Galleri Mats Bergman protects your privacy. We therefore want to inform you about how we process the personal data you provide to us and what rights you have.
- Administer your purchase or order
- Communicate with you in connection with the purchase, e.g. send order confirmation and reviews about your purchase
- Send marketing and customized information about products, your shopping cart, competitions and events via e-mail and SMS
- Give you customized marketing in digital channels
- Help you with customer service matters
- Fulfill legal obligations such as right of withdrawal, complaints and comply with the Accounting Act
Below you will find more information about how and why we process your personal data. We describe which rights you have to influence our processing, e.g. that you have a right to object to the processing. You can e.g. object to marketing at any time.
We also describe what legal basis we have for the processing and how long we save your personal data.
Who is responsible for the processing of your personal data?
Galleri Mats Bergman is responsible for the processing of your personal data (personal data controller) when we process your data for our own purposes.
If you have any questions regarding our processing of your personal data or if you want to exercise any of your rights, you can contact us at our e-mail address elisabet@gallerimatsbergman.se or call us at 054-20 00 00 .
Who has access to your personal data?
Your personal data is primarily processed by us at GalleriMatsBergman.se. However, we will share your personal data in accordance with below.
- In order to have functioning IT systems and conduct our business efficiently, we share your personal data with our IT suppliers. When we share your personal data with our IT suppliers, it is only done so that they can fulfill their obligations towards us.
- To administer your payment, we share your personal data with our payment service provider. If you choose to pay by invoice, the payment service provider may share your personal data with credit reporting companies to assess your financial situation.
- In order to deliver your order and handle any returns, we will share your personal data with the carrier you select at checkout.
- In order to provide you and other potential customers with customized marketing in digital channels, we will share your personal data with the third party that provides the digital channel.
How can you influence our processing of your personal data?
In accordance with data protection legislation, you have certain rights that you can use to influence how we process your personal data. Read more below.
Right to withdraw your consent and to object to processing
You have the right to withdraw all or part of the given consent to the processing of your personal data. The withdrawal of your consent takes effect after the withdrawal took place.
You always have the right to object to your personal data being processed for marketing purposes and profiling, such as newsletters and customized marketing.
You also have the right to object at any time to the processing of your personal data based on a balancing of interests. Read more about what a balancing of interests means below. In some cases, however, you do not have the right to object to processing based on a balancing of interests, (e.g. because we have to save your personal data). This is the case if we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or if it is for the establishment, exercise or defense of legal claims.
Right of access
You have the right to receive confirmation of whether personal data concerning you is processed by us as well as information about the processing that we carry out, e.g. the purposes of the processing and how long the data is saved. You can also access the personal data and receive a copy of the personal data processed by us.
Right to rectification
You have the right to correct any incorrect personal data concerning you and to ask us to complete incomplete personal data.
Right to erasure (the right to be forgotten) and restriction of processing
Under certain conditions, you have the right to request the deletion of your personal data. Such prerequisites exist if, for example, the personal data is no longer necessary for the purposes for which it was collected or processed or if you withdraw your consent on which the processing is based and there is no other legal basis for the processing.
You also have the right to request that we limit our processing of your personal data. Such prerequisites exist if you e.g. dispute the correctness of the data or if the processing is illegal and you object to the deletion of the personal data and instead request a limitation of the use of the data.
Right to lodge a complaint with a supervisory authority
You always have the right to submit a complaint to a competent supervisory authority.
Such a complaint should preferably be submitted to the authority in the member state within the EU/EEA where you have your usual residence, where you work or where a violation of applicable data protection laws and regulations is alleged to have occurred. The competent supervisory authority in Sweden is the Data Inspectorate. This right is without prejudice to any other administrative review process or remedy.
Right to data portability
You have the right to ask us to transfer some of your personal data we have about you to another company (data portability).
The right applies to personal data that you have provided to us in a structured, commonly used and machine-readable format if the processing is based on your consent or on an agreement and the processing is automated. You have the right to transfer the personal data directly from us to another personal data controller when this is technically possible.
Detailed description of how we process your personal data
Here you can read more in detail about why we process your personal data, which categories of personal data we process and what the legal basis for the processing is. You can also read about how long we save your personal data.
Purpose:
To administer your purchase.
Treatment performed:
- Deliver your products
- Make payment
- Send order and delivery confirmation
Personal data processed:
- Name
- Contact details (postal address, email address and phone number)
- Order information (e.g. which product you have ordered)
- Payment information
Legal basis:
- Fulfillment of agreement
The processing is necessary for us to be able to fulfill the agreement regarding your purchase. If the information is not provided, you will not be able to make a purchase with us.
