Privacy policy

Table of contents

1. Background

2. Definitions

3. How does the company collect personal information?

4. What personal information do we collect about you as a consumer, for what purpose, and on what legal basis?

5. Social platforms

6. Cookies

7. How long do we keep your personal information?

8. Your rights and choices

9. Consent

10. Who can we share your personal information with?

11. Where do we process your personal information?

12. How is your personal information protected?

13. Supervision and compliance

14. Third-party terms

15. Changes to the privacy policy

16. Acquisition

17. Contact us

1. Background

We protect your personal data. This policy ("Privacy Policy") has been designed to inform you that Garphyttan Original AB ("the company", "we", "us") processes your personal information in a legal, appropriate, and secure manner when you purchase our products or use our services, visit our website, or otherwise have contact with us.

The Privacy Policy describes when how, and why we collect, use disclose, and store personal information, as well as the rights you have in accordance with the European Union's General Data Protection Regulation (GDPR) (EU) 2016/679, along with its implementing regulations and supplementary data protection rules ("Data Protection Rules").

The Privacy Policy applies (i) when the company offers goods and services to you through purchases and orders on our website, (ii) when sending newsletters, (iii) for other marketing purposes such as personalized offers and discounts, (iv) during all other contact with the company related to visits to our website ("the Website") or via social platforms, and (v) for inquiries or other contact with us via email or telephone.

Garphyttan Original AB, org. no. 559228-2411, Mailbox 408, 111 73, Stockholm, Sweden, is the data controller and responsible for the processing of your personal data in accordance with this Privacy Policy.

Below is a summary of the personal data we collect during your visit to our Website:

● We track your web activity and may use it for marketing purposes.

● We collect personal data when you complete a purchase for the purpose of processing and delivering your order, as well as for marketing and customer communication.

● We process provided personal data by inputting them into integrated systems.

● We store personal data in our system for market analysis.

● We track the products you have viewed, added to your cart, and purchased. In some cases, we mat use this data to provide you with personalized products recommendations.

2. Definitions

In this Privacy Policy, the term "personal data" refers to information that can be attributed to an identified or identifiable natural person, such as name, social security number, email address, phone number, card number, and IP address ("personal data").

In this Privacy Policy, we describe how we process your personal data. The term "processing" includes activities such as recording, storing, transmitting, and otherwise using your personal data as described in this Privacy Policy ("processing").

2. How does the company collect personal data

The company primarily collects personal data directly from you as a customer. We record or may record your personal data in connection with:

● A completed order on the Website

● When you provide your email address on the Website

● If you contact us via email, phone, the Website, or social media.

● If you subscribe to the company's newsletter.

● If you subscribe to the company's subsidiary newsletters.

● Your visit to the Website, including but not limited to traffic data, location data, weblogs, and other communication data, as well as information such as the IP address, type of device, operating system, and browser type used during the visit.


4.What personal data do we collect about you as a customer, for what purpose, and on what legal basis?

Purpose Personal data is processed to: Categories of personal data:
To be able to handle orders and purchases. ● Deliver a ordered product (including delivery notifications or contacts in case of delayed delivery).

● Handle customer payments (including analyzing which payment solutions should be offered to the customer, which includes checking the customer's payment history and obtaining credit information from credit reporting agencies).

● Handle complaints and warranty cases regarding an ordered or purchased product or service.

● Verify the customer's address with Klarna.

● Name

● Social Security Number

● Contact information (e.g., address, email, and phone number)

● Payment history

● Payment information

● Credit information from credit reporting agencies

● Purchase information (e.g., which item is ordered or if the item should be delivered to a different address


Legal basis: The purchase agreement with the customer. This collection of your personal data is required for us to fulfill our obligation in accordance with the purchase agreement.
Storage period: Until the purchase is completed (including delivery and payment) and for a period of 7 years thereafter. The Accounting Act requires us to store transaction data for 7 years for the purpose of handling any complaints and warranty cases.


To be able to manage and administer the customer's user account, personal data is processed to create the customer's personal pages and administer the account, such as: Granting authorization to log in, Maintaining accurate and updated information, Enabling the customer to track their order history, Managing the customer's preferences and payment history information.
Purpose Personal data is processed to: Categories of personal data:
To be able to manage the customer's user account ● Give permission to log in.

● Maintain accurate and up-to-date information.

● Enable the customer to keep track of their order history.


● Name

● Contact information (e.g.m address, email, and phone number).

● User name and password.


