a purchase, you give your name, email address, the order number and what you write in the form.
IP address. The forms and the checkout are received by functions at our web host, which runs the website. The web host records your IP address automatically. It is not passed on to us.
Why we process it, and on what legal basis
- Answering your enquiry and giving a quote. The processing is necessary to take steps at your request before entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).
- Carrying out your purchase:
- taking payment and delivering;
- sending the order confirmation, invoice and shipping notice;
- handling withdrawals, complaints and guarantees.
- Accounting for the sale and keeping the accounting records. This includes checking a VAT registration number in the EU's VIES register. It is a legal obligation under the Swedish Bookkeeping Act and the Swedish VAT Act (Article 6(1)(c)).
- Keeping our customer register of business customers and their contact persons, so that we can manage our business. It is our legitimate interest in managing a business relationship (Article 6(1)(f)).
- Being able to reach you if you have bought a davit with safety information, or if a product ever needs to be recalled. The EU General Product Safety Regulation (2023/988) requires us to reach affected buyers directly, using the customer details we hold. It is our legitimate interest, and yours (Article 6(1)(f)).
We do not use the data for advertising, and we do not create profiles.
How long we keep it
An enquiry that does not lead to a sale is deleted no later than twelve months after it arrived.
Business records are kept for seven years after the end of the calendar year in which the financial year ended, because the Swedish Bookkeeping Act requires it. Business records are order documents, invoices, payments and a notice of withdrawal that belongs to a purchase. This applies to the records, not to your enquiry and not to the customer register.
The contact details in the customer register, that is the contact person, email address and phone number, are removed three years after your last business with us, unless they are needed for business in progress.
If you have bought a davit, we keep your name and contact details for ten years after the purchase, so that we can reach you if it concerns safety.
Who else receives the data
Our data processors process the data on our behalf and according to our instructions. They are providers of:
- web hosting, which runs the website and receives the forms and the checkout;
- email and our administration system;
- database;
- automated jobs, which fetch the purchases from Stripe, account for them and send the emails;
- accounting software.
Transfers outside the EU/EEA: some of the processors are US companies or process the data in the USA. The transfer is then based on the European Commission's decision on the EU–US Data Privacy Framework, or on the European Commission's standard contractual clauses.
If you want to know which companies they are, or want a copy of the safeguards, ask us.
Independent controllers process the data for their own purposes and under their own terms:
- Stripe Payments Europe, Limited in Ireland receives the payment. Stripe also processes data for its own purposes, for example to prevent fraud, under Stripe's privacy policy.
- Klarna Bank AB (publ) in Sweden receives the payment when you choose Klarna, under Klarna's privacy policy. Klarna may then carry out a credit assessment.
- Our warehouse partner in Sweden packs and ships some of the orders and books the transport. The warehouse partner then receives your name, delivery address and phone number and uses them for the delivery. If you want to know which company it is, ask us.
- The carrier that delivers your order, for example DB Schenker or PostNord, receives your name, address and phone number for the delivery.
- Our accountant, and authorities such as the Swedish Tax Agency when the law requires it.
- The European Commission, when a VAT registration number is checked in VIES.
We do not sell your data.
Cookies and visitor statistics
The website uses no cookies, no visitor statistics and no third-party scripts. We do not track you and share nothing with advertising networks.
The basket, that is the item numbers and quantities, is stored in your browser so that it is still there when you come back. It is sent to us only when you go to the checkout. If you close the suggestion of another language, your browser remembers this until you close the tab.
When you pay, you go to Stripe's payment page. It has its own cookies under Stripe's terms.
Security
Only those of us who work at Speedshine can access the data, with personal logins and two-factor authentication.
Your rights
You have the right to:
- find out what data we hold about you;
- have it corrected or erased;
- request that the processing be restricted;
- object to it, including to what we do on the basis of legitimate interest;
- have the data transferred to someone else.
Contact us at webshop@speedshine.se and we will arrange it. Data that the Swedish Bookkeeping Act requires us to keep cannot be erased until the period has expired.
If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se, or to the data protection authority in the country where you live, for example Datatilsynet in Norway (datatilsynet.no).
Last updated
2026-10-06