Privacy policy

Postronic AB

Last updated: 14 October 2026

1. About This Privacy Policy

Postronic AB (“Postronic”, “we”, “us” or “our”) is committed to protecting personal data and respecting individual privacy.

This Privacy Policy explains how we collect, use, store and protect personal data in connection with our business operations, our website at www.postronic.se and our business relationships.

Postronic is a supplier and distributor of point-of-sale (POS) equipment, cash register-related hardware and other technical solutions. Our business is exclusively directed towards companies, resellers, system integrators and other business customers (B2B).

This policy primarily applies to contact persons at existing and prospective customers, suppliers and business partners, as well as visitors to our website.

Even where an agreement is entered into between companies, information relating to employees, contact persons and company representatives may constitute personal data protected under data protection legislation.

We process personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 (GDPR), supplementary Swedish data protection legislation and other applicable laws.

2. Data Controller

Postronic AB is the data controller for personal data processing activities where we determine the purposes and means of processing.

Postronic AB
Company registration number: 556563-3863
Address: Ellipsvägen 5, 141 75 Kungens Kurva, Sweden
Telephone: +46 (0)8-50 10 84 00
Email: info@postronic.se
Website: www.postronic.se

Questions regarding our processing of personal data or requests under the GDPR may be sent to info@postronic.se.

3. Categories of Personal Data We Process

Depending on your relationship with Postronic, we may process the following categories of personal data:

  • Identity and contact information: Name, job title, employer, business address, telephone number and email address.

  • Customer and account information: Customer number, company affiliation, user permissions, account settings and information necessary to administer the customer portal.

  • Business and transaction information: Quotations, orders, product details, delivery information, invoicing details, payment status, complaints and service cases.

  • Communications: Information provided through email, telephone, contact forms, product enquiries and other business communications.

  • Technical information: IP address, device and browser information, cookie identifiers, pages visited and interactions with the website.

  • Marketing information: Subscription details, communication preferences and, where applicable, interactions with marketing materials.

Swedish personal identity numbers are processed only where necessary and permitted by law, for example in transactions involving sole traders.

We aim to collect no more personal data than is necessary for each specific purpose.

4. Sources of Personal Data

We may obtain personal data directly from you when you contact us, register a customer account, request a quotation, place an order or use our services.

We may also receive professional contact information from your employer, other company representatives, existing business contacts, business partners or publicly available business registers.

When you use our website, technical information may be collected automatically through website functionality and, where permitted, cookies and similar technologies.

Where we obtain personal data from a source other than you, we provide information in accordance with the GDPR where required.

5. Purposes and Legal Bases for Processing

We process personal data only where there is a valid legal basis under the GDPR.

5.1 Customer Relationships, Quotations and Orders

We process contact and business information to manage enquiries, quotations, orders, deliveries, invoicing, complaints and other business commitments.

Where the information concerns contact persons at corporate customers, the legal basis is normally our legitimate interests under Article 6(1)(f) GDPR in administering and fulfilling the business relationship.

If you are personally a party to an agreement, processing may, where applicable, be based on the necessity to perform a contract under Article 6(1)(b) GDPR.

5.2 Suppliers and Business Partners

We process contact information and business communications to administer purchases, deliveries, agreements and business partnerships.

The legal basis is normally our legitimate interests in conducting and administering our business operations.

5.3 Accounting and Legal Obligations

We process information required to comply with obligations under accounting, tax and other applicable legislation.

The legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR.

5.4 Customer Service and Technical Support

We process personal data to respond to enquiries, handle technical support cases, provide product information and maintain our business relationships.

The legal basis is normally our legitimate interests or, where the relevant conditions are met, performance of a contract.

5.5 Marketing and Business Communications

We may process professional contact information to provide information about products, services, news and activities relevant to the recipient's business.

The legal basis may be legitimate interests or consent, depending on the processing activity and applicable marketing regulations.

