SOLA ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy & Cookies Policy explains how we collect, use, store, and protect your personal information in accordance with the EU General Data Protection Regulation (GDPR) and Swedish data protection legislation.

1. Data Controller

SOLA is the data controller responsible for the processing of your personal data.

Contact information:
Email: info@solashop.se

2. What Personal Data We Collect

We collect and process the following types of personal data:

• Contact information: Name, email address, phone number, delivery address
• Order information: Purchase history, product preferences, order details
• Payment information: Payment details processed securely through our payment provider
• Communication data: Correspondence via email or other channels
• Technical data: IP address, browser type, device information, cookies

3. How We Collect Your Data

We collect personal data when you:

• Place an order on our website
• Contact us via email or contact form
• Visit our website (through cookies and similar technologies)

4. Why We Use Your Personal Data (Legal Basis)

We process your personal data for the following purposes and legal bases:

• Order processing and delivery: Necessary for the performance of a contract (GDPR Art. 6(1)(b))
• Payment processing: Necessary for the performance of a contract (GDPR Art. 6(1)(b))
• Customer service: Legitimate interest in maintaining customer relationships (GDPR Art. 6(1)(f))
• Marketing communications: Your consent (GDPR Art. 6(1)(a)) - you can withdraw consent at any time
• Legal obligations: Compliance with accounting and tax laws (GDPR Art. 6(1)(c))
• Fraud prevention: Legitimate interest in protecting our business (GDPR Art. 6(1)(f))

5. Who We Share Your Data With

We may share your personal data with the following third parties:

• Payment processors: To process secure payments
• Shipping providers (PostNord): To deliver your orders
• Email service providers: To send order confirmations and communications
• Web hosting and IT service providers: To maintain our website and systems

We only share data that is necessary for these parties to perform their services. All third-party processors are required to protect your data in accordance with GDPR and are bound by data processing agreements.

We do not sell your personal data to third parties.

6. International Data Transfers

If we transfer your data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or transfers to countries with adequacy decisions.

7. How Long We Keep Your Data

We retain your personal data for the following periods:

• Order data: 7 years (Swedish Accounting Act requirement)
• Marketing consent: Until you withdraw consent or 2 years of inactivity
• Customer service communications: 3 years after last contact
• Website cookies: As specified in our cookie policy below

After these periods, we will securely delete or anonymize your data unless we are legally required to retain it longer.

8. Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): Request deletion of your data in certain circumstances
• Right to restriction: Request that we limit the processing of your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for marketing purposes
• Right to withdraw consent: Withdraw your consent at any time for processing based on consent

To exercise any of these rights, please contact us at info@solashop.se. We will respond to your request within one month.

9. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Website: www.imy.se

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure storage with access controls
• Regular security assessments and updates
• Staff training on data protection

11. Cookies Policy

Our website uses cookies and similar technologies to improve your browsing experience and analyze website traffic.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve functionality.

Types of Cookies We Use:

• Essential cookies: Necessary for the website to function properly (e.g., shopping cart functionality). These cannot be disabled.
• Functional cookies: Remember your preferences and settings (e.g., language preference).
• Analytics cookies: Help us understand how visitors use our website to improve performance.
• Marketing cookies: Track your browsing behavior to show relevant advertisements (only with your consent).

How to Manage Cookies:

You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

For more information about cookies and how to manage them, visit: www.allaboutcookies.org

12. Changes to This Policy

We may update this Privacy & Cookies Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date.

We encourage you to review this policy periodically.

Last updated: 19 September 2026