Privacy policy
This policy describes which personal data we process when you use printhallen.se, why we do so and what rights you have.
Version 2026-09-25 · updated 25 September 2026
Data controller
VelvetStack AB, company registration number 559557-0515, Tjärnvägen 17, 433 51 Öjersjö, is the data controller. You can reach us through the contact form.
This privacy policy is an English translation provided for convenience. The Swedish version is the binding text; if the two differ, the Swedish text applies.
What data we process and why
- Orders and delivery: name, email address, delivery address, mobile number and details of the order, to receive, make, deliver and communicate about your order. Legal basis: contract.
- Payment: the status and reference of the payment, and the fact that you accepted the terms of sale. Card details are handled by the payment provider and never reach us. Legal basis: contract.
- Uploaded files and quotes: the file, your choices and, for a manual quote, your email address and your message. Legal basis: steps taken at your request before entering into a contract, and contract.
- Offers: when we send you an offer, your email address, the content of the offer and, where applicable, the model file. Legal basis: steps taken at your request before entering into a contract, and contract.
- Account: email address, logins and the addresses you choose to save. Legal basis: contract.
- Contact form, withdrawal and complaints: name, email address, what you write to us and our correspondence. Legal basis: legal obligation and a legitimate interest in being able to handle the matter.
- Bookkeeping: details of the order that form accounting records. Legal basis: legal obligation.
- Newsletter: the email address, when and how you subscribed and whether you have unsubscribed. We only send to those who have subscribed themselves, and you can unsubscribe at any time with the link in every newsletter. Legal basis: consent.
- Security and statistics: technical information, such as a pseudonymised (hashed) IP address, to protect the service against misuse, and visitor statistics that do not identify you. Legal basis: a legitimate interest in a secure and working service.
The details asked for at the checkout are needed for us to enter into and perform the contract. We make no automated decisions with legal effect and do not sell personal data. We send no marketing to anyone who has not subscribed to the newsletter.
Who receives the data
We pass data to suppliers who process it on our behalf or who are needed to fulfil the purchase: providers of hosting, storage and email, payment providers, carriers, and providers of address lookup, visitor statistics and protection against automated misuse. Data may also be passed to public authorities when the law requires it, and to a buyer if the business is transferred.
The data is stored within the EU. Some suppliers operate in the United States. Transfers there are made under the European Commission's standard contractual clauses or the adequacy decision for the EU-U.S. Data Privacy Framework.
How long we keep the data
A newsletter subscription that is never confirmed is deleted after 30 days. If you have subscribed, we keep the address until you unsubscribe, and after that a record that you have unsubscribed for as long as we need it to avoid writing to you again. Uploaded files that do not lead to a purchase are deleted after 7 days, and files that belong to an order 90 days after delivery. Quotes and offers that do not lead to a purchase are deleted, with their files, 30 days after they were declined, expired or withdrawn. Accounts are deleted after two years without a login. Details of orders are kept for as long as bokföringslagen (the Swedish Accounting Act) requires, currently seven years after the end of the calendar year in which the financial year ended. Other data is deleted when it is no longer needed for its purpose, normally within a year.
Your rights
You have the right to request access to your data, to have it corrected or deleted, to request that processing be restricted, to object to processing based on legitimate interest, and to receive the data you have provided yourself in a machine-readable format. Some data we must keep by law. Contact us through the contact form and we will reply within a month. You also have the right to lodge a complaint with Integritetsskyddsmyndigheten (the Swedish Authority for Privacy Protection, IMY), imy.se.
Changes
We may update this privacy policy. The current version is always available on this page.