PRIVACY POLICY
Updated: June 9, 2026
1. We Care About Your Privacy
This notice describes how we, Urbanista AB, Reg. No. 556797-3267, Mäster Samuelsgatan 10, 111 44 Stockholm, Sweden (“Urbanista”, “we”, “our” or “us”), process your personal data that you provide to us when using our website (the “Website”) and the Urbanista Audio app (the “App”). We are the data controller for the processing of personal data carried out within our business, including on this Website. Should you have any questions regarding our processing of your personal data, please contact us using the details in section 8.
We care about your privacy, and it is important to us that you feel comfortable with how we process your personal data. Please read this notice carefully before you interact with us.
Please note that our Website or App may contain links to third-party websites. These websites have their own privacy policies, and we have no control or responsibility for their business or policies. Prior to submitting information to or through third-party websites, you should review their privacy policies.
To collect visitor statistics, we use cookies and similar technologies. By enabling cookies in your web browser and our cookie banner, you consent to our use of cookies.
2. Which Categories of Personal Data Do We Collect, Why, With Which Legal Basis, and For How Long?
2.1 Processing Orders Made via Our Website
Purpose
We process your personal data to administer your order, including communicating with you about it (for example, providing support in the event of delivery issues).
Personal data processed
Collected from you:
- First and last name
- Email address
- Telephone number
- Address and delivery address
- Information regarding your order and transaction, including any support correspondence relating to the order
Legal basis
Performance of contract. There is no way of being a customer of Urbanista if you do not accept the handling of the necessary personal data.
Retention period
Until the purchase is fulfilled and fully completed (including delivery and payment) and for a further 36 months to handle potential complaints and/or warranty matters. Personal data will also be retained in accordance with applicable law — for example, for seven (7) years in accordance with the Swedish Bookkeeping Act.
Purpose
We process your personal data to manage payments. We use third-party payment providers to process payments on the Website. Your personal data may be shared with them for this purpose — please see section 3.1.1 for more information.
Personal data processed
Collected from you:
- Payment details, such as debit or credit card information
Legal basis
Performance of contract. If you do not accept the handling of the necessary personal data, the purchase cannot be completed.
Retention period
Until the purchase is fulfilled and fully completed (including delivery and payment), and for seven (7) years in accordance with the Swedish Bookkeeping Act.
Purpose
We process your personal data to handle potential complaints and/or warranty matters.
Personal data processed
Collected from you:
- First and last name
- Email address
- Telephone number
- Address
- Information regarding your order (e.g., product type, time of purchase)
- Information about any complaint raised
Legal basis
Compliance with our legal obligations under applicable consumer protection laws, and our legitimate interest in handling complaints and defending against legal claims.
Retention period
Until the complaint and/or warranty matter has been resolved.
2.2 Customer Support Matters or Other Communication
Purpose
We process your personal data to manage customer support matters.
Personal data processed
Collected from you:
- First and last name
- Email address
- Telephone number
- Address
- Other information that you may provide in your correspondence with us
Legal basis
Our legitimate interest in providing you with customer support.
Retention period
Until the customer support matter has been resolved.
2.3 Use of the Website and Newsletters
Purpose
We process your personal data to provide you with our newsletter.
Personal data processed
Collected from you:
- Name
- Email address
Legal basis
Your consent to receive newsletters. You have the right to withdraw your consent at any time — please see section 6.7 for details.
Retention period
Until you unsubscribe from future communications from us.
Purpose
We process your personal data to provide customer reviews on our Website.
Personal data processed
Collected from you:
- Name
- Email address
Legal basis
Our legitimate interest in seeking feedback to facilitate buying decisions and improve our products.
Retention period
Any posted review will be kept until further notice.
Purpose
We process your personal data to personalise your online and shopping experience and to develop, test, and continuously improve our Website.
Personal data processed
Collected from other sources:
- Visitor statistics, including content and pages visited, referring website, and searches made on our Website
Legal basis
Our legitimate interest in being able to provide and improve our Website, and your consent in relation to our use of non-essential cookies. Please see our Cookie Policy for more information.
Retention period
During your visit to the Website, or for a period not longer than 12 months.
2.4 Direct Marketing and Surveys
Purpose
We process your personal data to send you relevant, tailored offers via email and other electronic communication channels.
