Privacy Policy

WITAL AB (org. nr. 559468-6254), Fosievägen 29A, 214 31 Malmö, is the data controller for the processing of your personal data described in this policy.

If you have questions about how we handle your data, you can reach us at [email protected].

We process the data you provide to us yourself, for example:

• Contact details — name, email address and phone number when you send an enquiry via the contact form.
• Account details — email address and name if you create an account, as well as login history.
• Order details — the contents of the order, delivery address, any 3D files and communication regarding the order.
• Technical data — IP address, browser type and device information that is collected automatically when you visit the website.

• Contract — to be able to handle your order, prepare a quote and deliver our services.
• Legitimate interest — to respond to enquiries, improve the website and protect ourselves against abuse (e.g. via Cloudflare Turnstile).
• Legal obligation — to comply with requirements under accounting and tax legislation.
• Consent — where required, for example for marketing via email.

We keep your data for as long as it is needed for the purpose for which it was collected. Contact enquiries are normally deleted within 12 months. Order-related data is kept for up to 7 years to comply with the Swedish Accounting Act. Account details are kept for as long as your account is active.

We share your data only with trusted providers who help us run the service:

• Provider for database hosting (within the EU)
• Provider for sending transactional and account emails
• Cloudflare (Turnstile spam protection) — see Cloudflare Turnstile Privacy Policy
• Provider for delivery of orders
• Provider for hosting the website

All providers are bound by data processing agreements and process data in accordance with the GDPR. We process your data primarily within the EU/EEA. In the event of any transfer outside the EU/EEA, we ensure that approved safeguards are in place.

Under the GDPR you have the right to:

• obtain information about and access to your personal data,
• request rectification of incorrect data,
• request erasure (“the right to be forgotten”),
• object to or request restriction of the processing,
• request data portability where applicable,
• withdraw consent you have previously given.

Contact us at [email protected] to exercise any of these rights.

The website uses only necessary cookies to handle login and maintain user sessions. We do not use cookies for tracking or advertising.

If you believe that we are processing your data in breach of the GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

We may update this policy. The latest version is always published on this page, with the date of the most recent change indicated.