Privacy Policy

1. Introduction

Klixarunklox ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website klixarunklox.world and use our services.

This policy complies with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Swedish Act with Supplementary Provisions to the EU General Data Protection Regulation (2018:218), and other applicable data protection laws in Sweden and the EU.

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. Where we rely on legitimate interests, you may object as described below.

2. Data Controller Information

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Personal Data You Provide

We collect information that you voluntarily provide when using our services:

• Name and contact information (email address, phone number)
• Billing and shipping addresses
• Payment information (processed securely through third-party payment processors)
• Communications and correspondence with us
• Any other information you choose to provide

3.2 Automatically Collected Data

When you visit our website, we may automatically collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on pages
• Referring website addresses
• Cookies and similar tracking technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given explicit consent for specific processing activities
• Contract Performance: When processing is necessary to fulfill our contractual obligations to you
• Legal Obligations: When we must comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights

5. How We Use Your Information

We use the collected information for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Providing customer support
• Sending transactional emails (order confirmations, shipping updates)
• Improving our website and services
• Analyzing usage patterns and trends
• Complying with legal obligations
• Marketing communications (only with your explicit consent)

6. Automated Decision-Making and Profiling

We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR. We do not build individual profiles for automated decisions about you. If this changes, we will update this policy and, where required, obtain your consent or provide another lawful basis.

7. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third parties who assist us in operating our website, conducting business, or servicing you (payment processors, shipping companies, email service providers)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties.

8. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order and transaction data: 7 years (for legal and tax purposes)
• Customer account information: Until account deletion request
• Marketing consent records: Until consent is withdrawn
• Website analytics data: only if we deploy analytics tools — typically up to 26 months or as stated by the provider; we do not run third-party analytics on this site at present

10. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, please contact us using the information provided in Section 2. We will respond without undue delay and in any event within one month, which may be extended by two further months where necessary (we will inform you of any extension and the reasons).

You also have the right to lodge a complaint with a supervisory authority. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, Sweden. Further information: https://www.imy.se.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Secure servers and databases
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

12. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with the IMY (Integritetsskyddsmyndigheten), Box 8114, 104 20 Stockholm, Sweden, or with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: