Data Controller
Eagle DR AB (organisation number 559515-3122), with its registered address at Sotingeplan 28 LGH 1001, 163 61 Spånga, Stockholm, Sweden, is the data controller responsible for processing your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Swedish Data Protection Act (Dataskyddslag 2018:218).
eagledrab@gmail.com
Personal Data We Collect
We collect and process the following categories of personal data:
Full name, email address, phone number (optional), message content, and subject line.
Email address and preferred language.
IP address (anonymised), browser type, device type, pages visited, and session duration via privacy-respecting tools.
Company name, job title, and order specifications when relevant to business correspondence.
We do not collect sensitive personal data (special category data) as defined under GDPR Article 9.
Legal Basis for Processing
We process your personal data on the following legal grounds:
To respond to your enquiries and fulfil orders.
To improve our website, prevent fraud, and manage our business communications.
For newsletter subscriptions and non-essential cookies. You may withdraw consent at any time.
To comply with Swedish and EU legal requirements.
How We Use Your Data
Your personal data is used exclusively for the following purposes:
- Responding to contact form enquiries and business correspondence
- Processing and fulfilling product orders and wholesale requests
- Sending newsletters and product updates (with your consent)
- Improving our website performance and user experience
- Complying with legal and regulatory obligations
- Protecting against fraudulent or abusive use of our services
We do not sell, rent, or trade your personal data to third parties for commercial purposes.
Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected:
24 months from last interaction, unless an ongoing business relationship requires longer retention.
Until you unsubscribe, after which we delete your data within 30 days.
7 years in accordance with the Swedish Bookkeeping Act (Bokföringslag 1999:1078).
Aggregated and anonymised within 26 months.
Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Request correction of inaccurate or incomplete data.
Right to erasure
Request deletion of your data ("right to be forgotten") where no legal obligation requires retention.
Right to restriction
Request that we limit how we process your data in certain circumstances.
Right to portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests or for direct marketing.
If unsatisfied with our response, you may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.
Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- TLS/HTTPS encryption for all data transmitted via our website
- Access controls limiting data access to authorised personnel only
- Regular review of our data handling practices
- Secure infrastructure hosted on Vercel's enterprise-grade platform
In the event of a personal data breach posing a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR Art. 33–34.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised.
For material changes, we will notify registered newsletter subscribers by email. Continued use of our website after any changes constitutes acceptance of the updated policy.
Questions about this policy?
Contact Eagle DR AB at eagledrab@gmail.com or write to us at Sotingeplan 28 LGH 1001, 163 61 Spånga, Stockholm, Sweden.