Privacy Policy
How we handle your personal data in accordance with GDPR
Kolafabriken i Sverige AB (reg. no. 556730-0214) cares about your personal privacy. This policy describes how we collect, use and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR).
Last updated: 2026-04-06
1. Data Controller
Kolafabriken i Sverige AB
Reg. no.: 556730-0214
Svenstorpsvägen 2A
372 61 Bräkne-Hoby, Sweden
Email: info@kolafabriken.se
Phone: +46 457-470 400
2. Personal Data We Collect
We collect personal data that you voluntarily provide through our contact form:
- Name
- Email address
- Phone number
- Message (free text)
- Company name (for business enquiries)
3. Purpose and Legal Basis
We process your personal data for the following purposes:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Responding to enquiries via the contact form | Legitimate interest (Art. 6.1f) | 12 months after the case is closed |
| Managing business partnerships and quotations | Contract or pre-contractual measures (Art. 6.1b) | As required by the Swedish Bookkeeping Act (7 years) |
4. Sharing of Personal Data
We never sell your personal data to third parties. Your data may be shared with:
- *Web hosting provider:* for operating the website and handling form data.
All our sub-processors are bound by data processing agreements and process data within the EU/EEA.
5. Cookies
Our website uses cookies that are necessary for the basic functionality of the site. We currently do not use any analytics or marketing cookies.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| Essential cookies | Strictly necessary | Basic functionality, e.g. form handling | Session |
6. Your Rights
Under the GDPR, you have the following rights:
- Right of access: You may request information about the personal data we hold about you.
- Right to rectification: You may request that inaccurate data be corrected.
- Right to erasure: You may request that we delete your personal data, unless there is a legal basis for retaining it.
- Right to restriction: You may request that the processing of your data be restricted.
- Right to data portability: You may request to receive your data in a machine-readable format.
- Right to object: You may object to processing based on legitimate interest.
Contact us at info@kolafabriken.se to exercise your rights. We will respond to your request within 30 days.
7. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. The website uses SSL/TLS encryption to protect data in transit.
8. Supervisory Authority
If you believe that we are processing your personal data in violation of the GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Integritetsskyddsmyndigheten (IMY)
Box 8114
104 20 Stockholm, Sweden
www.imy.se
9. Changes to This Policy
We may update this privacy policy from time to time. In the event of significant changes, we will inform you on our website. The latest version is always available on this page.