Privacy policy
Privacy Policy
We at Tretorn Sweden AB, reg. no. 559012-5695, care about your privacy. We always strive to protect your personal data in the best possible way. In this privacy policy, we inform you about how we process your personal data and what rights you have. We also inform you how, together with our parent company WS WeSports Group AB (publ), reg. no. 559237–3632, we process personal data related to your purchases as joint controllers.
Summary – How do we process your personal data?
Here you can read a summary of how we process your personal data. Further down in this document you will find more detailed information about our different processing activities. By clicking the links below you will go directly to the detailed sections.
If you make a purchase from us, we process your personal data to:
· manage your purchase,
· communicate with you regarding your purchase,
· handle any questions about your purchase as well as returns and other claims in accordance with applicable law and our agreement,
· send a request asking you to review your purchase, and
· prevent, deter, and investigate potential misuse or fraud.
If you visit our website and provide consent, we analyze how our website is used and show you relevant offers on other sites you visit based on such analysis. We also process your personal data so the site functions properly and to remember your choices.
If you receive marketing and other communications from us, we process your personal data to send newsletters and other marketing to you, as well as customer satisfaction and market surveys.
If you participate in one of our competitions or if we share your posts on our social media/website, we process your personal data to administer and carry out competitions and to share your posts on social media and your images on our website.
If you communicate with us, to protect our legitimate interests, and to fulfil legal obligations, we process your personal data to:
· communicate with you when you contact us,
· comply with requirements under local marketing law in your country, and
· comply with requirements under local accounting/record‑keeping law in your country.
Your personal data related to your purchases will be shared with and processed by our parent company WS WeSports Group AB (publ) ("WeSports"). WeSports processes your personal data as a joint controller with us to perform analyses based on your purchases with us.
You have various rights in relation to our processing of your personal data, including the right to object, the right to lodge a complaint with your local data protection authority, the right to withdraw your consent, and the right of access. More information about these and other rights is available at the end of this privacy policy.
Please use the summary above and the table of contents below to navigate to the parts you want to read more about. If you have any questions or wish to exercise any of your rights, you are welcome to contact us via our customer support.
Information about our processing of your personal data
Controllers and contact details
Where do we collect personal data about you?
What happens if you do not provide your personal data?
Who do we share your personal data with?
Sharing and processing of personal data within the WeSports Group
Do we transfer your personal data outside your country?
Detailed description of how we process your personal data
If you make a purchase from us
If you are a member
If you visit our website
If you receive marketing and other communications from us
If you participate in competitions or if we share your posts on our social media/website
If you communicate with us, to protect our legitimate interests, and to fulfil legal obligations
How have we carried out our legitimate interest assessment?
Consent
What rights do you have when we process your personal data?
Controllers and contact details
Tretorn Sweden AB, reg. no. 559012-5695, is responsible for the processing of your personal data (controller) as described in this privacy policy.
In certain situations, we are joint controllers with our parent company, WS WeSports Group AB (publ), reg. no. 559237–3632. This means we jointly determine why and how your personal data is processed. Read more about when we act as joint controllers below.
If you have questions about these processing activities or wish to exercise any of your rights described under What rights do you have when we process your personal data, please contact us.
What happens if you do not provide your personal data?
In general, you are not obliged to provide your personal data to us. You will find a description of when you need to provide your personal data in the tables below where the legal basis is stated as "legal obligation under local law in your country". Even when we do not have a legal obligation, the consequence of not providing certain data may be that it is not possible for us to enter into an agreement with you.
Who do we share your personal data with?
Your personal data is primarily processed by us at Tretorn Sweden AB. In certain cases, we share personal data with third parties. Below we summarize the situations in which we generally share your personal data with third parties, and in the tables below we specify in more detail the purposes for which personal data is shared and the categories of recipients.
Below we set out specifically what applies to sharing and processing of personal data within the WeSports Group.
We aim to be transparent and help you feel secure, so please contact us if you want more information about how we share your personal data.
