1. Data Controller

The data controller responsible for your personal data is Waynestrading, the parent organisation of SKC Black Star. For any data protection enquiries, contact our trade team using the details provided on this website.

2. Personal Data We Process

In the course of our B2B trade activities we may process the following categories of personal data:

• Full name, job title and business contact details (business email, phone, WhatsApp).
• Company name, company website and country of operation.
• Commercial requirements you submit via our Request for Quote form (product, volume, destination).
• Communication records arising from business enquiries and trade correspondence.

We do not process special categories of personal data and we do not collect data from children.

3. Legal Basis for Processing

We process your personal data on the following lawful bases under Article 6 of the GDPR:

• Consent – when you voluntarily submit an enquiry or quote request.
• Contractual necessity – to respond to and fulfil commercial enquiries and supply agreements.
• Legitimate interests – to maintain professional B2B trade relationships and communicate commercial information relevant to your business.
• Legal obligation – where required by applicable tax, customs or accounting law.

4. Purposes of Processing

• To evaluate and respond to your commercial enquiry or quote request.
• To administer trade relationships, orders, logistics and documentation.
• To communicate product, origin and trade information relevant to your business.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described above, and in accordance with applicable Swedish tax and accounting retention requirements (generally up to seven years for commercial records). Enquiry data that does not lead to a commercial relationship is deleted within 24 months.

6. International Transfers

As an international B2B exporter, your data may be transferred outside the EU/EEA (for example to Kenya or to buyers in non-EU markets). Such transfers are made only where appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

7. Your Rights Under the GDPR

As a data subject within the EU/EEA, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete personal data.
• Request erasure of your personal data ("right to be forgotten").
• Restrict or object to the processing of your data.
• Data portability.
• Withdraw consent at any time without affecting prior lawful processing.
• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Any updates will be published on this page with a revised effective date.