Privacy Policy

1. Who is responsible for your personal data

Overlandexperten ("we", "us", "our") is the data controller for the processing of personal data on our website and in our services.

Kontakt: info@overlandexperten.com

Adress: Göteborgsvägen 679, 434 96 Kungsbacka

Org.nr: 556322-0887

This policy describes how we collect, use, share and protect personal data and your rights under GDPR.

2. What data we collect

• Identity & contact: name, email, phone, address.
• Account & orders: login credentials, customer and order history.
• Communication: customer service cases, preferences, feedback.
• Technology & usage: IP address, device and log data, cookie choices and consent history (see "Cookies" section).
• Competitions & campaigns: participation, contributions and any prize handling.

3. Why we process data (purposes) and legal basis

• Account & purchases – to enter into/fulfill agreements (e.g. handle orders, delivery, payment, support). Legal basis: Contract.
• Customer service & quality work – investigate cases, improve services. Legal basis: Legitimate interest.
• Marketing & newsletters – offers, tips and targeted communication. Legal basis: Consent (email/SMS) or legitimate interest where permitted.
• Competitions & events – administer participation. Legal basis: Contract/consent.
• Abuse & security prevention – prevent and investigate fraud/abuse. Legal basis: Legitimate interest.
• Legal obligations – e.g. accounting, product safety, complaints. Legal basis: Legal obligation.

4. Where the data comes from

• Directly from you when you create an account, place an order, contact us or set preferences.
• Automatically via our website (logs, cookies – according to your choices in the consent banner).
• Third parties in connection with payment and delivery (see recipients below).

5. Recipients of personal data (categories)

We share data with trusted data processors who process data on our behalf and only according to our instructions and applicable data processing agreements:

• Payment and IT providers (operations, e-commerce, email, CRM, support).
• Logistics/transport for delivery of goods (e.g. Gordon Delivery for home delivery).
• Consent management & cookies: Cookiebot CMP by Usercentrics (banner, logs and cookie declaration).

6. Transfers outside EU/EEA

If a supplier processes data outside the EU/EEA, we use EU standard contractual clauses (SCC) and, where necessary, supplementary protective measures.

7. Storage periods

• Customer and order data: normally 7 years (accounting law).
• Customer service cases: normally 24 months after closure.
• Marketing via email/SMS: until you withdraw consent or object; we delete continuously.
• Consents & cookie choices: Cookiebot stores consents for up to 12 months.

8. Cookies and consent (Cookiebot)

We use Cookiebot CMP by Usercentrics to display a consent banner, block non-essential cookies until consent is given, and to log and document consents. You can change or withdraw your consent at any time via the "Change consent" link/banner. The cookie declaration is updated automatically and shows providers, purposes and storage periods.

Learn more at Cookiebot/Usercentrics: support.cookiebot.com

9. Security

We take technical and organizational measures to protect personal data (e.g. access controls, encryption where appropriate, logging, training and supplier review).

10. Your rights

You have the right to:

• Access (register extract)
• Rectification
• Erasure ("right to be forgotten")
• Restriction of processing
• Data portability
• Object to processing based on legitimate interest
• Withdraw consent (applies to future processing)

You can also file a complaint with the Swedish Authority for Privacy Protection (IMY).

11. How to exercise your rights

Contact us at info@overlandexperten.com from the email address linked to your account and provide a phone number where we can reach you for verification. We normally respond within 30 days.