Privacy Notice

Last updated: 8 April 2025

This Privacy Notice explains how Holyvolt AB ("we", "us", or "our") collects, uses, stores, shares, and safeguards your personal data when you interact with our services (the "Services"). This includes, but is not limited to:

Visiting our website at https://www.holyvolt.com/, or any other website of ours that links to this Privacy Notice
Engaging with us through sales, marketing, inquiries, support, sign-up sheets, communications, or participation in events

This Notice is designed to help you understand what personal information we collect, how we use it, and what rights you have in relation to that information.

Have questions or concerns? 

We encourage you to review this Privacy Notice in full to understand your rights and how we handle your information. If you do not agree with our policies or practices, please refrain from using our Services. If you still have questions, you can contact us at: privacy@holyvolt.com

Summary of key points

This segment highlights important topics covered in our Privacy Notice. For more detail, refer to the relevant segments below.

What personal information do we collect?  We collect personal information you provide directly and some data automatically when you interact with our Services.
Do we collect sensitive personal data?  We do not process any sensitive personal information (such as racial or ethnic data, religious beliefs, or sexual orientation).
Do we collect data from third parties?  No. We do not collect personal information from third-party sources.
How do we use your data?  To operate, improve, and secure our Services, communicate with you, comply with legal obligations, and—in limited cases—send marketing or targeted content, with your consent.
Do we share your data with others?  We only share your data when necessary—such as with business partners, affiliates, or service providers—and always in accordance with this Notice.
How do we protect your data?  We implement appropriate organisational, security, and technical safeguards. However, no online platform is ever entirely immune to security risks.
What are your rights?  You have the rights to access, correct, delete, or object to the processing of your personal data.
How can you exercise your rights?  The most straightforward way is by contacting us directly by emailing privacy@holyvolt.com

1. What types of personal data do we collect?

A. Personal information you provide to us

Summary: We collect the personal information that you voluntarily provide to us.

This occurs when you:

Express interest in our products, press information, or Services
Participate in surveys, promotions, or other interactive features
Contact us for support, questions, or other inquiries

Examples of personal data we collect may include:

Full name
Phone number
Email address
Job title
Company
Address
Communication and contact preferences

Note: You are responsible for ensuring the information you provide is true, complete, and up to date. Please notify us of any changes.

Sensitive Information: 

We do not collect or process any special categories of personal data (e.g. health, racial/ethnic origin, or political beliefs).

B. Information collected automatically

Summary: We automatically collect certain information when you access or use our Services.

This data does not directly reveal your identity, but it may include:

IP address
Device and browser characteristics
Operating system
Language settings
Referring URLs
General location (country, region)
Activity and usage data (e.g., pages viewed, timestamps, search history)
Technical error logs or crash reports

This data helps us maintain system security, troubleshoot problems, and improve functionality.

Like most businesses, we also use cookies and similar tracking technologies. For details, see our Cookie Notice.

C. Categories of automatically collected information

Log and usage data 
Includes details such as browser type, device ID, access dates and times, pages viewed, and interactions with the Services. Also includes crash reports and system diagnostics.
Device data
Covers hardware and software information about the device used to access the Services. This may include device model, operating system, IP address, browser, mobile carrier, and configuration settings.
Location data 
We may collect location information via your device’s GPS, IP address, or browser settings. This can be precise or general, depending on your preferences. You can manage or disable location access via your device settings.
Important: Disabling location sharing may limit the functionality of certain features within our Services.

2. How do we process your personal data?

Summary: We process your personal data to operate, maintain, and improve our Services, communicate with you, enhance security, meet legal obligations, and—where permitted—provide tailored marketing. Additional uses may occur with your explicit consent.

We process your personal information for various purposes, depending on how you engage with our Services. These include:

Responding to inquiries and support requests 
To respond to user inquiries, troubleshoot issues, and provide assistance as needed.
User-to-user communication
 If applicable, to enable interaction between users via features designed for that purpose.
Feedback and improvement 
To request and act on user feedback, and to improve the quality and functionality of our Services.
Marketing and promotional messaging
 To send marketing communications aligned with your preferences. You can opt out at any time.
Personalised advertising 
To deliver content and ads tailored to your interests, browsing behaviour, and geographic location. Learn more in our Cookie Notice.
Campaign performance measurement
 To evaluate the effectiveness of our outreach, promotions, and advertisements.

3. On what legal grounds do we process your personal data?

Summary: We process your personal information only when we have a valid legal reason (or “legal basis”) under applicable law, such as your consent, a contract, our legitimate business interests, legal compliance, or vital interest protection.

