This policy, regarding processing of personal data, details what data we collect, why we collect it, what your legal rights are, how you can exercise your legal rights and how you can get in touch with us.
GDPR – The General Data Protection Regulation and your personal integrity
The purpose of the GDPR is to ensure that all EU countries are unified under one regulation and to give citizens control over how their data is used.
DATA CONTROLLER
Sundlings Sweden AB, 556345-3561, Jungmansgatan 16, SE-531 40 Lidköping, Sweden, popcorn@sundlings.se, referred to below as Sundlings, is the controller of customer data processing. It is Sundlings’ responsibility to ensure that all personal data processing is in compliance with applicable legislation, including GDPR.
PURPOSES
The personal data you provide directly or indirectly to Sundlings will be processed by us to administrate and fulfill our commitment to you as a customer, e.g. to enable delivery and billing of ordered items to a particular address. In addition, it enables you to log in to our webshop as a return customer and keeps us updated of your contact details.
Your personal data may also be included in marketing and customer analyses used to market new products and services.
DATA COLLECTION AND TRANSFER
Personal data is primarily submitted by you directly in conjunction with making a purchase on our webshop. We may also collect data from a third party.
In order for Sundlings to fulfill our commitment to you, we may transfer your data or make your data available to companies we cooperate with, such as our web services supplier and our goods carrier. Where appropriate, we will sign an agent agreement to ensure that your personal data is managed according to applicable law. In some cases, Sundlings is also required by law to share data with the Swedish authorities.
PERSONAL DATA PROCESSING
The personal data you submit and that we process may consist of name, address, personal identity number, mobile and phone numbers and e-mail address.
When you make a purchase from Sundlings, we will also process data on the purchase itself and your purchase history. When using our website, your user account and social media, we will process personal data such as your IP address, operating system and the products you viewed or placed in your cart.
Examples of personal data collected from third parties is personal and contact details, payment information, behavioural data and geographic positioning when visiting our website.
We use cookies on our website to track how you navigate and to customise the website to your use. Cookies cannot access, read or in any other way change data on your computer. Most web browsers are set to accept cookies by default. If you prefer, you have the option of blocking either all cookies or cookies from specific websites.
PROCESSING PERSONAL DATA OUTSIDE EU/EEA
We intend to process your personal data in the EU/EEA but it can, in exceptional cases, be transferred to, or processed in, a country outside the EU/EEA by another supplier or subcontractor. In such cases, we will take all reasonable legal, technical and organisational precautions to ensure that your data is processed securely and at an equitable protection level as is offered in the EU/EEA.
CONSENT
Where necessary or applicable, Sundlings will obtain your consent prior to processing your personal data. You give your consent by actively approving the collection of your personal data in our webshop.
STORAGE
Personal data is only stored for as long as needed to fulfill the purposes for which it was collected. As such, data is deleted, such as when the customer relationship has ended. Data may need to be stored for longer for other purposes such as accounting.
CUSTOMER RIGHTS
Natural persons are entitled to obtain information regarding what personal data Sundlings processes on them, once annually, at no cost. A request for a copy of the personal data is to be made in writing, signed by the data subject and contain the subject’s name and personal identification number. The documentation will be sent to the subject’s registered address. You are also entitled to request the deletion of your personal data when it is no longer needed to fulfill the purpose for which it was collected and where there are not legal obligations that hinder deletion. Contact Sundlings customer service at popcorn@sundlings.se for instructions on how we can help you exercise your rights
AMENDMENTS TO THE DATA PROTECTION AND INTEGRITY POLICY
This policy may be amended at any given time.
Lidköping 11-15-2018
SUNDLINGS Sweden AB
Jungmansgatan 16
SE-531 40 LIDKÖPING, SWEDEN