1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?
By Jalma AB, 559127-7495, 559107-4553 (“By Jalma”/”we”) is personally responsible for the processing of your personal data. Note that our payment service providers, such as Klarna, are independently responsible for their processing of the personal data that they collect when you make a purchase at our website using their payment solutions.
2. WHAT PERSONAL DATA DO WE PROCESS?
The personal data that By Jalma collects and processes may vary from case to case, depending on context, but may include the following information:
• Name, address, e-mail address, phone number and other contact information you provide to us;
• Delivery information, billing information, payment information and other information that you provide in connection with the purchase and/or delivery of a product;
• Payment and order history;
• User-generated information that you have shared via our site or through any other contact with us;
• Information relevant to ads or offers;
• IP address; and / or
• personal identification number (normally not collected by us)
In addition to the information and personal data that you provide directly to us (e.g in connection with making a purchase, contacting us via e-mail or subscribing to our newsletter etc.), information may also be collected from our partners, such as payment providers like Klarna, as well as through cookies. More information about cookies can be found here.
3. HOW AND WHY DO WE PROCESS YOUR PERSONAL DATA?
Below, we list different purposes for which we handle your personal data as well as on what legal grounds we do this and for how long we keep the data.
In order to handle your order/purchase, i.e. know who we enter into an agreement with, be able to deliver the products you have ordered to you, handle eventual returns or complaints and otherwise communicate and fulfil commitments we have towards you related to your purchase.
Legal ground: Completion of Purchase Agreement. The processing is necessary in order to be able to complete our transaction with you and to fulfill our responsibilities and obligations we have towards you as a customer. We will save the data up to 24 months, from the time both delivery and payment have been processed, for the purpose of being able to assist you with potential complaints, returns and questions related to your order and purchased products.
In order to be able to offer you help and answer questions from you, i.e. provide you with customer service.
Legal ground: The processing is necessary in order to cater both parties (yours and ours) legitimate interest in being able to help and to receive help. That is, we process this data in order to be able to answer questions from you and giving you the answers you need when you need them. We save the information for 12 months after the completion of your customer service case.
In order to send newsletters and other direct marketing to you with relevant information.
Legal ground: Consent. We will only send you newsletters and equivalent direct marketing if we have your consent do to this and as long as we have your consent. You can always unsubscribe from our newsletter and equivalent direct marketing.
In order for us to comply with applicable laws and regulations.
Legal ground: Compliance with applicable laws and regulations. We must keep certain information about you in order to comply with various laws and regulations. The Book-keeping Act is an example of such a law, and because of this law we save certain information related to your purchase for 7 years + current year.
In order to offer you a website that provides you with relevant information and the best possible shopping experience as well as being able to market products that you have shown interest in to you on our site and through our partners:
Legal ground: The processing is necessary to cater both parties (ours and yours) legitimate interests in a smooth shopping experience (i.e. a customized website) and our legitimate interest to market relevant products and otherwise provide you with relevant information based on your interaction with us. In order to customize the site and marketing, we use external advertising services. You can read more about their gathering and use of data and how you can remove information via the links below.
Also, you can clear all your cookie data any time (read more here).
4. WHO DO WE SHARE DATA WITH?
Your data is primarily processed by By Jalma. However, we also need to share data in some cases in order to be able to offer our services and to fulfill our obligations to you. We will never sell your personal data and if we share data, such data is handled in accordance with our instructions.
Potential recipients we share your information with are:
In order to fulfill our obligations towards you in connection with a purchase, we share data with our print house and with shipping companies that handles the delivery of your goods. We also may share data with companies that assist us with other services related to IT- and marketing services.
Payment service providers
In order to manage payments via the site, we use different payment services. The payment service providers are personally responsible for processing your personal data and has separate terms and conditions that apply in relation to their use of your data.
We may transfer your personal information to other recipients, such as authorities, if required by law.
If By Jalma’s business, in whole or in part, is sold to another entity or if the business is otherwise integrated with another entity, your personal information may also be disclosed to our advisors, potential buyers and their advisors, and will be forwarded to the new owners of the business.
Transfers outside the EU
Some services or payment service providers may be located outside the EEA. We never transmit data outside the EEA without taking appropriate security measures.
5. YOUR RIGHTS
Right to withdraw consent and to object to processing
On the occasions when we process your personal information with your consent, you may, at any time, withdraw your consent. You may also be entitled to oppose some treatment, such as when the treatment is based on a balance of interest.
In some cases, you are not entitled to object (e.g. if we must save your personal information as a result of legal requirements). If we can show compelling legal reasons for treatment that weigh heavier than your interests and fundamental rights or if the reason to our processing is to determine, exercise or defend legal requirements, you are not entitled to object to the treatment.
Under certain circumstances, you also have the right to have your personal information erased or blocked. However, this does not apply if, for example, we are required by law to preserve or otherwise handle the data, or if the information is required to fulfill an agreement with you.
Right to access
You are entitled to know if and what personal data we process about you. If you want a complete registry extract, please contact our customer service and they will assist you.
Right to rectification
We always want your personal data to be accurate and up to date, and you also have the right to rectify incorrect data. If data you have submitted to us changes, such as if you change your address or e-mail address, just contact our customer service and we will assist you.
Right to erasure a.k.a. “Right to be forgotten”
In some cases, you have the right to have your personal data completely or partially deleted. For example, this is the case if personal data is no longer necessary for the purposes for which they were collected or otherwise processed.
Under certain circumstances, you may also be entitled to request that we partially restrict our processing for certain purposes. This can for example be the case if we no longer have a legal ground to keep your personal data, but you need your data to be kept with restricted use in order to claim your rights in court or equivalent.
Right to data portability
If we process your personal information based on your consent or to fulfill an agreement with you, you are entitled to so-called data portability. This means that you are entitled to get your personal information in a structured and machine-readable format that allows you to move your personal information. Unlike the right to access listed above, it only covers personal data that you provided to us.
Last updated: 2022-11-13