Privacy Policy

Data Controller

Thalfyrovort.world

Bergsgatan 48, 214 22 Malmö, Sweden

Email: ask@thalfyrovort.world

Purposes of Processing

We process personal data for: order fulfillment and customer communication; responding to inquiries; improving our services; compliance with legal obligations; and, where consent is given, marketing communications.

Legal Basis

Processing is based on: contract performance (orders); legitimate interests (service improvement, fraud prevention); consent (marketing, non-essential cookies); and legal obligation (tax, accounting).

Categories of Data

We may collect: name, email address, postal address, phone number, order history, IP address, and cookie data. We do not collect sensitive personal data unless required by law.

Retention Periods

Order data: 7 years (legal requirement). Customer inquiries: 3 years. Marketing data: until consent withdrawn. Cookie data: as specified in our Cookie Policy.

Your Rights (GDPR)

You have the right to: access your data; rectification; erasure; restriction of processing; data portability; object to processing; withdraw consent; and lodge a complaint with a supervisory authority (e.g., Integritetsskyddsmyndigheten in Sweden).

To exercise these rights, contact us at ask@thalfyrovort.world.

Security Measures

We implement technical and organizational measures including encryption (HTTPS), access controls, secure storage, and regular security assessments to protect your data.

International Transfers

Data may be transferred to countries outside the EEA. Where applicable, we use Standard Contractual Clauses or other approved mechanisms to ensure adequate protection.