GDPR & Your Data Rights
Last updated: 25/07/2026As a business operating in the EU, Ammo Online processes personal data in line with the General Data Protection Regulation (GDPR). This page explains your rights as a data subject and exactly how to exercise them. For details on what data we collect and why, see our Privacy Policy.
Your Rights Under GDPR
Right to Access
Request a copy of the personal data we hold about you, including order history and verification records.
Right to Rectification
Ask us to correct inaccurate or incomplete personal data, such as a delivery address or contact detail.
Right to Erasure
Request deletion of your data, subject to legal retention requirements for licensed dealer order/verification records (see below).
Right to Restrict Processing
Ask us to limit how we use your data while a dispute or correction request is being resolved.
Right to Data Portability
Request your data in a structured, commonly used format to transfer elsewhere.
Right to Object
Object to processing based on legitimate interest, including marketing communications, at any time.
Why Some Data Can't Be Immediately Deleted
As a licensed ammunition and shotgun dealer, we're legally required to retain order and license-verification records for 5 years for regulatory purposes. If you submit an erasure request, we will delete what we can and explain what must be retained and for how long.
How to Exercise Your Rights
Email info@ammoonline.eu with your request and the email address associated with your order. We will respond within one month, per GDPR's standard response window — confirm. We may ask for identity verification before actioning sensitive requests, given the nature of the data involved.
Data Protection Officer / Responsible Contact
we have a team dedicated to serve your best interest when it comes to our clients data management system, you will meet an expert when the need arises.
Right to Lodge a Complaint
If you believe your data has been mishandled, you have the right to lodge a complaint with your national data protection authority. For Sweden, this is Integritetsskyddsmyndigheten (IMY); customers in other EU countries can contact their own national authority.