info@spånsugar.se

Privacy Policy

Last updated: 4 August 2026

XAB AB is committed to protecting your privacy. In this privacy policy, we explain what personal data we process, why we process it, how long the data is stored for, and what rights you have.

Data Controller

XAB AB, company registration number 559125-2134, is the data controller responsible for the processing of personal data.

Contact details:
XAB Ltd
Idrottsgatan 20
343 36 Älmhult
Email: info@spånsugar.se
Telephone: +46 79 202 59 60

What personal data do we process?

We process personal data that you provide when you contact us, use a form on the website, request a quote, or have a customer, supplier or other business relationship with us. This may include, for example:

  • name
  • company and position
  • email address and telephone number
  • address and billing details
  • information contained in messages, enquiries and other correspondence
  • information required for quotations, orders, service requests and contracts
  • technical information, such as IP address, browser and log data.

Please avoid providing sensitive personal data in contact forms or via email unless it is necessary for the matter at hand.

Why do we process personal data?

We process personal data in order to:

  • answer questions and respond to enquiries
  • prepare quotations and process orders
  • to fulfil contracts and supply products or services
  • manage customer, supplier and business relationships
  • handle service, support, complaints and follow-up
  • to comply with legal obligations, such as accounting requirements
  • deal with legal requirements or disputes
  • to maintain the website’s functionality and security
  • to analyse and improve the website once the processing has been authorised by consent.

Legal basis

The processing is carried out on the basis of one or more of the following legal grounds:

  • Agreement: where the processing is necessary for the purposes of entering into or performing a contract with you.
  • Legal obligation: when we need to process data in order to comply with the law.
  • Legitimate interest: when we have a legitimate interest in responding to enquiries, managing business contacts, following up on customer relationships or protecting our business.
  • Consent: for example, for optional statistics or marketing cookies. You may withdraw your consent at any time.

How long do we keep the data?

Personal data is retained only for as long as is necessary for the purpose for which it was collected.

  • Information provided in a contact or quotation enquiry is normally retained for a maximum of 12 months after the matter has been concluded, unless it leads to an ongoing business relationship.
  • Data relating to a contract, an order or a service request is retained for as long as is necessary to fulfil and follow up on the commitment and to handle any claims.
  • Data contained in accounting records is retained for as long as required by applicable law.
  • Data processed on the basis of consent is retained until consent is withdrawn or the data is no longer required.
  • Technical logs are stored for a limited period of time, depending on operational, troubleshooting and security requirements.

When the data is no longer required, it is deleted or anonymised.

Who has access to the data?

Personal data may be shared with suppliers who assist us with, for example, web hosting, IT operations, email, contact forms, business systems, accounting or deliveries. These recipients may only process the data in accordance with our instructions and, where required, are bound by data processing agreements.

Data may also be disclosed to public authorities if we are required to do so by law. We do not sell personal data to third parties.

Transfers outside the EU and the EEA

We aim to process personal data within the EU and the EEA. If a supplier processes data outside the EU or the EEA, we ensure that the transfer is supported by applicable data protection regulations. This may, for example, be achieved through an adequacy decision or the European Commission’s standard contractual clauses.

Cookies

This website uses essential cookies to ensure it functions correctly and securely. If statistical or marketing cookies are used, they will only be activated once you have given your consent.

You can change or withdraw your consent at any time via the website’s cookie settings. There you will also find up-to-date information on which cookies are used, their retention periods and the relevant providers.

Safety

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Only those who need the data for their work are granted access to it.

Your rights

Depending on the circumstances, you have the right to:

  • to find out what personal data we process about you
  • request that incorrect or incomplete information be corrected
  • request that your data be deleted
  • request that the processing be restricted
  • object to processing based on legitimate interests
  • obtain data in a structured and machine-readable format where the right to data portability applies
  • withdraw consent without affecting the lawfulness of previous processing.

Please contact us at info@spånsugar.se if you wish to exercise any of your rights. We may need to verify your identity before we can process your request.

If you believe that we are processing your personal data incorrectly, you have the right to lodge a complaint with the Data Protection Authority (IMY) via www.imy.se.

Changes to the policy

We may update this privacy policy if our processing of personal data changes or if the regulations change. The latest version is always available on the website, and the date of the update is shown at the top of the page.

Scroll to Top