Privacy Policy

Last updated: 30 June 2026

At Decolia, we value your personal privacy. This privacy policy describes how we collect, use, store, and protect your personal data when you visit our website or shop with us.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation.

1. Data Controller

The data controller responsible for processing your personal data is:

Decolia
Organisation number: 559541-0985
Journalistvägen 6
141 73 Segeltorp

Website: www.decolia.se

If you have questions about how we process your personal data, please contact us using the contact details on our website.

2. Which personal data do we collect?

Depending on how you use our website, we may process the following data:

• Name

• Personal identity number (only when required for payment or credit checks)

• Address

• Delivery address

• Phone number

• Email address

• Payment information

• Order history

• Customer number

• IP address

• Information about your browser and device

• Information about how you use our website

• Communication with our customer service

We only collect the personal data that is necessary to provide our services.

3. How do we collect the data?

We collect personal data when you:

• make a purchase,

• create a customer account,

• contact our customer service,

• subscribe to newsletters,

• use our website,

• participate in campaigns or competitions,

• accept cookies.

Some information is collected automatically through cookies and similar technologies.

4. Why do we process your personal data?

We process personal data to:

• process and deliver your order,

• manage payments,

• handle returns and complaints,

• provide customer service,

• fulfil our legal obligations,

• detect and prevent fraud,

• improve our website and our services,

• send marketing if you have consented to this or if we have another legal basis.

5. Legal basis

We process personal data based on one of the following legal grounds:

• performance of an agreement,

• legal obligation,

• legitimate interest,

• consent.

We never process personal data without a legal basis.

6. How long do we store the data?

We only store personal data for as long as necessary for the purpose for which it was collected.

Examples:

• Order data is stored in accordance with the Accounting Act.

• Customer service cases are stored as long as needed to handle your case.

• Marketing consents are stored until you withdraw your consent.

• Customer accounts are stored until the account is closed or after a long period of inactivity.

When the data is no longer needed, it is deleted or anonymised.

7. Sharing personal data

We never sell your personal data.

To run our business, we may share data with companies that help us with, for example:

• payments,

• shipping and deliveries,

• IT operations,

• web hosting,

• customer service,

• email distributions,

• analysis tools,

• accounting.

These companies only process personal data in accordance with our instructions and may not use the data for their own purposes.

8. Transfer outside the EU/EEA

If personal data is processed outside the EU or EEA, Decolia ensures that the transfer is done in accordance with GDPR.

This may, for example, be done through:

• EU Commission decisions on adequate protection levels,

• standard contract clauses,

• other approved protection measures.

9. Cookies

Decolia uses cookies and similar technologies to:

• make the website work,

• improve the user experience,

• analyse visits,

• show relevant offers,

• measure marketing.

More information is available in our Cookie Policy.

You can change your cookie settings at any time via your browser or our cookie tool.

10. Your rights

Under GDPR, you have the right to:

• get information about which personal data we process,

• request a register extract,

• have incorrect data corrected,

• request deletion of personal data when the law allows,

• request restriction of processing,

• object to certain processing,

• receive your personal data in a structured format (data portability),

• withdraw a given consent at any time.

If you want to exercise any of your rights, please contact us.

11. Security

Decolia continuously works with technical and organisational security measures to protect personal data against unauthorised access, loss, alteration or misuse.

Only people who need the data for their work have access to it.

12. Changes to the policy

We may update this Privacy Policy when necessary, for example in connection with legislative changes or changes to our services.

The latest version is always published on www.decolia.se.

13. Complaints

If you believe we are processing your personal data incorrectly, we would like you to contact us so that we can assist you.

You also have the right to file a complaint with the Swedish Data Protection Authority (IMY), which is the supervisory authority for data protection in Sweden.

More information is available at www.imy.se.