Legal basis: Registered customers - legitimate interest (balance of interests)

Execution of the agreement on registered customers. This collection of your personal information is required for us to manage your user account.

Storage period: Until you close your account.


Purpose Personal data is processed in order to market the company's services and products Categories of personal data

To be able to market products and services 

● View relevant product recommendations, remind the customer of forgotten / abandoned digital shopping baskets or save shopping lists to simplify future purchases or similar actions that simplifies for the customer.

● Send direct marketing via email, sms, social media or other similar electronic channels for communication as well as by mail

● Carry out campaigns to:

○ All customers

○ A certain customer segment (e.g. women/men between 30-40 years in Sweden)

○ Ab individual customer

● Name

● Age

● Place of residence

● Purchase and order history

● User-generated information, e.g. visitor and click history, based on the use of the Company's Website and other digital channel services

● Information about how the customer uses the Company's Website, and other digital channels

● Details of completed purchases


Legal base: Registered and unregistered customers - justified

interest (balance of interests). Recipients of newsletter and website visitors - legitimate interest (balancing of interests) and the marketing act's provisions on consent or established customer relationshop.

Storage period: 36 months or until you unsubscribe.


Purpose Personal data is processed to: Categories of Personal Data

To be able to conduct and manage participation and competitions and events 

● Communicate with participants participating in a competition organized by the Company

● Identify the participant

● Appoint winners and mediate winnings

● Name

● Contact information (e.g. address, email, phone number)

● Information submitted in competition entries


Legal basis: legitimate interest (balance of interests)


Storage period: 12 months after the end of the event or competition.


Purpose Personal data is processed to: Categories of Personal Data

To be able to provide customer service and service 

● Communicating with the customer and answer inquiries that come in to customer service via email. phone, or digital channels (including social media)

● Secure the customer's identity

● Investigate complaints and support cases (including technical support)


● Name

● Contact information (e.g. address, email, phone number)

● Customer correspondence

● Information about the time of purchase, place of purchase, the error/complain on the product

● Personal or coordination number


Legal basis: legitimate interest (balance of interests)


Storage period: 36 months


Purpose Personal data is processed to: Categories of Personal Data

To be able to evaluate, develop and improve the Company's services 

● Make services more user-friendly, e.g. change the user interface to simplify the flow of information or to highlight features commonly used by customers in a company's digital product range.

● Develop documentation yo develop and improve the company's product range.

● Give customers an opportunity to influence the range that a company provides.


● Purchase and user-generated data (e.g. click and visit history)

● Contact information (e.g. address, email and phone number)

● Technical data on devices used by the customer and settings, E.g.language settings, IP address, browser settings, time zone, operating system, screen resolution and platform.

● Information about how the customer interacted with the Company, i.e. how the customer used the servicer, login method, where and how long different pages were visited, response times, download errors, how the customer reaches and leaves the service.


Legal basis: legitimate interest (balance of interests). The treatment is necessary to meet our and our customers' legitimate interest in evaluating, developing and improving our services, products, and systems.


Storage period: 36 months

By submitting information to the Company, you authorize the Company to register and store information about which service you purchased and process the specified Personal Information for specified purposes. As a legal basis for treatment, the Company will refer to compliance with agreements, legitimate interest, consent or to comply with legal requirements. If the Company uses legitimate interest as a basis, it will only be done for the purposes stated above. Please note that you can withdraw your consent at any time by contacting us, for contact details see the heading at the bottom "Contact us".

The processing takes place in accordance with current legislation and means that personal data is not retained for longer than is necessary for the purposes of the processing. The Company will store your Personal Information as long as you are a customer with us. For marketing purposes, information older than 36 months is not used. This means, in practical terms, that data is thinned out as they are no longer relevant or necessary for analysis or direct marketing for the purposes for which they have been collected. Some information can be retained longer when required due to other legal requirements, such as the Accounting Act.

5. Social platforms

The company uses Facebook and Instagram as a channel to get in touch with our customers and to market and inform about our business and products. In connection with this, the Company is responsible for personal data for publications and information containing Personal Data and made on the social platforms by you as a user in the form of, for example, comments, pictures and video clips. The company does not accept that offensive content is published on our social platforms. The company asks our users to report abusive content to us so that we can ensure that such content does not exist. We can therefore also remove content based on what the Company deems necessary.

6. Cookies uses cookies to enhance your user experience and provide you, as a visitor, access to various features. Our cookies do not store any sensitive personal information such as names, phone numbers, email addresses, or any other information that can be used to identify you.

