Räckesbutiken Sweden AB, company registration number 556824-1268 (“Balustradedesign”, “we”), respects your privacy and your right to control your personal data.
Our users’ trust is of the utmost importance to us, and Balustradedesign is therefore committed to protecting your privacy. This Privacy Policy explains how we collect and use information about our users, and how we protect our users’ privacy. This Privacy Policy describes the processing of personal data that takes place within the framework of Balustradedesign, a service offered at balustradedesign.co.uk. Balustradedesign is the data controller in accordance with these terms and is responsible for ensuring that processing is carried out in accordance with applicable law. It is important that you read and understand our Privacy Policy before using the Service.
All processing of personal data at Balustradedesign is conducted in accordance with applicable data protection laws. Within the EU/EEA, the General Data Protection Regulation (GDPR) has been in effect since 25 May 2018.
Key Concepts
Personal data is any information that, directly or indirectly in combination with other information, can be linked to a living individual. Examples of personal data include name, address, phone number, personal identity number, and email address. Information regarding IP addresses and your user behaviour when using the Service may also constitute personal data.
The processing of personal data includes all handling of personal data, such as collection, analysis, modification, recording, and storage.
The data controller is the person who, alone or jointly with others, determines the purposes and means of the processing of personal data and who is responsible for ensuring that such processing is carried out in accordance with applicable law.
Data Processed
The personal data that Balustradedesign collects and processes about you as a user of the Service is:
- Name
- Address
- Phone number
- Email address
- Identification number (personal identification number, national ID, or organisation number)
- Delivery Address
- Contact person, name, and phone number
- IP address
- Geographic Information
and other information that you may provide yourself in connection with the Service.
Balustradedesign needs the information above to fulfil its agreement with you to process an order for goods or a quote. If you choose not to provide certain personal information, this may result in Balustradedesign being unable to provide the requested product or service. Certain information is collected automatically when you use the Service:
- Information about your use of the Service, such as how you navigate the Service and which pages you have visited
- Technical data about the devices you use to access the Service, such as IP address, hardware type, operating system, and browser version
- Geographic Information
Purpose of the Processing and Legal Basis
We process personal data for the purposes listed below, as well as for any additional purposes specified at the time of collection:
- To provide the Service and administer our agreement with you, including the creation and management of your order documentation. (Request for Quote)
- In order for you to use the Service, we may disclose your personal information to other providers or subcontractors for the purpose of fulfilling an approved order.
- So that we can communicate with you by mail, phone, electronic means (such as text messages, email, or phone), or in other ways – for example, when you contact customer service – to send you notifications and inform you about updates to the Service and our Terms of Use.
- To ensure the technical functionality of the Service.
- To personalise and enhance your experience with the Service.
- To improve and develop the Service and new services and products; to continuously improve the security of our networks and information systems; and to analyse your and other users’ use of the Service (e.g., what mobile device or equipment you use) in order to better understand how our customers interact with and use the Service.
- For marketing purposes, including the promotion of our products and services.
- To monitor, prevent, investigate, or take other measures in connection with misuse of the Service, or in connection with use of the Service in violation of the Service’s Terms of Use, or in connection with legal proceedings, suspected fraud, or potential threats to Balustradedesign or the rights of others.
- To comply with a legal obligation.
Legal Basis for Balustradedesign’s Processing of Your Personal Information
Processing necessary to fulfil our agreement with you
Balustradedesign processes your personal data in order to fulfil our agreement with you (e.g., for the purposes listed in paragraphs 1–5 above).
