Privacy Policy
Last updated: 25 May 2026
This Privacy and Cookie Policy describes how Creon Promotion AB processes personal data and uses cookies and similar technologies in our webshops and ordering platforms under the Profile Store concept.
1. Data Controller
Creon Promotion AB
Company registration number: 556575-1061
Address: Annavägen 12, SE-352 53 Växjö, Sweden
Email: contact@creon.se
Phone: +46 470 70 05 40
Creon Promotion AB is the data controller for the processing of personal data within the scope of this website and our Profile Stores, unless otherwise expressly stated.
In certain cases, a customer of Creon may be the data controller for parts of the processing, for example when a customer-specific Profile Store is used for internal orders, approval flows or distribution to the customer’s employees. In such cases, Creon processes personal data on behalf of the customer in accordance with applicable agreements.
2. What does this policy cover?
This policy applies when you:
• Visit a Profile Store
• Register or use an account
• Place an order
• Contact us
• Use functions that require cookies or similar technologies
• Manage your cookie settings through our consent solution
3. What personal data we process
We may process the following categories of personal data:
• Name
• Company, department or organization
• Delivery and billing address
• Email address
• Phone number
• Login and account details
• Order history and order information
• Delivery information
• Communications with us
• Technical information, such as IP address, browser type, device information and consent status
• Information about how the website is used, where relevant and permitted
We only process personal data to the extent necessary for each specific purpose.
4. How we collect personal data
We collect personal data:
• Directly from you when you use the website or contact us
• From your employer or organization when you are granted access to a customer-specific Profile Store
• Automatically through cookies and similar technologies
• From suppliers and partners when necessary to manage orders, deliveries or the operation of the service
5. Why we process personal data
We process personal data for the following purposes:
a) To provide the website and the service
To give you access to the Profile Store, manage your account, handle logins, save settings and provide relevant functionality.
Legal basis: Contract or legitimate interest.
b) To manage orders and deliveries
To process purchases, deliver products, and handle returns, complaints and support. Legal basis: Contract.
c) For administration and customer relationship management
To manage customer-specific flows, budgets, approvals, permissions, statistics and customer service. Legal basis: Legitimate interest or contract.
d) To comply with legal obligations
To comply with requirements under accounting legislation, tax legislation, security requirements and data protection laws. Legal basis: Legal obligation.
e) For analysis, improvement and security
To analyze usage, troubleshoot, improve website functionality, prevent misuse and strengthen security. Legal basis: Legitimate interest or consent, depending on the technology used.
f) For marketing purposes
If the website is used for newsletters, campaigns or other marketing activities, personal data may also be processed for those purposes. Legal basis: Consent or legitimate interest, depending on the situation and channel.
6. Cookies and similar technologies
We use cookies and similar technologies to:
• Ensure that the website functions properly
• Remember your settings
• Improve security and performance
• Analyze traffic and usage
• In some cases enable personalization or marketing
Cookies are small text files stored on your device when you visit a website. You can refuse or delete cookies through your browser settings. This may mean that certain website functions will not work as intended.
We normally use the following categories of cookies:
Necessary cookies
These are required for the website and its core functions to work properly, such as login, session management, shopping cart functionality or security.
Preference cookies
These are used to save your choices and preferences, such as language or other user settings.
Statistics and analytics cookies
These help us understand how the website is used so that we can improve functionality, content and user experience.
Marketing cookies
These may be used to display relevant communication or measure the effectiveness of campaigns, if such functions are used in the relevant store.
7. Consent to cookies
Where required by law, we ask for your consent before using non-essential cookies or similar technologies. You may change or withdraw your consent at any time through the Cookie Settings link on the website.
If you block cookies through your browser, some parts of the website may stop working properly.
8. Usercentrics
We use Usercentrics for the management and documentation of consent to cookies and similar technologies in our Profile Stores. When you give, refuse or withdraw consent via our cookie banner, data related to your consent may be processed, such as consent status, the time of your choice and certain technical information. The purpose of this processing is to store your preferences, ensure that relevant services are handled in accordance with those preferences, and enable us to demonstrate that valid consent has been obtained where required. Usercentrics processes this data on behalf of Creon.
When you use our cookie banner, certain data may therefore be processed, for example:
• Consent status
• The time of your choice
• Information about which version of the banner or settings was displayed
• Certain device or browser information
• An identifier linked to the consent
More information about Usercentrics’ processing of personal data can be found in their own privacy policy.
9. Who we may share personal data with
We may share personal data with the following categories of recipients where necessary:
• IT and platform providers
• Hosting and operations providers
• Consent management providers, such as Usercentrics
• Freight and logistics partners
• Payment or invoicing solution providers
• The customer’s organization, such as administrators or approvers
• Public authorities where we are required to do so by law
We do not sell personal data to third parties.
10. Transfers outside the EU/EEA
In connection with our use of external suppliers and technical services, personal data may be transferred to recipients in countries outside the EU/EEA.This may, for example, occur when using services for web analytics and tag management, such as Google Analytics 4 and Google Tag Manager, as well as certain cloud, ERP and business system integrations, including but not limited to Microsoft Dynamics 365 Business Central. Google states that international transfers may occur and that such transfers may, depending on the circumstances, be based on, among other things, the European Commission’s Standard Contractual Clauses and, in some cases, adequacy decisions such as the EU-U.S. Data Privacy Framework.
We also use Microsoft Dynamics 365 Business Central as an ERP and business management system. Microsoft states that transfers of personal data from the EEA, Switzerland and the United Kingdom to third countries are subject to appropriate safeguards in accordance with Article 46 of the GDPR.
For the management and documentation of consent to cookies and similar technologies, we use Usercentrics. Usercentrics provides data processing terms for its services, and the processing takes place within the framework of such contractual safeguards.
For card payments, we use Nets as our payment service provider. The processing of personal data within the scope of the payment service takes place in accordance with Nets’ privacy information and applicable data protection legislation. If such processing involves transfers of personal data outside the EU/EEA, we ensure that the transfer takes place on the basis of a valid legal mechanism and appropriate safeguards.
Where possible, we aim to use suppliers and hosting arrangements that support processing within the EU/EEA. Where personal data is transferred outside the EU/EEA, we take measures to ensure that such transfers take place in accordance with applicable data protection rules and that an adequate level of protection is maintained. If you would like more information about possible transfers and the safeguards applied, you are welcome to contact us.
11. How long we retain personal data
We retain personal data for as long as necessary for the purposes for which it was collected, or for as long as we are required to do so by law. Examples:
• Account information: for as long as the account remains active and thereafter in accordance with established deletion routines
• Order information: for as long as required to fulfill the contract and thereafter in accordance with Accounting and contractual legal requirements
• Support cases: for as long as necessary to manage the case and follow up on the customer relationship
• Consent information: for as long as necessary to demonstrate that consent has been given or withdrawn
12. Security
We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, alteration or other unauthorized processing.
13. Your rights
You have the right to:
• Receive information about how your personal data is processed
• Request access to your personal data
• Request correction of inaccurate personal data
• Request deletion in certain circumstances
• Request restriction of processing in certain circumstances
• Object to processing based on legitimate interest
• Receive certain personal data in a structured format
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)
14. Contact
If you have any questions about this policy or wish to exercise your rights, please contact us at:
Creon Promotion AB
Email: contact@creon.se
Address: Annavägen 12, SE-352 53 Växjö, Sweden
If you believe that our processing of your personal data is in breach of applicable data protection laws, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
15. Changes to this policy
We may update this Privacy and Cookie Policy from time to time. The latest version is always published in the relevant Profile Store.