[img]
[title]
[message]Privacy Policy
At reirei AB ("reirei", "we" or "us") we care about personal privacy. This Privacy Policy contains information on how and why we use your personal data in connection with your visit to our websites www.reirei.se, info.reirei.se, and b2b.reirei.se (collectively referred to as the "Website"), make a purchase, or otherwise contact us. The Privacy Policy also describes your rights related to our processing of your personal data and how you can exercise them.
If you have any questions regarding our handling of your personal data, you are always welcome to contact us using the contact details at the end of this Privacy Policy.
When the term "processing" is used in this Privacy Policy, it refers to all actions involving personal data, such as collection, registration, handling, storage, sharing, access, transfer, and deletion of personal data.
"Applicable Data Protection Legislation" means the legislation, regulations, and directives in force from time to time, including directives issued by relevant supervisory authorities, regarding the protection of natural persons' fundamental rights and freedoms and particularly the right to protection of their personal data applicable to the current processing, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR") as well as legislation, regulations, and directives that supplement the GDPR.
By "personal data" is meant any information that directly or indirectly (e.g., in combination with other information) can be linked to an individual.
WHO IS RESPONSIBLE FOR THE PERSONAL DATA WE COLLECT?
reirei AB, org. nr. 556853-2773, Norra Oskarsgatan 12, 582 73 Linköping, is the data controller for the processing of personal data described in this Privacy Policy.
WHERE DO WE COLLECT PERSONAL DATA FROM?
We collect personal data directly from you. This can be information that you either provide to us yourself (e.g., in connection with a purchase) or when you are otherwise in contact with us.
It may also involve personal data linked to the device (e.g., computer, mobile phone, tablet) you use when visiting our website (e.g., via cookies and similar technologies).
WHEN AND WHY DO WE PROCESS PERSONAL DATA?
For consumers: fulfillment of purchase agreement
We process your personal data in order to fulfill the purchase agreement with you. This includes, among other things, processing your order, including, where applicable, custom manufacturing products, organizing shipping/delivery, offering payment methods, and handling correspondence such as order confirmations.
|
Categories of personal data |
Legal basis |
|
Agreement. The processing is necessary to fulfill our obligations under the purchase agreement with you. |
|
Retention period: Personal data is retained until the purchase has been completed (including delivery and payment) and thereafter documented for the purpose of establishing, asserting, and defending any legal claims. |
|
For corporate customers and other business partners: management of the contractual relationship with the company you represent or are otherwise connected to
We process your personal data to manage the (existing or potential) contractual relationship with the company you represent or are otherwise connected to. This includes, for example, communication with you as a contact person for the relevant company, invoicing, handling order confirmations, and other customary management.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to satisfy our legitimate interest in managing (existing or potential) contractual relationship with the company you are connected to. Agreement. If you are the owner of a sole proprietorship with which we have or plan to enter into an agreement, the processing is necessary to fulfill the agreement with you and/or take measures at your request before the agreement is entered into. |
|
Retention Period: Documentation containing your personal data is retained for the purpose of managing the current contractual relationship as long as we have an ongoing relationship with the company you represent or are otherwise connected to, and where there is a connection with activities in which you have been involved. |
|
Create and manage your user account on our website
If you choose to create a personal user account on our website, we will process your personal data to enable this and otherwise administer the user account. For example, you can use your account for a smoother checkout process and to review and track your product orders on our website.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to satisfy our legitimate interest in offering our customers the opportunity to create an account on our Website, to provide updated account information, such as purchase history and order details. |
|
Retention period: Personal data is retained for the relevant purposes until you choose to close your account with us. |
|
Handle warranties, complaints, product recalls, and safety notices
We process your personal data to be able to handle warranties and complaints, as well as to be able to contact you regarding product recalls or safety notices about a product.
|
Categories of personal data |
Legal basis |
|
Agreement. The processing is necessary to fulfill our contractual obligations with you as a customer. Legal obligation. The processing is necessary to fulfill legal obligations that apply to us. |
|
Retention period: Personal data is retained to manage warranties, complaints, product recalls, and safety notices until the warranty period expires, during the time a complaint can be made, a product recall can be issued, or a safety notice can be given, and thereafter during the general statute of limitations in order to establish, assert, and defend legal claims, which in Sweden is ten (10) years. |
|
Handle cases, feedback, and any complaints as well as answer questions
If you contact us, e.g., via our customer service, we will process your personal data to communicate with you and handle cases, feedback, and any complaints as well as answer questions.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to satisfy our legitimate interest in handling cases, feedback, and any complaints as well as answering questions. |
|
Retention period: Personal data is retained for the purpose of handling the current customer service case until it is concluded |
|
Provide yourself with information about our operations, including news and offers
We may process your personal data to provide you with information about our activities, including news and offers. You can unsubscribe from our mailings at any time by clicking on the unsubscribe link in our mailings or by contacting us.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to satisfy our legitimate interest in providing you with information about our operations, including news and offers. Consent. The processing can also be based on your consent. |
|
Retention period: As a general rule, we process your personal data for this purpose for three (3) years from your last activity, such as your most recent purchase, from the time you last opened an email from us, or from when you signed up for mailings. Otherwise, we process your personal data for this purpose until you notify us that you no longer wish to receive emails. |
|
Evaluate and follow up on the use of our Website
To analyze and better understand how you use our website, we process your personal data that we have collected, for example, via cookies and similar technologies. This includes collecting information about the individual web pages or products you have visited and/or purchased, which websites or search terms referred you to the website, and information about how you interact with the website. For more information on how we use cookies, please see our cookie policy.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to satisfy our legitimate interest in having a functional website. Consent. The processing is based on your consent where required by law. |
|
Retention period: Information is stored for the periods specified in our Cookie Policy. Reports at an overall level that do not contain any personal data and statistics are saved indefinitely. |
|
Improve your experience on our Website
In order to improve your experience on our Website and provide you with tailored content when appropriate, we will collect and process your personal data, e.g., via cookies and similar technologies. This means that we can, for example, save information about your web history and selected settings on the website (such as language and display settings) for the aforementioned purposes. For more information on how we use cookies, please see our cookie policy.