To operate effective IT systems and run our business efficiently, our IT suppliers process personal data on our behalf as processors and are typically used for all purposes listed in the tables below; therefore, they are not listed separately in those tables.
· For to manage your purchases, we share your personal data with the payment service provider and carrier handling your payment and delivery. These recipients act as independent controllers. Which payment providers and carriers process your personal data depends on your choice at checkout. To manage reviews, we also share your data with Trustpilot, which processes it as our processor.
· If you visit our website and provide consent, your personal data is processed by analytics and marketing services we use, for example Google, Microsoft, LinkedIn and/or Meta (Facebook and Instagram). These recipients process personal data on our behalf as processors, and may also act as independent controllers for their own purposes. These providers inform you separately about the processing for which they are responsible.
· To market effectively, we use providers that help us with marketing, for example newsletter delivery. These providers process personal data on our behalf as processors.
· If we share your posts in our channels or you contact us via social media, we share your personal data with the relevant social media platform (e.g., Instagram or Facebook). These platforms act as independent controllers for their own processing.
Sharing and processing of personal data within the WeSports Group
We are part of the WeSports Group, comprising several companies focused on sports and outdoor activities, including our parent company WS WeSports Group AB (publ) ("WeSports"). Below we describe how we share and process your personal data within the WeSports Group.
When you make a purchase from us, we share personal data related to your purchase (such as the products you bought and your purchase history) with WeSports, which processes this personal data as a joint controller with us. This means that together with WeSports, we determine how and why your personal data is processed for this purpose.
We process your personal data together with WeSports to analyze your purchases and identify products and areas you are particularly interested in. We limit the information we share and process it at the most aggregated level possible.
We rely on legitimate interests under local law in your country for this processing, having assessed that the processing is necessary for our legitimate interest in analyzing purchasing patterns to provide tailored offers. We store your personal data for this purpose for 18 months.
The insights we obtain from the analysis are then used to tailor our marketing to you, including in our newsletters (if you receive these from us). In our tailored marketing we may also recommend offers and products from other companies within the WeSports Group. The processing we carry out when sending marketing to you is performed by us as independent controllers, and you will not receive communications directly from WeSports or other companies in the WeSports Group.
WeSports also shares your personal data with its IT suppliers that need to process personal data for WeSports to operate effective IT systems and run its business efficiently. These IT suppliers act as WeSports' processors.
If you have questions about the processing we carry out jointly with WeSports, please contact us using the contact details above.
You can read more about how we process your personal data as independent controllers when you receive marketing and other communications from us below.
Do we transfer your personal data outside your country?
As a rule, we and our processors process your personal data within your country or region. In certain cases, however, your personal data may be transferred abroad. When we use services from providers such as Google, Meta or LinkedIn, your personal data may be transferred to other countries. These transfers are carried out in accordance with local data transfer requirements in your country, or other applicable safeguards.
If you want more detailed information about transfers of personal data abroad, please contact us.
Detailed description of how we process your personal data
Below you can read more in detail about the purposes of our processing, the categories of personal data we process, the legal bases for the processing, retention periods, when you need to provide personal data to us, and recipients of your personal data.
If you make a purchase from us
When you make a purchase on our website, we process your personal data. The purposes for which we process your personal data are set out in the tables below.
We collect your personal data from you at checkout when you make your purchase, or when you contact us.
In general, you are not obliged to provide your personal data to us. However, if you do not provide certain data, it may be impossible for us to enter into an agreement with you.
Manage your purchase – Receive and register your personal data to manage your order
Processing activities
Receive and register your personal data to receive, record and manage your order
Send order confirmation and/or receipt by email
Send delivery information by email and deliver your order
Share your personal data with payment service providers and carriers
Personal data processed
Name
Contact details (address, email and phone number)
National ID/personal number (where applicable)
Order information, which product(s) you ordered
Payment information
Legal basis
Performance of a contract under local law in your country
The processing is necessary for us to perform the agreement regarding your purchase. If the personal data is not provided, you cannot complete a purchase with us.
