GDPR
FROM WHERE DO WE COLLECT PERSONAL DATA?
We collect the personal data that you provide to us, e.g. in connection with becoming a member or making a purchase.
WHAT PERSONAL DATA DO WE PROCESS AND WHY
We process your personal data for the purpose of managing your purchase on the website, e.g. to store items in the shopping cart, administer payment and deliver ordered items.
DATA
- Identity data, e.g. name and social security number.
- Contact details, e.g. address and email address.
- Order details, e.g. items and amounts.
LEGAL BASIS FOR THE PROCESSING
The processing is necessary to fulfill the contract with you
RETENTION TIME
Your personal data is kept until the purchase has been completed, including delivery and payment, and for a period of 36 months thereafter to handle any complaints and warranty matters or the longer time thereafter that is necessary to handle the matter.
Answer requests
We process your personal data for the purpose of answering requests from you, e.g. when you contact customer service.
DATA
- Identity data, e.g. name and social security number.
- Contact details, e.g. address and email address.
- Order details, e.g. order number, items and amounts.
LEGAL BASIS FOR THE PROCESSING
The processing is necessary to satisfy our and your legitimate interest in responding to inquiries from you.
RETENTION TIME
Your personal data is retained during the customer relationship or membership for this purpose, however, for a maximum of 36 months from the last request to satisfy our legitimate interest in offering you good customer service.
Fulfill legal obligations
We process your personal data in order to fulfill legal obligations that Love Thy Next has, e.g. to meet accounting and bookkeeping requirements.
DATA
- Identity data, e.g. name and social security number.
- Contact details, e.g. address and email address.
- Receipt details, e.g. information on completed purchases.
LEGAL BASIS FOR THE PROCESSING
The processing is necessary for us to be able to fulfill legal obligations that we have.
RETENTION TIME
Your personal data is kept for the time necessary for us to be able to fulfill legal obligations that we have. Accounting material is saved according to the Accounting Act for a period of seven (7) years counted after the end of the calendar year in which the current accounting year ended.
Manage customer or membership
We process your personal data for the purpose of managing the customer relationship and, if you are a member, the membership, e.g. to communicate with you, handle complaints, ensure that your information is correct and up-to-date and to handle any dispute.
DATA
- Identity data, e.g. name and social security number.
- Contact details, e.g. address and email address.
- Member information, e.g. membership number.
LEGAL BASIS FOR THE PROCESSING
The processing is necessary to satisfy our legitimate interest in administering the customer relationship and membership, e.g. to handle a complaint.
RETENTION TIME
Your personal data is kept during the customer relationship or membership for this purpose. For members, however, personal data is kept for a period of a maximum of 36 months counted from the last purchase.
Defend, establish and exercise legal claims
We process your personal data for the purpose of defending, establishing and exercising legal claims, e.g. to deal with a claim or legal process.
DATA
- Identity data, e.g. name and social security number.
- Member information, e.g. membership number.
- Contact details, e.g. email address.
- Receipt details, e.g. information on completed purchases.
LEGAL BASIS FOR THE PROCESSING
The processing is necessary to satisfy our legitimate interest in defending, establishing and exercising legal claims.
RETENTION TIME
Your personal data is kept for a period of 36 months after the last completed purchase, or the longer period thereafter that is necessary to handle the claim. For other claims, your personal data is kept for the same purpose during the customer relationship and for a period of ten years thereafter or the longer time necessary to handle the claim.
RECIPIENTS WITH WHICH WE SHARE INFORMATION
Where applicable, we share information, including personal data, with certain recipients. We never sell your data to anyone else.
Service providers
In order to fulfill the purposes of our processing of your personal data, we share your personal data with companies that provide services to Love Thy Next, e.g. to manage the dispatch and delivery of your goods. These companies may only process your personal data according to our express instructions and may not use your data for their own purposes. They are also obliged by law and contract to protect your personal data.
Payment service providers
To administer payments via the website, we use a payment service provider. In our case, PayPal. PayPal is the personal data controller for its own processing of your personal data.
You can find PayPal’s full payment terms here. – https://www.paypal.com/us/legalhub/home
Other recipients
Where applicable, we may transfer your personal data to other recipients, e.g. authorities and selected companies, other than those indicated above if necessary for certain purposes.
Ex:
Agencies
We may provide necessary information to authorities if we are required by law to do so. The processing is necessary to fulfill legal obligations.
Court, counterparty, etc
In connection with a legal dispute, we may transfer information to other parties. The processing is necessary to satisfy our legitimate interest in establishing, asserting and defending legal claims.
Potential buyers and sellers
We may share information with potential buyers and sellers if we were to sell all or part of the business or in the event of a merger. The processing is necessary to satisfy our legitimate interest in carrying out the divestment or merger.
YOUR RIGHTS
Data protection legislation gives you a number of rights in relation to the processing of your personal data. We process your personal data to the extent necessary to fulfill your rights.
Access to your personal data
You have the right to request confirmation from us if we process personal data concerning you, and in such case request access to the personal data that we process about you, a so-called register extract.
Request correction
If you believe that information about you is incorrect or incomplete, you have the right to request correction of the information.
Withdraw consent with future effect
To the extent that we process your personal data based on your consent, you have the right, at any time, to withdraw your consent to the processing with future effect. This means that if you withdraw your consent, we have the right to continue processing already collected personal data based on your previously given consent.
As of May 25, 2018, you also have the following rights if it follows from current data protection legislation.
Oppose certain treatment
You have the right to object to processing based on our legitimate interest if you have personal reasons relating to the situation. However, we may continue to process your data, even though you have objected to the processing, if we have compelling legitimate reasons for the processing that outweigh the privacy interest.
Deletion
Under certain circumstances, you have the right to have your personal data deleted. However, this does not apply if, for example, we are obliged by law to preserve the data.
Limitation of treatment
You also have the right to request that the processing of your personal data be restricted. However, this may mean that we cannot fulfill our possible obligations towards you during the time the processing is restricted.
Data portability
Finally, you have the right to receive a copy of the personal data concerning you in a structured format (data portability). The right to data portability, unlike the right to register extracts, thus only covers data that you yourself have provided to us and that we process with the support of certain legal grounds, e.g. an agreement with you.
Contact
WHO DO I CONTACT WITH QUESTIONS?
If you have any questions about the processing of your personal data, please contact us. You can also contact our Data Protection Officer. If you are not satisfied with the answer you have received, you have the right to lodge a complaint with the Swedish Data Protection Authority.
Contact the data protection officer at: gdpr@lovethynext.com