Last updated: 29 October 2026.
ATG Scandinavia AB (ATG-Steel), company registration number 559174-4833, is responsible for the processing of personal data in the web shop.
Address: Sanddynevägen 40, 311 32 Falkenberg, Sweden.
Contact us about your personal data: sweden@atg-steel.com. You can also write to our postal address and mark the letter “Personuppgifter” (personal data).
We process data you provide when you use the web shop, create an account, place an order or contact us. This may include your name, email address, phone number, delivery and billing address, account details, and orders and messages related to them.
We also process technical data, such as IP addresses and logs, so the web shop works and stays secure. If someone at your company registers you as a user or contact person, we may receive your contact details from that person.
Do not provide sensitive personal data, such as health data, or card details in free-text fields or messages.
Contact and delivery details needed for an order must be provided for us to handle it. If they are missing, we may need to ask for more information or be unable to complete the order.
Authorised people at ATG get access to the data when they need it for their work. We use the following suppliers for the web shop:
The suppliers may use their own subcontractors. Processing on our behalf is governed by data processing agreements. We may also need to disclose data to authorities when required by law.
The web shop’s database and database backups at Supabase are stored in Stockholm. Email handling functions run in Frankfurt. These parts of the operation may be moved between Stockholm and Frankfurt when needed.
Vercel uses international infrastructure, and data may be processed outside the EU/EEA. Resend stores email content and delivery logs in the United States, even when emails are sent from a European region. The suppliers’ support and subcontractors may also involve processing outside the EU/EEA.
Transfers outside the EU/EEA must have a valid legal basis, such as the European Commission’s standard contractual clauses with any necessary supplementary safeguards, or an applicable adequacy decision. For recipients in the United States, the EU–US Data Privacy Framework may be used when the recipient is certified and the processing is covered. Contact us for information about the safeguards for a specific transfer and how to get a copy of them.
Data needed to handle an ongoing complaint or legal claim may need to be kept until the matter is closed and applicable limitation periods have expired. Access is limited to that need.
Accounting records are handled in our separate financial system and kept for the statutory period, normally seven years after the end of the calendar year in which the financial year ended. The web shop is not used as an accounting archive.
You can contact us to request access to your personal data, rectification, erasure or restriction of processing. You can also object to processing based on legitimate interest. We will then assess whether the processing may continue.
In some cases you have the right to receive data you have provided yourself in a machine-readable format and have it transferred to another controller. This right to data portability applies to automated processing based on consent or a contract with you.
These rights apply with the limitations set out in the GDPR. For example, we may need to keep some data to comply with the law or handle legal claims. We normally respond within one month and may need to verify your identity.
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
The web shop uses a session cookie to manage your session. It is stored temporarily and expires when your browser session ends. You can block or delete cookies in your browser, but this may affect how the web shop works.
The map and video on this site are shown through Google Maps and YouTube. They load only when you click them; your IP address, among other things, is then sent to Google.
The current version is always on this page. If we change how your data is used in a way that requires new information, we will provide it before the new processing begins.
