Data controller
Swede-Wheel AB, company registration number 556458-5569, Nygårdsvägen 1, 335 73 Hillerstorp, Sweden, is the controller for the personal data described in this policy. Email: info@swede-wheel.se Phone: +46 (0)370-37 37 00
Legal
Privacy Policy
How Swede-Wheel AB handles personal data on this website.
Last updated: September 2026
What data we process
Contact form: name, email address, company, country and the content of your message. Account and sign-in: email address, password (stored only in hashed form by our authentication provider), account status and sign-in timestamps. Configurator: the technical layout you build, such as dimensions, heights, components and options. If you are not signed in, this stays in your browser until you send a request. Quotation request: your contact details, company details, the saved configuration and any message you add. Customer records: company and contact details, the link between your account and your customer record, and the reseller connected to you. Quotation sending: the quotation content locked at the time of sending, the recipient address and delivery status of the email. Acceptance or decline: the fact that you accepted or declined a quotation, the time it happened and any reason you enter when declining. Delivery and invoicing details on acceptance: when you accept a quotation we collect company name, contact person, delivery address, postal code, city and country, plus optional delivery instruction, invoice address, invoice reference and invoice e-mail. These details are used to fulfil and invoice the order, are stored immutably with the accepted quotation version, and are shared with the reseller connected to the quotation.
Purposes and legal bases
To answer your enquiries and provide the requested information — our legitimate interest in responding to people who contact us, or steps taken at your request before entering a contract. To create and operate your account and keep you signed in — performance of a contract with you, and our legitimate interest in secure access control. To produce, send and follow up quotations — steps taken at your request before entering a contract, and the performance of the contract itself. To keep customer records and connect a quotation to the correct reseller — our legitimate interest in administering sales through our reseller network. To keep records of quotations, acceptances and declines — compliance with legal obligations, such as accounting rules, and our legitimate interest in documenting business decisions. We do not use your data for marketing, profiling or newsletters, and we do not sell personal data.
Sharing with resellers
If your account or quotation is connected to an active reseller, the relevant details — your contact and company information, the quotation content and whether you accepted or declined — are shared with that reseller so they can handle your case. The reseller acts as an independent controller for the data they receive.
Service providers
We use a small number of providers to run the website: Supabase — database, authentication and file storage. Vercel — hosting and delivery of the website. Resend — sending transactional email, such as quotation emails and notifications. These providers process personal data on our instructions under data processing agreements.
International transfers
Our providers may process or store data outside the EU/EEA, primarily in the United States. Where that happens, transfers are protected by appropriate safeguards, in practice the European Commission's Standard Contractual Clauses together with additional technical and organisational measures such as encryption in transit and at rest. You can contact us for more information about the safeguards in place.
How long we keep data
Contact form messages: normally up to 12 months after the matter is closed. Accounts: as long as the account is active, and normally up to 12 months after it becomes inactive or you ask us to delete it. Configurations and quotation requests that do not lead to a quotation: normally up to 24 months. Sent quotations, acceptances and declines: normally up to 24 months, and longer where accounting or other legal obligations require it. Email delivery records: normally up to 12 months. These are our general principles; the actual period depends on the purpose and any legal requirement.
Your rights
You have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing and data portability. You may object to processing based on our legitimate interests. Where processing is based on consent, you may withdraw it at any time. To exercise your rights, contact us at info@swede-wheel.se.
Complaints
If you believe we handle your personal data incorrectly, you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, imy@imy.se.
Cookies
The website only uses necessary cookies and local storage. Details are on the cookies page.