Processing of national ID/personal number may be necessary to securely identify you and to verify age where required by local law in your country.
Retention period
Personal data related to your purchase is processed for the time required to administer and manage your order so you can receive the products you ordered, but no longer than 18 months.
Thereafter, we process data about your purchase so that, in a smooth manner and in accordance with local consumer protection law in your country, we can handle any questions about your purchase, rights of withdrawal, open purchase, warranties and complaints. You can read more about this in the table below.
Your personal data may also be included in accounting/record‑keeping materials, which we store in accordance with our obligations under local accounting/record‑keeping law in your country; see more below.
Recipients of your personal data
We share your personal data with the payment service provider and the carrier you choose. These recipients act as independent controllers.
We offer several payment and delivery options (e.g., local postal or courier services). Which providers process your personal data depends on your choice at checkout.
We will share your name, address and contact details with the carrier you choose at checkout so we can deliver your products.
Communicate with you about your purchase – Communication as needed regarding your purchase
Processing activities
Communicate with you as needed regarding your purchase, e.g., if the product you ordered is out of stock or to inform you of product recalls
Personal data processed
Name
Email address
Order information, which product(s) you ordered
Legal basis
Legitimate interests under local law in your country
The processing is necessary for our legitimate interest in communicating with you as needed regarding your purchase.
Retention period
Personal data related to your purchase is processed for this purpose for up to 3 years.
Handle questions, returns and other claims – Handle questions about purchases, withdrawal rights, returns, guarantees and complaints
Processing activities
Handle any questions and rights of withdrawal, returns, guarantees and complaints in a smooth manner and in accordance with local consumer law in your country and our agreement with you.
If you have questions about your purchase, wish to exercise your right of withdrawal, complain about a product, or otherwise exercise your rights under local consumer law in your country or our agreement, we process your personal data to assist you and comply with applicable law and the terms of our agreement.
We may need to retrieve your order, contact details and payment information so you can exercise your right of withdrawal or complain about a product.
Personal data processed
Name
Contact details (address, email address and phone number)
National ID/personal number (where applicable)
Order information, which product(s) you ordered
Information you choose to provide to us, e.g., about a product fault, and information about steps we have taken in a return or guarantee matter
Legal basis
Performance of a contract under local law in your country
Legal obligation under local law in your country (e.g., consumer protection)
Legitimate interests under local law in your country (efficient and customer‑friendly handling of questions and claims)
Processing of national ID/personal number may be necessary to securely identify you and verify age where required by local law in your country.
Retention period
We store your personal data for up to 7 years from your purchase to answer questions and handle returns and so you can, in accordance with local consumer protection law in your country, complain about products and exercise withdrawal rights.
If you contact us with a question and we open a case, we process your personal data for 36 months.
Reviews – Send request to review your purchase
Processing activities
Send requests to review the product you purchased
Personal data processed
Name
Email address
Order information, which product(s) you ordered
Legal basis
Legitimate interests under local law in your country (to improve our products and offering)
Retention period
We process your personal data to send a review request for 14 days after purchase. We stop earlier if you object.
Publish your review
Processing activities
Publish your review on our website. You choose whether to include your name.
Personal data processed
Name (if you chose to include it)
Content of your review
Legal basis
Consent under local law in your country
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
Retention period
We process your review for 12 months and then anonymize it (if not already anonymized). If a product is discontinued, all reviews for that product are deleted.
Recipients of your personal data
We use Trustpilot to carry out surveys and manage reviews; Trustpilot acts as our processor.
Prevent, deter and investigate misuse and fraud
Processing activities
Identify unusual purchasing behaviour and prevent misuse of our services and fraud
Personal data processed
Name
Email address
Phone number
IP address
National ID/personal number (where applicable)
Order information, product(s) ordered
Return and order history
Legal basis
Legitimate interests under local law in your country (to protect our services and customers)
Processing of national ID/personal number may be necessary to securely identify you and verify age where required by local law in your country.
Retention period
We process your personal data for this purpose from purchase and up to 3 years.