What is a cookie?

A cookie is a small text file that stores information on your computer. uses cookies for technical purposes to optimize the functionality of the website, such as login, navigation, and form handling. There are two types of cookies: one that permanently stores a file on your computer and another that is temporarily stored while you are on the website. Our cookies do not store information such as names and personal data.

If you do not accept the use of cookies, you can disable this function in your browser's security settings. Learn more about how to disable cookies below.

Cookie notification can be found at: Cookie Notification.

How to we Use Cookies?

On our websites, we use cookies to enhance your experience, collect information for our marketing, and develop the website. We also use cookies for settings, such as information that changes how the website functions or appears. This can include preferred language or region settings.

User Experience

We use cookies when you are logged in to our website to determine which language the page should be displayed in, depending on the user. We use cookies to optimize the website's speed.


We use cookies for marketing purposes to track visitors on our websites. The intention is to display ads that are relevant and engaging to individual users, making them more valuable to publishers and third-party advertisers.

Web Development

We use cookies to compile anonymous aggregated web statistics that allow us to understand how visitors use our website. This helps us improve the structure and content of our website.

Types of Cookies We Use

● Session Cookies: To enable certain functions on or our other websites, such as displaying the right website for the right person, the website uses "session cookies." When you visit one of our websites, our web servers provide your computer with a unique ID number for the unique visit. These cookies have no expiration date and are temporarily stored in the user's computer memory until the browser is closed.

● Persistent Cookies: A persistent cookie has a specific duration, or lifetime, that determines how long it is stored on your computer or mobile device. Such cookies are stored until their lifetime expires or until you manually delete them.

● Third-Party Cookies: A third-party cookie is a cookie placed on your device on our behalf by someone other than us. This occurs when we have vendors who provide services for us, such as analytics services or services that allow you to share our pages on social media.

You can adjust cookie settings in your browser.

You have the option to prevent cookies from being stored on your computer and can change your browser settings at any time. You can choose to block all cookies or only certain cookies. You can also delete persistent cookies stored on your device at any time. If you choose not to allow the use of cookies from or some of our other websites, certain services may not be available, or the website may not function correctly in all respects.

How to Avoid Cookies?

If you do not wish to receive cookies, you can either block all cookies, delete existing cookies from your computer, or configure your computer to provide a warning before cookies are stored.

To delete Cookies:

● Safari: You can delete cookies by clicking on the tools button -> Settings -> Security -> click on "Show Cookies." Here, you can either delete cookies from a single domain or delete all cookies. To block cookies, click on the tools button -> Settings -> Security -> under "Accept Cookies," select "never."

● Google Chrome: You can delete cookies by clicking on the tools button -> Tools -> Clear browsing data -> Delete cookies and other site data -> Clear browsing data. To block cookies, click on the tools button -> Settings -> Show Advanced Options -> Content Settings -> click on "Block all sites from storing data" and select "Block third-party cookies and site data" -> OK.

● Internet Explorer: You can delete cookies by going to Tools -> Internet Options -> General tab -> click on Delete -> Cookies -> Delete. To block cookies, go to Tools -> Internet Options -> Privacy -> Move the slider to the top to block all cookies. Click OK.

● Firefox: You can delete cookies by going to Tools -> Options -> Privacy -> and deleting individual cookies or clearing your history. To block cookies, go to Tools -> Options -> Privacy -> under History, select "Use custom settings for history" -> and uncheck "Always use private browsing mode" and deselect "Accept cookies from pages."

7. How long do we store your personal data?

We will never store your Personal Data for longer than is necessary for each purpose.

Your Personal Information will only be stored as long as there is a need to save it to fulfill the purposes for which the Personal Information was collected in accordance with this Privacy Policy. See more about the specific storage periods in point 4.

If you have agreed to the Processing of your contact information for sending out newsletters, the Company processes the Personal Data for the specific purpose, until you withdraw your consent. You can do this by (i) contacting us and objecting in writing to this or (ii) following the link in the mailing.

In order to enable the Company to fulfill the legal obligations arising from the applicable law or to safeguard our legal interest, we may save the Personal Data for a longer period. However, personal data is never stored for longer than is necessary or required by law for each purpose.

8. Your rights and choices

You have the right to receive information about the Processing of your Personal Information we carry out. Below is a summary of the rights that you can assert by contacting us. You will find contact information for us at the end of this Privacy Policy.

