This is a translation of our Swedish terms. In the event of any discrepancy, the Swedish version at tcgsweden.se/integritetspolicy shall prevail.
Privacy policy
How we collect and process personal data in the retailer portal.
Data controller
TCG Sweden AB, company reg. no. 559580-8238. Contact us at info@tcgsweden.se with questions about your data.
What data we process
Company name, company registration number, contact person, email address, phone number, address and information about your orders and payments.
Expressions of interest in TCG BOXEN
We also collect personal data from businesses expressing interest in TCG BOXEN, both through TikTok lead forms in connection with campaigns and through the form at tcgsweden.se/tcg-boxen. TikTok collects name, company, city, phone number and email address. The form on the website collects company, contact person, email address, phone number, type of business, city and message.
The data is used to contact interested businesses about our vending machines and potential partnerships. The legal basis is legitimate interest, where the interest in responding to your enquiry outweighs your privacy interest.
The data is retained for as long as discussions about a partnership continue, but no longer than twelve months after the last contact if no partnership is established.
Data submitted via TikTok is collected on TikTok’s platform, which is therefore a recipient of it. We do not share the data with anyone other than the service providers required to handle the expression of interest. Your rights under the GDPR – access, rectification, erasure, restriction, objection and the right to complain to IMY – also apply to this data.
Why we process it
To assess your application for a retailer account, handle orders and deliveries, send order and delivery information and fulfil accounting obligations. The legal basis is performance of a contract, legal obligation and legitimate interest.
Who we share data with
Stripe (card payments), Resend (emails), our cloud provider for operating the portal and shipping agents for delivery. We never sell your data to others.
How long we retain it
Account data is retained for as long as the account is active. Records covered by the Accounting Act are retained for seven years.
Your rights
You have the right to access, rectification, erasure, restriction and objection, and the right to complain to the Swedish Authority for Privacy Protection (IMY).
Cookies and ad measurement
The portal uses necessary cookies and local storage for login and the cart. We also use Google's ad measurement (Google Ads) to measure the effect of our ads, for example when someone submits an application after clicking an ad. Google is then a recipient of measurement data. In regions that require consent we ask you first via a cookie banner, and you can change your choice at any time via Cookie settings in the footer. Read more about how Google handles data at https://business.safety.google/privacy/.