Zásada ochrany osobných údajov

1. General information

This Privacy Policy describes how Elodie Details AB ("Elodie" or "we"), co. reg. no. SE556745729501, collects, uses, discloses and stores personal data.

1.1 This Privacy Policy applies to Elodie's provision of goods and services in connection with purchase, as well as to other interactions with Elodie, e.g. via web pages.

1.2 You should always feel safe when you provide us with your personal data. This Privacy Policy explains how we ensure that your personal data are processed securely in compliance with relevant personal data legislation.

1.3 Note that this Privacy Policy does not apply to personal data that you supply to any of our partners (for instance by clicking on a link to one of our partners in connection to an offer). We take no responsibility for the personal data processing carried out by our partners.

2. Data controller

Elodie Details AB, co. reg. no. SE556745729501, is the data controller for your personal data, and is responsible for ensuring that your data is processed in compliance with relevant legislation. To exercise your right, or if you have any questions regarding our processing of your personal data, please contact us at privacy@elodiedetails.se or Elodie Details AB, attn.: Data Protection, Jakobsbergsgatan 16, SE-111 44 Stockholm, Sweden.

3. When do we process your personal data?

3.1 In order for you to visit our website, buy our products or services or request information from us, we need to collect and process your personal data.

3.2 We collect and process your personal data when you buy something from our website or in our store, if you are a customer club member, use Elodies support, visit Elodies website or have other interactions with Elodie. The personal data we collect about you is necessary in order for you to enter into a contract with Elodie, and for Elodie to provide its services and offers.

3.3 To ensure that your address details are correct, we update them automatically via third party data update services. For this purpose, we use your personal identity number to ensure we have your latest address (valid reason).

4. Which of your personal data do we process?

4.1 For Elodies customers

We collect and process the following personal data about Elodies customers:

  • Name
  • Identification number (personal identity number and/or customer number)
  • Address
  • Phone number
  • E-mail
  • Payment details, information on chosen payment method and payment history
  • IP address and information about your use of Elodies website
  • Location information from your mobile devices (e.g. phone or tablet)
  • Information on your purchases
  • Your preferences regarding products and services
  • Correspondence relating to specific actions (e.g. personal data that you provide when contacting our customer services)

4.2 Personal data that we collect from other sources

Besides the personal data that you provide to us, or that we collect on the basis of your purchases or use of our services, we may also collect personal data from other sources. The table below shows which personal data we collect from you and the sources we collect them from.

Source Type of personal data

Public address registers or public record providers

Your phone number and your address from the national population register

Credit rating agencies, banks or data providers

Creditworthiness

Social media

Pictures or comments you have published

5. Why do we process your personal data?

5.1 For Elodies customers

Elodie processes your personal data for various purposes. In this section we explain why we use your personal data and give examples of ways in which we process your data for specific purposes, our legal basis for processing your data, and how long we store your data. The main purposes for which we process your personal data are:

Purposes of processing your data: Examples of how we process your data for the purpose: Our legal basis for processing your data:

Compliance with applicable legislation, for instance accounting laws, or for product liability and product safety.

We may be obliged to process your personal data in order to comply with laws, regulations, court decisions or government decrees. These obligations may regard product liability or product safety. In such instances we may need to issue public communications and information or send you specific information regarding product defects and recalls. We may also need to process your personal data in order to comply with the Swedish Accounting Act or the Money Laundering Act.

Compliance with legal obligations.

Storage time: Your personal data will be stored for the time prescribed under applicable legislation. For instance, personal data relating to your purchases are stored for seven years in accordance with the Accounting Act.

Purposes of processing your data: Examples of how we process your data for the purpose: Our legal basis for processing your data:

To meet our commitments towards you as our customer, for instance regarding purchase transactions and warranties.

 

  • We deliver your product and service and communicate with you regarding your delivery.
  • We verify your identity and age.
  • We process your payment (this includes analysing what payment methods we can offer you by checking your payment history or requesting credit reports from credit information companies).
  • We check your address against external sources, e.g. Klarna.
  • We administer complaints and warranty claims concerning your purchase and communicate with you regarding them.

This administration is required in order for us to meet our commitments under our terms & conditions with you.

Storage time: Until the purchase transaction is completed (including delivery and payment) and for 3 years thereafter for the purpose of processing any complaints or warranty claims.