Right of access

We want to be open and transparent with how we process your Personal Information. If you wish to gain insight into the personal data processing that we do in relation to you, you have the right to request information about the Processing. (i.e., information on purposes, categories of personal data, categories of recipients of personal data, retention period or criteria for determining retention period, information from which data has been collected and the existence of automated decision making including information on the logic behind and the importance of processing). You also have the right to receive an electronic copy of your Personal Information processed by us if you make the application electronically. If we receive an access request, we may ask for additional information to ensure which information you would like to access and that we disclose the information to the right person.

Right to correction

You have the right to request that your Personal Information be corrected if the information is incorrect. Within the scope of the stated purpose, you also have the right to supplement any incomplete Personal Information.

Right to deletion

You have the right to request the deletion of your Personal Information that we process if:

● the data is no longer necessary for the purposes for which it has been collected or processed;

● you have withdrawn a consent on which the treatment is based and there is no other legal basis for the treatment;

● you object to a balance of interests of legitimate interest that the Company has made and there is no legitimate interest for the Company that weighs heavier;

● you object to treatment for direct marketing purposes;

● the personal data was processed in an illegal manner; and och

● personal data must be deleted in order to fulfill a legal obligation to which the Company is subject.

If you request deletion of personal data, we may not always respond to your request including:

● the treatment is needed to exercise someone's right to freedom of expression and information;

● to fulfill a legal obligation to which we are subject; and

● to be able to establish, enforce or defend legal claims.

Right of restriction

You have the right to request that the Company temporarily limit the processing of your Personal Information. Such a restriction may be requested in the following cases:

  • if you believe that the Personal Information we hold about you is inaccurate and that in connection with the requested correction,
  • when the Processing performed by your Personal Data is not in accordance with the rules in the Data Protection Rules but you do not yet want your Personal Data to be deleted but instead restricted, and
  • when we no longer need your Personal Information for the purposes of our Processing but then you need them to be able to establish, enforce or defend a legal claim.

  If you have objected to the Processing of your Personal Data, the use of the Personal Data may be restricted during the investigation. When limiting your Personal Information, the Company will only store your Personal Information and upon further processing obtain your consent.

Right to data portability

You have the right, in the event that we process your Personal Data with your consent or to fulfill a contractual obligation with you, to require that we provide all Personal Information that we have about you and that is processed in an automated way, in a machine-readable format, which t. ex. can be an Excel file or a CSV file. If technically possible, you further have the right to request that we transfer your Personal Data to another personal data controller.

Right to object

You have the right to object to our Processing of your Personal Data on the Processing with the aid of a balance of interests. In these cases, the company will ask you to specify which Treatment you object to. If you object to any Processing, we will only proceed with the Processing of your Personal Data if there are legitimate reasons for the Processing that outweighs your interests.

Direct marketing (including analyzes performed for direct marketing purposes)

You have the opportunity to object to your Personal Data being processed for direct marketing. The right to object also includes the analysis of personal data (so-called profiling) that is performed for direct marketing purposes. If you object to direct marketing, we will stop processing your Personal Information for that purpose as well as cease

with all types of direct marketing measures. Of course, you have the opportunity to refuse mailings and personal offers in certain channels, for example. You can choose to only receive offers from us via e-mail, but not sms. In these cases, you should not object to the processing of personal data, as we then have difficulty assessing which marketing is relevant to you.

9. Consent

By completing a consent form on the Website (eg subscribing to newsletters, receiving offers etc.) you agree that your Personal Information (eg your name, telephone number and email address) may be used for marketing purposes. the service that is exposed in connection with where you are asked to fill in your Personal Information. When you visit the Website, you need to agree to our Cookie Policy. Such cookies track you and your browsing behavior in order to offer you marketing based on your behavior. Your consent applies to the following domains:

You have the right to withdraw your consent at any time. In this case, we will not continue to collect new information for purposes based on your consent. However, we have the right to continue processing already collected Personal Data in accordance with the consent provided, but we will not supplement or update this information. If there is no other legal basis that requires us to save the data, we will delete it. If you wish to withdraw your consent, you are welcome to contact us via email.

10. Who can we share your Personal Information with?

Personal Data Assistants.. In cases where it is necessary for us to be able to offer our services, we share your personal information with companies that are so-called. personal data assistants for us. A personal data assistant is a company that processes the information on our behalf and according to our instructions. We have personal data assistants who help us with:

Transport (logistics companies and freight forwarders).

Payment solutions (card-redeeming companies, banks and other payment service providers).

3) Marketing (print and distribution, social media, media agencies or advertising agencies).

