Privacy Policy
At Alevaa, we value your personal privacy and strive to maintain a high level of data protection. We never sell your personal data and only share it with companies that are our data processors. This privacy policy describes how we collect and use your personal information and explains your rights and how to exercise them.
It's important that you read and understand this privacy policy and feel secure with our processing of your personal data. You are always welcome to contact us with any questions.
What Is Personal Data and What Is Processing of Personal Data?
Personal data is any information that can directly or indirectly be linked to a living natural person. Different types of electronic identifiers (e.g., IP addresses) are personal data only if they can be linked to natural persons.
Processing of personal data includes everything that happens with the personal data. Any action affecting personal data is considered processing, whether automated or manual. Common processing activities include collection, registration, organization, structuring, storage, adaptation, transfer, and deletion.
Who Is Responsible for the Personal Data We Collect?
Alevaa, located in Sweden, is the data controller for the company's processing of personal data.
What Personal Data Do We Collect and Why?
1. To Process Your Purchase and Delivery
Processing activities:
-
Payment handling and address verification
-
Sending confirmation notifications
-
Delivery (including notifications and communication regarding delivery)
Personal data we collect:
-
Name
-
Contact details (address, email, phone number)
-
Purchase information (products ordered or if delivery is to a different address)
Legal basis: Fulfillment of the purchase agreement. This collection of your personal data is required for us to fulfill our obligations under the purchase agreement. If the information is not provided, we cannot fulfill our obligations and must therefore decline your purchase.
Storage period: Until the purchase is completed (including delivery and payment) and for a period of 18 months thereafter to handle potential complaints and returns.
2. To Fulfill Our Legal Obligations
Processing activities:
-
Necessary handling to fulfill legal obligations under laws, court decisions, or government decisions (e.g., accounting laws, anti-money laundering laws, or product liability and safety regulations)
Personal data we collect:
-
Name
-
Contact details (address, email, phone number)
-
Payment history
-
Payment information, purchase date, purchase location, any defects/complaints
Legal basis: Legal obligation. This collection of your personal data is required by law. If the information is not provided, our legal obligation cannot be fulfilled and we must therefore decline your purchase.
Storage period: As required by applicable laws, typically up to 7 years for accounting data.
3. To Handle Customer Service Inquiries
Processing activities:
-
Communication and answering questions to customer service
-
Identification
-
Investigation of potential complaints and support issues (including technical support)
Personal data we collect:
-
Name
-
Contact details (address, email, phone number)
-
Your correspondence
-
Information about purchase date, location, any defects/complaints
-
Technical information about your equipment
-
Health data (e.g., allergic reactions and health conditions you inform us about)
Legal basis: Legitimate interest. The processing is necessary to satisfy our and your legitimate interest in handling customer service issues.
Storage period: 1 month plus the current month after the customer service matter has been closed.
4. To Evaluate, Develop and Improve Our Services
Processing activities:
-
Service adaptation to be more user-friendly
-
Development and improvement of our product range
-
Improvement of IT systems to enhance security
-
Analysis of collected data
Personal data we collect:
-
Purchase and user-generated data (e.g., click and visit history)
-
Technical data about devices and settings used (e.g., language, IP address, browser settings, time zone, operating system)
Legal basis: Legitimate interest. The processing is necessary to satisfy our and our customers' legitimate interest in evaluating, developing, and improving our services, products, and systems.
Storage period: From collection and for a period of 24 months thereafter.
From What Sources Do We Collect Your Personal Data?
In addition to the information you provide us directly, or that we collect based on your purchases and how you use our services, we may also collect personal data from third parties:
-
Address information from payment providers to ensure we have the correct address details for you.
​
Who May We Share Your Personal Data With?
Data Processors
When necessary to provide our services, we share your personal data with companies that are our data processors. A data processor is a company that processes the information on our behalf and according to our instructions. We have data processors who help us with:
-
Transportation (logistics companies and carriers)
-
Marketing (print and distribution, social media, media agencies, or advertising agencies)
-
IT services (companies handling necessary operations, technical support, and maintenance of our IT solutions)
When your personal data is shared with data processors, it is only for purposes that are compatible with the purposes for which we collected the information. We check all data processors to ensure they can provide sufficient guarantees regarding the security and confidentiality of personal data.
Where Do We Process Your Personal Data?
We always strive to ensure your personal data is processed within the EU/EEA, and all our own IT systems are located within the EU/EEA. However, for system support and maintenance, we may need to transfer information to a country outside the EU/EEA if we share your personal data with a data processor who, either themselves or through a subcontractor, is established or stores information in a country outside the EU/EEA.
Regardless of the country where your personal data is processed, we take all reasonable legal, technical, and organizational measures to ensure the level of protection is the same as within the EU/EEA.
How Long Do We Keep Your Personal Data?
We never store your personal data longer than necessary for each purpose. See more about the specific storage periods under each purpose above.
What Are Your Rights As a Data Subject?
Right of Access
We are always open and transparent about how we process your personal data. If you want deeper insight into what personal data we process about you specifically, you can request access to the information.
Right to Rectification
You can request that your personal data be corrected if the information is incorrect. Within the scope of the stated purpose, you also have the right to supplement any incomplete personal data.
How Are Your Personal Data Protected?
We use IT systems to protect the confidentiality, integrity, and access to personal data. We have taken special security measures to protect your personal data against unlawful or unauthorized processing (such as unauthorized access, loss, destruction, or damage).
Only those persons who actually need to process your personal data in order for us to fulfill our stated purposes have access to it.
What Does It Mean That the Data Protection Authority Is the Supervisory Authority?
The Data Protection Authority is responsible for monitoring the application of the legislation, and anyone who believes a company is handling personal data incorrectly can file a complaint with the Data Protection Authority.
How Do You Contact Us With Questions About Data Protection?
Since we take data protection very seriously, we have dedicated customer service staff handling these matters. You can always reach them at: wafywette1@gmail.com
We may make changes to our privacy policy. The latest version of the privacy policy is always available on our website. For updates that are of decisive importance for our processing of personal data or updates that may be of decisive importance to you, you will receive information via email well in advance of the updates taking effect.