Privacy Policy

Privacy Policy - Ekomonde

Ekomonde (Elisabeth Mattsson) protects your privacy and personal data. This privacy policy describes how we collect, use and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

Ecomonde (Elisabeth Mattsson)
Corporate ID: 671211-3320
Blomstergatan 7, 44266 Marstrand, SWEDEN
Email: mail@ekomonde.se

2. What personal data do we collect?

When you shop with us, we collect:

  • Contact information: Name, email address, telephone number
  • Delivery details: Delivery address, billing address
  • Payment details: Payment method (card details are handled by Shopify Payments/Klarna, not by us)
  • Order information: Order history, products, prices
  • Technical information: IP address, browser, device type (via cookies)

When you visit our website:

  • Cookies and similar technologies (see section 6)
  • Visitor statistics and behavioral data

3. Why do we collect your personal data?

We use your personal data to:

Fulfill the contract with you (GDPR Art. 6.1.b):

  • Process and deliver your order
  • Send order confirmations and delivery notifications
  • Manage returns and complaints
  • Provide customer service

Fulfill legal obligations (GDPR Art. 6.1.c):

  • Accounting (7 years according to the Accounting Act)
  • Consumer law requirements

Legitimate interest (GDPR Art. 6.1.f):

  • Improve our website and services
  • Analyze visitor statistics
  • Prevent fraud

With your consent (GDPR Art. 6.1.a):

  • Send newsletters and marketing (if you have chosen to subscribe)
  • Using cookies for marketing purposes

4. Who do we share your personal data with?

We share your personal data with the following third parties in order to operate our business:

Required service providers:

  • Shopify: E-commerce platform (stores your data)
  • Gelato: Print-on-demand provider (produces and ships products)
  • Shopify Payments/Klarna: Payment providers
  • Shipping company: For delivery of products

Analysis tools (if you have accepted cookies):

  • Google Analytics (visit statistics)
  • Facebook Pixel / Meta (marketing)

All of our partners are GDPR compliant and process your data securely.

5. How long do we store your personal data?

  • Order information: 7 years (accounting requirements)
  • Customer account: Until you request deletion or close the account
  • Newsletter: Until you unsubscribe
  • Cookies: According to the cookie policy (usually 1-24 months)
  • Marketing data: Deleted when you withdraw consent

6. Cookies

We use cookies to improve your experience on our website.

Necessary cookies:

  • Shopping cart and checkout
  • Login
  • Security

Analytical cookies (requires consent):

  • Google Analytics (visit statistics)

Marketing cookies (requires consent):

  • Facebook Pixel
  • Google Ads

You can change your cookie settings in your browser at any time.

7. Your rights under GDPR

You have the following rights:

  • Right of access (Art. 15): Request a copy of your personal data
  • Right to rectification (Art. 16): Correct inaccurate data
  • Right to erasure (Art. 17): Request that we erase your data
  • Right to restriction (Art. 18): Restrict the processing of your data
  • Right to data portability (Art. 20): Receive your data in a structured format
  • Right to object (Art. 21): Object to processing based on legitimate interest
  • Right to withdraw consent (Art. 7.3): Withdraw consent for marketing or cookies

Exercise your rights:
Contact us at [your email] and we will help you.

Complaint:
If you are dissatisfied with how we handle your personal data, you can submit a complaint to:
The Swedish Privacy Agency (IMY)
Website: www.imy.se

8. Security

We protect your personal data by:

  • SSL encryption (https) on the entire website
  • Secure payment providers (PCI-DSS certified)
  • Limited access to personal data
  • Regular security updates

9. Transfer to third countries

Some of our service providers (e.g. Shopify, Google) may store data outside the EU/EEA. In such cases, we ensure that:

  • The supplier is certified according to the EU's standard contractual clauses
  • Adequate level of protection according to GDPR

10. Children

Our services are not directed at children under the age of 16. We do not knowingly collect personal information from children without parental consent.

11. Changes to the Privacy Policy

We may update this Privacy Policy. Changes will be posted on this page with the updated date.

Last updated: 260211

12. Contact us

Do you have questions about how we handle your personal data?

Ecoworld
Email: mail@ekomonde.se