Privacy policy

Privacy Policy

Business customers and their contact persons | Norway, Sweden, Denmark, Finland, Iceland and the Faroe Islands

Last updated: 1 October 2026

This Privacy Policy explains how Pataljanis Dogshow Products AS processes personal data when business customers and the people who act for them use our website, contact us, request an offer, place an order, or otherwise work with us.


1. Scope

Our online store is intended for business-to-business sales. This Policy covers personal data about people who represent or work for a business customer, prospective customer, reseller, distributor, or other business partner. It also covers sole traders where information identifies an individual, people named as delivery recipients, and people who contact us.

Company information that does not identify a natural person is not personal data. A named business email address, direct telephone number, sole-trader details, or information linked to an individual contact person may be personal data and is covered by this Policy. This Policy does not govern processing carried out by another organisation as an independent controller; that organisation's own privacy information applies to its processing.

The GDPR applies in Norway, Sweden, Denmark, Finland, and Iceland, together with applicable national rules. Local rules may also apply to electronic marketing and cookies. When we offer goods or services to people located in the Faroe Islands and process their personal data, the Faroe Islands' Data Protection Act (Act No. 80 of 7 June 2020, in force from 1 January 2021) applies to that processing. The Faroe Islands have an EU adequacy decision for personal-data transfers; this does not replace the local rules that apply to our processing. The Faroese supervisory authority is Dátueftirlitið.


2. Who is responsible for your personal data

The controller is Pataljanis Dogshow Products AS:

Laskengrenda 55

3221 Sandefjord, Norway

Organisation number: 927 364 522

Email: post@pataljanis.com

Telephone: +47 33 20 11 00

 

 

3. Personal data we collect and where it comes from

Depending on how you interact with us, we may process:

·   Contact and business-role information, such as name, business email, direct telephone number, job title, employer, and business address.

·   Account information, such as login and security details, account preferences, and the business relationship linked to the account.

·   Commercial and transaction information, such as enquiries, quotations, products, prices, orders, invoices, payment status, delivery details, returns, complaints, and related correspondence.

·   Information you provide in messages, forms, meetings, trade-fair enquiries, or customer-service conversations.

·   Technical information about use of the website, such as IP address, device and browser details, log data, and cookie or similar technology identifiers, subject to applicable consent rules.

We normally receive information directly from you or from the business you represent. We may also receive information from a person authorised to place an order, a delivery or payment provider, a business partner, or a public source where this is lawful. If we receive personal data from another source, we will provide the information required by applicable law.


4. Why we use personal data and our legal bases

Offers, orders, deliveries and customer accounts

We use contact, account, order, delivery, and communication information to respond to enquiries, prepare quotations, create and manage business accounts, process orders, arrange payment and delivery, handle returns or complaints, and administer the business relationship. For a sole trader who is personally entering into the contract, processing needed to take steps at that person's request or perform the contract may be based on Article 6(1)(b) GDPR. For an employee or other representative of a company, we generally rely on our legitimate interest in communicating with the business and administering the business relationship, after considering the person's interests and rights.


Accounting and legal duties

We retain and use relevant transaction and contact information to meet accounting, tax, and other legal requirements. The legal basis is compliance with a legal obligation.


Customer service, security and legal claims

We use relevant information to answer questions, maintain the security of our website and accounts, prevent misuse, resolve disputes, and establish or defend legal claims. Where applicable, the legal basis is our legitimate interest in running a secure business and protecting our rights. We rely on a legal obligation where the law requires the processing.


Business marketing

We may send business-related information to contact persons where it is relevant to their professional role and permitted by applicable law. Our use of personal data for this purpose must have a valid basis under data-protection law, such as consent or, where appropriate, a legitimate interest supported by a balancing assessment. Electronic marketing rules are separate: we send email, SMS, or other electronic marketing only when permitted by the rules that apply in the recipient's country, including obtaining prior consent where required. You may object to direct marketing at any time. We may keep the minimum information needed to record and respect an objection. Operational messages about quotations, orders, invoices, delivery, or account security are not marketing.


Cookies and similar technologies

We use technologies that are necessary for the website, account, and shopping functions to work. We use analytics or advertising technologies only after you have consented. You can change or withdraw your choice through the cookie settings on our website. The current cookie list and details about providers, purposes, and retention periods are available through the cookie settings.