Purposes of processing your data: Examples of how we process your data for the purpose: Our legal basis for processing your data:

To manage the customer relationship and provide customer services.

 

  • We communicate with you and answer your questions via forms or email, or digital channels.
  • We amend any incorrect data we hold about you.
  • We verify your identity (if necessary).
  • We investigate your complaints and support issues. A support issue might be, for instance, a request for technical support.

 

This processing is necessary for us to meet our own and your legitimate interests with respect to general customer care and customer service.

Storage time: Up to 1 year after the customer service issue has been closed.

Purposes of processing your data: Examples of how we process your data for the purpose: Our legal basis for processing your data:

Marketing of our products and services.

 

  • We provide you with direct marketing such as relevant information and tailored offers in newsletters, web pages and via post, e-mail, SMS/MMS and phone.
  • We show you relevant product recommendations, send you articles relevant to your interests, suggest shopping lists and provide other similar information.
  • We make it easier for you to use our services, for instance by saving your shopping lists/wish lists, remembering your preferred payment method to facilitate future purchases or reminding you about products left in your shopping basket.
  • We conduct tailored campaigns and send you offers based on your purchase history.
  • We conduct general campaigns or send you general offers and invitations to events.

 

Our legitimate interest in marketing our business and our products and services.

Storage time: Up to 2 years after your most recent activity (e.g. the last time you made a purchase, opened and clicked on a link in one of our newsletters or logged in to your user account).

Purposes of processing your data: Examples of how we process your data for the purpose: Our legal basis for processing your data:

To improve our offering to customers, e.g. by developing our services, products and functions.

 

  • We make our services more user-friendly.
  • We produce documentation to help improve our business through the evaluation, rationalisation and planning of new stores and warehouses, purchasing, storage, deliveries and product range development.
  • We offer you and other customers opportunities to help optimise our range, e.g. by conducting customer and market surveys.
  • We produce documentation to help improve our IT systems and increase security for the company and for visitors/customers in general.

 

This processing is necessary for us to meet our own and our customers legitimate interests with respect to improving our offering to customers, e.g. by developing our services, products and functions

Storage time: It is difficult for us to predict how long we will need to store your personal data for this purpose. Instead, we have introduced processes for regularly checking whether your personal data are still needed for this purpose. If we have not used your personal data for 12 months, we delete your data as we no longer consider it necessary to store them. Needless to say, we take measures to protect your privacy. When we carry out analyses based on your personal data, the employee doing the analysis will not know that the data belongs to you, although we could link it to you based on data that we hold in a different system.

Purposes of processing your data: Examples of how we process your data for the purpose: Our legal basis for processing your data:

To prevent fraud or data misuse, or to investigate, prevent or expose criminal activity.

 

  • We investigate and prevent fraud and other criminal acts.
  • We take measures to prevent spamming, phishing, harassment, unauthorised access to user accounts and other acts that violate our user terms- and conditions.
  • We take measures to improve and protect our IT environment against attacks and data breaches.

 

Our legitimate interest in preventing misuse of services or preventing and investigating violations against the company.

Storage time: Up to 1 year after the time of data collection. If we suspect illegal activity or misuse of a service, we will store your data for the time necessary in order to establish, exercise or defend our (or a third party's) legal rights.

6. How long do we store your personal data?

We store your data for as long as is needed in order to fulfil the purposes for which they were collected and to meet our contractual obligations. After that, your personal data is erased.

7. Who do we supply personal data to?

7.1 If necessary, Elodie may supply your personal data to third parties, such as Elodies group companies or data processors (parties that process the data for us and in accordance with valid regulations). Elodie may also supply your personal data to third party data update services to ensure that the address details we have for you are correct.

7.2 Elodie may also provide your personal data to third parties if this is necessary in order to comply with valid legal requirements or requirements from authorities, to safeguard Elodies legal interests or to investigate, prevent or expose fraud or other security problems or technical problems.

7.3 We will not disclose your personal data to any third parties other than those mentioned above without your consent.

7.4 If all or parts of our business are sold or integrated with another business, we may disclose your data to our advisors and any buyers and the buyers' advisors.

8. Third country transfers

Sometimes we may need to transfer your personal data to the USA. This may be necessary when we supply your personal data to third parties according to Clause 7. We only supply your data to countries outside the EU/EEA if there are sufficient guarantees in place to ensure that your data will be processed correctly.