Personal data processed
Collected from you:
- Email address
Collected from other sources:
- Order history
- Order value
- Payment method used
- Country from which you accessed our Website
Legal basis
Your consent to receive direct marketing. You have the right to withdraw your consent at any time — please see section 6.7 for details.
Retention period
Until you unsubscribe from future communications from us.
Purpose
We process your personal data to carry out customer surveys and interviews.
Personal data processed
Collected from you:
- Name
- Email address
- Telephone number
- Order history
Collected from other sources:
- Telephone number
Legal basis
Our legitimate interest in gaining further insight into how our customers view us and our products and services.
Retention period
Individual results are retained only for the period it takes us to compile results at an aggregated level and are thereafter deleted. The aggregated information (which no longer constitutes personal data) is retained until further notice.
2.5 Statistics and Business Development
Purpose
We process your personal data for statistical purposes, for example to understand purchasing patterns and inform business development.
Personal data processed
Collected from you:
- Location
- Purchased product categories
- Information regarding the payment method used
Legal basis
Our legitimate interest in continuously improving our business and providing new products and services.
Retention period
Personal data is retained for the period it takes us to compile results at an aggregated level and is thereafter deleted. The aggregated information (which no longer constitutes personal data) is retained until further notice.
2.6 Products and Services
Purpose
We process your personal data relating to the use of your Urbanista product to provide the App and related services — for example, to enable you to view device charging status, monitor solar charging input, and adjust audio settings on your device.
Personal data processed
Collected from you:
- Location at a general level (such as the city in which the product is being used)
- Device ID
- Unique identifier for your Urbanista product
Legal basis
Performance of contract.
Retention period
For as long as is necessary to fulfil our contractual obligations in relation to you.
Purpose
We process your personal data relating to the use of your Urbanista product and the App for statistical purposes — for example, to monitor how our products and services are working and being used, and to improve them.
Personal data processed
Collected from you:
- Data regarding your usage of the App and related services
- Data regarding your usage of the Urbanista product
- Device ID
- Unique identifier for your Urbanista product
Legal basis
Our legitimate interest in continuously evaluating and improving our business, products, and services, and in providing new products and services.
Retention period
Personal data is retained for the period it takes us to compile results at an aggregated level and is thereafter deleted. The aggregated information (which no longer constitutes personal data) is retained until further notice.
2.7 Legitimate Interest Assessment
For certain purposes, we process your personal data on the basis of our legitimate interests. When determining that we have a legitimate interest, we rely on a balancing of interests test by which we have assessed that our legitimate interests in the processing override your interests and your fundamental right not to have your personal data processed for that purpose. Please contact us if you would like to know more about how this assessment has been conducted. Our contact details are in section 8.
3. Who Has Access to Your Personal Data?
Urbanista only shares personal data as described below. When we share your personal data, we ensure that the recipient processes it in accordance with this Privacy Policy by entering into data transfer agreements or data processing agreements. These agreements ensure that your personal data is processed with an adequate level of protection and in accordance with the GDPR.
3.1 Categories of Recipients
3.1.1 Third-Party Payment Providers
Categories of data subjects: Customers.
Personal data shared: Name, address, order information, debit or credit card information, and device used for purchase.
Recipient: Third-party payment providers, to complete and administer payments. Please note that payment providers are data controllers for their own processing of your personal data.
Purpose and legal basis: To administer the order and for the performance of the agreement between you and us.
3.1.2 Delivery and Storage Partners and Other Third-Party Service Providers
Categories of data subjects: Customers.
Personal data shared: Name, address, delivery address, telephone number, order information, order history, and IP address.
Recipient: Third-party service providers that process your personal data on our behalf in connection with delivery, storage, and marketing services. They are contractually obligated to process your personal data only in accordance with our strict instructions and may not use your data for their own purposes. They are also required to implement appropriate technical and organisational security measures.
Purpose and legal basis: To handle orders and fulfil our contractual obligations in relation to you.
3.1.3 Customer Support Platform
Categories of data subjects: Customers.
Personal data shared: Name, email address, and the content of your support correspondence with us.
