Privacy Policy

1. Introduction

Glixarexchron ("we", "our", or "us") is the data controller responsible for the personal data you provide when visiting our website at glixarexchron.world or when placing an order for Calvorin. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have under the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and applicable Swedish law.

We are committed to handling your personal data responsibly, transparently, and in full compliance with GDPR and the Swedish Act Supplementing the EU General Data Protection Regulation (Lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning).

2. Personal Data We Collect

We collect only the personal data that is necessary to fulfil the purposes described in this policy. The categories of data we may collect include:

• Identity data: full name
• Contact data: email address, telephone number
• Order data: delivery address, order details, and correspondence relating to your order
• Technical data: IP address, browser type and version, pages visited, time of visit, device type (collected via cookies or server logs)
• Communication data: any messages or enquiries you send us via the order form or by email

We do not collect sensitive personal data (special categories of data under Article 9 GDPR) and we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

3. Legal Bases for Processing

We process your personal data under the following legal bases as specified in Article 6 GDPR:

• Contract (Article 6(1)(b)): Processing is necessary to fulfil or prepare for the performance of a contract — i.e. to process and deliver your order.
• Consent (Article 6(1)(a)): Where you have given explicit consent, for example to receive marketing communications or for certain cookie categories. You may withdraw your consent at any time.
• Legal obligation (Article 6(1)(c)): Processing required to comply with applicable Swedish and EU legal requirements, including bookkeeping and tax regulations under Swedish Bokföringslagen (SFS 1999:1078).
• Legitimate interest (Article 6(1)(f)): For improving our website, detecting and preventing fraud, and managing our business operations, where these interests are not overridden by your rights.

4. Purposes of Processing

We use your personal data for the following specific purposes:

• Processing and fulfilling your orders for Calvorin, including contact and delivery coordination
• Communicating with you regarding your order status, delivery, and related matters
• Responding to enquiries and customer service requests
• Complying with legal obligations, including accounting and tax requirements
• Analysing website usage to improve our services (where you have consented to analytics cookies)
• Preventing fraud and ensuring security of our website and systems

5. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

• Order and transaction data: retained for 7 years in compliance with Swedish bookkeeping law (Bokföringslagen)
• Customer correspondence: retained for up to 3 years after the last interaction
• Marketing consent records: retained until consent is withdrawn, plus 1 year
• Technical/log data: retained for up to 12 months
• Cookie data: varies by cookie — see our Cookie Policy

When data is no longer required, we delete or anonymise it in a secure manner.

6. Sharing Your Personal Data

We do not sell, trade, or rent your personal data to third parties. We may share your data with the following categories of recipients where necessary:

• Delivery and logistics providers: to fulfil and track your order shipment within Sweden
• Payment processors: to handle order payments securely
• IT and hosting providers: who maintain our website and systems, bound by data processing agreements
• Regulatory authorities: if required by Swedish or EU law (e.g. Skatteverket, Swedish Police)

Any third-party processors acting on our behalf are bound by data processing agreements (DPAs) in accordance with Article 28 GDPR and process your data solely on our documented instructions.

International Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or adequacy decisions, in accordance with Chapter V GDPR.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights with respect to your personal data:

• Right of access (Article 15): You have the right to obtain a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure (Article 17): You have the right to request deletion of your personal data where there is no legitimate reason for continued processing.
• Right to restriction of processing (Article 18): You have the right to request that we limit how we process your data in certain circumstances.
• Right to data portability (Article 20): You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller.
• Right to object (Article 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent (Article 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right not to be subject to automated decision-making (Article 22): We do not use automated decision-making processes that produce legal or similarly significant effects.

To exercise any of these rights, please contact us at: teamask-info@glixarexchron.world or by post to our address above. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These include:

• HTTPS encryption for all data transmitted via our website
• Access controls limiting data access to authorised personnel only
• Regular security reviews and updates of our systems
• Secure data processing agreements with all third-party processors

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with Article 34 GDPR.

9. Cookies

Our website uses cookies and similar tracking technologies. For detailed information about the cookies we use, the purposes for which we use them, and how you can control them, please refer to our Cookie Policy.

10. Supervisory Authority

If you believe we have processed your personal data in a manner inconsistent with the GDPR, you have the right to lodge a complaint with the Swedish Data Protection Authority:

Integritetsskyddsmyndigheten (IMY)
Box 8114, 104 20 Stockholm, Sweden
Tel: +46 8 657 61 00
Website: www.imy.se

We encourage you to contact us first so we can address your concerns directly before escalating to the supervisory authority.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The date of the most recent update is shown at the top of this page. We encourage you to review this page periodically. If changes are material, we will notify users through appropriate means.

12. Contact Us

If you have any questions or concerns regarding this Privacy Policy or how we handle your personal data, please contact us:

Glixarexchron
Energivägen 1, 742 34 Östhammar, Sweden
Phone: +4617310003
Email: teamask-info@glixarexchron.world