Privacy policy

Last updated: June 24, 2025

 

General

Spobik AB (“we”, “us”) values your personal integrity and strives for a high level of data protection. This privacy policy describes how we process your personal data in accordance with applicable laws and regulations. In addition to this policy, our terms of purchase and delivery apply — see here.

This policy explains how we process your personal data and the rights you have when you, as a customer or representative of a business customer, visit our website (“Website”), purchase goods and/or services via the Website and/or in-store, receive marketing from us, or contact us through customer service or otherwise.

 

Data Controller

Spobik AB, corporate ID 559155-6633, is the data controller for the personal data processed in accordance with this policy. We sell products/services under several different brands and websites, and we are the data controller for data collected via www.void.com, www.spobik.se, www.cykloteket.se, www.kronan.com, www.cykelkraft.se, www.cykelkraft.fi, www.bikester.se, www.bikester.no, www.bikester.dk, www.bikester.fi, www.birk.no, www.hockeystore.se, www.hockeystore.no, www.hockeystore.co and www.hockeytown.se

 

Definitions and Data Processing

Personal data refers to any kind of information that can directly or indirectly identify a natural person, such as name, contact details, images, and IP address. Processing of personal data refers to any action or combination of actions taken with personal data, such as collection, storage, or transfer.

We process your personal data for several different purposes. In the following table, you will find information about the specific purposes for which your personal data is processed, the categories of personal data we process, the legal basis for the processing, and how long the data is stored. Please note that the specific personal data we process in your individual case depends on how you interact with us.

Regarding storage periods, your personal data is only processed for as long as necessary to fulfill the purposes for which it was collected, or to comply with our legal obligations.

Details vary depending on your interaction with us. In general, we store your data only as long as needed to fulfill the stated purposes or meet legal obligations.

Purpose	Legal Basis	Personal Data	Storage Period
To manage your purchase of goods and/or services — including receiving your order, delivering products/services, handling returns, warranties, and other obligations.	Performance of contract; Legal obligation	Name, contact details (e.g., email, address, personal ID number, phone number, user credentials); Payment info (e.g., credit checks, billing); Purchase info (e.g., order number, delivery info); Technical data (e.g., IP address, device info)	During the warranty period and twelve months thereafter
To comply with laws, regulations, and governmental decisions, such as accounting requirements	Legal obligation	Name, contact details, personal ID number, phone number; Invoice data per accounting rules	As long as legally required by applicable laws
To market our services, products, and business via mail, email, phone, SMS, and ads	Legitimate interest; Consent	For advertising to existing customers: recent purchase data; For targeted marketing (with consent): contact details, interest data, purchase/search history; For digital advertising: visit data, device info, website interactions (with cookie consent)	Up to twelve months after end of customer relationship (unless opposed earlier); For consent-based marketing: until consent is withdrawn
To handle customer service and support matters, including contact via email, chat, phone, store visits, and social media	Legitimate interest; Contract (for warranty/complaint cases)	Name, contact info, user details, correspondence, purchase details	As long as needed to complete the matter; deleted no later than two years after last contact
To organize and manage participation in competitions or marketing events	Consent (for participation); Legitimate interest (for inquiries)	Name, contact details, any data in competition entries	Until the event and related administration is completed; consent can be withdrawn at any time
To develop and improve our services and provide a customized user experience	Legitimate interest; Consent	Website usage data (clicks, visits, purchase history, IP); Cookie-based tracking (only with consent)	Aggregated data stored as long as necessary; cookie data stored until consent is withdrawn or cookies expire
To display reviews to other customers and customize products based on feedback	Legitimate interest	Review content	Stored as long as the related product/service is available in our offering

 

Data Collection Sources

We collect your personal data from various sources. Primarily, we collect personal data directly from you. This occurs when you register an account, make a purchase, use our website (e.g., IP address and cookies), or provide us with information through contact with us — such as through events, customer service, marketing campaigns, and reviews. You have the option to refrain from providing requested personal data. However, if you choose not to provide information that is necessary, it may mean that we are unable to fulfill our obligations to you.

In addition to the personal data you provide to us or that we collect from you, we may also collect personal data from third parties, such as address providers from public records, and in the case of invoice purchases, obtain credit information from credit rating agencies, banks, and other financial institutions.

 

Cookies

We use so-called cookies on the Website to enhance your experience and make it easier for you to use our services. You have the option to disable cookies through your browser settings. Please note, however, that doing so may limit certain functions on the website. For more information about our use of cookies — such as which cookies are used on the website, who places them, and what they are used for — please see our cookie policy.

 

Who Can Access Your Personal Data?

In order to provide our products and services, fulfill our obligations to you as a customer, and comply with our legal obligations, we may share your personal data with selected and trusted third parties. We ensure that such sharing is carried out in accordance with applicable data protection laws and regulations, including entering into data processing agreements and ensuring that data is not shared for purposes other than those for which it was originally collected. Below are the categories of recipients with whom your personal data may be shared:

Suppliers and Partners: We use suppliers and partners to manage parts of our operations. To enable them to perform their services for us, we may share your personal data with them. Our suppliers and partners assist us with:

(i) necessary operations, data storage, technical support, and maintenance of our IT systems,

(ii) advertising and marketing campaigns,

(iii) transportation/shipping/delivery,

(iv) payment and financing solutions (for purchases, we use external payment providers. If you request financing, we share necessary information with the financial service provider we partner with, who will then contact you), and

(v) legal advisory services.

Authorities: We may share your personal data with authorities, such as the Swedish Tax Agency, if required by law, regulatory decision, or court order.

Business Transfers: In the event of a restructuring, sale, or other transfer of all or parts of our business, personal data may be transferred to our advisors, a potential buyer/investor and their advisors, and subsequently to the new owner of the business.

