GDPR Compliance

Our Commitment to GDPR

Scandi Gardiner is fully committed to complying with the General Data Protection Regulation (GDPR). We take the protection of your personal data seriously and have implemented measures to ensure your rights are respected.

Data Controller

Scandi Gardiner acts as the data controller for personal information collected through this website and in the course of providing our services.

Contact details:
Scandi Gardiner
Storgatan 45
114 55 Stockholm
Sweden
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent (Article 6(1)(a)): When you voluntarily submit your information through our contact forms or opt in to receive communications
• Contractual Necessity (Article 6(1)(b)): When processing is necessary for the performance of a contract or to take steps at your request before entering into a contract
• Legitimate Interests (Article 6(1)(f)): For improving our services and website functionality, where such interests do not override your fundamental rights

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access (Article 15)

You have the right to request copies of your personal data. We may charge a small fee for this service if requests are excessive or repetitive.

Right to Rectification (Article 16)

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure (Article 17)

You have the right to request that we erase your personal data, under certain conditions.

Right to Restrict Processing (Article 18)

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing (Article 21)

You have the right to object to our processing of your personal data, under certain conditions.

Right to Data Portability (Article 20)

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, this period may be extended by two further months, in which case we will inform you accordingly.

Data Transfers

We do not transfer personal data outside the European Economic Area (EEA). All data processing occurs within the EEA using EU-based service providers.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights, we will also notify you directly without undue delay.

Supervisory Authority

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten - IMY).

Integritetsskyddsmyndigheten
Box 8114
104 20 Stockholm
Sweden
Website: www.imy.se

Updates to This Information

We may update this GDPR information from time to time. Any significant changes will be communicated through our website.

Last updated: August 2026