1. Data Controller (Personuppgiftsansvarig)
Avante Parfums (Swedish Organization Number: 060424-1935), located at Storgatan 38, 577 32 Hultsfred, Sweden, is the data controller for the processing of your personal data under Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and the Swedish Data Protection Act (Lag 2018:218 med kompletterande bestämmelser till EU:s dataskyddsförordning).
Contact: parfumsavante@gmail.com / hello@avanteparfums.eu.
2. Cookiebot™ Prior-Consent Gatekeeper & Your Live Consent Receipt
Under Chapter 9, Section 28 of LEK (2022:482), optional analytics and marketing storage require prior consent. Necessary storage supports functions you request, such as your bag, selected language and consent choices. Choose Necessary Only to decline optional storage, or change or withdraw your choices through Cookie Settings. Refusing optional cookies does not prevent you from joining the waitlist or placing an available order. Core fonts are self-hosted; hosting and media delivery providers may receive technical request data needed to deliver the site.
The avante_currency cookie remembers the currency you explicitly choose for shopping and payment for up to 12 months. It is not used for advertising tracking.
With Statistics consent, we record public page paths, language, country, device category and funnel events in Lovable Cloud, without raw IP addresses or customer details. Campaign sources require Marketing consent. Change or withdraw consent in Cookie Settings.
Loading your live Cookiebot consent receipt...
3. Legal Basis & Categories of Personal Data We Collect
A. Orders (GDPR Art. 6(1)(b) — Performance of a Contract & Art. 6(1)(c) — Legal Obligation)
When you purchase a fragrance after launch, we process your name, billing and shipping address, email address, telephone number, and payment status to fulfill our contract with you and to comply with the Swedish Bookkeeping Act (Bokföringslagen 1999:1078).
B. Waitlist & Newsletter (GDPR Art. 6(1)(a) — Explicit Consent)
We process your email address and selected fragrance for the release notifications you request by joining the waitlist. This does not automatically subscribe you to unrelated marketing. You may withdraw consent or unsubscribe through an available unsubscribe link or by emailing parfumsavante@gmail.com. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. We do not sell your personal data; necessary service providers and consented measurement recipients are described below.
4. E-Commerce & Payment Security
Campaign attribution: Only after you accept Marketing in Cookie Settings, we store campaign labels (utm_source, utm_medium, utm_campaign and utm_content) in first-party session storage to understand which links lead to waitlist signups. A sanitized source is saved alongside your signup in Lovable Cloud and included in our internal notification email; no email addresses or campaign conversions are sent to Google, Meta or TikTok by this feature. Storage lasts for this browser session; the signup source is retained with your subscription until you unsubscribe or request deletion. Choose Necessary Only or withdraw Marketing consent in Cookie Settings to stop attribution and remove session storage. Without consent, signups are recorded as direct.
Snapchat measurement: Also only after you accept Marketing, the Snap Pixel loads and records page visits and when a waitlist signup happens, so our Snapchat ads can be measured. The recipient is Snap Inc.; the data shared is the event, page address, browser details and Snap cookie identifiers. Your email is not sent to Snap. Before you accept Marketing nothing is sent to Snap. You can withdraw Marketing in Cookie Settings at any time and no further events are sent.
Google Ads measurement: Also only after you accept Marketing, a Google Ads tag (gtag.js, AW-18538699058) loads and records when a waitlist signup happens, so our advertising can be measured. The recipient is Google Ads; the data shared is the conversion event (that a signup occurred) with click identifiers and the consent signals Google requires under its EU User Consent Policy. Before you accept Marketing, this tag is fully blocked, no data is sent to Google, and consent mode reports denied. You can withdraw Marketing in Cookie Settings at any time; withdrawal applies immediately and no further events are sent.
Our payment processing is PCI DSS-certified and GDPR-compliant. All transactions are encrypted via TLS. Avante Parfums never stores full credit card numbers, CVV security codes, or sensitive banking credentials on our servers.
5. Recipients & Data Processors
We do not sell or rent your personal data. Depending on the service and your choices, recipients may include:
- Payment Providers: Stripe, Klarna Bank AB (publ), Apple Pay
- Logistics & Carriers: PostNord Sverige AB (Sweden) and DHL Express (Europe)
- Hosting, database, media delivery and email service providers supporting the site, orders, customer support and requested waitlist messages, including Lovable Cloud.
- Google Ads and Snap Inc. for the optional advertising measurement described above, only with Marketing consent. Their legal roles depend on the processing and applicable service terms.
6. Retention Periods
- Accounting & Transaction Records: 7 years after the close of the fiscal year in accordance with Chapter 7, Section 2 of the Swedish Bookkeeping Act (Bokföringslagen 1999:1078).
- Customer Support Inquiries: Up to 24 months after resolution of the matter.
- Waitlist & Newsletter Subscriptions: Until you withdraw consent or unsubscribe.
7. Your Statutory Rights & Supervisory Authority (IMY)
Under the GDPR, you may request access, rectification, erasure, restriction, portability or object to processing where the conditions for each right apply. You can withdraw consent at any time, without affecting earlier lawful processing. Contact parfumsavante@gmail.com. We respond without undue delay and normally within one month. For complex or numerous requests, the GDPR allows an extension of up to two further months; we will inform you of the extension and reasons within the first month. We may need proportionate information to verify your identity. Legally required accounting records may be retained despite an erasure request.
If you believe our processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten — IMY, Box 8114, 104 20 Stockholm, Sweden, www.imy.se, imy@imy.se) or the supervisory authority in your EU Member State of residence.