GDPR Compliance Statement

Last Updated: August 5, 2026

Our Commitment to GDPR

elovvindrexil is committed to ensuring compliance with the General Data Protection Regulation (GDPR). We take the protection of your personal data seriously and have implemented appropriate measures to safeguard your privacy rights.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to fulfill our services to you
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to obtain confirmation as to whether we process your personal data and, if so, to access that data along with supplementary information.

Right to Rectification

You have the right to have inaccurate personal data corrected and to have incomplete personal data completed.

Right to Erasure

You have the right to request the deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Data Protection Officer

For questions regarding data protection or to exercise your GDPR rights, please contact:

elovvindrexil
Data Protection Inquiry
Drottninggatan 45
Stockholm, 11121
Sweden
Email: [email protected]

Data Processing Activities

We process personal data for the following purposes:

• Providing financial education services
• Responding to inquiries and customer support
• Improving our website and services
• Complying with legal and regulatory obligations
• Sending service-related communications

Data Security Measures

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments
• Staff training on data protection
• Incident response procedures

International Data Transfers

If we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date.