Recipients of your personal data
If we need legal assistance, we share data with our legal counsel. If we detect criminal behaviour, we also share data with the local law enforcement authority in your country.
Cart reminders – Remind you of products left in your cart
Processing activities
Send email reminders to subscribers who left products in their cart on our website without completing the purchase
Personal data processed
Email address
Information about products left in the cart
Legal basis
Legitimate interests under local law in your country (to remind members who have been given the option to object to direct marketing)
Retention period
Personal data is processed for 48 hours after items were left in the cart.
You can opt out of marketing at any time; we will then stop processing your data for marketing purposes. If you opt out, your personal data is stored in our suppression list until further notice.
If you visit our website
If you consent, we analyze how our website is used and show you relevant offers on other sites and social media you visit based on such analysis. We also process your personal data so the site functions properly and to remember your choices. We explain this in detail in the tables below. Personal data is collected from your device (e.g., mobile, computer or tablet) when you visit our site. Google may also use information it already has to conduct analysis and show you relevant offers from us.
To collect personal data when you visit the site as described below, we use cookies and similar technologies. In our cookie information on the website, we explain in more detail how this works.
Analyze how our website is used – Analysis via cookies and analytics services
Processing activities
Analyze how you use our site with cookies to improve site functionality, tailor the site to our visitors, and draw insights about visitors
We use Google Analytics; a random ID distinguishes your device from other visitors and confirms usage patterns
We are only interested in aggregate interactions; we do not know who you are and take no steps to find out
Personal data processed
A masked version of your IP address
Information about your site usage (clicks, time on page)
Approximate location
Visit counts
Device/browser info (e.g., screen resolution)
Other information Google has about you (e.g., referral source)
Legal basis
Consent under local law in your country
You may withdraw consent at any time. Withdrawal does not affect lawfulness of prior processing based on consent.
You can avoid Google Analytics by installing the relevant browser add‑on. To avoid cookies, adjust your browser settings.
Retention period
Personal data is stored for 14 months after your visit.
Recipients of your personal data
Our analytics service Google Analytics receives your personal data. See their privacy policy for details.
Show relevant offers from us on other sites you visit – Personalized marketing on external websites and social media
Processing activities
Advertise our products by showing offers and new products we believe are relevant for you
Show tailored marketing on other websites and social media you visit
Use marketing services from, for example, Meta (Facebook and Instagram), Microsoft (Bing) and LinkedIn
Do this based on analysis of our site via cookies or similar technology and information those parties already have about you
Tailor marketing based on information those services already have and your previous browsing with us; this involves profiling of your browsing history
Personal data processed
Masked IP address
Site usage information (clicks, dwell time)
Approximate location
Visit counts
Device/browser info (e.g., screen resolution)
Other information Google has about you (e.g., referral source)
Legal basis
Consent under local law in your country
You may withdraw consent at any time. Withdrawal does not affect lawfulness of prior processing based on consent.
Retention period
You may see our marketing for up to 18 months after your visit.
Recipients of your personal data
Your data is shared with the analytics/marketing services we use. These services may continue to process your data as independent controllers.
Profiling: Your personal data may be used for profiling to show you offers that we and our partners believe suit you best and to provide personalized marketing. You have the right to object to profiling under local law in your country.
For the site to function and remember your choices – Necessary cookies and technical functions
Processing activities
Use cookies and similar technology to ensure the site functions satisfactorily and securely
Remember your choices on the site (e.g., your consent)
Ensure functionality without tracking how you personally use the site (technical functions operate automatically)
Personal data processed
Masked IP address
Information about how you use the site
Information about your choices
Legal basis
Legitimate interests under local law in your country (to provide a well‑functioning and secure site and remember your choices)
Favourite products
Personal data processed
Information about products you have marked as favourites
Legal basis
Legitimate interests under local law in your country (to offer a save/favourites function)
Recipients of your personal data
Your personal data is processed through the services we use on the site, for example our consent management tool. These services are listed as "necessary" in our cookie policy.
