Privacy Policy & Cookie Policy

This Privacy Policy explains how we process personal data when you visit our website, place an order or contact us. It also explains how we use cookies and similar technologies.

Note: This information does not constitute legal advice. Our aim is to provide a clear and transparent explanation in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for the processing of personal data is:
EVO International AB (EVOFILM®)
Norra Ljunggatan 16, 252 28 Helsingborg, Sweden
Email: [email protected]

Where a Data Protection Officer (DPO) has been appointed, contact details will be provided upon request.

2. What personal data we process – and why

2.1 Orders, delivery & customer support

When you place an order with us, we process personal data such as name, billing and delivery address, email address, telephone number, order details (products, quantities, prices), payment status, and any communication with customer support.

Purpose: Performance of a contract (order processing, production, delivery), customer support and handling of complaints.
Legal basis: Article 6(1)(b) GDPR (contract).

2.2 Payments

Payments are processed via external payment service providers. Depending on the selected payment method, necessary information (e.g. name, address, contact details, order value and transaction data) is shared with the relevant payment service provider.

Purpose: Payment processing and fraud prevention.
Legal basis: Article 6(1)(b) GDPR (contract) and, where applicable, Article 6(1)(f) GDPR (legitimate interests).

2.3 Shipping & tracking

To deliver your order, we share necessary data (name and address) with shipping providers. Your email address and/or phone number may be shared to provide delivery notifications and tracking updates.

Purpose: Delivery, delivery communication and shipment tracking.
Legal basis: Article 6(1)(b) GDPR.

2.4 Website use (logs) & IT security

When using our website, technical data may be processed, including IP address, access time, visited pages, and browser or device information.

Purpose: Website operation, security, troubleshooting and prevention of misuse.
Legal basis: Article 6(1)(f) GDPR (legitimate interests).

2.5 Newsletters & direct marketing (if applicable)

If you subscribe to our newsletter or receive marketing communications, we process your contact details for this purpose. You may unsubscribe or object to direct marketing at any time.

Legal basis: Article 6(1)(a) GDPR (consent) or Article 6(1)(f) GDPR (legitimate interests), where permitted by law.

Newsletter subscriptions are handled via a double opt-in process where required.

3. Recipients & service providers

We use service providers who process personal data on our behalf (data processors) or act as independent data controllers (e.g. payment service providers). Personal data is shared only where necessary to fulfil contractual obligations, based on consent, or where a legal basis exists.

3.1 E-commerce platform

We use the e-commerce platform Quickbutik (Quickbutik AB, Sweden).

3.2 Payment service providers

  • PayPal
  • Stripe
  • Klarna (if available at checkout)

3.3 Shipping providers

  • UPS
  • Bring (where applicable)

4. Transfers to third countries

Some service providers may process personal data outside the EU/EEA. Where this occurs, we ensure appropriate safeguards in accordance with the GDPR, such as adequacy decisions or standard contractual clauses.

5. Data retention

Personal data is retained only for as long as necessary for the purposes for which it was collected or as required by law (e.g. accounting and tax obligations). Thereafter, data is deleted or anonymised.

6. Cookies & similar technologies

We use cookies to ensure the proper functioning of the website and – with your consent – for analytics and marketing purposes.

  • Essential cookies: required for basic functionality.
  • Preference cookies: store settings such as language.
  • Analytics cookies: used only with prior consent.
  • Marketing cookies: used only with prior consent.

Analytics and marketing cookies are placed only after you have given consent. You can change or withdraw your consent at any time via the cookie settings.

7. Your rights

  • Right of access (Article 15 GDPR)
  • Right to rectification (Article 16)
  • Right to erasure (Article 17)
  • Right to restriction of processing (Article 18)
  • Right to data portability (Article 20)
  • Right to object, particularly to direct marketing (Article 21)
  • Right to withdraw consent at any time (Article 7(3))

To exercise your rights, please contact us at: [email protected]

8. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.

As our company is established in Sweden, you may also contact:
Integritetsskyddsmyndigheten (IMY)
https://www.imy.se

9. Data security

We implement appropriate technical and organisational measures to protect personal data, including SSL/TLS encryption. However, no data transmission over the internet can be guaranteed to be completely secure.

10. Changes to this Privacy Policy

We may update this Privacy Policy if legal requirements or our processes change. The most current version is always available on this page.