Processing necessary for purposes related to the legitimate interests of Balustradedesign or a third party (balancing of interests)
In cases where processing is necessary for purposes related to the legitimate interests of Balustradedesign or a third party, Balustradedesign may process your personal data based on a balancing of interests. Such interests include Balustradedesign’s commercial interest in maintaining a good customer relationship with you, providing you with information relevant to your use of the Service, improving and further developing the Service, and marketing Balustradedesign’s products and services (e.g., for the purposes specified in paragraphs 3 – 10 above). “Legitimate interests” thus refer to our interest in conducting and managing our business to enable us to provide you with the best possible Service and a positive and secure user experience. We may process your personal data to protect you (and other customers, suppliers, and partners) against fraud, unauthorised access, and other irregularities when using our Services, and to ensure that our Services and systems are secure. When we process your personal data based on a balancing of interests, we ensure that we take into account and balance the potential impact of the processing on you (both positive and negative) as well as your interests and rights under applicable data protection laws. If you have any comments or objections to our processing based on a balancing of interests, you have the right to object to such processing at any time. For more information about your rights, please see the section titled “Your Rights and Choices” below.
Processing necessary to comply with a legal obligation
Balustradedesign may need to process personal data in order to comply with legal obligations, such as for accounting purposes or as a result of a court or government agency decision (i.e., for the purpose specified in section 9).
It may happen that the same personal data is processed for multiple purposes and/or based on more than one of the legal grounds listed above.
Security and Transfer of Personal Data
Transfer of Personal Data Within the Balustradedesign Group of Companies
Your personal information may be disclosed to other companies so that they can independently process your personal information for the purpose of presenting information and improving your user experience when placing an order. Examples of such data include contact information and personal identity numbers. Should you be contacted by any of these companies, they will inform you of the privacy policy that applies specifically to the processing of data within that company. To clarify, this means that, for example, during the delivery or payment process, you may be contacted directly by other companies to complete your purchase.
Transfer of Personal Data to Third Parties
We will not share, sell, transfer, or otherwise disclose personal information beyond what is specified in this Privacy Policy, unless we are required to do so by law or as a result of a court order, or unless we have obtained your consent for such disclosure.
Balustradedesign may disclose personal information to third parties, such as the police or other government agencies, if it relates to an investigation into a suspected crime or if we are otherwise required to disclose such information pursuant to law or a government agency decision.
Balustradedesign may engage external vendors to perform tasks on Balustradedesign’s behalf, such as providing IT services and analytics. The provision of these services may involve Balustradedesign’s vendors, both within the EU/EEA and outside the EU/EEA, having access to your personal data. These providers process personal data on our behalf in accordance with written data processing agreements and our instructions. Data processors who have access to your personal data (e.g., when we use a third party, such as Svea Finans, to obtain credit information for invoice payments or to store information on a server) are not granted any right to use your personal data for purposes other than those specified in this Privacy Policy, but will primarily use it to the extent necessary to provide the Service.
Transfer of Personal Data to a Third Country
Balustradedesign works exclusively with partners that process personal data within the EU/EEA. In the event that Balustradedesign chooses to engage suppliers outside the EU/EEA – such as cloud service providers – Balustradedesign will, in such cases, implement specific safeguards, such as entering into agreements that include standardised model clauses for data transfers adopted by the European Commission and available on the European Commission’s website, or working with companies that maintain the same level of protection as within the EU/EEA, for example, by having joined the EU-U.S. Privacy Shield framework.
Security for the Protection of Personal Data
Balustradedesign is committed to protecting your privacy and ensuring a high level of security for your personal information. Balustradedesign has implemented appropriate security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. All processing of your personal information is conducted with strict confidentiality.
Storage and Deletion of Personal Data
Data processing is conducted in accordance with applicable law, which means that personal data is not stored for longer than is necessary in light of the purposes of the processing. In practical terms, this means that data is purged and deleted when it is no longer relevant or necessary for analysis or for the purposes for which it was collected. Certain information may be retained for a longer period when required by other legal obligations, such as the Accounting Act.
The same personal data may be stored in several different locations for different purposes. This means that data that has been deleted from one system because it is no longer necessary may still exist in another system where it is stored on a different legal basis or for a different purpose for which the personal data is still needed.
Your Rights and Choices
With regard to the processing of your personal data, you have a number of rights under applicable data protection laws. To exercise your rights, please contact Balustradedesign using the contact information provided at the end of this Privacy Policy.
