What personal information do we collect?
Depending on how you use our website and which services you use, we may process the following categories of personal data:
- name,
- company name and organization number, when applicable,
- billing and shipping addresses,
- email address,
- phone number,
- order number and order history,
- information about purchased products and services,
- payment-related information,
- IP address and technical information about visits to the website,
- communications with our customer service,
- Social Security number when required for a selected payment option or other service.
We may also process other personal data that you provide to us yourself, for example, in an email, form, or customer service inquiry.
Why do we process personal data?
We process personal data for various purposes and on different legal grounds, depending on the situation.
When you make a purchase
We process the personal data necessary to receive and administer your order, process payment, deliver the products, communicate with you regarding the order, and handle any returns, complaints, and warranty claims.
Legal basis: Performance of a contract pursuant to Article 6(1)(b) of the GDPR.
Accounting and Other Legal Requirements
We process invoices, receipts, and other information that we are legally required to retain.
Legal basis: Legal obligation under Article 6(1)(c) of the GDPR.
Customer Service and Communication
When you contact us via email, phone, form, or other means, we process the data necessary to identify and assist you and to follow up on your inquiry.
Legal basis: Performance of a contract or legitimate interest pursuant to Article 6(1)(b) and 6(1)(f) of the GDPR, respectively, depending on the nature of the matter.
Preventing Fraud and Abuse
We may process, for example, IP addresses, order information, and other relevant information to detect, prevent, and investigate suspected fraud, abuse, and security incidents.
Legal basis: Legitimate interest pursuant to Article 6.1(f) of the GDPR and, where applicable, a legal obligation.
Analysis and improvement of the website
With your consent, we may use analytics tools to understand how the website is used and to improve its content, features, and user experience.
Legal basis: Consent pursuant to Article 6(1)(a) of the GDPR when personal data processing occurs through non-essential cookies or similar technologies.
Marketing
With your consent, cookies and similar technologies may be used to measure advertising and display more relevant marketing through platforms such as Google and Meta.
Legal basis: Consent under Article 6(1)(a) of the GDPR when processing requires consent.
Newsletters and Email Marketing
If you choose to subscribe to our newsletter, we primarily process your email address and, if you have provided it, your name in order to send you news, offers, and other relevant information from SilentDirect.
For the administration and distribution of the newsletter, we use Get a Newsletter as a service provider and data processor. The personal data necessary for the newsletter is therefore processed in their system on behalf of SilentDirect.
Legal basis: Consent pursuant to Article 6(1)(a) of the GDPR when the newsletter is sent based on your consent.
You can unsubscribe at any time by clicking the unsubscribe link in a newsletter or by contacting us.
When you unsubscribe, your email address may need to remain on a block list to ensure that you do not inadvertently start receiving newsletters again. The data is not used for further mailings in this case.
Payment and Payment Providers
When you make a purchase, necessary personal data and order information may be shared with the payment provider you select or that is used for the specific payment method.
SilentDirect uses , among others , Klarna, Ledyer, PayPal, and card payment solutions. The information processed by each payment provider depends on the payment method you choose.
In certain cases, the payment provider may act as an independent data controller for its processing of your personal data, for example, in connection with credit checks, payment administration, and compliance with legal obligations. Information regarding such processing can be found in each provider’s privacy policy.
Delivery and Shipping
In order to deliver your order, we share necessary information with relevant shipping and logistics providers. Information that may be shared includes, for example, your name, company name, shipping address, email address, and phone number.
We use providers such as DHL, PostNord, UPS, and Schenker. The specific shipping provider used depends on the order, delivery address, product, and the selected or available delivery option.
E-commerce Platform and Technical Service Providers
SilentDirect uses the Swedish e-commerce platform Nyehandel for our online store. Personal data may be processed in the technical systems required for the website, customer accounts, orders, and other features to function.
We may also engage other providers for services such as IT operations, support, analytics, advertising, payment processing, communication, and other functions necessary to operate and develop our business.
When a service provider processes personal data solely on our instructions, the provider acts as our data processor, and the processing is governed by a data processing agreement where required.
Sharing of Personal Data
We do not sell your personal data.
Personal data may be shared with recipients when necessary to:
- process and deliver your order,
- process or manage payments,
- provide customer service,
- send newsletters you have chosen to subscribe to,
- operate, protect, and develop the website,
- comply with legal requirements, government decisions, or other legal obligations,
- prevent or investigate suspected fraud and security incidents.
We may also disclose information to, for example, government agencies, law enforcement, courts, or other authorized recipients if we are required to do so by law or a binding decision.
Transfer of Personal Data Outside the EU/EEA
We strive to ensure that personal data is processed within the EU/EEA. However, certain service providers—such as global technology, analytics, payment, or advertising companies—may process personal data in or make it accessible from countries outside the EU/EEA.
When such a transfer is subject to the GDPR, it must be carried out using a valid transfer mechanism, such as an adequacy decision by the European Commission or the European Commission’s Standard Contractual Clauses (SCCs), along with additional safeguards when required.
How long do we retain personal data?
We retain personal data only as long as it is necessary for the purposes for which it was collected or as long as we are legally required to retain it.
Order and customer information
Information related to purchases is retained for as long as necessary to fulfill the contract, handle complaints, warranties, and other rights and obligations arising from the purchase.
Accounting data
Accounting records are retained for the period required by applicable accounting legislation at any given time.
Customer service matters
Communication and data related to customer service are retained for as long as necessary to handle and follow up on the matter, as well as for an additional period if required to establish, assert, or defend legal claims.
Newsletters
Data used for newsletters is processed for as long as you remain subscribed or until you withdraw your consent. Certain information may subsequently be retained in a suppression list to respect your unsubscription.
When the data is no longer needed, it is deleted or anonymized, unless it must be retained longer due to legal requirements or legal claims.
How We Protect Your Personal Data
We use appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, loss, disclosure, and other unauthorized processing.
This may include, among other things, encrypted communication via SSL/TLS, access controls, password protection, backups, and restricted access to systems containing personal data.
Your Rights Under the GDPR
As a data subject, you have a number of rights under the GDPR. The rights that apply may depend on the specific processing in question and the legal basis on which the processing is based.
Right of access
You have the right to request information about what personal data we process about you and to receive a copy of that data.
Right to rectification
You have the right to request that inaccurate or incomplete personal data be corrected or supplemented.
Right to erasure
In certain situations, you may request that your personal data be erased. This right does not apply if, for example, we are required to retain the data to comply with a legal obligation.
Right to restriction
In certain situations, you may request that the processing of your personal data be restricted.
Right to data portability
When processing is based on consent or a contract and is carried out by automated means, you may, in certain situations, have the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format.
Right to Object
In certain situations, you have the right to object to processing based on our legitimate interest.
Direct Marketing
You always have the right to object to the processing of personal data for direct marketing purposes.
Withdrawal of Consent
When processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Data Breaches
A personal data breach is a security incident that may result in personal data being, for example, destroyed, lost, altered, or disclosed to or made available to unauthorized parties.
We document and handle data breaches in accordance with the GDPR. If a breach poses a risk that requires reporting to the Swedish Data Protection Authority (IMY), we do so within the timeframe specified in the GDPR. Affected individuals are notified when required by law.
Contact Us Regarding Personal Data
If you wish to exercise any of your rights or have questions about how we process your personal data, please contact us:
