Privacy statement

Data Controller: Petestep AB (company reg. no. 556893-5000), Tegelängsvägen 20, 145 54 Norsborg, Sweden. Contact for data protection matters: info@petestep.com.
1. What Data We Collect
When you visit www.petestep.com or contact us, we may process the following personal data:
Contact information: Name, email address, phone number (e.g., when subscribing to newsletters or submitting inquiries via contact forms).
Communication data: Content of emails and messages you send to us.
Technical data: IP address, browser type, login/visit timestamps, and other traffic data when you visit the website. These are collected via cookies and web analytics tools.
2. Purpose and Legal Basis
We process your personal data for the following purposes:
To provide information and services, such as responding to inquiries (legal basis: legitimate interest or contract).
To send newsletters and communications (consent or contract, depending on the situation).
To analyze website usage in order to improve content and functionality (legitimate interest).
To comply with legal obligations (e.g., accounting and record-keeping requirements).
Processing is based on consent (where required, e.g., for email marketing) or other legal bases under the GDPR, such as performance of a contract or legitimate interest.
3. Cookie Policy and Tracking Technologies
We use cookies and similar technologies to improve the website.
Necessary cookies are required for basic functionality (e.g., navigation and security). Other cookies require your consent. The categories include:
Functionality: Remember your preferences (e.g., language selection and display settings). These allow the website to recognize you and retain your settings.
Statistics (Analytics): Collect anonymized information about how visitors use the website (page views, navigation paths, page load times, etc.) to understand and improve website performance.
Marketing: Track browsing behavior to display relevant advertisements. Data may be shared with providers such as Google or Facebook for advertising. No personal data is shared in plain text; collection is performed on an aggregated level.
Necessary: Technical cookies required for the proper functioning of the website (e.g., session management). These do not store personal information.
A detailed list of cookies (name, provider, purpose, retention period) is available in our Cookie Policy (linked at the bottom of the website). We use a consent management tool that requires you to approve non-essential cookies before they are activated. Consent is documented and stored in accordance with applicable regulations. You may change or withdraw your consent at any time via the “Manage Cookies” link at the bottom of the website.
4. Sharing with Third Parties
We may share data with the following types of external parties:
Analytics and IT providers: For example, Google Analytics for statistics and email platforms for newsletters. These third-party providers act as data processors and may only process data in accordance with our instructions.
Authorities: If required by law (e.g., tax authorities during audits).
Other parties: We do not sell or otherwise share your personal data with third parties without your explicit consent. Please note that marketing cookies may involve third-party advertising networks placing cookies to enable targeted advertising (see Marketing category above).
5. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected. For example, newsletter subscription data is stored until you unsubscribe, and anonymized analytics data is stored for a maximum of 26 months. Data that must be retained under applicable law (e.g., accounting records) is archived in accordance with statutory requirements.
6. Your Rights
Under the GDPR, you have the following rights:
Right of access – to obtain information about the personal data we hold about you.
Right to rectification – to correct inaccurate data.
Right to erasure (“right to be forgotten”) – to have your data deleted where there is no valid reason for us to retain it.
Right to restriction of processing – to request limited processing under certain circumstances.
Right to data portability – to receive your data in a machine-readable format.
Right to object – to object to certain types of processing, particularly direct marketing.
You may unsubscribe from newsletters or withdraw cookie consent at any time. Contact us at info@petestep.com to exercise your rights or request further information.
You also have the right to lodge a complaint with the supervisory authority responsible for data protection in Sweden, the Integritetsskyddsmyndigheten (IMY).
7. Updates to This Policy
We may update this Privacy Policy from time to time. The most recent update date will be indicated at the top of the policy. Updates are made primarily when there are significant changes to our operations or data processing activities, and at least annually in accordance with applicable regulatory recommendations. Please review this policy regularly to stay informed about any changes.