Privacy
Data controller
TRUESCAND 3D is operated by Truescand AB.
Company registration number: 559590-7410.
VAT number: SE559590741001.
Registered office, dispatch and return address: Molnbackavägen 3, 176 66 Järfälla, Sweden.
Contact us through the website contact form or by post. The email service is not connected yet.
Support hours: 8:00 AM–7:00 PM (Stockholm local time).
Data, purposes and legal bases
We process your name, contact details, delivery and billing address, basket, order and payment status to fulfil your purchase and steps you request before purchase (GDPR Article 6(1)(b)). Account and support information is used to provide the services you request.
Accounting and tax records are processed to meet legal duties (Article 6(1)(c)). Session identifiers, limited access logs and fraud-prevention records are used for our legitimate interest in protecting the service, accounts and payments (Article 6(1)(f)). A support request does not constitute marketing consent.
Payment provider Paynid receives information needed for payment: name, email, phone, billing address, amount, order reference and connection IP. A real date of birth voluntarily saved in your account may be used for payment processing. We do not invent birth dates. Card details are entered with the provider and are not stored by TRUESCAND 3D.
Recipients and international processing
Authorised staff, our hosting provider, Cloudflare for website delivery and security, Paynid for payments and the delivery carrier receive information for their respective functions. Accounting and legal advisers and public authorities may receive records where necessary or legally required.
Some service providers may process data outside the EEA. Such transfers must rely on an applicable adequacy decision or appropriate safeguards, such as EU standard contractual clauses. Contact us for information about transfers involving your data. We do not sell customer contact details.
Retention
Account details are retained while the account is used and as needed for orders and requests. Accounting records are retained through the seventh year after the end of the calendar year in which the financial year ended. Other order and support records are kept as needed to perform the contract, handle complaints or establish or defend legal claims, then deleted or anonymised.
Login sessions expire after 7 days for customer accounts, 30 days for guests and 8 hours for administrators. The checkout identifier lasts 30 days. Browser basket data and private support links remain until you remove them. See the cookie information.
Your rights
You may request access, correction, deletion, restriction and portability under the GDPR and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Legal retention duties may limit deletion. We may need to verify your identity proportionately.
Send a privacy request through the contact form or by post to our company address. You may complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se.
We do not make solely automated decisions with legal or similarly significant effects on customers. Payment providers may perform their own authorisation and fraud-prevention checks.