Privacy Policy

Chevalier AB is committed to protecting your privacy and handling your personal data in a responsible, transparent and lawful manner. This Privacy Policy explains how we collect, use, share and store your personal data when you visit our website www.chevalierglobal.com
or make a purchase from us.

Chevalier AB (company registration number 556726-6811), with registered address Konstruktionsvägen 3, 435 33 Mölnlycke, Sweden, is the data controller responsible for the processing of your personal data. All processing is carried out in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR).

What personal data do we process?

We collect and process personal data that is necessary to provide our services and fulfil our contractual obligations. This may include:

Name, address and contact details
Personal identification number and IP address
Payment information and credit information
Order history and delivery details
Invoice numbers and customer reference numbers

Why do we process your personal data?

We process your personal data for the following purposes:

To manage purchases, deliveries, returns and complaints
To handle customer service matters
To administer your customer account and verify your age when required
To carry out credit assessments where applicable
For marketing, customer communication and analysis
To send newsletters, offers and invitations to events

If automated decision-making is used, for example in connection with credit applications, you have the right to request human intervention and a manual review of the decision.

Legal basis for processing

We process your personal data when necessary to:

Perform a contract (e.g. fulfil a purchase)
Comply with legal obligations (e.g. accounting legislation)
Pursue our legitimate interests (e.g. direct marketing and customer communication)
In certain cases, we process personal data based on your consent. You may withdraw your consent at any time.

How is your personal data stored and protected?

We implement appropriate technical and organisational measures to protect your personal data. These measures may include encryption, access controls, anonymisation and contractual safeguards with service providers.

Personal data is primarily stored within the EU/EEA. Where personal data is transferred to countries outside the EU/EEA, we ensure an adequate level of protection through standard contractual clauses or other legally approved safeguards.

How long do we retain your data?

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law.

For marketing purposes, we delete personal data if you have been inactive for one year (for example, if you have not opened any marketing emails).
Data related to accounting and financial transactions is retained in accordance with legal requirements, typically for seven years.

Sharing of personal data

We may share your personal data with:

Providers of e-commerce platforms and payment services
Providers of analytics and advertising services (e.g. Google)
Companies within the Open Air Group (OAG) for purposes related to improving the customer experience

All third parties processing personal data on our behalf do so under strict confidentiality and in accordance with written data processing agreements.

Your rights

Under the GDPR, you have the right to:

Access the personal data we process about you
Have inaccurate or incomplete data corrected
Request deletion of your personal data (“right to be forgotten”) when applicable
Request restriction of processing, for example if data is incorrect or if you object to marketing
Receive your personal data in a structured, commonly used and machine-readable format (data portability)
Object to processing based on legitimate interests, such as direct marketing
Lodge a complaint with the relevant supervisory authority

In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (IMY): www.imy.se

Children

We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data relating to a child under 18 has been collected, we will delete such data without undue delay.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The most recent version is always available on our website.

Contact

If you have any questions about how we process personal data or wish to exercise your rights, please contact us:

Email: [email protected]

Address:

Chevalier AB
Konstruktionsvägen 3
435 33 Mölnlycke
Sweden