If you receive marketing and other communications from us
The tables below describe how we process your personal data if you have chosen to receive marketing and other communications from us. We collect personal data directly from you and by analyzing how you interact with our communications.
We also use insights from analysis of your previous purchases we process jointly with our parent company within the WeSports Group to identify products and areas you are particularly interested in and to provide better tailored offers. Read more about sharing and processing within the WeSports Group above.
Send newsletters and other marketing – Email and SMS marketing
Processing activities
Manage and send marketing with offers, benefits, discounts and information via email and SMS
Send personalized product recommendations and communications so you receive offers and information about products and services of interest
Personal data processed
Name
Contact details (email, address, mobile number)
For personalized communications we also process:
Usage history (e.g., how you click or search on our site)
Age (if you choose to provide it)
Purchase and order history
Geographic location (if you choose to provide it)
Legal basis
Legitimate interests under local law in your country
Develop and improve our newsletters and marketing
Processing activities
Develop and improve newsletters and marketing by analyzing how customers interact with our emails
We do not analyze at an individual level; we do not look at how you personally interact with our newsletters
We collect information via cookies and similar technology. Read more about our use of cookies in our cookie policy.
Personal data processed
Information about how you interact with our newsletters (e.g., opens and clicks for aggregate analysis)
IP address
Email address
Legal basis
Legitimate interests under local law in your country
Retention period
We process your personal data until you unsubscribe or otherwise ask us to stop sending direct marketing. You can opt out at any time.
If you opt out, your personal data is stored in our suppression list until further notice.
Recipients of your personal data
We share your personal data with Klaviyo, which sends our communications on our behalf as our processor, and whose tools we use to analyze aggregate engagement with our communications.
Competitions and sharing content on social media and our website – If you participate in a competition or if we share your posts
If you participate in a competition or consent to us sharing your posts on social media and/or our website, we will process your personal data.
We obtain your personal data from you through your participation and from your social media content.
Administer and carry out competitions
Processing activities
Communicate with you before and after the competition
Appoint winners and deliver results and prizes
Personal data processed
Name
Contact details (address, email address, mobile number)
Information you submitted in your competition entry
Legal basis
Performance of a contract under local law in your country
You must provide the data; otherwise we cannot administer your participation.
Retention period
We process your personal data during the competition and to administer participation or prizes. Thereafter we delete your data after 6 months (or 24 months if you won).
Share your posts on social media and your images on our website
Processing activities
Share posts on social media where you have tagged us or used our hashtags
Personal data processed
Name
Username (e.g., Instagram)
Social media content you tagged us in (e.g., Instagram posts)
Legal basis
Consent under local law in your country
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.
Request to use your content and sharing on our website
Processing activities
Send a request to use your content in our website marketing
Share your content on our website if you consent
Personal data processed
Name
Username (e.g., Instagram)
Social media content (e.g., your Instagram images)
Legal basis
Legitimate interests under local law in your country (to request permission)
Consent under local law in your country (to share your content)
Retention period
We keep the personal data contained in the post on our website or social media account until further notice, removing content when it is no longer relevant or if you ask us to delete the post or your personal data.
Recipients of your personal data
If we share your post in our social channels, the relevant social media platform (e.g., Instagram) will have access to your personal data. These platforms act as independent controllers for their own processing.
If you communicate with us, to protect our legitimate interests, and to fulfil legal obligations
When you contact us, for example via social media or our customer service, we process your personal data as described below. We obtain your personal data from you when you contact us.
We also process personal data where needed to defend against or initiate legal claims. We obtain data from you or third parties connected to your matter or claim.
If you use social media, the platform you use (e.g., Instagram) will also process your personal data. Please read the information below together with the information available from the relevant platform.
