What is personal data and what is processing of personal data?
Personal data means any information that can directly or indirectly identify a living person. Examples of personal data are name, personal identification number, address, e-mail address, telephone number, picture, purchasing history etc. Processing of personal data means any operation performed on personal data such as collection, adaptation, alteration, storage, consultation, making available, restriction, erasure or destruction.
How do we use your personal data?
We use your personal data to conduct our business and deliver the products and services we provide. We also use the information to create a better experience when visiting the website, as well as informing you about your account and products. In addition, we use personal data for marketing activities and to display more relevant ads about our products.
Efva Attling Stockholm processes personal data for the purpose of providing relevant content on the website www.efvaattling.com, for example to ensure that content on the website is presented effectively on your device according to your wishes. The processing is necessary to pursue our and your legitimate interest in providing information and services on the website. The personal data being processed is information about how you interact with us, such as how to use our services, page response time, download errors, how you reached and left the service, device information, e.g. IP address, browser settings, operating system, platform and screen resolution, national settings and language settings. The personal data will be retained from the time of collection and 36 months thereafter.
Efva Attling Stockholm processes personal data for the purpose of providing a user account on www.efvaattling.com to provide access to various services such as news, inspiration and offers, exclusive event invitations, and digital purchase history. The processing is necessary to complete the contract with you. If the information is not provided, our commitments cannot be fulfilled and we are therefore forced to refuse membership. The personal data being processed are identity data, such as name and date of birth, contact details, e.g. e-mail address, phone number and postal address, login information, e.g. passwords and similar security information used for account access, as well as purchase history, e.g. products, order value and receipts. The personal data is retained until you as a customer choose to unsubscribe / leave the customer club. Purchase history can be retained for longer if required by law.
Efva Attling Stockholm processes personal data for the purpose of selling products in the web shop, such as to manage orders and deliveries as well as handle complaints and warranty matters. The processing is necessary in order for us to fulfil our obligations under the purchase agreement. If the information is not provided, our commitments cannot be fulfilled and we are therefore forced to refuse your purchase. The personal data being processed are identity data, such as name and social security number, contact details, e.g. postal address, telephone number and e-mail address, as well as purchase information, such as ordered products and order sum. The personal data will be retained until the purchase has been completed, including delivery and payment, and for a period of 36 months thereafter to handle any complaints and warranty matters.
Efva Attling Stockholm processes personal data for the purpose of selling products in our stores, such as to manage purchases, orders, and payments. The processing is necessary for the performance of the contract with you. If the information is not provided, our commitments cannot be fulfilled and we are therefore forced to refuse your purchase. The personal data being processed are identity data, such as name, contact details, e.g. phone number, payment information, e.g. credit card number, validity date and CVV-code, as well as purchase information, such as ordered products and order sum. The personal data will be retained until the purchase has been completed, including delivery and payment, and for a period of 36 months thereafter to handle any complaints and warranty matters.
Efva Attling Stockholm processes personal data for the purpose of preventing and investigating crimes against the company, such as to prevent and investigate threats, thefts and burglaries in our own stores. The processing is necessary to pursue our legitimate interest in preventing and investigating crimes against the company. The personal data being processed are video recordings from camera surveillance. The personal data will be retained from the collection and a period of 2 months thereafter.
Efva Attling Stockholm processes personal data for the purpose of improving products, such as to handle guarantees, complaints, and for quality and product improvement. The processing is necessary to pursue our and your legitimate interest in providing error-free products. The personal data being processed are identity data, such as name, purchase information, e.g. details of the purchase date, item number and the case itself. The personal data will be retained during the case management period and for a period of 6 months thereafter in order to respond to any follow-up questions from the customer about how the case was handled.
Efva Attling Stockholm processes personal data for the purpose of handling customer service issues, such as to communicate with you and answer requests that are received by customer service or other digital channels (including social media) and investigate complaints and support cases. The processing is necessary to pursue our and your legitimate interest in handling customer service issues. The personal data being processed are identity data, such as name and social security number, contact details, e.g. address, e-mail address and telephone number, correspondence with you and purchase information, such as indication of date of purchase, article number and complaint or the case itself. The personal data will be retained during the case management period and for a period of 6 months thereafter in order to respond to any follow-up questions from the customer about how the case was handled.
