Privacy Policy

The webshop Astraia on the website astraia-corporation.cms.webnode.se, based in Lund, Sweden, processes personal data provided by the customer in order to fulfill and also confirm the conditions for processing electronic orders and deliveries and for the necessary communication during a statutory period.

General provisions

1.Personal data controller, in accordance with the GDPR (referred to as the "Regulation") is Astraia, based in Lund, Sweden (referred to as the "Personal Data Controller"); 

2. The contact details for the Personal Data Controller are: e-mail: astraiacorporation@gmail.com, tel.: 079-340-09-97; 

3. Personal data is any information relating to an identified or identifiable natural person.

The source of personal data 

1. The personal data controller processes personal data obtained with the consent of the customer and collected through the contract to purchase and fulfill the electronic order created in the webshop Astraia.; 

2. The personal data controller only processes identification and contact information for the Customer that is necessary for the contract to be fulfilled; 

3. The personal data controller processes personal data for shipping and accounting and for necessary communication between the contracting parties during the time required by law. Personal data will not be made public and will not be transferred to other countries. 

Purpose of data processing

The personal data controller processes personal data of the customer for the following purposes: 

1. Registration on the website Astraia in accordance with Chapter 4, Section 2 of the GDPR; 

2. For fulfillment of the electronic order created by the customer (name, address, e-mail, telephone number); 

3. To comply with laws and regulations arising from the contractual relationship between the Customer and the Personal Data Controller; 

4. Personal data is necessary for contracts to be procured. Contracts cannot be entered into without personal data.

Duration of storage of personal data

1. The Personal Data Controller stores personal data during the period necessary to fulfill the rights and obligations arising from the contractual relationship between the Personal Data Controller and the Customer and for 3 years after the conclusion of the agreement; 

2. The personal data controller must delete all personal data after the end of the period required for the storage of personal data. 

Recipient and personal data controller of personal data 

Third parties that process personal data of the Customer are subcontractors of the Personal Data Controller. The services of these subcontractors are indispensable for the contract to be implemented, to purchase and process the electronic order between the Personal Data Controller and the Customer.

The subcontractors of the Personal Data Controller are:

• Webnode AG (e-shop system); 
• Shipping company; 
• Google Analytics (website analysis);
  

Customer's rights

In accordance with the regulation, the customer has the following rights:

1. the right of access to personal data; 

2. the right to rectification of personal data; 

3. the right to delete personal data; 

4. the right to object to the processing of personal data; 

5. right to data portability; 

6. the right to withdraw consent to the processing of personal data in writing or by e-mail sent to: [….]; 

7. the right to submit a complaint to the supervisory authority in the event of a suspected violation of the regulation.

Security of personal data

1. The personal data controller ensures that all technical and organizational security measures are taken to protect personal data; 

2. The personal data controller has taken technical security measures to ensure data storage spaces, in particular secure access to the computer with a password, use anti-virus software and perform regular maintenance of the computers.

Final provisions 

1. By placing an electronic order on the website Astraia the customer confirms that it has been informed of all the terms of personal data and accepts them in full; 

2. the Customer accepts these rules by ticking the checkbox in the order purchase form; 

3. The personal data controller can update these rules at any time. New, updated version must be published on its website. The rules come into force on May 17, 2025.