iPhone Akuten

Privacy policy

This privacy policy (hereinafter – the Policy) sets out the conditions for the processing of personal data when using the website operated by iPhone Akuten, company reg. no. XXXXXX-XXXX, registered address Torgatan 1, Sundsvall (hereinafter – the Company), which is the controller of the website https://iphoneakuten.se (hereinafter – the Website).

In the Policy we inform you what information we collect about you when you use and/or visit the Website, how long we retain that information and what rights you have. Please therefore read the Policy carefully and consider the conditions you are agreeing to. If you do not agree with these conditions, we ask you not to visit the Website and not to use its content and/or the services provided on it.

By submitting your personal data (including data you provide directly or indirectly when visiting the Website and using the services provided on it), you agree and do not object to the Company managing and processing it for the purposes and in the manner set out in this privacy policy and in the applicable legislation.

The conditions set out in this privacy policy apply every time you access the Website, regardless of the device (computer, mobile phone, tablet, television or other) you use.

Personal data is processed in accordance with the European Union General Data Protection Regulation (EU) 2016/679 (hereinafter – the Regulation), the Swedish Act (2018:218) containing supplementary provisions to the EU General Data Protection Regulation, and other legislation governing the protection of personal data.

1. Key definitions

Controller/the Company – a legal or natural person who alone or jointly with others determines the purposes and means of the processing of personal data. Within the scope of this Policy, the Controller is iPhone Akuten, company reg. no. XXXXXX-XXXX, registered address Torgatan 1, Sundsvall.

Data subject – in this privacy policy, any person who uses the Website, expresses a wish to use the services provided on the Website, or contacts the Controller with an enquiry through the Website.

Personal data – any information relating to a natural person – the data subject – that is processed by the Controller and by which the person can be identified, including but not limited to: first name, surname, email address, telephone number and so on.

Processing – any operation performed on personal data: collection, recording, storage, alteration (supplementing or correcting), disclosure, use, erasure or any other operation or set of operations.

Consent – a freely given expression of will by the data subject by which they agree to the processing of their personal data.

Privacy policy – this document, which sets out the main rules for the collection, storage, processing and protection of personal data.

The Website – the website operated by the Company, https://iphoneakuten.se

2. Principles of personal data processing

We collect and process the personal data specified in the Policy only where there is a lawful basis – your consent and/or our legitimate interest and/or the performance of legal obligations arising for and applicable to us – and it is not further processed in a manner incompatible with that purpose, except to the extent permitted by law.

We aim for personal data to be processed accurately, fairly and lawfully, to be processed only for the purposes for which it was collected, and in compliance with the clear and transparent principles and requirements for the processing of personal data laid down in the Regulation and in other legislation.

Your personal data is processed in a manner that ensures appropriate security through suitable technical or organisational measures, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

3. Information collected by the Company and the legal basis

We collect information about you on the following grounds:

  • Your consent, expressed when you contact us by the means available on the Website;
  • The conclusion and performance of contracts;
  • Legal obligations;
  • The pursuit of the legitimate interests of the Company and/or third parties (administering the Website and ensuring it functions properly, collecting and analysing statistical data, market analysis and so on).

Information about you may also be obtained when visit statistics for the Website are generated. With your consent, the Company may collect information about your device or about how you use the content of our website. The Company may also collect information about you from public and commercial sources (to the extent permitted by applicable legislation) and from third-party social network services when you connect to them. You may choose not to provide us with certain information, but in that case you may not be able to use the service we offer.

4. Processing of personal data

The Company, as Controller, collects personal data in accordance with the requirements of applicable European Union and Swedish legislation and the instructions of the relevant public authorities. The Company applies all reasonable technical and administrative measures to ensure that the data collected about the data subject is protected against unlawful loss or unauthorised use. In order to provide services and carry out its activities, the Company must collect the personal data of data subjects. Through this Policy, the Company informs you for which of the Company's business and service purposes and in what manner personal data is collected and processed.

4.1. For enquiries and advice

On the Website you can request a price estimate or advice about repairing your device. In order to provide the services referred to above, the Company collects and processes the following personal data:

  • Name;
  • Telephone number;
  • Email address.

Once you have completed the enquiry and submitted your data, the Company or its partners will contact you using the contact details you provided. Personal data received for this purpose may be transferred to the Company's business partners, who have undertaken to the Company to process and protect the data received in the manner and on the conditions set out in this Policy. Personal data collected for advisory purposes is retained for 10 (ten) years from the date the enquiry was submitted. Once the specified period has expired, the data is deleted automatically in a way that makes it impossible to restore, except where the period has been extended to the extent that this does not infringe the rights of the data subject or the requirements laid down by law.

5. Your rights

Under the Regulation, you, as the data subject to whom the processing relates, have the following rights:

  • The right to know (be informed) about the processing of your data;
  • The right of access to the data and to how it is processed;
  • The right to request rectification, having regard to the purposes of the processing, and to have incomplete personal data completed;
  • The right to be forgotten – to have your personal data erased or the processing of your data stopped (with the exception of storage);
  • The right to restriction of processing – to require the Controller to restrict processing;
  • The right to data portability;
  • The right to object to your data being processed for direct marketing purposes, including profiling insofar as it relates to direct marketing;
  • The right to lodge a complaint with the national supervisory authority (the Swedish Authority for Privacy Protection, IMY);
  • Other rights set out in the Regulation.

In exercising the rights set out above, the data subject may submit any request or instruction relating to the processing of personal data to the Controller in writing by email: info@iphoneakuten.se. Having received such a request or instruction, the Controller shall, no later than one month from the date of the approach, provide a reply and either carry out the actions specified in the request or refuse to carry them out. Where necessary, that period may be extended by a further two months, taking into account the complexity and number of the requests. In that case, within one month of receiving the request, the Controller shall inform the data subject of the extension, together with the reasons for the delay. The Controller may decline to enable data subjects to exercise the rights listed above, except for objecting to the processing of personal data for direct marketing purposes, in the cases provided for by law where it is necessary to ensure the prevention, investigation and detection of criminal offences or breaches of official or professional ethics, as well as the protection of the rights and freedoms of the data subject, the Controller or other persons.

6. Transfer of data to processors and third parties

So that the Company can properly provide its services and duly perform the contract, the Company has the right to engage other data processors for the processing of personal data. Where the Company is providing services, your data may be transferred to the Company's partners to the extent necessary to perform the service.

7. Third-party services

The Company informs you that the Website may contain third-party advertising and links to their websites and services, which the Controller does not control – for example, a link to the Company's social network profile. The Controller is not responsible for the security and privacy of information collected by third parties. You should read the privacy terms applicable to the third-party websites and services you use. If you have provided data about yourself through a social network, we understand this to mean that you agree that we may contact you on the telephone number and email address provided and send you offers for our services.

8. Final provisions

Responsibility for the processing/erasure of data lies with the Company's management or a person appointed by them. By contacting the Company at the email address info@iphoneakuten.se, you can exercise your rights as a data subject established by data protection legislation. A request to exercise your rights as a data subject must be submitted in writing to the Company's contact details set out in this Policy. By browsing our website, submitting data and so on, you agree that you have familiarised yourself with the applicable privacy policy. Additions to or amendments of the privacy policy take effect from the date they are published on the Website. Where, following an addition to or amendment of the privacy policy, the data subject uses the Website and/or the services provided by the Controller, the data subject is deemed to have no objection to such additions and/or amendments.

Effective from 1 January 2026.