1. Who we are
We are Ipinium Aktiebolag, a company that offers high-quality, unique products for kitchen, cooking, preparing and storage with office at Bögatan 1, 412 72 Gothenburg, Sweden.
We have determined our respective responsibilities for compliance with the obligations under applicable privacy legislation for processing your personal data in relation to our loyalty programs by means of an arrangement between us. In summary, we have arranged that if you want to exercise your rights, such as your right to access, correct, erase, restrict, object or port personal data or to withdraw your consent, or if you have any questions or complaints about the processing of your personal data, you can either contact us in accordance with ‘Your rights’ (please see below).
2. The types of data we process
2.1 General. We may collect and process the following categories of personal information:
a. Name, address and other identifying information
For example, we may record your name, title, email, address, phone number.
b. Your contact details and personal account or registration details
Your contact details may include your address, telephone number and email address. When you create a personal account, or register for a service or purchase, we may also record your sign in details and other information you fill out on your personal account or registration form.
c. Information about your purchases
When you make a reservation or purchase, we process your reservation and booking information. This information may include details about purchase, discounts and other relevant information.
d. Our communication with you
When you send us an email we register your communication with us. When you call us, our customer support will register your questions or complaints in our database.
e. Information we collect when you use our websites
2.2 Cookies and similar technologies.
2.3 Specific services, apps or events.
3. How we collect your data
3.1 We collect the categories of personal data in the following ways:
a. We collect data you provide to us
When you contact our customer support, register for one of our events or make a purchase.
b. When you use our website, we collect information via cookies and similar technologies
We also share your personal information with these third parties (please see ‘Disclosing or sharing data with third parties’ below).
4. For which purpose do we use your data
4.1 The main purposes for which we use your personal information are:
a. To provide our services to you
To handle your reservations and purchases, we need to process most of the information described above. For example, we need your name, and other identifying information to handle your purchase.
b. To communicate with you
We use your contact details to communicate with you in relation to our services or loyalty programs, to answer your questions or to handle your complaints.
4.2 Legal basis.
We collect, use and store your personal data to provide services to comply with the legal obligations we are subject to, if necessary for our legitimate interests or the interests of a third party or on the basis of your consent.
You may withdraw your consent at any time by following the specific instructions in relation to the processing for which you provided your consent. You may also contact us to withdraw your consent (please see ‘Your Rights’ below).
When we process your personal data for our legitimate interests or the interests of a third party, we have balanced these interests against your legitimate interests. Where necessary we have taken appropriate measures to limit implications and prevent unwarranted harm to you. For more information on these interests, please see the ‘For which purposes we use your data’ above. Where we process your personal data for our legitimate interests or the interests of a third party, you have the right to object at any time on grounds relating to your particular situation (please see ‘Your Rights’ below).
5 Disclosing or sharing data with third parties
We may disclose or share your personal data with our group companies, service providers or subcontractors for the following purposes.
a For support services
We use might use a third parties to provide some of our services. All such third parties will be required to adequately safeguard your personal data and only process it in accordance with our instructions.
6. Security and retention
6.1 Ipinium Aktiebolag will take appropriate technical and organizational measures to protect your personal data against loss or unlawful use.
7. International transfer of your data
7.1 Ipinium Aktiebolag may transfer your personal data to countries other than your country of residence (including countries outside the European Economic Area). This occurs in the course of partners or service providers have operations in countries across the world. The laws of these countries may not afford the same level of protection to your personal data.
7.2 The transfer of personal data to countries other than your country of residence is often necessary to provide our services to you. In other cases, Ipinium Aktiebolag will ensure that adequate safeguards are in place to comply with the requirements for the international transfer of personal data under applicable privacy laws. For transfers of personal data outside the European Economic Area, Ipinium Aktiebolag may use Commission approved Standard Contractual Clauses as safeguards.
8. Your rights
8.1 You may contact our Privacy Office (please see below) to exercise any of the rights you are granted under applicable data protection laws, which includes (1) the right to access your data, (2) to rectify them, (3) to erase them, (4) to restrict the processing of your data, (5) the right to data portability and (6) the right to object to processing.
- Right to access
You may ask us whether or not we process any of your personal data and, if so, receive access to that data in the form of a copy. When complying with an access request, we will also provide you with additional information, such as the purposes of the processing, the categories of personal data concerned as well as any other information necessary for you to exercise the essence of this right.
- Right to rectification
You have the right to have your data rectified in case of inaccuracy or incompleteness. Upon request, we will correct inaccurate personal data about you and, taking into account the purposes of the processing, complete incomplete personal data, which may include the provision of a supplementary statement.
- Right to erasure
You also have the right to have your personal data erased, which means the deletion of your data by us and, where possible, any other controller to whom your data has previously been made public by us. Erasure of your personal data only finds place in certain cases, prescribed by law and listed under article 17 of the General Data Protection Regulation (GDPR). This includes situations where your personal data are no longer necessary in relation to the initial purposes for which they were processed as well as situations where they were processed unlawfully. Due to the way we maintain certain services, it may take some time before backup copies are erased.
- Right to restriction of processing
You have the right to obtain the restriction of the processing of your personal data, which means that we suspend the processing of your data for a certain period of time. Circumstances which may give rise to this right include situations where the accuracy of your personal data was contested but some time is needed for us to verify their (in)accuracy. This right does not prevent us from continuing to store your personal data. We will inform you before the restriction is lifted.
- Right to data portability
Your right to data portability entails that you may request us to provide you with your personal data in a structured, commonly used and machine-readable format and to have such data transmitted directly to another controller, where technically feasible. Upon request and where this is technically feasible we will transmit your personal data directly to the other controller.
- Right to object.
You also have the right to object to the processing of your personal data, which means you may request us to no longer process your personal data. This only applies in case the ‘legitimate interests’ ground (including profiling) constitutes the legal basis for processing (see ‘Legal basis’ above).
At any time and free of charge you can object to direct marketing purposes in case your personal data are processed for such purposes, which includes profiling purposes to the extent that it is related to such direct marketing. In case you exercise this right, we will no longer process your personal data for such purposes.
8.2 You may withdraw your consent at any time
You may withdraw your consent at any time by following the specific instructions in relation to the processing for which you provided your consent. For example, you may withdraw consent, by adjusting your communication preferences in your account (if available) or by changing your smart phone settings (for mobile push notifications and location data).
You may also contact the Privacy Office of Ipinium Aktiebolag.
8.4 When you would like to exercise your rights, all you have to do is send your request to the Privacy Office of Ipinium Aktiebolag:
412 72 Göteborg
9 How we look after this policy