5. Who receives personal data

We share only the information needed for the relevant purpose. Recipients may include Shopify and Shopify Payments; Logic Consulting through its internal order and warehouse solution at Röra Byväg 5, SE 418 78 Göteborg, Sweden; delivery carriers; invoicing and accounting services; customer-management and support tools; email or newsletter services; analytics or advertising tools; and professional advisers. We may also disclose information to public authorities where required by law or necessary to establish, exercise, or defend legal claims.

Logic Consulting warehouse contact details provided for this service: VAT no. SE559157520301; telephone +46 31 25 20 45; mobile +46 70 860 64 78.

A provider processing data only on our instructions acts as a processor and is subject to a data-processing agreement. Shopify and some payment providers, banks, carriers, and social-media or advertising platforms may also determine their own purposes for particular services and act as independent controllers for that processing. Their privacy notices apply to their independent processing.

Shopify privacy and data-processing information

To fulfil a B2B order, Logic Consulting and the selected carrier may receive the business and contact person's name, delivery address, telephone number, email address, and information about the order and products. We share only the details needed to prepare and deliver the order.

 

6. International transfers

Shopify and other providers may transfer or allow access to personal data outside the EEA. Shopify describes the safeguards it uses for international transfers, including adequacy decisions, Standard Contractual Clauses, and Binding Corporate Rules where applicable. For other providers, we use a transfer mechanism permitted by applicable law and apply additional safeguards where required. You may contact us for information about the safeguards used for a particular transfer.

The European Commission recognises the Faroe Islands as providing adequate protection for personal-data transfers from the EEA. This transfer mechanism does not replace the Faroese Data Protection Act that applies to processing about people located in the Faroe Islands.


7. How long we keep personal data

We keep personal data only for as long as needed for the purpose for which it was collected, subject to legal retention duties. Order, invoice, and accounting records are kept for the periods required by applicable accounting and tax law. We review business contact and account information when a business relationship ends or a contact person changes role, and delete or anonymise it when it is no longer needed. Information needed for a complaint, dispute, security incident, or legal claim may be kept until the matter is resolved and for any further period permitted by law.


8. How we protect personal data

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or disclosure. Access is limited to people and providers who need the information for their work. No method of transmission or storage can be guaranteed to be completely secure.


9. Your rights

Depending on the circumstances and applicable law, you may have the right to:

·   Request access to personal data and information about how we use it.

·   Request correction of inaccurate or incomplete data.

·   Request erasure or restriction of processing.

·   Object to processing based on legitimate interests and object at any time to direct marketing.

·   Withdraw consent where processing is based on consent.

·   Receive or transfer data that you provided to us where the right to data portability applies.

These rights are subject to legal conditions and exceptions. We may ask for information needed to verify your identity or authority to act for another person. We normally respond within one month; the period may be extended by up to two further months for a complex request, and we will explain the extension.

You may complain to the supervisory authority in the country where you live, work, or believe an infringement took place. In Norway, contact Datatilsynet. In Sweden, contact the Swedish Authority for Privacy Protection (IMY); in Denmark, Datatilsynet; in Finland, the Office of the Data Protection Ombudsman; in Iceland, the Data Protection Authority; and in the Faroe Islands, Dátueftirlitið.

Norway: Datatilsynet | Sweden: IMY | Denmark: Datatilsynet | Finland: Data Protection Ombudsman | Iceland: Data Protection Authority | Faroe Islands: Dátueftirlitið


10. Information you need to provide

You do not have to provide every type of information. We need certain business contact, account, order, payment, and delivery information to respond to a request, create an account, enter into or administer a business relationship, or fulfil an order. If required information is not provided, we may be unable to provide the requested service or process the order.


11. Automated decisions

We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects on you.


12. Changes and contact

We may update this Policy when our business, systems, providers, or legal requirements change. The current version will be available on our website. If a change materially affects how we use personal data, we will provide notice where required by law.

For questions or to exercise your rights, contact:

Pataljanis Dogshow Products AS

Laskengrenda 55, 3221 Sandefjord, Norway

Email: post@pataljanis.com | Telephone: +47 33 20 11 00

Whatsapp: +4792301339