IT services (companies that handle the necessary operations, technical support and maintenance of our IT solutions). When your Personal Data is shared with Personal Data Assistants, it only happens for purposes that are consistent with the purposes for which we have collected the information (for example, in order to fulfill our obligations under the Purchase Agreement. We check all Personal Data Assistants to ensure that they can provide sufficient We have written agreements with all personal data assistants through which they guarantee the security of the personal data being processed.

We may also share your Personal Information with our Group companies if you have given your consent to receive marketing through the sending of newsletters from these.

We will also disclose your Personal Information if required by law or if we, as a company, reasonably believe that disclosure is necessary to protect our company's rights and / or to obey a court decision or follow the outcome of a court hearing or legal process. However, we will do what we can to ensure that your Personal Information will continue to be protected.

The company will not sell your Personal Information to third parties, as we are currently operating, unless we have first obtained your approval. However, in the event that the Company decides to sell, buy, merge with another company or other organization, or otherwise reorganize the business, we may transfer your Personal Information to potential or actual buyers and their potential advisors.

11. Where do we process your Personal Information?

The company only cooperates with partners who process personal data within the EU/EEA or with companies that maintain the same level of protection as within the EU/EEA by, for example, having joined the so-called Privacy Shield agreement between the EU and the US.

12. How is your Personal Information protected?

We use IT systems to protect the privacy, privacy and access to personal data. We have taken special security measures to protect your Personal Information from illegal or unauthorized processing (such as illegal access, loss, destruction or damage). The Company ensures that access to your Personal Data is only granted to personnel who need it for the performance of their duties and that they observe confidentiality in accordance with the Company's applicable policies and procedures.

13. Supervision and compliance

The company will, on its own or the customer's initiative, correct any information that is found to be incorrect. You can also request that your information be deleted at any time or that its use be restricted by contacting us. You may refrain from receiving marketing communications from us at any time by contacting us or by unsubscribing from further communication in email that we send to you. You are always welcome to contact our customer service for help refusing our communication. You can, once a year free of charge, obtain information about which personal data is registered, by requesting in writing a so-called. register extract from us.

If you believe that we are handling your Personal Information incorrectly, you may contact us in the first place. You also have the right to file a complaint with the supervisory authority, currently the Data Inspectorate. You can find more information on how to do this at

The company annually evaluates this Privacy Policy.

14. Third Party Terms

In some cases, the company's services may be subject to third party terms. The Company is not responsible for the use of your Personal Data by such third parties as they are solely responsible for personal data and are responsible for the processing of your Personal Data. Thus, it is important that you consider and read through the terms and conditions that apply to third parties. The same applies if there is a link on the Website that links to other websites.

15. Amendment of the Privacy Policy

The Company reserves the right to change this Privacy Policy when we believe this is necessary to comply with applicable law. Such changes are primarily required in the event of any legislative changes, following statements by the supervisory authority or other bodies issuing opinions in response to the Data Protection Rules. Furthermore, this Privacy Policy will be updated when needed due to changes in our operations.

If the Company makes major changes to this Privacy Policy or changes to how we process your Personal Information, you will be informed of this before the change takes effect.

16. Acquisition
Company: ITAB Outdoor (Idefix Tekoproduker AB)
Purpose: Administration on connection with the acquisition of Idefix Tekoproduker AB by Interteko Group AB 
Personal Data: Contact information such as name, telephone number, and email address. Work-related information such as company name and organization number.
What We Do: Idefix Tekoprodukter AB has been acquired by Interteko Group AB. Interteko Group AB will continue to use your personal data for the same purposes as outlined in our Privacy Policy. 
Legal Basis: Legitimate interest, as we assess that our interest in facilitating an acquisition process outweighs your interest in the protection of your personal data. However, this assumes that te acquiring company, Interteko Group AB, conducts similar activities to Idefix Tekoprodukter AB, which it does.
Retention Period: We will continue to store and use your personal data in accordance with the terms of our Privacy Policy. 
Your rights: You have the right to object to such use of your personal data that we undertake based on a legitimate interest and to have your personal data deleted from our records.

17. Contact us
If you have questions regarding this Privacy Policy or the current Processing of your Personal Information, wish to make a request in accordance with the Privacy Policy or if you wish to report a violation of this Privacy Policy and more. please feel free to contact us.

Personal Data Controller:

Garphyttan Original AB
Organizational number: 559215-1244
Mailbox 408
111 73 Stockholm, Sweden

This Privacy Policy applies from 2019-09-30