Privacy
1. Data Controller
Frêne sales & consulting AB, registration number 559484-7377, is the data controller responsible for the processing of personal data on this website.
Contact details:
Email: info@frene.se
Address: Sandviksvägen 11, 618 34 Kolmården
2. Personal Data We Process
When you place an order or contact us, we may process the following personal data:
- Full name
- Billing and shipping address
- Email address
- Phone number
- IP address
- Order history
- Payment information (processed via external payment provider)
We only process personal data that is necessary for the relevant purpose.
3. Purpose and Legal Basis
We process personal data for the following purposes and based on the corresponding legal grounds under GDPR:
To send marketing communications (if applicable)
Legal basis: Consent
We send newsletters or promotional emails only if you have actively provided consent. You may withdraw your consent at any time.
To process and fulfill orders
Legal basis: Performance of contract
To process purchases, manage payments, provide order confirmations, and deliver products.
To comply with legal obligations
Legal basis: Legal obligation
Accounting and tax regulations require us to retain transaction-related data for a minimum of 7 years.
To prevent fraud and protect our business
Legal basis: Legitimate interest
To detect, prevent, and investigate fraud or misuse of our services.
4. Payments
Payments are processed via Stripe.
We do not store complete card details. Payment information is transmitted directly to Stripe and processed according to their privacy policy and terms.
5. Sharing of Personal Data
Personal data may be shared with:
- Payment provider
- Shipping providers
- Accounting systems
- IT and hosting providers
Data is only shared when necessary to fulfill contractual or legal obligations.
6. Data Retention
Personal data is stored only as long as necessary:
- Order and accounting data: minimum 7 years (legal requirement)
- Customer accounts: until deleted by the user
- Marketing data: until consent is withdrawn
7. Security Measures
We implement appropriate technical and organizational security measures to protect personal data.
This includes encrypted connections (HTTPS) and restricted system access.
8. Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Request restriction of processing
- Object to processing
- Withdraw consent at any time
You also have the right to lodge a complaint with your local supervisory authority.
9. Updates
This Privacy Policy may be updated when necessary.
Last updated: 2026-02-28