Personal data
Double Half AB (company reg. no. 559569-3820) is the data controller for the information held in the retailer portal. This notice applies to contact persons and users at our customers, to companies applying for a customer number, and to anyone who signs up for our newsletter.
Information we store
About the company: name, company registration number, VAT number, billing and delivery address, and payment and delivery terms. About contact persons: name, email address and phone number. For login: email address, encrypted password and time of last login. For each order: items, prices and delivery address. Emails sent by the portal are logged with recipient, subject and time.
Purpose
We use this information to receive and deliver orders, to invoice, and to meet the requirements of the Swedish Bookkeeping Act and VAT legislation. Applications for a customer number are processed so that we can respond to them. Customers may also receive newsletters about new designs, see "Newsletters" below.
Legal basis
Orders, deliveries and invoicing: the contract with the customer. Where the customer is a limited company or another legal entity, we process contact persons' information on the basis of our legitimate interest in performing the contract with that company. Bookkeeping and invoice records: legal obligation under the Swedish Bookkeeping Act and VAT legislation. Customer number applications: legitimate interest in reviewing and responding to the application. Login, security and email log: legitimate interest in protecting customer accounts and being able to show which emails the portal has sent. Newsletters to customers: legitimate interest in offering our customers designs similar to those they already buy. Newsletters to people who signed up themselves: consent.
Retention
Customer information is kept for as long as the customer relationship lasts. Orders and invoice records are kept until the end of the seventh year after the calendar year in which the financial year ended, as required by the Swedish Bookkeeping Act. Temporary login data is deleted automatically within a few days. This covers sessions, one-time links and a short-lived counter for login attempts, in which the [email/IP] address is stored in unrecognisable form. Rejected applications are deleted. Anyone who unsubscribes from our newsletters is marked as unsubscribed and receives no further newsletters.
Newsletters
A few times a year we send news about our range. Customers receive it at the email address registered on their customer account. We may tailor the content to previous orders, for example formats and designs. The selection is made in our own system, and only the email address is passed to the email service. If you are not a customer, you can sign up on the website. We then store your email address and the time you signed up. In that case the legal basis is your consent. Every newsletter includes an unsubscribe link.
Recipients
We only share information when it is needed to fulfil an order: With our accounting service Wint: invoice records for bookkeeping. With the carrier DHL: the recipient's company name, delivery address, contact person, and phone number or email for delivery notification. We do not sell any information.
Where the information is stored
The portal runs on Vercel in Stockholm and the database on Neon in Frankfurt, both within the EU. Emails and newsletters are sent via Resend, which stores email content, delivery logs and contact details in the United States. The transfer is made under the European Commission's Standard Contractual Clauses and Resend's participation in the EU-U.S. Data Privacy Framework. All three are data processors and may, under agreement, only process the information on our behalf.
Your rights
You have the right to know what information we hold about you, to have it corrected, and to have it deleted when it is no longer needed. You can also ask us to restrict processing and object to processing based on legitimate interest. You can object at any time to receiving newsletters and to having them tailored to your orders, and we will then stop. Information you have provided yourself can be given to you in a machine-readable format where the processing is based on contract or consent. You can withdraw consent at any time. Information we are required to keep under the Swedish Bookkeeping Act is anonymised rather than deleted. Contact info@doublehalf.se. If you believe we are processing your information incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY).