PRIVACY POLICY

We at Efva Attling Stockholm care about you as a customer, which for instance means that we handle your personal data in a manner that takes your privacy into account. This privacy policy describes what personal data we collect from you and how we use your personal data. The privacy policy also describes your rights and how you can exercise them.

If you have any questions regarding the protection of privacy and processing of personal data, you can send an e-mail to customerservice@efvaattling.com or call customer service at +46 (0)60 17 27 49

WHAT IS PERSONAL DATA AND WHAT IS PROCESSING OF PERSONAL DATA?

Personal data means any information that can directly or indirectly identify a living person. Examples of personal data are name, personal identification number, address, e-mail address, telephone number, picture, purchasing history, etc. Processing of personal data means any operation performed on personal data such as collection, adaptation, alteration, storage, consultation, making available, restriction, erasure or destruction.

HOW DO WE USE YOUR PERSONAL DATA?

We use your personal data to conduct our business and deliver the products and services we provide. We also use the information to create a better experience when visiting the website, as well as informing you about products. In addition, we use personal data for marketing activities and to display more relevant ads about our products.

Efva Attling Stockholm processes personal data for the purpose of providing relevant content on the website www.efvaattling.com, for example, to ensure that content on the website is presented effectively on your device according to your wishes. The processing is necessary to pursue our and your legitimate interest in providing information and services on the website. The personal data being processed is information about how you interact with us, such as how to use our services, page response time, download errors, how you reached and left the service, device information, e.g. IP address, browser settings, operating system, platform and screen resolution, national settings, and language settings. The personal data will be retained from the time of collection and 36 months thereafter.

Efva Attling Stockholm processes personal data for the purpose of selling products in the web shop, such as to manage orders and deliveries as well as handle complaints and warranty matters. The processing is necessary in order for us to fulfill our obligations under the purchase agreement. If the information is not provided, our commitments cannot be fulfilled and we are therefore forced to refuse your purchase. The personal data being processed are identity data, such as name and social security number, contact details, e.g. postal address, telephone number, and e-mail address, as well as purchase information, such as ordered products and order sum. The personal data will be retained until the purchase has been completed, including delivery and payment, and for a period of 36 months thereafter to handle any complaints and warranty matters.

Efva Attling Stockholm processes personal data for the purpose of selling products in our stores, such as to manage purchases, orders, and payments. The processing is necessary for the performance of the contract with you. If the information is not provided, our commitments cannot be fulfilled and we are therefore forced to refuse your purchase. The personal data being processed are identity data, such as name, contact details, e.g. phone number, payment information, e.g. credit card number, validity date, and CVV-code, as well as purchase information, such as ordered products and order sum. The personal data will be retained until the purchase has been completed, including delivery and payment, and for a period of 36 months thereafter to handle any complaints and warranty matters.

Efva Attling Stockholm processes personal data for the purpose of preventing and investigating crimes against the company, such as to prevent and investigate threats, thefts, and burglaries in our own stores. The processing is necessary to pursue our legitimate interest in preventing and investigating crimes against the company. The personal data being processed are video recordings from camera surveillance. The personal data will be retained from the collection and a period of 2 months thereafter.

Efva Attling Stockholm processes personal data for the purpose of improving products, such as to handle guarantees, complaints, and for quality and product improvement. The processing is necessary to pursue our and your legitimate interest in providing error-free products. The personal data being processed are identity data, such as name, purchase information, e.g. details of the purchase date, item number and the case itself. The personal data will be retained during the case management period and for a period of 6 months thereafter in order to respond to any follow-up questions from the customer about how the case was handled.

Efva Attling Stockholm processes personal data for the purpose of handling customer service issues, such as to communicate with you and answer requests that are received by customer service or other digital channels (including social media) and investigate complaints and support cases. The processing is necessary to pursue our and your legitimate interest in handling customer service issues. The personal data being processed are identity data, such as name and social security number, contact details, e.g. address, e-mail address and telephone number, correspondence with you and purchase information, such as an indication of the date of purchase, article number and complaint or the case itself. The personal data will be retained during the case management period and for a period of 6 months thereafter in order to respond to any follow-up questions from the customer about how the case was handled.

Efva Attling Stockholm processes personal data for the purpose of fulfilling legal obligations such as complying with applicable legislation, such as accounting law and the GDPR. The personal data being processed are identity data, such as name, contact details, e.g. address, purchase information, e.g. purchase date, item number and order sum. Personal data are retained for 7 years according to the Swedish Accounting Act.

Efva Attling Stockholm processes personal data for the purpose of marketing our products e.g. to communicate relevant information about our products and services to you, as well as for marketing or promotions related to our products, or products and services provided or marketed by our partners. The processing is necessary to pursue our legitimate interest in marketing our products and offers. The personal data being processed are e.g. name, e-mail address, address, and telephone number. The personal data will be retained during the customer relationship or until you announce that you no longer wish to receive such communications.

HOW DO WE COLLECT AND PROCESS YOUR PERSONAL DATA?

We receive some personal data directly from you, for example, when you subscribe to a newsletter, sign up for an event, purchase a product, or contact us for customer service. We collect some personal data by registering how you interact with our website, for example using technology such as cookies.

Sometimes we also collect personal data from third parties. Examples of third-party sources, which may vary over time, are payment transaction providers, service providers who provide data to allow us to customize our internet marketing, as well as partners we collaborate with to arrange events.

