Synsam Privacy Policy
1. What is the purpose of this policy?
Synsam Group One AB, reg. no. 556762-7244, ("Synsam", "we", "us" or "our") respects the privacy of individuals who visit and interact with the Synsam website for customers in France, Germany, Spain, Italy, Poland and the UK (the "Site"). We comply with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), when we process personal data. This Privacy Policy explains how we collect and process your personal data in connection with your interaction with the Site, and what your data protection rights are.
If you have any questions about how your personal data is processed or if you would like to exercise your rights as described in this Privacy Policy, please contact us at GDPR.Sverige@synsam.com.
Please note that any purchases made through the Site are facilitated by our e-commerce partner Global-E NL B.V., a company incorporated in the Netherlands with company reg. no. 72541466 ("Global-E"), acting as a merchant of record. For information about how your personal data is processed when you make purchases through and interact with Global-E, please refer to Global-E's privacy policy which is presented at checkout.
2. What is "personal data" and "processing of personal data"?
The term "personal data" refers to any information which is directly or indirectly connected to an individual. "Processing" of personal data refers to any activities taken with regard to personal data, for example collection, recording, organization, use, transfer, disclosure, storage, combination, deletion, erasure and other measures.
3. What kind of personal data does Synsam process?
We process personal data as set out in the table below.
Purpose | Personal data type | Legal ground | Retention time or criteria |
|---|---|---|---|
Handling customer service enquiries | · Contact information (e.g. name, email address, telephone number) · Data in your communication with us (such as the content of e-mails) · Other information necessary for the handling of the enquiry | Legitimate interest – the processing is necessary to fulfil our legitimate interest in handling and responding to customer service enquiries received through the Site, and where applicable, forwarding such enquiries to Global-E as merchant of record for resolution. Contact us if you would like to know more about how we have balanced your interests against ours. | For the duration of the customer service matter. |
Collection of cookies and similar tracking technologies (together "cookies") and analysis of website traffic | · Technical data collected through cookies (e.g. IP address, browser type, device information, operating system) · Usage data (e.g. pages visited, time spent on pages, click behavior, referring URL) · Other information necessary for the collection of cookies and analysis of website traffic | Consent – for non-essential cookies, we rely on your consent. You have always right to withdraw your consent through the cookie banner on our Site (Cookie settings). Withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. Legitimate interest – for strictly necessary cookies, the processing is based on our legitimate interest in ensuring the proper functioning of the Site. Please see the cookie banner on our Site (Cookie settings) and our Cookie Policy for further information | In accordance with the retention periods specified for each cookie in our cookie banner or until you withdraw your consent (Cookie settings). |
Marketing | · Contact information (e.g. name, email address, telephone number) · Marketing preferences and consent records · Interaction data (e.g. responses to marketing communications) · Technical data collected through cookies (e.g. IP address, browser type, device information, operating system) · Other information necessary for the provision of marketing communications | Consent – we process your personal data for marketing purposes based on your consent, which you may withdraw at any time. Withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. | Until you withdraw your consent or unsubscribe from marketing communications. |
Legal claims | · Contact information (e.g. name, email address, telephone number) · Data in your communication with us (such as the content of e-mails) · Other information necessary for establishing or defending legal claims | Legitimate interest – processing is necessary to fulfil our legitimate interest in handling and defending potential legal claims from customers. | For the duration of the relevant claim, complaint or dispute, and for such additional period as required by applicable limitation periods or legal obligations. |
Business transfers (e.g. mergers, acquisitions or restructurings) | · Any information that we process about you at the time of such business transfer | Legitimate interest – processing is necessary to fulfil our legitimate interest in evaluating, preparing and carrying out a business transfer, such as a merger, acquisition or restructuring. | For the duration of the business transfer and for such additional period as required by applicable limitation periods or legal obligations. |
We collect personal data primarily directly from you when you interact with us, for example when you contact our customer service or when data is collected automatically through cookies used on the Site.
4. How is my personal data processed?
Synsam processes personal data for the purposes described in Section 3 above. We have taken appropriate technical and organizational measures for the protection of your personal data to ensure that only authorized personnel have access to personal data. We use technical security systems, such as firewalls, encryption technologies, passwords and anti-virus programs to prevent and avoid unauthorized use of personal data.
