Privacy policy
Last updated: 28 June 2026
1. Who we are
Vintelli AB (“Vintelli”, “we”, “us”) is the data controller for personal data processed through vintelli.se. Our registered office is at Konserthusgatan 11 A, Lgh 1202, 578 31 Aneby, Sweden (org. nr 559507-5838).
Contact for data protection matters: contact@vintelli.se
2. What data we collect
- Order data: name, delivery address, email address, and phone number, provided by you when placing an order.
- Payment data: payment is handled by Shopify Payments and your chosen payment provider. We do not store card numbers.
- Currency preference: a strictly necessary cookie stores your selected currency (no consent required).
- Analytics data: if you consent, we may collect pseudonymised browsing data to improve the site. No analytics runs before you accept. See the cookie policy for details.
- Newsletter: if you subscribe, we store your email address and the date of confirmed opt-in.
3. How and why we use your data
| Purpose | Legal basis | Retention |
|---|---|---|
| Processing and fulfilling your order | Contract (Art. 6(1)(b) GDPR) | 7 years (Swedish accounting law) |
| Customer service | Legitimate interest (Art. 6(1)(f)) | 2 years after last contact |
| Email newsletter | Consent (Art. 6(1)(a)) | Until you unsubscribe |
| Analytics (optional) | Consent (Art. 6(1)(a)) | Until you withdraw consent |
4. Who we share data with
We share order data with Shopify Inc. (our e-commerce platform provider, acting as a data processor) and with the delivery carrier required to fulfil your order. We do not sell personal data to third parties.
Shopify’s privacy policy: shopify.com/legal/privacy
5. International transfers
Shopify stores data on servers in the United States and other countries. Transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission.
6. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Erase your data (where no legal obligation requires retention)
- Restrict or object to processing based on legitimate interest
- Receive your data in a portable format
- Withdraw consent at any time (this does not affect past processing)
To exercise any of these rights, email contact@vintelli.se. We respond within 30 days.
You may also lodge a complaint with the Swedish data protection authority: Integritetsskyddsmyndigheten (IMY).
7. Cookies
We use cookies as described in our cookie policy. The currency preference cookie is strictly necessary and does not require consent.