Communicate with you and protect our legitimate interests
Processing activities
Communicate with you if you contact us (e.g., through customer service, our AI chat or on our social media pages)
Handle your questions or complaints
Defend against legal claims and initiate legal claims when necessary
Personal data processed
Name
Contact details you use (e.g., email address, phone number and/or address)
Other information you provide during our contact (e.g., order number)
If you contact us through social media (e.g., Instagram), we also process information from your profile (username and the image associated with your account)
Your username if you are a member and provided it
Legal basis
Legitimate interests under local law in your country (to communicate via your chosen channel, provide customer service, handle questions and complaints, and protect our interests)
Legal obligation under local law in your country (e.g., consumer protection)
Improve our customer service
Personal data processed
Name
Phone number
Other information you provide during our contact (e.g., order number)
Legal basis
Legitimate interests under local law in your country (to improve our customer service)
Retention period
We process personal data in customer service communications for twelve months from when our contact regarding the matter has been concluded. On social media we delete comments and communications upon request. You can delete your own comments and communications. Content considered offensive is removed continuously (e.g., abusive comments, vulgar language or personal attacks).
Recipients of your personal data
We share personal data with Zendesk, which helps us manage customer service matters, acting as our processor. If you contact us via social media, the social platform also receives your personal data.
Comply with marketing requirements – Suppression list for direct marketing
Processing activities
If you tell us you do not wish to receive direct marketing, we keep a note in our suppression list to ensure we do not market to you.
Personal data processed
Email address
Legal basis
Legal obligation under local law in your country (to comply with local marketing requirements)
You need to provide this data; otherwise we cannot ensure you will not receive further marketing from us.
Retention period
You will remain on our suppression list until further notice.
Comply with accounting/record‑keeping requirements – Accounting and archiving
Processing activities
Comply with accounting/record‑keeping requirements by recording and archiving your payments and other transactions between us and you
Personal data processed
Payment history, transactions and other materials that constitute accounting/record‑keeping material
Legal basis
Legal obligation under local law in your country
Retention period
Personal data that forms part of our accounting/record‑keeping material is stored for the period required under local law in your country.
How have we carried out our legitimate interest assessment (Article 6(1)(f))?
For certain purposes, we process your personal data based on a legitimate interest assessment in accordance with local law in your country. In this assessment, we have determined that our legitimate interest in performing the processing outweighs your interests and fundamental rights and freedoms. What our legitimate interests are appears in the tables above under "Legal basis". Contact us if you want to know more about how we have made these assessments.
Consent
In certain situations, we process your personal data after you have given consent. These situations are described above, and you can withdraw your consent at any time. If you withdraw all or part of your consent, we will stop processing for that purpose. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.
What rights do you have when we process your personal data?
In accordance with local law in your country, you have certain rights – see more information below.
If you have questions about these rights or want to exercise any of them, please contact us using the contact details above. You can also find more detailed information from your local data protection authority.
Right to lodge a complaint – with your local data protection authority
You have the right to lodge a complaint with the competent supervisory authority if you believe the processing of your personal data infringes applicable law.
Right to withdraw consent
You have the right to withdraw your consent at any time by contacting us.
Right of access ("data subject access request")
You have the right to receive confirmation of whether we process your personal data. If we process your personal data, you also have the right to receive a copy of the personal data we process and information about the processing, e.g., the purposes and retention periods.
Right to object
You have the right to object at any time to direct marketing (including any profiling) and to processing based on legitimate interests under local law in your country.
Right to rectification
You have the right to have inaccurate personal data corrected without undue delay and to have incomplete personal data completed.
Right to erasure ("right to be forgotten")
You have the right, in certain cases, to have your personal data erased without undue delay, for example if you withdraw consent and there is no other legal basis for the processing or if the data is no longer necessary for the purposes for which it was collected or processed.
Right to restriction of processing
You have the right, in certain cases, to restrict our processing of your personal data, e.g., if you contest its accuracy or if the processing is unlawful and you oppose erasure and instead request restriction.
Right to data portability
If we process your personal data based on your consent or to perform a contract, you have the right to obtain the personal data concerning you in a structured, commonly used and machine‑readable format and to transmit that data to another controller where technically feasible.
This privacy policy was established by Tretorn Sweden AB on 18/12 2025.