Right of Access
You have the right to request and receive confirmation as to whether Balustradedesign processes personal data about you. If Balustradedesign processes personal data about you, you have the right to receive, free of charge, information about the processing as well as a copy of the personal data being processed. For any additional copies, Balustradedesign reserves the right to charge a reasonable fee based on Balustradedesign’s administrative costs for such copies. If the request is manifestly unfounded or excessive, Balustradedesign may, in accordance with applicable data protection laws, charge a reasonable fee for such a request or refuse to comply with it.
Right to Data Portability
As our customer, you have the right to data portability if our right to process your personal data is based on the performance of a contract with you.
Right to Rectification of Inaccurate Personal Data
You have the right to have inaccurate personal data about you corrected without undue delay. Depending on the purpose of the processing, you also have the right to have incomplete personal data supplemented.
Right to erasure (“right to be forgotten”)
In certain cases, you have the right to have your personal data deleted, for example,
- if the personal data is no longer necessary for the purposes for which it was collected.
- if you object to processing based on a balancing of interests and there are no legitimate grounds for the processing that outweigh your objection.
- if the personal data has been processed unlawfully or must be deleted due to a legal obligation.
However, the right to erasure does not apply in certain cases, such as when the processing is necessary for Balustradedesign to comply with a legal obligation or to enable Balustradedesign to establish, exercise, or defend legal claims.
Right to Restriction
In certain cases, you have the right to request that Balustradedesign restrict the processing of your personal data, for example, if you believe the personal data is inaccurate so that Balustradedesign has time to verify this, if the processing is unlawful and you do not want us to delete the data, if Balustradedesign no longer needs the data but you need it for legal claims, or if you object to Balustradedesign’s processing based on a balancing of interests while we determine whether Balustradedesign’s or a third party’s legitimate interests outweigh your legitimate interests.
Right to Object
You have the right to object at any time to the processing of your personal data based on a balancing of interests, including profiling. Balustradedesign may not continue to process such personal data unless Balustradedesign can demonstrate compelling legitimate grounds for such processing that override your interests, rights, and freedoms. However, Balustradedesign may continue the processing for the establishment, exercise, or defence of legal claims.
Right to File a Complaint with the Data Protection Authority
If you believe that we are not respecting your rights, please feel free to contact us; you also have the right to file a complaint with the Swedish Data Protection Authority (which is proposed to be renamed the “Privacy Protection Authority”).
Cookies
When you visit our website, we use cookies and similar tracking technologies. Learn more about how we use cookies and similar technologies in our Cookie Policy.
Links to Other Websites and Social Media Plug-ins
In cases where the Service refers (links) to a website or material belonging to a third party, such a reference is intended solely as a convenience for the user, and Balustradedesign disclaims all liability for it and any processing of personal data that may occur in connection with it.
Within the Service, you may occasionally be offered the option to share information from the Service on social media platforms, such as Facebook or Twitter, via an integrated social plug-in (such as a “Like” button). We have no control over the information that social media platforms collect through these plug-ins if you choose to use them. We therefore encourage you to stay informed about the purpose and scope of data collection that takes place through social media plug-ins.
Changes to the Privacy Policy
If we make changes to this Privacy Policy, we will notify you by sending an email and publishing the updated version on this page (balustradedesign.co.uk/kundservice/integritetspolicy).
Governing Law and Dispute Resolution
The processing of your personal data in accordance with this Privacy Policy and your use of the Service shall be governed by Swedish law. Disputes shall be resolved by a Swedish court of general jurisdiction unless otherwise required by mandatory law.
Contact details
For more information about the processing of personal data, or if you have any questions, please feel free to contact us at:
Räckesbutiken Sweden AB
Åkerslundsgatan 10
262 73 Ängelholm
Sweden
Email: info@balustradedesign.co.uk
Phone: 0330 8187964
This privacy policy applies from 25 May 2018