Storage time:
The data is processed for twelve months after your products have been delivered.
In addition to the above, your personal data is processed, e.g. to social security number, also by the payment service provider Klarna to complete your payment. Klarna is the independent personal data controller for your treatments and informs you separately about how your data is processed.
Purpose:
To send you reviews after a completed purchase
Treatments performed:
- Submit product reviews and reviews about your shopping experience
Personal data processed:
- Name
- Email address
Legal basis:
- Balance of interests
The processing is motivated by our legitimate interest in being able to contact you with a request to review or rate the products you have purchased and your shopping experience.
Storage time:
We will send you product reviews three weeks after purchase.
Purpose:
To send marketing via email and SMS
Treatments performed:
- Send marketing and newsletters with offers and information via e-mail and SMS
- Send you personalized marketing so that you receive offers and information that we think you are interested in
- Send information about your shopping cart if you have left our website without completing the purchase
Personal data processed:
- Name
- Email address
- Phone number
For customized communication and reminders about your shopping cart, the following are also processed:
- Browsing history
- Order history
Legal basis:
Balance of interests
The processing is motivated by our legitimate interest in sending relevant marketing to you as a customer of ours. You have the right to object to the marketing when the data is collected and at each sending.
CONSENT
If you have registered for our newsletters on our website or provided your consent via e-mail, we will send you marketing based on your consent.
Storage period: The data is processed for one year from the completed purchase with the support of the balancing of interests. If you have given your consent, we will send newsletters until you unsubscribe from our mailings or otherwise object to the marketing.
Purpose:
Invite you to events and competitions
Treatments performed:
- Invite you to events and competitions
- Administer your registration or your participation in the competition
Personal data processed:
- Name
- Email address
- Phone number
- Geographical location
Legal basis:
Balance of interests
The processing is motivated by our legitimate interest in inviting you as a customer to events and competitions and to administer your registration and your participation.
Storage time:
The data is processed for one year from the completed purchase.
Purpose:
To administer customer service matters
Treatments performed
- Answer and manage your customer service case via email, phone or social media
Personal data processed:
- Name
- Email address
- Phone number
- The information you provide, e.g. order number.
Legal basis:
- Legitimate interest
- Our legal basis for the processing is our legitimate interest in helping you with your case.
Storage time:
The data is processed for six months from the time the case is closed.
Purpose:
To administer an order change is made in one of our physical stores
Treatments performed:
- Deliver your products
- Make payment
- Send order and delivery confirmation
Personal data processed:
- Name
- Contact details (postal address, email address and phone number)
- Order information (e.g. which product you have ordered)
- Payment information
Legal basis:
- Fulfillment of agreement
The processing is necessary to be able to fulfill the agreement, i.e. to be able to administer and deliver the order that you place in store. If the information is not provided, you will not be able to complete the order.
Storage time:
The data is processed for twelve months from the completed purchase.
Purpose:
To handle right of withdrawal, complaints or other claims
Treatments performed:
- Deal with any regrets of purchase
- Handle any complaints or other claims
- Personal data processed:
- Name
- Contact details (postal address, email address and phone number)
- Information from our communications with you in connection with your claim (eg information about the current order)
Legal basis:
- Legal obligation and balance of interests
Processing is necessary for us to act in accordance with consumer legislation and thus comply with a legal obligation. We also have a legitimate interest in being able to defend ourselves against a possible legal claim.
Storage time:
The data is processed from the time you submit your claim and is processed as long as the process regarding the claim is ongoing.
Purpose:
To comply with the Accounting Act
Treatments performed:
- Comply with accounting legislation
Personal data processed:
- Name
- Postal address
- Email address
- Payment history and transactions
Legal basis:
- Legal obligation
- The processing is necessary to comply with mandatory law, i.e. the Accounting Act.
Storage time:
The data is processed for seven to eight years in accordance with the Accounting Act.
Balance of interests
For certain purposes, we process your personal data with the support of a balancing of interests as a legal basis for the processing. In the balancing of interests, we have assessed that our legitimate interest in carrying out the processing outweighs your interest and your fundamental rights in not having your personal data processed. What is our legitimate interest is shown in the tables above. If you want to know more about how we have made this assessment, please contact us. You can find our contact details at the beginning of this privacy policy.