Privacy policy

At Vindora we care about your personal privacy and always strive to handle your personal data in a secure, responsible and transparent way.

This privacy policy describes how we collect, use, store and protect your personal data when you visit our website, use our configurator, send a request or contact us.

We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection legislation.

1. Data controller

The data controller for the processing of your personal data is:

2. What personal data do we collect?

Depending on how you use our services, we may collect and process the following personal data:

• Name and contact details, such as email address and phone number.
• Address and delivery details.
• Information provided in connection with quote requests.
• Product choices, wishes and specifications from our window configurator.
• Measurements, drawings and other information needed to design your order.
• Communication between you and Vindora.
• Technical information such as IP address, browser and information about how the website is used.

We only collect the information needed for each purpose.

3. Why do we process your personal data?

We use your personal data to be able to offer a secure and smooth customer experience.

This includes:

• Handling enquiries and quote requests.
• Answering questions and providing customer service.
• Administering product choices and configurations.
• Producing made-to-measure windows, doors and special solutions.
• Putting you in touch with retailers and partners when needed.
• Handling orders, deliveries and installation.
• Communicating information about your enquiries and orders.
• Improving and developing our website and our services.
• Fulfilling our legal obligations.

4. Legal basis for the processing

We process your personal data on the following legal bases under the GDPR:

• Contract and pre-contractual measures: When we need to process data to handle your request, prepare a quote or fulfil an order.
• Legal obligation: When we need to store or process data to meet, for example, the requirements of the Swedish Bookkeeping Act.
• Legitimate interest: When we process data for, for example, customer communication, service, administration and the development of our services, after we have carried out a balancing of interests.
• Consent: When we need your approval, for example for certain types of cookies, analytics tools or marketing.

5. How long do we keep your personal data?

We do not keep your personal data longer than is necessary for the purposes for which it was collected.

• Quote requests: Kept for as long as needed to handle the request and follow up the contact.
• Customer and order details: Kept for as long as the customer relationship requires.
• Accounting records: Kept in accordance with applicable bookkeeping legislation.
• Marketing: Kept until you withdraw your consent or object to the processing, depending on the legal basis.
• Cookies: The storage period varies depending on the type of cookie.

When the data is no longer needed, it is deleted or anonymised.

6. Sharing of personal data

Vindora never sells your personal data to third parties.

To be able to provide our services, we may need to share certain information with trusted partners, for example:

• Retailers who help with advice and quotes.
• Manufacturers and suppliers who need information to handle your order.
• Transport and delivery companies.
• Installers and installation services.
• IT providers and system providers.
• Finance and accounting services.

We only share the information that is necessary for each purpose.

When an external supplier processes personal data on our behalf, there must be a data processing agreement where one is required.

7. Cookies and similar technologies

Vindora.se may use cookies and similar technologies to improve the website's functionality and user experience.

Cookies may be used to:

• Ensure that the website's basic functions work.
• Remember your settings.
• Analyse traffic and user behaviour.
• Improve the website's content and functions.
• Enable relevant marketing, if such tools are used.

You can manage your cookie settings yourself through our cookie management.

Cookies that require consent are only used after you have given your approval. You can change or withdraw your consent at any time.

8. How do we protect your personal data?

We work actively to protect your personal data against unauthorised access, loss, alteration and unauthorised disclosure.

We use appropriate technical and organisational security measures to ensure that your data is handled securely.

Access to personal data is limited to people and partners who need the data to carry out their work.

9. Your rights under the GDPR

You have several rights regarding the processing of your personal data.

• Right of access: You have the right to know which personal data we process about you and to request a copy.
• Right to rectification: You have the right to have incorrect or incomplete data corrected.
• Right to erasure: You can request that your personal data be erased when there is a legal basis for it.
• Right to restriction: In certain situations you can request that the processing of your personal data be restricted.
• Right to data portability: In some cases you have the right to receive the personal data you have provided to us in a structured and machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interest. You always have the right to object to the processing of your personal data for direct marketing.
• Right to withdraw consent: If the processing is based on your consent, you can withdraw it at any time.

To exercise your rights, contact us using the contact details below.

10. Transfers of personal data outside the EU/EEA

We strive to process and store personal data within the EU/EEA.

If we use suppliers or services that involve personal data being transferred to countries outside the EU/EEA, we ensure that the transfer takes place in accordance with the GDPR and that appropriate safeguards are in place.

11. Changes to the privacy policy

We may update this privacy policy when our services, ways of working or applicable laws change.

The latest version is always available at vindora.se.

We recommend that you read the policy regularly to stay informed about how we handle personal data.

12. Contact us

If you have questions about how we process your personal data, or if you want to exercise any of your rights under the GDPR, you are welcome to contact us.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe that we process your personal data in breach of the GDPR.

Website: www.imy.se