Pappelina cares about your privacy! Below is extensive information about how we process your personal data and what rights you have.
As our customer, you have the right to demand information regarding your personal data in accordance with our integrity policy. You also have the right to demand that your personal data be changed or deleted. If you have any questions, contact us by email at firstname.lastname@example.org and we'll get back to you as soon as possible. We aim to answer your question within 24 hours during workdays.
We collect personal data that you disclose to us whenever you place an order or contact us (e.g. via contact form or by email). Mandatory fields are marked as such because we absolutely need those data to perform the contract or process your contact request, and you would otherwise not be able to complete your order or send the contact request. It is evident in each input form what data are collected. We use the data that you disclose to us to perform the contract and process your enquiries. Upon contract completion, any further processing of your data will be restricted, and your data will be deleted upon expiry of any retention period applicable under relevant statutory regulations, unless you expressly consent to the further use of your data or we reserve the right to further use your data in the scope and manner permitted by law.
In summary, we process your personal data for the following purposes: • Administer your purchase or order • Communicate with you in connection with the purchase, for example, send order confirmation and reviews about your purchase • Help you with customer service matters • Performing legal obligations such as right to withdrawal, complaints and compliance with the Accounting Act
Who is responsible for the processing of your personal data? Pappelina AB, Swedish company registration number 556656-6187, is responsible, (as controller) for the processing of your personal data when we process your data for our own purposes.
Who can gain access to your personal data? Your personal data is mainly only processed by Pappelina. However, your personal data will be shared with others according to below:
• In order to have a functioning IT system and conduct our business efficiently we share your personal data with our IT-suppliers. Your personal data is only shared to the extent necessary for the suppliers to perform their contractual obligations in relation to us. • In order to administer your payment, we will share your personal data with the supplier providing the payment solution that we use. If you choose to pay via invoice, the payment service provider may share your personal data with a credit agency to assess your financial situation. • For us to deliver your goods to you, and to handle any returns, we will share your personal data with the carrier that will deliver your goods. • In order to give you and other potential customers customized marketing in digital channels, we will share your personal data with third party providing the digital channel. • We share your personal data with external partners that help us manage our marketing through digital channels.
How can you affect our processing of your personal data? According to data protection legislation, you are entitled to a variety of rights to affect our processing of your personal data.
• You have a right to, wholly or partly, withdraw a given consent for the processing of your personal data. Your withdrawal will have effect from the time of your withdrawal. • You have always a right to object to marketing and profiling, such as newsletters and customized marketing • You have a right to object when the processing is based on a balance of legitimate interests. In some other cases, the right to object does not exist (e.g. since we must store your personal data). If we can show compelling legitimate reasons for the processing that weigh heavier than your interests and fundamental rights or if it is for the purpose of determining, practicing or defending legal claims you do never have a right to object to the processing. • You have the right to obtain confirmation as to whether we are processing personal data concerning you and information about the processing, such as the purposes and for how long we store your personal data. You can gain access to the personal data and obtain a copy of the personal data processed by us. • You have a right to obtain rectification of any inaccurate personal data concerning you and to ask us to have incomplete personal data completed. • Under certain circumstances, you have a right to request erasure of your personal data. This is the case for example where the personal data is no longer necessary for the purposes for which they were collected or otherwise processed, or you withdraw your consent on which the processing is based on and where there is no other legal ground for continuance of the processing. • You always have the right to submit a complaint with a supervisory authority. You may do this in the EU/EEA member state of your habitual residence, place of work or of an alleged infringement of the applicable data protection laws. In Sweden, the supervisory authority is the Swedish Data Protection Authority. This right is without prejudice to any other administrative or judicial remedy. • You have a right to ask us to transfer certain of your personal data we have about you to another company (data portability).