Data protection , information about your privacy

Why do we need your personal data?

Hardanger Bestikk care about your privacy. In this privacy policy, we would like to inform you about how we process your personal data and what rights you have.

In summary, we process your personal data for the following purposes:

Administer your purchase or order
Communicate with you in connection with the purchase, for example, send order confirmation
Provide you with customised marketing in digital channels
Help you with customer service matters
Performing legal obligations such as right to withdrawal, complaints and compliance with the Accounting Act

Below you can read more about how and why we process your personal data. You can also read about how you can influence our processing of your personal data, such as the right to object to certain processing. For example, you may at any time object to marketing from us.

We also describe what legal basis we have for the processing and how long we store your personal data.

Who is responsible for the processing of your personal data?

Hardanger Bestikk AB, Swedish company registration number 556528-5763, is responsible, (as controller) for the processing of your personal data when we process your data for our own purposes.

If you have any questions regarding our processing of your personal data – or if you want to exercise any of your rights, please contact us at support@hardangerbestikk.com or give us a call on +47 53 67 10 00. Our postal address is Senapsgatan 9, 75449 Uppsala.

Who can gain access to your personal data?

Your personal data is mainly only processed by Hardanger Bestikk. However, your personal data will be shared with others according to below.

In order to have a functioning IT system and conduct our business efficiently we share your personal data with our IT-suppliers. Your personal data is only shared to the extent necessary for the suppliers to perform their contractual obligations in relation to us.
In order to administer your payment, we will share your personal data with the supplier providing the payment solution that we use. If you choose to pay via invoice, the payment service provider may share your personal data with a credit agency to assess your financial situation.
In order for us to deliver your goods to you, and to handle any returns, we will share your personal data with the carrier that you choose in the check-out.
In order to give you and other potential customers customised marketing in digital channels, we will share your personal data with third party providing the digital channel.
We share your personal data with external partners that help us manage our marketing through digital channels.

How can you affect our processing of your personal data?

According to data protection legislation, you are entitled to a variety of rights to affect our processing of your personal data. Read more below.

Right to withdraw consent and to object to processing
You have a right to, wholly or partly, withdraw a given consent for the processing of your personal data. Your withdrawal will have effect from the time of your withdrawal.

You have always a right to object to marketing and profiling, such as customised marketing. You have a right to object when the processing is based on a balance of legitimate interests. In some other cases, the right to object does not exist (e.g. since we must store your personal data). If we can show compelling legitimate reasons for the processing that weigh heavier than your interests and fundamental rights or if it is for the purpose of determining, practicing or defending legal claims you do never have a right to object to the processing.

Right to access
You have the right to obtain confirmation as to whether or not we are processing personal data concerning you and information about the processing, such as the purposes and for how long we store your personal data. You can gain access to the personal data and obtain a copy of the personal data processed by us.

Right to rectification
You have a right to obtain rectification of any inaccurate personal data concerning you and to ask us to have incomplete personal data completed.

Right to erasure (“the right to be forgotten”) and restriction of processing
Under certain circumstances, you have a right to request erasure of your personal data. This is the case for example where the personal data is no longer necessary for the purposes for which they were collected or otherwise processed, or you withdraw your consent on which the processing is based on and where there is no other legal ground for continuance of the processing.

You also have a right to request that we restrict its processing of your personal data. That is the case for example when the accuracy of the personal data is contested by you, or the processing is unlawful and you oppose the erasure of the personal data and instead requests restriction of its use.

Right to lodge a complaint to a supervisory authority
You always have the right to lodge a complaint with a supervisory authority.

You may do this in in particular in the EU/EEA member state of your habitual residence, place of work or of an alleged infringement of the applicable data protection laws. In Sweden, the supervisory authority is the Swedish Data Protection Authority. This right is without prejudice to any other administrative or judicial remedy.

Detailed information about how we process your personal data

Here you can read more about why we process your personal data, which categories of personal data we process and our legal basis for processing.

Purpose: To administer your purchase
Processing performed:

Deliver your products
Carry out payment
Send order and delivery confirmation

Personal data we process:

Name
Contact details (postal address, email address and telephone number)
Order information (e.g. what product you have ordered)
Payment Information

Legal basis: Performance of contract
The processing is necessary in order for us to fulfill the contract regarding your purchase. If the data is not provided, you will not be able to make a purchase with us.

In addition to the above, your personal data is also processed, for example social security number, by the payment service provider PayPal and Stripe to carry out your payment. They are controller for the processing of your personal data and is responsible for informing you separately in this respect.

Purpose: Provide customised marketing in digital channels
Processing performed:

Provide customised marketing in digital channels, social media and third-party web pages including sharing of data with those parties.

Personal data we process:

Email address
IP address
Cookies

Legal basis: Balancing of interest. The processing is justified by our legitimate interest in providing customised marketing to you as a customer and other potential customers.

Purpose: To administer customer service matters
Processing performed:

Answer and administer your customer service matter by email, phone or social media

Personal data we process:

Name
Email address
Telephone number
The information you provide, such as order number.

Legal basis: Balancing of interest
The processing is justified by our legitimate interest in helping you with your matter.

Purpose: To handle the right of withdrawal, complaints or other claims
Processing performed:

Handle possible withdrawal of purchase
Handle possible complaints or other claims

Personal data we process:

Name
Contact information (postal address, email address and phone number)
Information from our communication with you regarding your claim (e.g. details about the current order)

Legal basis: Legal obligation and balancing of interests. The processing is necessary in order for us to act in accordance with consumer law and comply with a legal obligation. We also have a legitimate interest in being able to defend ourselves against a possible legal claim.

Purpose: To comply with the Accounting Act
Processing performed:

Comply with the Accounting Act

Personal data we process:

Name
Postal address
Email address
Payment history and transactions

Legal basis: Legal obligantion. The processing is necessary in order for us to comply with a legal obligation, i.e. the Accounting Act.