5. To what categories of third parties may my personal data be disclosed?
Service providers engaged by Synsam
To enable us to operate the Site and fulfil the purposes set out in this Privacy Policy, we may share your personal data with certain third-party service providers. These include providers of Site hosting, analytics, marketing tools and customer service systems. When third-party providers process personal data on our behalf and according to our instructions, they act as data processors and may not use your personal data for their own purposes.
In addition, as described above, Global-E processes your personal data as an independent data controller in its capacity as merchant of record. For further information on how Global-E processes your personal data, please refer to Global-E's privacy policy presented at checkout.
Authorities
Synsam may need to provide personal data to relevant authorities in accordance with mandatory law and in order to fulfil legal obligations.
6. To what countries will my personal data be transferred?
We primarily process your personal data within the EU/EEA. However, there may be instances where we need to transfer your personal data outside of the EU/EEA. The level of data protection in these countries may not be equivalent to the protection offered within the EU/EEA. In such cases, we will implement appropriate safeguards as required by the GDPR and other applicable data protection legislation, such as the EU Commission’s Standard Contractual Clauses. You may request additional information regarding the safeguards implemented for international transfers, including a copy of relevant standard contractual clauses (please see Section 1 for contact details).
7. For how long will my personal data be processed?
We will not store or process personal data for a period longer than necessary to fulfil the purposes described in Section 3 above. Accordingly, when the purpose has been fulfilled for a specific type of personal data, we will stop using the personal data for that purpose and, if the same data is not relevant for any other purpose, delete the relevant personal data as soon as reasonably possible.
8. What are my rights regarding my personal data?
Right to access and rectification
You have the right to request access to your personal data. This includes the right to be informed whether personal data about you is being processed, what personal data is being processed, and the purpose of the processing.
You also have the right to rectify or add personal data if the personal data is inaccurate or incomplete. As soon as we become aware of any inaccurate personal data about you being processed, we will rectify such personal data without undue delay and notify you accordingly.
Right to erasure
You may also request that your personal data be erased, e.g. if the personal data is no longer necessary for the purposes for which it was collected, if the processing is based on your consent and you withdraw your consent for a specific processing and there is no other legal ground for processing your personal data, if you object to the processing of personal data where we do not have an overriding legitimate interest, the processing is unlawful, or the personal data has to be erased to enable us to comply with a legal requirement. If you have any questions about your right to erasure, please contact us (please see Section 1 for contact details). Please note that we may reject your request if the processing is permitted or required according to law or any other relevant legal ground.
Right to object
You are also entitled to object to our use of your personal data that we base on our legitimate interest. If you object, we will no longer process your personal data unless we can show that we have compelling legitimate grounds for the processing that overrides your interests or rights and freedoms, or if we need it to establish, exercise or defend legal claims.
Right to restriction
You can request us to restrict the processing of your personal data in the following situations:
- if the processing is no longer necessary for the purposes it was collected or otherwise processed and you need the personal data to establish, exercise or defend legal claims,
- if you believe the personal data may not be correct and you would like us to check whether this is the case,
- if you believe that the processing is unlawful, and/or
- if you have objected to processing based on our legitimate interest.
Right to data portability
If you request access to personal data about you that you have provided and if the personal data is being processed automatically with your consent or in accordance with a contract between you and Synsam, you may request that the data is provided in a structured, commonly used and machine-readable format and you may also request that the personal data is transmitted to another controller, if this is technically feasible.
Right to submit a complaint
If you have any complaints about how we process your personal data, or would like further information, please contact us (please see Section 1 for contact details).
If you wish to file a complaint with a national supervisory authority regarding our processing of your personal data, you may do so by contacting your local data protection authority. The relevant authority in Sweden is the Swedish authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten). Please refer to www.imy.se. The relevant authority in the UK is the Information Commissioner’s Office (ico.org.uk).
9. Data Protection Officer
We have appointed a Data Protection Officer to ensure that your personal data is continuously processed in a transparent, accurate and lawful manner. You may contact our Data Protection Officer at:
Bird & Bird DPO Services SRL
Avenue Louise 235 b 1, 1050 Brussels, Belgium
DPO.Synsam@twobirds.com
10. Updates to the policy or processed data
In order to ensure that we comply with applicable data protection legislation, this Privacy Policy may be updated from time to time. Any material changes will be communicated through the Site.
This Privacy Policy was last updated on 2026-05-26.