Privacy Policy
How Kristensson Spirits AB processes personal data on kspirits.se. Last updated: 19 July 2026.
Introduction
Kristensson Spirits AB (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use and protect personal data when you visit kspirits.se or otherwise contact us. We comply with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection law.
The website is an information site. It has no contact form, no user accounts and no sales.
Data controller and contact details
Kristensson Spirits AB, registered at Flädie Vagnmakarväg 7, 237 91 Bjärred, Sweden, is the data controller for the processing described in this policy. Contact details are provided under “Contact us” below.
Personal data we collect
Depending on how you interact with us, we may process the following categories of personal data.
- Contact details: if you contact us by email or phone (name, email address, phone number and the content of your message).
- Age verification: a functional cookie storing that you have confirmed you are 20 or older.
- Website usage data: aggregated, cookie-free web analytics (Plausible) and technical server logs for operation and security.
We do not intentionally collect sensitive personal data and do not target children.
Processing overview (purpose, legal basis, recipients, retention)
| Processing | Legal basis | Recipients | Retention |
|---|---|---|---|
| Handling enquiries by email or phone | Legitimate interest | Email/hosting provider | Up to 12 months if no relationship arises |
| Age verification (20+ confirmation) | Legal obligation (Swedish Alcohol Act) and legitimate interest | — | Cookie for up to 30 days |
| Operation, security and web analytics | Legitimate interest | Hosting provider (AWS, EU), Plausible (EU) | Limited time / aggregated |
Cookies and tracking
On kspirits.se we use one necessary cookie for the age check, storing that you have confirmed you are 20 or older. If you make choices in our cookie banner, your consent is stored as well. For web analytics we use Plausible, which is cookie-free and does not collect personal data. You can manage and delete cookies in your browser.
Sharing and disclosure
We never sell or rent personal data. We may share data in the following cases:
- Service providers/sub-processors – such as web hosting (AWS) and email (Microsoft 365), processing data on our behalf under data processing agreements.
- Authorities – where required by law.
- Business transfer – in a reorganisation, merger or sale, relevant data may be transferred to the acquiring party, who is then bound to protect it under this policy.
Third-party providers and sub-processors
| Provider | Purpose | Data location | Safeguards |
|---|---|---|---|
| Amazon Web Services (Lightsail, Stockholm) | Web hosting and operation | Sweden/EU | EU/EEA hosting, data processing agreement |
| Microsoft 365 (Microsoft) | Email and communication | EU/EEA | SCC, EU Data Boundary |
| Plausible Analytics | Cookie-free, aggregated web analytics | EU | No personal data collected, EU hosting |
International transfers
We primarily use providers that process data within the EU/EEA. Microsoft 365 is covered by the EU Data Boundary. Where any transfer outside the EEA occurs, protection is ensured through the European Commission Standard Contractual Clauses (SCC) and, where needed, supplementary measures.
Data security
We take appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure or destruction – such as HTTPS/TLS, access control, firewall and logging. In the event of a personal data breach requiring it, we notify the Swedish Authority for Privacy Protection (IMY) and, where required, the affected individuals without undue delay.
Retention
We store personal data according to the retention periods stated above and only for as long as needed for the purpose or to meet legal requirements. After that we securely delete or anonymise the data.
Your rights under the GDPR
Subject to certain conditions and exceptions, you have the right to: access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interest, and to withdraw consent. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY). Contact us to exercise your rights – we respond as soon as possible and within one month at the latest, and may need to verify your identity first.
Contact us
Kristensson Spirits AB
Flädie Vagnmakarväg 7, 237 91 Bjärred, Sweden
Email: contact@kspirits.se
Phone: +46 70 32 48 128
Changes to this policy
We may update this privacy policy. When we make changes, we update the “last updated” date at the top. For material changes we may inform you by other means, such as a clear notice on the website.