In accordance with the General Data Protection Regulation (GDPR), we may rely on one or more of the following legal bases:

Consent
 We process your personal information when you have given us explicit permission to do so for specific purposes. You may withdraw your consent at any time.
Performance of a contract
 Processing is necessary to fulfil a contract with you or to take steps at your request before entering into such a contract.
Legitimate interests
 Processing is necessary for our legitimate business interests, provided these are not overridden by your fundamental rights and freedoms. This may include:
- Providing personalised content and marketing
- Improving our products and services
- Understanding user engagement
- Supporting promotional activities
Legal obligations
 We process your data when required to comply with applicable laws, regulations, court orders, or enforcement requests.
Vital interests
 We may process your information to protect vital interests, either your own or those of another person—such as in emergencies or for public safety.

Important: In most scenarios, we act as the data controller, meaning we decide how and why your data is processed. 
If we process personal information on behalf of another organisation (e.g. a customer), we act as a data processor, and that customer is the data controller. In such cases, you should refer to the customer’s privacy notice for information about how your data is handled.

4. Who do we share your personal data with, and when?

Summary: We share your personal information only when it’s necessary and appropriate—either with your consent, for business operations, or to meet legal or contractual obligations.

We may disclose your information in the following situations:

Business Transfers
 If we are involved in a merger, acquisition, asset sale, or similar corporate restructuring, your personal data may be transferred or disclosed during negotiations or upon finalisation of such a transaction.
Affiliates
 We may share your information with our corporate group—this includes our parent company, subsidiaries, joint ventures, or other affiliates. All recipients are required to follow this Privacy Notice or provide equivalent protection.
Business Partners 
Your information may be shared with trusted business partners for the purpose of offering you relevant products, services, promotions, or integrated features.

We do not sell or rent your personal data. Any sharing is limited, controlled, and governed by contractual agreements or privacy-compliant safeguards.

5. Do we use cookies and similar tracking technologies?

Summary: Yes, we may use cookies and similar tracking technologies to collect and store information about how you use our Services.

We may deploy a variety of tracking technologies—including cookies, web beacons, and pixels—when you interact with our Services. These technologies allow us to:

Enhance performance and functionality
Improve site security and prevent crashes
Remember user preferences
Facilitate navigation and user experience

Additionally, we allow certain trusted third parties and service providers to use tracking technologies for:

Analytics – to understand how our Services are being used
Advertising – to deliver ads tailored to your interests, remind you of abandoned carts, and assess campaign performance

These third parties may use the collected data to serve you interest-based advertising both on our Services and across other websites and platforms.

We may share limited usage data with Google Analytics to help us analyse user behaviour and improve our Services. Some of the Google Analytics features we may use include:

Demographics and Interests Reporting
Advertising Reporting Features
Remarketing and Campaign Tracking

For more on how Google handles personal data, visit the Google Privacy & Terms page.

For more detailed information about the cookies and tools we use—and how you can control or disable them—please refer to our Cookie Notice.

6. Will your personal data be transferred outside the EEA?

Summary: Yes. We may transfer, store, and process your personal information in other countries, including those outside your own.

Our data infrastructure and that of our trusted providers may be located in:

The United States
Germany
Sweden
Other countries as required for global operations

If you are accessing our Services from a jurisdiction outside these countries, please be aware that your personal data may be transferred to and processed in one or more of these regions.

While these countries may not offer the same level of data protection as your own, we take all reasonable measures to ensure your information is treated securely and in accordance with this Privacy Notice.

Standard Contractual Clauses (SCCs)

To ensure adequate protection for international data transfers—particularly from the European Economic Area (EEA), United Kingdom (UK), or Switzerland—we rely on safeguards such as the European Commission’s Standard Contractual Clauses (SCCs).

These clauses require all recipients of EEA/UK-origin data to uphold equivalent standards of data protection.

If you would like to review our Standard Contractual Clauses or Data Processing Agreements, please contact us using the details in Segment 15.
We also implement similar protective arrangements with all third-party service providers that process your data on our behalf.

7. How long do we retain your personal data?

Summary: We retain personal data only as long as necessary for the purposes stated in this Notice, unless a longer period is required or permitted by law.

We will store your personal data only for as long as:

We have a legitimate business or legal need to retain it
Applicable laws or regulations (e.g., tax or auditing obligations) require us to retain it

Once your data is no longer necessary, we will:

Permanently delete it
Anonymise it so it can no longer be linked to you
Securely archive it if deletion is temporarily impractical (e.g. for system backups)

We regularly review our data retention policies to ensure we do not keep data longer than necessary.

8. How do we protect your personal data?

Summary: We apply a robust combination of technical and organisational security measures to protect your personal data.

These measures are designed to:

Prevent unauthorised access, disclosure, or modification
Maintain data integrity and confidentiality
Protect against cyberattacks, breaches, or malicious activities

Examples include:

Encrypted data transmission (e.g., via HTTPS)
Access control and authentication protocols
Firewalls and network protection tools
Regular vulnerability assessments and system audits

Despite our best efforts, no data transmission or storage system is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

9. Do we collect data from children or minors?

Summary: We do not knowingly collect or market to individuals under the age of 16.