Social Media Platforms: We use social media as part of our business operations. When these platforms are used, your personal data is collected and processed by the respective companies. Please refer to each company’s privacy policy for more information on how they handle personal data.

 

Transfer of Personal Data to Third Countries

We strive to process your personal data only within the EU/EEA. However, in exceptional cases, your personal data may be transferred to a country outside the EU/EEA (a so-called third country) if one of our suppliers or partners is located there. When transferring your personal data to a third country, we ensure that your data remains protected and that the transfer is carried out in accordance with applicable data protection laws and regulations. This means that the transfer may be based, for example, on a decision by the European Commission regarding an adequate level of protection or on appropriate safeguards, such as standard contractual clauses.

For more information about the specific safeguards we apply in each individual case, please contact us — see the section below titled “Contact.”

Your Rights Regarding Your Personal Data

Below is a summary of your rights under applicable legislation. You can exercise your rights by contacting us — see the section below titled “Contact.”

 

Right of Access (So-Called Data Extract)

You have the right, upon request, to receive confirmation as to whether or not we are processing your personal data. If we are processing your personal data, you have the right to obtain information about the processing, as well as access to your personal data through a free data extract showing which personal data is registered about you and how it is being processed.

Requests for data extracts must be submitted in writing, and we reserve the right to take measures to verify your identity. In cases where we are unable to fulfill your request, we will inform you and explain the reasons why.

 

Right to Rectification

We will, on our own initiative, correct, anonymize, delete, or supplement any personal data that is found to be incorrect, incomplete, or misleading. You have the right to request the rectification of inaccurate personal data concerning you without undue delay. You also have the right to have incomplete personal data completed.

 

Right to Erasure

You have the right to request that we delete your personal data without undue delay in certain circumstances. This applies if:

• the data is no longer necessary for the purposes for which it was collected or otherwise processed;

• you withdraw your consent and there is no other legal basis for continued processing;

• you object to the processing based on our legitimate interest and there are no overriding legitimate grounds for the processing;

• the processing is for direct marketing purposes and you object to the data being processed;

• the personal data has been processed unlawfully; or

• erasure is required to fulfill a legal obligation.

There may be legal obligations that prevent us from deleting certain personal data. These obligations derive from applicable legislation, such as accounting laws. If certain data cannot be deleted for legal reasons, we will inform you and ensure that the data is only used to fulfill such legal obligations.

 

Right to Restriction of Processing

You have the right to request the restriction of processing of your personal data in certain situations. This applies if:

• you believe that the personal data we have about you is incorrect and have requested rectification;

• the processing is not in accordance with applicable data protection regulations, but you do not want the data deleted, only restricted;

• we no longer need the data for the purposes of processing, but you need them to establish, exercise, or defend legal claims;

• you have objected to processing based on legitimate interest and are awaiting the verification of whether our legitimate grounds override yours.

 

Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used, and machine-readable format, and to transmit those data to another data controller. This right applies when the processing is carried out by automated means and is based on your consent or is necessary for the performance of a contract.

 

Right to Object

You have the right to object to processing based on our legitimate interests. If you object, we will only continue processing if we can demonstrate compelling legitimate grounds that override your interests.

If you do not want us to process your personal data for profiling and/or direct marketing purposes, you may notify us in writing at any time. Upon receiving your notification, we will stop processing your personal data for these marketing purposes.

 

Right to Withdraw Consent

If you have given your consent for the processing of your personal data, you have the right to withdraw it at any time.

 

Right to Lodge a Complaint

If you have any concerns or complaints regarding our handling of your personal data, we encourage you to contact us as soon as possible so we can address the issue. You also have the right to file a complaint with the relevant supervisory authority, such as the Swedish Authority for Privacy Protection (IMY).

 

How We Protect Your Personal Data

We use technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, and destruction. For example, only authorized personnel have access to your personal data during working hours, and we store your data in systems that use appropriate security measures. Our measures ensure a high level of data security. For more information about specific security measures, please contact us as outlined below.

 

Profiling

We may process your personal data through profiling, which means automated processing of personal data. For example, if you have opted in to receive marketing, we may use profiling to tailor such marketing to your preferences and interests.

You have the right to object to profiling and direct marketing at any time. Please refer to the section above on "Your Rights Regarding Your Personal Data" for more information. Note, however, that even if you opt out of marketing communications, you will still receive administrative messages from us, such as order confirmations and account activity notifications (e.g., account verifications, password changes, etc.).

 

Changes

We reserve the right to make changes to this privacy policy. Changes may be necessary due to changes in our business operations or as a result of legal amendments, regulatory recommendations, or court decisions. In the event of significant changes, you will be notified before the changes take effect.

 

Contact

Our services are provided by Shopify, which collects and processes personal data about your access to and use of the services in order to provide and improve the services for you. Information you provide will be transferred to and shared with Shopify and third parties, which may be located in countries other than the one in which you reside, to provide and improve these services.

To protect, develop, and improve our business, we also use advanced features from Shopify that involve data and information obtained from your interactions with our store, other merchants, and Shopify. To provide these enhanced features, Shopify may use personal data collected from your interactions with our store, other merchants, and Shopify. In such cases, Shopify is responsible for the processing of your personal data, including responding to your requests regarding the use of your personal data for these purposes.

For more information on how Shopify uses your personal data and your rights, you can visit Shopify's Consumer Privacy Policy. Depending on your location, you may also exercise certain rights regarding your personal data through Shopify's Privacy Portal.

If you have any questions regarding this privacy policy, the processing of your personal data, or wish to exercise your rights, you are welcome to contact us:

Spobik AB
Postal address: Mogölsvägen 14, 554 54 Jönköping
Phone: +46 010 - 101 40 00
Email: customerservice@voidcycling.com