Privacy policy
Last updated: 12 October 2026
1. Who is responsible for your personal data?
The online store Savena (savena.se) SAVENA.
We are the data controller for the personal data processed when you visit or shop in our store.
Contact for privacy matters: kontakt@savena.se
2. What personal data we process
- Contact details: name, delivery and billing address, email address and phone number.
- Order details: which products you buy, return or cancel, and your order history.
- Payment details: payment method and payment confirmation. Card details are handled by our payment provider and are not stored by us.
- Account details: if you create a customer account, for example email and settings.
- Communication: what you write when you contact our customer service.
- Technical information: IP address, device, browser and how you use the website, collected through cookies and similar technologies.
3. Why we process the data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Handling and delivering your order, payment, returns and complaints | Performance of a contract |
| Customer service and communication about your order | Performance of a contract / legitimate interest |
| Bookkeeping and other legal requirements | Legal obligation (e.g. the Swedish Accounting Act) |
| Preventing fraud and protecting the website | Legitimate interest |
| Newsletter and email marketing | Consent |
| Analytics and marketing cookies, targeted advertising | Consent (via the cookie banner) |
You can withdraw your consent at any time, for example through the “unsubscribe” link in our emails or via the cookie settings.
4. Who we share data with
We only share personal data when necessary, for example with:
- Our e-commerce platform and payment provider, which run the store and process payments.
- Suppliers and carriers, who need your name and address to deliver your order.
- Marketing and analytics services, but only if you have consented.
- Authorities, when we are required to by law.
Some of our service providers may, for their own purposes, act as independent data controllers for the data they process. They then process the data in accordance with their own privacy policies.
We never sell your personal data.
5. Transfers outside the EU/EEA
Some of our providers may process data outside the EU/EEA. In that case we ensure that safeguards required by the GDPR are in place, for example the European Commission’s standard contractual clauses or an adequacy decision.
6. How long we keep the data
- Order details and accounting records: 7 years, in accordance with the Accounting Act.
- Customer account: for as long as the account is active or until you request deletion.
- Marketing: until you withdraw your consent.
- Customer service cases: up to 2 years after the case is closed.
7. Your rights
Under the GDPR you have the right to:
- access your personal data (data subject access request),
- have inaccurate data corrected,
- have data erased,
- restrict or object to processing,
- receive your data in a portable format (data portability),
- withdraw consent at any time.
Contact us at kontakt@savena.se to exercise your rights. We respond within one month and may need to verify your identity.
8. Complaints
If you are dissatisfied with how we process your personal data, you can contact us. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se.
9. Children
Our services are not aimed at children under 18, and we do not knowingly collect data about children.
10. Security
We and our providers use technical and organisational measures to protect your data. However, no transmission over the internet is completely secure.
11. Changes
We may update this policy. The latest version is always available on this page, with the date of the last update.