This privacy policy explains how QH-System AB processes personal data when you visit www.spillvac.com, order from our online shop or contact us. We only sell to businesses, but we also process data about the people who act on behalf of our customers.
1. Controller
QH-System AB, Pappersbruksvägen 6, 289 41 Broby, Sweden
Organisation number: 556623-7839 · VAT number: SE556623783901
E-mail: info@spillvac.com · Phone: +46 31 45 65 65
2. What we process and why
- Orders. Name, company, e-mail address, delivery and billing address, VAT number, the products ordered and the order and payment status. We use this to process your order, deliver it, send order confirmations and shipping notices, and to invoice and keep accounts as required by law (Art. 6(1)(b) and (c) GDPR). If you enter a VAT number, we check it with the EU VAT Information Exchange System (VIES) to decide whether reverse charge applies.
- Payment. Payments are processed by our payment service provider. Card details are entered with the provider and are not stored by us. We receive information on whether the payment succeeded.
- Contact and support requests. Name, e-mail address, phone number, message, order and article number and any photos you upload. We use this to answer your request and handle returns and claims (Art. 6(1)(b) and (f) GDPR).
- Necessary cookies and logs. To keep your basket and session working and to remember your cookie choice, we use technically necessary cookies and local storage. Our servers also log technical data such as IP address and requested pages for security and operation (Art. 6(1)(f) GDPR).
- Analytics, marketing and embedded videos. Google Tag Manager and embedded videos (YouTube, Vimeo) are only loaded after you have given your consent in the cookie banner (Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time via the “Cookies” button on the website.
3. Who receives your data
We share personal data only where necessary, with: payment service providers, shipping companies and carriers, providers of hosting and e-mail services, our accountants and auditors, the EU Commission’s VIES service (VAT number checks) and, only with your consent, Google, YouTube and Vimeo. These recipients process data either as our processors under data processing agreements or as independent controllers.
4. Transfers outside the EU/EEA
Some providers may process data outside the EU/EEA, for example in the USA. In that case the transfer is based on an adequacy decision of the EU Commission (such as the EU–US Data Privacy Framework) or on standard contractual clauses.
5. How long we keep data
Order and invoice data are kept for as long as the Swedish accounting rules require (currently seven years). Other data, such as contact and support requests, are kept for as long as needed for the purpose and are then deleted.
6. Your rights
You have the right to access your personal data and to have it rectified or erased, to restrict or object to processing, and to receive your data in a portable format. Where processing is based on consent, you can withdraw it at any time. Contact us at info@spillvac.com to exercise your rights.
7. Complaints
You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY, www.imy.se) or with the data protection authority in your own country.
8. Changes
We may update this policy. The current version is always available on this page.