1. Controller Information
This Privacy Policy applies to the domain rankbasketprismerprts.motorcycles operated by Rankbasketprismerprts Nordic Apparel AB, a registered Swedish private limited company with corporate registration number SE556912-8401, having its registered seat at Kungsgatan 44, 111 35 Stockholm, Sweden (referred to as "the Company", "we", "us", or "our").
We act as the Data Controller under Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR) and the Swedish Data Protection Act (Lag 2018:218 med kompletterande bestämmelser till EU:s dataskyddsförordning).
2. Categories of Personal Data Collected
Depending on your interaction with our static educational resources, we may process the following limited personal data categories:
- Direct Inquiry Data: Your name, email address, corporate entity name, and any textual details submitted voluntarily through our contact submission interface.
- Technical Transmission Logs: Internet Protocol (IP) addresses, browser user agent strings, HTTP referrers, request timestamps, and operating system identifiers transmitted automatically by your browser during web socket requests.
- Consent State Preferences: Granular records indicating your acceptance, rejection, or custom selection regarding client-side browser storage and cookie settings.
3. Lawful Bases for Processing
We process personal data solely where a valid legal justification exists under Article 6(1) of the GDPR:
- Article 6(1)(b) Contract & Pre-contractual Requests: Processing your contact inquiries regarding apparel consultations, specifications, and outfitting queries.
- Article 6(1)(c) Legal Obligation: Maintaining accounting, tax, and commercial correspondence logs in accordance with the Swedish Bookkeeping Act (Bokföringslag 1999:1078).
- Article 6(1)(f) Legitimate Interests: Protecting our web infrastructure against distributed denial-of-service (DDoS) attempts, automated brute-force attacks, and optimizing technical delivery speeds.
- Article 6(1)(a) Explicit Consent: Processing non-essential telemetry or analytical cookies, which you may grant or revoke at any time via our Cookie Consent interface.
4. Third-Party Data Processors
We do not sell, rent, or lease personal identifiers to data brokers or advertising exchanges. Personal data may be accessible to vetted third-party technical infrastructure providers under strict Data Processing Agreements (DPAs) compliant with Article 28 of the GDPR:
- Hosting & Content Delivery: Secure European server infrastructure located within the EU/EEA economic area.
- Email Routing Systems: Encrypted SMTP gateway providers ensuring secure communication transit.
5. International Data Transfers
All primary server infrastructure is located within the European Economic Area (EEA). If technical routing requires auxiliary transmission outside the EEA, transfers occur solely under European Commission Standard Contractual Clauses (SCCs) or adequacy decisions, ensuring an equivalent level of individual protection.
6. Data Retention Periods
Direct contact inquiries are retained for a maximum of twenty-four (24) months following the resolution of your query, after which records are permanently deleted or irreversibly pseudonymized. Technical server access logs are cycled and overwritten automatically every thirty (30) days, except where an active security investigation requires extended retention.
7. Your Statutory Rights (GDPR & CCPA)
As an individual data subject, you possess enforceable rights under Chapter III of the GDPR:
- Right of Access (Art. 15): Request a copy of all personal data held concerning your identity.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete personal records.
- Right to Erasure (Art. 17): Request deletion of personal records where processing is no longer necessary ("right to be forgotten").
- Right to Restriction of Processing (Art. 18): Restrict the scope of data processing during dispute verification.
- Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object (Art. 21): Object to processing founded upon legitimate interest grounds.
To exercise any statutory right, contact our Data Protection Officer at [email protected]. You also hold the right to lodge an official complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm (imy.se).
8. Data Protection Officer (DPO) Contact
Direct all formal inquiries regarding data protection protocols to:
Data Protection Officer
Rankbasketprismerprts Nordic Apparel AB
Kungsgatan 44, 111 35 Stockholm, Sweden
Email: [email protected]