RECIPIENTS OF PERSONAL DATA AND REASONS WHY WE SHARE YOUR PERSONAL DATA

We never sell your personal data to other companies. We transfer, or share, your personal data with select recipients if necessary for the purpose for which the data has been collected, for example, to provide a product or service that you have requested.

Personal Data Processors are companies that process personal data on our behalf and on documented instructions from us. These companies must comply with our security requirements in terms of technical and organizational measures associated with processing and are not permitted to use personal data for other purposes. We also transfer your personal data with companies or authorities that are independent controllers, i.e., determine the purpose and means of processing your personal data. When your personal information is shared with a company or authority that is an independent controller, their privacy policy applies.

Efva Attling Stockholm shares your personal data with suppliers or subcontractors when necessary for the fulfillment of a contract with you and for other purposes as set forth in this privacy policy. We share your personal information with companies that help us with marketing and IT services. When providing personal data for a purchase, we share these with banks and other payment transaction and financial service providers. We also hire companies to provide delivery of products that need access to personal data in order to provide these services. We may also provide personal data to authorities if we are required to do so by law.

HOW DO YOU ACCESS AND VERIFY YOUR PERSONAL DATA?

You can get access to your personal data collected by Efva Attling Stockholm by contacting us by phone or the address provided in the section Contact Us below. We answer questions regarding access to your personal data or erasure of data within 30 days.

FOR HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We keep your personal data in a form which permits identification of you for no longer than is necessary for the purposes for which the personal data are processed. We process and keep your personal data for as long as necessary to fulfill our contractual agreements with you. We also keep your personal data for other purposes, such as accounting and fraud prevention. For these purposes, your personal data is only kept for as long as necessary for the purpose or as long as necessary to comply with applicable laws.

WHICH RIGHTS DO YOU HAVE?

Right of access: You have the right to obtain information on which personal data Efva Attling Stockholm is processing, including the purposes of the processing, the recipients or categories of recipient to whom the personal data have been or will be disclosed, as well as a copy of the personal data undergoing processing.

Right to rectification: You have the right to obtain rectification of inaccurate personal data. You also have the right to have incomplete personal data concerning yourself completed.

Right to erasure ("right to be forgotten"): You have the right to obtain the erasure of your personal data without undue delay when:

• The personal data is no longer necessary in relation to the purpose for which it was originally collected or processed
• The processing is solely based on your consent and you withdraw your consent
• You object to the processing and there is no overriding legitimate interest for continuing the processing
• If the personal data was unlawfully processed
• The personal data has to be erased in order to comply with a legal obligation

Efva Attling Stockholm can nevertheless refuse to comply with the request for erasure where the personal data is processed for the following reasons:

• To exercise the right of freedom of expression and information
• To comply with a legal obligation
• The exercise or defence of legal claims.

In these cases, we ensure that the personal data we process or are legally obliged to store are no longer used for other purposes.

Right to restriction of processing: You have the right to obtain blocking or restriction of processing of your personal data in the following circumstances:

• You contest the accuracy of the personal data, for a period until we have verified the accuracy of the personal data
• You have objected to the processing where it was necessary for Efva Attling Stockholm's legitimate interests and we consider whether our legitimate interest override your legitimate interests to stop the processing
• When processing is unlawful and you oppose erasure and requests restriction instead
• If we no longer need the personal data but you require the personal data to be retained to allow you to establish, exercise or defend a legal claim

When processing is restricted in accordance with one of the alternatives above, with the exception of storage, the personal data shall only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person.

Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. This only applies where the processing is based on your consent or for the performance of a contract.

Right to lodge a complaint with a supervisory authority: You have the right to obtain information on how to exercise your rights or lodge a complaint regarding the processing of your personal data, by contacting the supervisory authority in your home country.

HOW WE USE COOKIES AND SIMILAR TECHNOLOGIES

Efva Attling Stockholm uses cookies and similar technologies to operate our website and to facilitate certain data collection. Cookies are small text files that are transferred to your device. The website uses two different types of cookies: session cookies that are only stored temporarily and disappear when you close your browser and persistent cookies saved for future visits. We use cookies to analyze the performance of the website, customize it according to your preferences and to analyze your use of the services. We also use cookies to target relevant marketing to you. The website's functionality is to some extent dependent on session cookies, for example, to facilitate navigation on the site and in the online store. For more information on how to use cookies and similar technologies, see our cookie policy.

You can change the settings in your browser or device to manage the usage and scope of cookies. Use the help feature in your browser or device to learn more about changing these settings. For example, you can choose to block all cookies, accept only first-party cookies, or delete cookies when you close your browser. Please note that some features on our website will not work properly if you block or delete cookies.

CONTACT US

Efva Attling Stockholm AB, registered at Swedish Companies Registration Office with registration number 556583-2614 and address Box 38097, 100 64 Stockholm, is the controller for your personal data. We comply with Swedish data protection legislation.

Comments or questions regarding this Privacy policy or questions regarding Efva Attling Stockholm's processing of your personal data can be sent to

Efva Attling Stockholm AB
Att: Kundtjänst
Box 38097 SE-100 64 Stockholm

customerservice@efvaattling.com
Telephone: +46 (0)60 17 27 49

This privacy policy was updated on 26.04.2018