What is GDPR?
The General Data Protection Regulation (GDPR) is a regulation by which the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU). It enforces laws based on a set of principles that businesses which handle personal data of EU citizens should follow.
These fundamental principles state that personal data should be:
- processed lawfully, fairly and in a transparent manner in relation to the data subject
- collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed
- accurate and, where necessary, kept up to date
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed
- processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures
We are GDPR compliant
Swordhero AB:s handles your personal data according to the current legislation. From the 25th of May 2018 the General Data Protection Regulation (GDPR) EU/ESS nr 2016/679 is active. You can read more about your rights in this pollcy and visit the HERE for further information. You can always contact us if you have questions.
Processing of personal data
”Swordhero AB” commence business as “Boxpeak” and we are responsible for the processing of your personal data. Described here is what personal data we process and for what purposes. We explain what rights you have and how to know more about about our data processing.
Personal data that we process
Personal data are data that can be referred to you as as physical person. We process personal data that you enter when you for example register an account, sign up for a competition, buy our products or services. All which are in our administration. We may come to process information that you entered such as email, mobile nr and address data.
Purpose and processing of personal data
We use your personal data to provide you with our services and to be able to serve you information and offers about our services.
The processing of your personal data is in consent with you that enter these personal data. When you enter the data you confirm that you understand how we process your personal data.
For the following purpose we process your personal data on contractional ground
We process your data on contractual ground (processing is necessary for the fulfillment and administration of a contract or in order to take steps at your request prior to entering into a contract)
For the following purpose we process your personal data to fulfil a legal obligation
The personal data you enter when you perform a purchase, repurchase, reklamation and payouts are processed to fulfil our legal obligation according to the bookkeeping act (1999:1078).
For the following purpose we process your personal data with support of a balance of interests
The email-address you supply us with can be used to by us to send newsletters or surveys. Personal data entered are not used in any kind of marketing.
You are not obliged to register your personal data but if you do not it might affect our ability to enter a contract with you and to be able to deliver our products and services to you.
How long do we keep the data?
We keep your personal data as long as they are needed to fulfil the purpose for why they were collected and for us to uphold our commitment towards you or when you as customer decide that you want to be removed from our register.
Regarding newsletter mailing your email address is saved for reuse. You can at any time time unsubscribe to our newsletter by noticing us about the very same.
Your personal data are processed by us. Your personal data may be shared with actors that process personal data on our behalf as personal data assistants.
Cross-border data transfer
We do not transfer your data to countries outside of EU/EES unless explicitly stated when you register your personal data.
It is our obligation to only process personal data that is correct, relevant and necessary for our legitimate cause.
You have the right to once a year without charge get information about what part of your personal data that are processed by us and to request correction or erasing of your personal data.
Your request shall be written, contain name and social security number and be signed by you to secure that we deliver the data to the rightful owner.
Send your request to the following addresss:
℅ Marcus Herou
791 56 Falun
The information will be sent to the address on which you are registered within a month. If you have any complaint regarding our processing of your personal data you can register this at the office for
A cookie is a small amount of data which often includes an anonymous unique identifier that is sent to Your browser from a web site’s computers and is stored on Your computers hard drive. Cookies are required to use BoxPeak in order to uniquely identify Your browser and user preferences while logged in. We use non-permanent cookies that last for up to two weeks, after which You will be required to log in to the Service again.
You can control and/or delete cookies as You wish using Your browser preferences. You can delete all cookies that are already on Your computer and You can set most browsers to prevent them from being placed. If You do this, however, You may have to manually adjust some preferences every time You visit BoxPeak and some services and functionalities may not work.
In the cases we link to a website or material that belongs to a third party they are responsible for their personal data processing.
If you share information from BoxPeak on social media eg. Facebook via a plugin (for example a like button), we have no influence over what data that is gathered through that social media. We encourage you to keep updated of the extent of the data gathered via social media plugins.
An Ip-address is personal data information since it can be traced to a specific hardware and therefore to an individual. BoxPeak’s website can save IP-addresses to gather website statistics and to identify threats to the website.
If you have questions
For all questions regarding personal data processing contact us at email@example.com
About this policy
BoxPeak can commence changes or additions to this policy. Changes are communicated by the release of the updated policy on this web site
This policy takes effect on the 25th of May 2018