Recipient: We use Commslayer (Chatbox DMCC) to manage customer support communications. Commslayer processes your personal data on our behalf as a data processor and is contractually obligated to process it only in accordance with our instructions. Our customer support chat is handled in part by an AI assistant named Anton, powered by Claude (Anthropic). Anton processes your messages to provide automated responses. Where a query requires human review, it is escalated to a member of the Urbanista support team. You are informed at the start of each conversation that you are interacting with an AI system.
Purpose and legal basis: Our legitimate interest in being able to provide you with customer support.
3.1.4 Third Party in a Corporate Transaction
Categories of data subjects: Customers, website visitors, App users, and others who are in contact with us.
Personal data shared: Dependent on what is requested by our advisors, potential buyers, and their advisors.
Recipient: If we, or a significant part of our business, were to be sold to or integrated with a third party, your personal data may be shared with relevant parties and subsequently passed to the new owner.
Purpose and legal basis: Our legitimate interest in carrying out such a merger or transfer of assets.
3.1.5 Authorities
Categories of data subjects: Customers, website visitors, App users, and others who are in contact with us.
Personal data shared: Dependent on what is requested by the specific authority in each case.
Recipient: We may share personal data with authorities such as the police, the Swedish Tax Agency, or other competent authorities.
Purpose and legal basis: To comply with applicable law and regulations, lawful regulatory requests, or orders from competent courts and public authorities, and to establish, exercise, or defend legal claims.
3.1.6 Third-Party Processors — Digital Marketing
Our carefully selected partners and service providers may process your personal data on our behalf for digital marketing purposes. We periodically appoint digital marketing agents to conduct marketing activity on our behalf as data processors.
4. Transfer of Personal Data Outside the EU/EEA
We use third-party delivery and storage partners based in China, Japan, and the US. As such, your personal data may be transferred outside the EU/EEA in connection with a purchase, to countries that may not have the same level of data protection as within the EU/EEA. We ensure that appropriate safeguards are in place for all such transfers, including data transfer agreements incorporating the Standard Contractual Clauses adopted by the EU Commission.
5. What Are Your Rights?
Applicable data protection law grants you certain rights regarding the personal data we process about you. These rights are described below. For the protection of your privacy, we may require that you identify yourself when exercising your rights. If you have any questions, please contact us using the details in section 8.
5.1 Right to Information and Access
You may contact us to request information about the personal data we process about you. We can also provide you with a copy of the personal data we process, including information about the categories of personal data, the purposes for which they are used, how long they are stored, with whom they have been shared, and from where they were collected.
5.2 Right to Rectification
If you identify that we process incorrect or incomplete personal data about you, you have the right to request that it be corrected or updated. Please contact us using the details in section 8.
5.3 Right to Erasure (Right to be Forgotten)
You have the right to request that your personal data be erased or that processing be restricted, subject to applicable exemptions — for example, where we need to retain data to defend against legal claims.
5.4 Right to Object
You have the right to object to our processing where the legal basis is our legitimate interest. If you object, we may no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, or unless the data is needed for the establishment, exercise, or defence of legal claims. You may also object to your personal data being used for direct marketing purposes at any time.
5.5 Right to Restriction of Processing
You can request that the processing of your personal data be restricted — for example, if you believe the data is incorrect, if the processing is unlawful, or while we assess an objection you have raised.
5.6 Right to Data Portability
You have the right to request that personal data you have provided to us (where our legal basis is consent or performance of contract) be provided to you in a structured, commonly used, machine-readable format. Where technically possible, we can also transfer your personal data directly to another controller upon request.
5.7 Right to Withdraw Consent
You may at any time withdraw all or part of any consent you have given us, with effect from the time of withdrawal. The easiest way to stop receiving direct marketing communications is to click the unsubscribe link in any email from us, or to contact us using the details in section 8.
5.8 Right to Complain to a Supervisory Authority
You may file a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, “IMY”) or another competent supervisory authority if you believe our processing of your personal data does not comply with applicable law.
6. How Will We Notify You of Changes to This Notice?
We may update this Privacy Policy from time to time. If we make any material changes, we will notify you in the Privacy Policy section of our Website. We recommend that you review this Privacy Policy periodically when visiting our Website or using the App.
7. Questions?
If you have any questions or concerns about our processing of personal data, please contact us at:
Urbanista AB (556797-3267)
Mäster Samuelsgatan 10
111 44 Stockholm, Sweden
support@urbanista.com