We comply with applicable rules governing electronic direct marketing and provide recipients with the opportunity to unsubscribe from marketing communications.

You always have the right to object to the processing of your personal data for direct marketing purposes.

5.6 Website Operation and Security

We process necessary technical information to provide our website, protect our systems, administer customer accounts and prevent unauthorised access.

The legal basis is normally our legitimate interests in providing secure and functional digital services.

5.7 Web Analytics and Digital Advertising

Where we use analytics and marketing technologies that require consent, we obtain consent before using such technologies for those purposes.

Personal data processing for consent-based analytics and advertising is based on consent under Article 6(1)(a) GDPR, where consent is the applicable legal basis.

6. Shopify, Customer Portal and CRM Systems

Postronic uses Shopify as the platform for its website and digital customer functions.

We also use business management systems, customer relationship management (CRM) systems and other administrative tools to manage customer relationships, supplier contacts, quotations, orders, deliveries, invoicing and customer service.

These systems may contain names, job titles, company affiliations, contact information, business history, communications and other information relevant to the business relationship.

The purpose is to administer our business relationships, provide service, follow up on enquiries and ensure efficient and secure business operations.

Processing is normally based on our legitimate interests in conducting and administering our business, compliance with legal obligations or, where applicable, performance of a contract.

We use service providers that process personal data on our behalf and enter into data processing agreements where required under the GDPR.

Shopify may also process certain information for its own purposes and, in such cases, act as an independent data controller.

Further information about Shopify is available at:

https://www.shopify.com/legal/privacy

7. Google Analytics 4 and Google Ads

Postronic uses or intends to use Google Analytics 4 and Google Ads for website analytics, digital advertising and measuring marketing performance.

Google Analytics 4

Google Analytics 4 is used to analyse how our website is used, including pages visited, traffic sources and user interactions.

The purpose is to understand how the website performs and improve its content and usability.

Google Ads

Google Ads is used to promote our products and services and measure the effectiveness of advertising.

Depending on which features are enabled, the service may also be used for conversion tracking and audience-based advertising.

Personal Data and Consent

In connection with these services, technical identifiers, IP-related information, device information and website interaction data may be processed.

We use cookies and similar technologies for analytics and marketing only where valid consent has been given, in cases where such consent is required.

You can refuse or withdraw your consent through the website's cookie settings.

Further information about Google's processing of personal data is available at:

https://policies.google.com/privacy

8. Cookies and Consent Management

Postronic's website uses cookies and similar technologies to provide website functionality, improve the user experience, analyse traffic and, where visitors have given consent, support marketing activities.

Through the website's cookie settings, visitors can choose between the following categories:

Necessary Cookies: Required for the website's essential functions, including security, login and other necessary technical features. These cannot be disabled through the cookie settings.

Personalisation: Used to tailor the website experience based on visitors' settings and activities.

Marketing: Used to measure and improve marketing activities and, where relevant features are enabled, display personalised advertisements.

Analytics: Used to understand how the website is used and identify areas for improvement, including through Google Analytics 4.

Visitors can choose to accept all optional categories, reject them or make individual selections.

Cookies and similar technologies that require consent must not be used for these purposes before valid consent has been obtained.

Consent may be withdrawn or changed at any time through the website's cookie settings.

Further information about individual cookies, service providers and retention periods is provided through the website's cookie information or cookie settings.

9. Recipients of Personal Data

We may share personal data with service providers and business partners where necessary for our operations.

This may include:

  • Shopify and other digital platform providers.

  • Business management, CRM and IT service providers.

  • Payment and invoicing service providers.

  • Transport companies and logistics partners.

  • Technical support providers.

  • Analytics and marketing service providers.

  • Public authorities where disclosure is required by law.

Where a service provider processes personal data on our behalf, we use data processing agreements where required under the GDPR.

Certain recipients act as independent data controllers for their own processing activities.

