Privacy policy

Data controller

Guld & Arv Norden, company reg. no. (org.nr) 840428-7495, is the controller responsible for processing your personal data. If you have any questions about how we handle your data, you are always welcome to contact Istvan Erdelyi at info@guldarvnorden.se or 070-027 95 22.

What data we collect

Personal data is any information that can be linked to you directly or indirectly. We only collect the data we need, and in most cases you give it to us yourself.

• When you contact us through the form, by email or by phone: name, phone number, email address, town or postcode, what you would like to sell, your message, any photos you attach, your preferred valuation day and time, and when it suits you that we call.
• When you sell to us: name, personal identity number (personnummer), address and details from your identification, a description of the items (for example weight and purity), the agreed price and method of payment.
• When you visit the website: technical data such as your IP address and browser, which our web host keeps in server logs for security. To protect the form against abuse we store an encrypted (hashed) version of the IP address for no more than one hour.

Why we process the data, and on what legal basis

• To answer your enquiry, give a preliminary assessment and book a home visit or a time at a valuation day. Legal basis: steps taken at your request before entering into a contract.
• To complete the purchase and pay you. Legal basis: performance of a contract.
• To verify identity and the origin of items and to keep records of items purchased, to prevent handling of stolen goods and money laundering. Legal basis: legal obligation under the Swedish Second-Hand Goods Trade Act (2000:569) and, where it applies, the Anti-Money Laundering Act (2017:630).
• Bookkeeping. Legal basis: legal obligation under the Swedish Bookkeeping Act (1999:1078).
• To let you know when we have a new valuation day near you, if you have asked us to. Legal basis: consent, which you can withdraw at any time.
• To protect the website and the form against abuse and spam. Legal basis: legitimate interest.

We do not send newsletters or advertising and we do not use your data for profiling.

How long we keep the data

• Enquiries and photos that do not lead to a purchase are deleted no later than 12 months after our last contact.
• Requests to be told about new valuation days are kept until we have notified you, and for no more than 12 months.
• Data about completed purchases is kept for as long as the law requires: seven years under the Bookkeeping Act and, where the Anti-Money Laundering Act applies, five years under that Act.
• Server logs are kept for a short time according to the web host's routines. The hashed IP address used to protect the form is deleted after one hour.

Who may receive the data

We never sell your personal data. The data may be shared with:

• Our web host and email provider (Hostinger), which stores the website, form enquiries and email on our behalf under a data processing agreement.
• Our accountant, for bookkeeping.
• Authorities such as the Swedish Police, the Swedish Tax Agency (Skatteverket) and the Financial Intelligence Unit (Finanspolisen), where the law requires it.

We aim to process all data within the EU/EEA. If a supplier were to process data outside the EU/EEA, this only happens on the basis of the European Commission's standard contractual clauses or another safeguard approved under the GDPR.

Content from other websites

The video and some images on this website are loaded from the image service Pexels. When your browser loads them, Pexels receives technical data such as your IP address, just as if you had visited their website. Links to Google Maps only open Google's service when you click them. These services have their own privacy policies.

The world market price of gold and silver is fetched by our server from an external price service. No personal data about you is sent with it.

How we protect your data

The website uses an encrypted connection (HTTPS). Photos and enquiries from the form are stored in a protected folder that cannot be reached from the internet, and only authorised staff can access them through a password-protected admin interface.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• know what data we hold about you and receive a copy of it,
• have incorrect data corrected,
• have your data erased, if it is no longer needed or if the law does not require us to keep it,
• ask us to restrict the processing, or object to processing based on legitimate interest,
• receive the data you have given us in a machine-readable format (data portability),
• withdraw your consent at any time.

Contact us at info@guldarvnorden.se and we will reply within one month. If you are unhappy with how we process your data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Cookies

This website does not use cookies for tracking or advertising. Read more in our cookie policy.

Changes to this policy

We may update this policy, for example if we change how we work or if the law changes. The date at the top of the page shows when the content was last changed.