Privacy Policy

Controller and contact details

The controller is Carcon. For privacy-related matters, you can contact us by email at info@carcon.se.

Postal and visiting address: Edeby Andersberg 25, 741 91 Knivsta, Sweden.

What personal data do we process?

We process information that you provide to us, for example through contact forms, complaint forms, dealer applications, email or phone.

This may include name, company, contact details, business ID, role, address, vehicle registration number, Carcon order number, interests, message content and attachments.

Use of the website may also generate technical information such as IP address, browser, device details, visit time and information stored through cookies.

For what purposes is data used?

We use personal data to respond to enquiries, manage quotations and customer service, handle orders, deliveries and complaints, and evaluate dealer cooperation.

Data may also be used to maintain customer relationships, develop services, ensure website security and comply with legal obligations.

Legal bases for processing

Depending on the situation, the processing of personal data is based on preparing or performing a contract, our legitimate interest in managing customer and partner relationships, your consent, or a legal obligation.

The consent requested in forms concerns our ability to contact you and process the information you provide in order to handle the relevant matter.

Who may data be disclosed to?

Data is processed by Carcon personnel and, where necessary, trusted service providers such as partners involved in website maintenance, technical form implementation, email, customer relationship management or information security.

If you have consented to analytics cookies, information about how you use the website is also processed by Microsoft Ireland Operations Limited, which provides the Microsoft Clarity analytics service. What you type into our forms is masked in your own browser and is not passed on. See the cookie policy for further details.

Data is not sold to third parties. Data may be disclosed to authorities if required by law.

Marketing measurement and messaging services

If you have consented to marketing cookies, we may use the enhanced conversions feature of Google Ads. Information you submit in our forms, such as an email address, is then converted into a hashed, irreversible form in your own browser before it is sent to Google, where it is used solely to measure the results of our advertising. The data is never sent in plain text, and we do not use it to build profiles.

If you have consented to marketing cookies, we also use the Meta pixel (Facebook/Instagram) on the website. It collects information about how you use the site, such as which pages you view and which forms you submit, so that we can measure the results of our advertising on Facebook and Instagram and show you relevant ads. If you submit a form, Meta's automatic advanced matching feature may also send your email address or telephone number to Meta in a hashed, irreversible form so that the conversion can be matched to the correct advertisement; this data is never sent in plain text. This information is processed by Meta Platforms Ireland Limited under Meta's own privacy policy. The pixel is not loaded until you have given your consent, which you can withdraw at any time in the cookie settings.

If you contact us via WhatsApp, the message and any personal data it contains are also processed by WhatsApp Ireland Limited, which is part of Meta, under Meta's own privacy policy. We recommend that you do not send sensitive information via WhatsApp.

The legal basis for both is your consent. Consent to marketing measurement can be withdrawn at any time in the cookie settings on the website, and the use of WhatsApp can be discontinued by contacting us through another channel instead. Data may be transferred outside the EU or EEA, in which case the transfer is protected by the European Commission's standard contractual clauses.

Transfers outside the EU or EEA

We aim to use services where data is processed within the EU or EEA. If personal data is transferred outside the EU or EEA, we ensure that there is a basis under data protection law and appropriate safeguards for the transfer.

Retention periods

We retain personal data only for as long as necessary for the purposes described in this notice.

Enquiries and applications are retained while the matter is being handled and for a reasonable period thereafter. Information related to customers, orders, complaints and accounting may be retained for longer due to contractual responsibilities, complaints, accounting obligations or legal claims.

Your rights

You have the right to receive information about the processing of your personal data, request access to your data, request correction of inaccurate data, request deletion or restriction of processing, and object to processing in situations where the law gives you that right.

If processing is based on consent, you may withdraw your consent at any time. You can make a privacy-related request by contacting info@carcon.se.

You also have the right to lodge a complaint with the competent data protection authority if you believe your personal data is being processed unlawfully.

Information security

We protect personal data through technical and organisational measures. Access to personal data is limited to people and service providers who need to process the data based on their duties.

Changes to this notice

We may update this privacy policy if our services, website or processing of personal data changes. The current version is published on this page.