Our Services are not directed toward, nor intended for, children under the age of 16. We do not knowingly collect personal data from anyone in this age group. If we become aware that we have inadvertently gathered personal information from a child without verified parental consent, we will take immediate steps to delete such information.

If you are a parent or legal guardian and believe your child has provided us with personal data, please contact us at privacy@holyvolt.com so we can take appropriate action.

10. Your rights under data protection laws

Summary: Depending on your location, you may have rights under data protection laws regarding access, correction, deletion, and control of your personal data.
If you reside in the European Economic Area (EEA), the United Kingdom (UK), Switzerland, or similar jurisdictions with data protection regulations, you may have the following rights:

Access – Request a copy of the personal information we hold about you
Correction – Request correction of inaccurate or incomplete information
Erasure – Request deletion of your personal data under certain conditions
Restriction – Request restriction of processing in specific circumstances
Portability – Request your data in a structured, machine-readable format
Objection – Object to the processing of your data for direct marketing or legitimate interest purposes
Automated Decision-Making – Not to be subject to decisions based solely on automated processing (including profiling), where applicable

To exercise any of these rights, please refer to Segment 15.

We will review and respond to your request in accordance with applicable legal requirements.

Withdrawing Your Consent

If we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. You can do so by contacting us using the information in Segment 15. Please note that withdrawal of consent does not affect the lawfulness of any processing conducted before such withdrawal.

Opting Out of Marketing Communications

You can opt out of marketing emails or promotional messages by:

Replying STOP or UNSUBSCRIBE to Email or SMS messages
Contacting us directly using the information in Segment 15

Managing Your Account Information

If you wish to review, update, or delete information stored in your account, you can:

We will deactivate associated data from active systems upon request. However, we may retain limited information where necessary for:

Fraud prevention
Legal compliance
Troubleshooting or audits
Enforcement of our terms and agreements

Cookies and Tracking Technologies

Most browsers are set to accept cookies by default. You may change your browser settings to:

Block cookies
Alert you when cookies are being used
Remove stored cookies

Be aware that disabling cookies may affect the functionality of certain features on our Services. For more information, refer to our Cookie Notice.

If you have any questions about your privacy rights, you may contact us at: privacy@example.com

11. How to access, correct, or delete your personal data

You have the right to request:

Access to the personal data we hold about you
A copy of how we’ve processed your data
Correction of inaccurate or outdated information
Deletion of your personal data under lawful conditions
Withdrawal of consent where processing is based on consent

To exercise these rights, please submit a Data Subject Access Request (DSAR) or contact us using the information in Segment 15.

We will respond to your request in accordance with applicable data protection laws and within any legally mandated timeframes.

12. Do-not-track (DNT) browser settings and your choices

Most modern browsers and some mobile devices offer a Do-Not-Track (“DNT”) setting to signal your preference not to be tracked across websites.

At this time, no standard has been universally adopted. As such, we do not currently respond to DNT browser signals or similar mechanisms. If a standard becomes established that we must follow, we will update this Privacy Notice accordingly.

13. Information for international users

Our website and Services are primarily intended for users within the European Economic Area (EEA). If you are accessing our Services from outside the EEA and choose to provide us with your personal data, you agree that your data will be processed in accordance with this Privacy Notice and applicable EU data protection laws.

14. Changes to this privacy notice

Summary: Yes, we may update this Privacy Notice from time to time to remain compliant and reflect changes to our practices.

Any updates will be indicated by the “Last updated:” date at the top of this Notice. In cases of material changes, we may provide additional notice (e.g., via email or a prominent website banner).

We encourage you to regularly review this Notice to stay informed about how we protect your data.

15. How to contact us about data protection or this notice

If you have questions, concerns, or requests regarding this Privacy Notice or your personal data, you may contact our Data Protection Officer (DPO) at:

Christer Larsson
 Data Protection Officer
 Sköldungagatan 7
 114 27 Stockholm, Sweden
 Email: christer.larsson@holyvolt.com
 Phone: +46 73 981 74 30

EEA or Swiss Residents

If you reside in the EEA or Switzerland, we are the “data controller” for your personal information. We have appointed the following representative to act on our behalf in the EEA:

Christer Larsson
 Email: christer.larsson@holyvolt.com
 Website: www.holyvolt.com
 Address: Sköldungagatan 7, 114 27 Stockholm, Sweden
 Phone: +46 73 981 74 30

You may also contact us directly at:

Holyvolt AB 
Sköldungagatan 7 114 27 Stockholm, Sweden
info@holyvolt.com  