To protect personal data that we transfer, we first verify that the recipient is certified to comply with the Privacy Shield Principles. Please contact us to request a copy of the security measures we take.

9. Amendment of the Privacy Policy

Elodie has a right to amend the Privacy Policy at any given time. Any amendments are communicated via our website and in our store. If we make extensive changes, we will inform you before the changes take effect. If you do not approve the changes, you will have the right to terminate your contract with Elodie.

10. Protection of your personal data

You should always feel safe when you provide us with your personal data. For this reason, Elodie has taken technical and organisational security measures to protect your personal data from unauthorised access, changes and erasure. For instance, information we hold about customers is stored on a server in a secure environment and in a database that is protected with access management and a firewall.
With regard to card payments, we work with an authorised payment service provider who helps us check directly with your bank that the card is authorised for the payment. All information is sent encrypted via a secure connection, and Elodie does not save your card details. Our payment service provider processes your card details according to the PCI DSS international security standards. This ensures a very high level of safety.

11. Your rights

11.1 Elodie is responsible for ensuring that your personal data are processed in accordance with valid legislation.

11.2 Elodie will, at your request or at Elodies own initiative, correct, de-identify, erase or amend data that is discovered to be incorrect or incomplete.

11.3 Among other things, you have the right to request:

a. Access to your personal data. This means that you have the right, at any time, to request a copy of the personal data that we hold about you (free of charge once per calendar year).
b. Correction of your personal data. At your request, we will correct, without undue delay, any incorrect or incomplete data we hold about you.
c. Erasure of your personal data. You can request to have your personal data erased under certain circumstances, for instance if they are no longer needed for the purpose they were collected for. However, we may have a legal obligation to store your data for a certain period of time, for instance to ensure compliance with accounting and tax laws. In that case, we will stop processing your data for any purposes other than to comply with legislation.
d. Restriction of processing. This means that your personal data will be marked so that it can only be processed for certain clearly defined purposes.

11.4 You have the right to data portability. This means that under certain circumstances, you have a right to receive and transfer your personal data to another data controller in a commonly used and machine readable format.

11.5 You always have a right to prevent us from using your personal data for direct marketing purposes by contacting us and communicating your objection. After receiving your objection, we will stop processing your personal data for direct marketing.

11.6 You have the right to lodge any complaints you may have regarding the processing of your personal data to the Swedish Data Protection Authority.

12. Cookies

A cookie is a small text file containing data, which is stored on the device you use to visit a website. Cookies are used to make it easier for you to use the website. Cookies contain no personal information; the data they contain only consists of letters and numbers. Although each cookie contains a unique identification number, we cannot find out any personal information about you, such as your name or IP address, from the cookies we collect. Cookies only contain pseudonymised data, which we never link with any personal information about you.

There are different types of cookies:

  • Session cookies are temporarily stored in your device while you visit our website and are erased when you close your browser.
  • Persistent cookies that remain on your computer/device until you remove them.
  • First-party cookies that are placed on your device by us when you visit our website.
  • Third-party cookies that are placed on your device by other parties (third-party cookies are responsible when you are shown advertisements for products that you have previously viewed or searched for).

Cookies can also be used to analyse your browsing and search behaviour when visiting www.elodiedetails.com. In combination, the different cookies reveal your general search and browsing patterns. The analysis can be used as a basis for our marketing during visits on our website and other websites. The stored cookies allow us to provide you with tailored, relevant information as well as a customised shopping experience. We use a commercial third party provider to customise the content of our communications to make them more relevant and attractive to you.

Cookies can also be used to optimise your experience on our website. For more information about cookies, we recommend you visit the website of the Swedish Post and Telecom Authority, pts.se.

You can always change your cookie preferences in your device settings or browser settings. Go to your device settings or browser settings for more information on how to adjust your cookie preferences. You can configure your settings to disable all cookies; to only accept first party cookies; or to delete cookies every time you close your web browser. Bear in mind that changing your settings may stop our online shop and other services from functioning correctly.

13. Contact details

Do not hesitate to contact us if you have any questions about this Privacy Policy, our processing of your personal data or how to exercise any of your rights. You can find our contact details below:

Elodie Details AB
Jakobsbergsgatan 16
SE-111 44 Stockholm
Sweden

E-mail: support@elodiedetails.com

Last updated 2024-04-15