10. Transfers of Personal Data Outside the EU/EEA

Some of our service providers may process personal data in countries outside the European Union (EU) or European Economic Area (EEA).

Such transfers must comply with the GDPR rules governing international data transfers.

Transfers may, for example, be based on a valid adequacy decision or the European Commission's Standard Contractual Clauses, together with additional safeguards where necessary.

For transfers to the United States, the EU–U.S. Data Privacy Framework may apply where the relevant recipient is covered by a valid adequacy decision.

You may contact us for information about the safeguards applicable to a particular transfer.

11. Data Retention and Deletion

Postronic retains personal data only for as long as necessary for the relevant purposes or as required by law.

Customer and Supplier Information: Retained during the active business relationship and thereafter for as long as there is a documented need, for example for contractual follow-up, complaints or legal claims.

CRM and Business Systems: Contact information, business history and other customer information are reviewed and deleted when no longer needed for a legitimate business purpose or legal obligation.

Accounting Records: Retained in accordance with Swedish accounting legislation, normally until the end of the seventh year following the calendar year in which the financial year ended.

Support Cases and Business Communications: Retained for as long as necessary to handle the matter and any subsequent obligations or claims.

Marketing Information: Retained for as long as there is a valid legal basis and the information remains necessary for the purpose. The information is deleted when the need ends. Objections to direct marketing are respected.

Cookies and Analytics Data: Retention periods depend on the relevant technology and service and are specified in the website's cookie information.

When personal data is no longer required, it is deleted or anonymised unless continued retention is required by law.

12. Security

Postronic uses technical and organisational security measures to protect personal data.

These include access management, access controls and other protective measures adapted to the risks associated with the processing.

Only individuals who require access to personal data for their work duties should have access to it.

We work to prevent unauthorised access, loss, alteration and unlawful disclosure of personal data.

13. Your Rights Under the GDPR

Subject to the conditions set out in the GDPR, you have the right to:

  • Receive information about how your personal data is processed.

  • Request access to the personal data we process about you.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of personal data.

  • Request restriction of processing.

  • Object to processing based on legitimate interests.

  • Object at any time to processing for direct marketing purposes.

  • Request data portability where the relevant conditions are met.

  • Withdraw previously given consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Certain rights may be limited, for example where we are legally required to retain information.

To exercise your rights, please contact info@postronic.se.

We may need to verify your identity before processing a request.

We respond to requests without undue delay and normally within one month, in accordance with the GDPR.

14. Requirement to Provide Information and Automated Decision-Making

Certain information is necessary for us to register a business account, provide a quotation, process an order or administer a delivery.

If the required information is not provided, we may be unable to provide the relevant service or complete the business transaction.

We do not use our website's analytics and marketing functions as the basis for decisions made solely by automated means that produce legal or similarly significant effects on individuals.

15. Children's Personal Data

Postronic's products and services are intended for businesses and professionals.

Our website and customer accounts are not intended for children.

We do not knowingly collect personal data relating to children for marketing or customer registration purposes.

16. Complaints

If you have any questions or concerns about how we process personal data, you are welcome to contact us.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), which is the Swedish supervisory authority for data protection.

Swedish Authority for Privacy Protection (IMY)
Website: https://www.imy.se

17. Changes to This Privacy Policy

Postronic may update this Privacy Policy when our business operations, services or applicable legal requirements change.

The current version is published at www.postronic.se together with the date of the latest update.

Where a change requires specific information or renewed consent, we will handle this in accordance with applicable rules.

18. Contact Information

For questions about personal data, data protection or this Privacy Policy:

Postronic AB
Attn: GDPR
Ellipsvägen 5
141 75 Kungens Kurva
Sweden

Telephone: +46 (0)8-50 10 84 00
Email: info@postronic.se
Company registration number: 556563-3863
VAT registration number: SE556563386301
Website: www.postronic.se

Last updated: 14 October 2026