Efva Attling Stockholm processes personal data for the purpose of fulfilling legal obligations such as complying with applicable legislation, such as accounting law and the GDPR. The personal data being processed are identity data, such as name, contact details, e.g. address, purchase information, e.g. purchase date, item number and order sum. Personal data are retained for 7 years according to the Swedish Accounting Act.
Efva Attling Stockholm processes personal data for the purpose of marketing our products e.g. to communicate relevant information about our products and services to you, as well as for marketing or promotions related to our products, or products and services provided or marketed by our partners. The processing is necessary to pursue our legitimate interest in marketing our products and offers. The personal data being processed are e.g. name, e-mail address, address and telephone number. The personal data will be retained during the customer relationship or until you announce that you no longer wish to receive such communications.
How do we collect and process your personal data?
We receive some personal data directly from you, for example, when you create an account, subscribe to a newsletter, sign up for an event, purchase a product, or contact us for customer service. We collect some personal data by registering how you interact with our website, for example using technology such as cookies.
Sometimes we also collect personal data from third parties. Examples of third-party sources, which may vary over time, are payment transaction providers, service providers who provide data to allow us to customise our internet marketing, as well as partners we collaborate with to arrange events.
Recipients of personal data and reasons why we share your personal data
We never sell your personal data to other companies. We transfer, or share, your personal data with select recipients if necessary for the purpose for which the data has been collected, for example, to provide a product or service that you have requested.
How do you access and verify your personal data?
You can get access to your personal data collected by Efva Attling Stockholm by contacting us by phone or the address provided in the section Contact Us below. We answer questions regarding access to your personal data or erasure of data within 30 days. If you have an account you can also verify or change part of your personal data by accessing your account on our website.
For how long do we keep your personal data?
We keep your personal data in a form which permits identification of you for no longer than is necessary for the purposes for which the personal data are processed. We process and keep your personal data for as long as necessary to fulfil our contractual agreements with you. We also keep your personal data for other purposes, such as accounting and fraud prevention. For these purposes, your personal data is only kept for as long as necessary for the purpose or as long as necessary to comply with applicable laws.
Which rights do you have?
Right of access: You have the right to obtain information on which personal data Efva Attling Stockholm is processing, including the purposes of the processing, the recipients or categories of recipient to whom the personal data have been or will be disclosed, as well as a copy of the personal data undergoing processing.
Right to rectification: You have the right to obtain rectification of inaccurate personal data. You also have the right to have incomplete personal data concerning yourself completed.
Right to erasure ("right to be forgotten"): You have the right to obtain the erasure of your personal data without undue delay when:
The personal data is no longer necessary in relation to the purpose for which it was originally collected or processed
The processing is solely based on your consent and you withdraw your consent
You object to the processing and there is no overriding legitimate interest for continuing the processing
If the personal data was unlawfully processed
The personal data has to be erased in order to comply with a legal obligation
Efva Attling Stockholm can nevertheless refuse to comply with the request for erasure where the personal data is processed for the following reasons:
To exercise the right of freedom of expression and information
To comply with a legal obligation
The exercise or defence of legal claims.
In these cases, we ensure that the personal data we process or are legally obliged to store are no longer used for other purposes.
Right to restriction of processing: You have the right to obtain blocking or restriction of processing of your personal data in the following circumstances:
You contest the accuracy of the personal data, for a period until we have verified the accuracy of the personal data
You have objected to the processing where it was necessary for Efva Attling Stockholm's legitimate interests and we consider whether our legitimate interest override your legitimate interests to stop the processing
When processing is unlawful and you oppose erasure and requests restriction instead
If we no longer need the personal data but you require the personal data to be retained to allow you to establish, exercise or defend a legal claim
When processing is restricted in accordance with one of the alternatives above, with the exception of storage, the personal data shall only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person.
Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. This only applies where the processing is based on your consent or for the performance of a contract.
Right to lodge a complaint with a supervisory authority: You have the right to obtain information on how to exercise your rights, or lodge a complaint regarding processing of your personal data, by contacting the supervisory authority in your home country.
You can change the settings in your browser or device to manage the usage and scope of cookies. Use the help feature in your browser or device to learn more about changing these settings. For example, you can choose to block all cookies, accept only first-party cookies, or delete cookies when you close your browser. Please note that some features on our website will not work properly if you block or delete cookies.
Efva Attling Stockholm AB
Box 38097 SE-100 64 Stockholm
Telephone: +46 (0)8 641 74 40