|
Categories of personal data |
Legal basis |
|
Consent. The processing is based on your consent. |
|
Retention period: Information is stored for the periods specified in our Cookie Policy. Reports at an overall level that do not contain any personal data and statistics are saved indefinitely. |
|
Establish, assert and defend legal claims
For the purpose of establishing, asserting, and defending legal claims, e.g., in connection with a dispute or legal process, we may process your personal data as necessary.
|
Categories of personal data |
Legal basis |
|
All information necessary to handle and address the legal claim. |
Legitimate interest. The processing is necessary to satisfy our legitimate interest in establishing, asserting, and defending legal claims, e.g., in the event of a dispute and legal proceedings. |
|
Exception for sensitive personal data |
|
|
Any sensitive personal data, including information about crimes or suspected crimes, is processed only if it is necessary to establish, assert, and defend legal claims. |
|
|
Retention Period: Personal data is retained for the statutory limitation period in order to establish, assert, and defend legal claims. The general statutory limitation period in Sweden is ten (10) years. |
|
Fulfill legal obligations
We process your personal data to fulfill legal obligations that apply to us, such as regarding accounting and reporting as well as requirements according to the General Data Protection Regulation.
|
Categories of personal data |
Legal basis |
|
All data collected and necessary to fulfill respective legal obligations. |
Legal obligation. The processing is necessary to fulfill legal obligations that apply to us. |
|
Retention period: Personal data is retained for the time necessary for us to fulfill the legal obligations that apply to us. |
|
Manage and protect systems and services
To manage and protect our IT systems and services, e.g., during logging, troubleshooting, backups, identification of potential risks and fraud, change and problem management in systems and in connection with any IT incidents, we process your personal data if necessary.
|
Categories of personal data |
Legal basis |
|
All information provided for the above-mentioned purposes as well as log data. |
Legitimate interest. The processing is necessary to satisfy our legitimate interest in managing and protecting our IT systems and services. |
|
Retention period: Personal data is retained for the same period as specified in relation to each of the above-mentioned purposes. Personal data in logs is retained for troubleshooting and incident management for a period of twelve (12) months from the time of the log event. |
|
RECIPIENTS WITH WHOM WE SHARE PERSONAL DATA
When necessary, we share personal data with the recipients listed below. Unless otherwise stated, the named recipients are independently responsible for their own processing of personal data.
|
Recipient |
Purpose |
Legal basis |
|
Companies that handle general cargo transportation |
In order to deliver the ordered products and thereby fulfill our obligations under the purchase agreement. |
For consumers: Agreement. The processing is necessary to fulfill our contractual obligations with you as a customer. For corporate customers: Legitimate interest. The processing is necessary to satisfy our legitimate interest in delivering products to the company, including to the designated person at the company in question. |
|
Authorities (e.g. the Police and the Tax Agency) and external auditors |
To fulfill any legal obligations that we are subject to, e.g., in connection with requests from authorities or other legal requirements. |
Legal obligation. The processing is necessary to fulfill legal obligations that we are subject to. |
|
Companies that offer payment solutions |
To enable your payment for the ordered product and thereby enter into a purchase agreement with you. |
Agreement. The processing is necessary to take steps at your request prior to entering into a purchase agreement. |
|
Authorities (including courts) and legal representatives |
To establish, assert and defend legal claims. |
Legitimate interest. To satisfy our legitimate interest in having disputes and cases handled by competent courts and representatives. |
|
Buyers, sellers and external advisors/other involved parties |
Enable business changes, e.g., sale or merger of the business or other investments. |
Legitimate interest. To satisfy our legitimate interest in implementing operational changes. |
Service providers
To fulfill the purposes of processing personal data, we share your personal data with service providers that we have engaged. These providers offer, for example, IT services (companies that manage necessary operations, technical support, maintenance, and development of our IT solutions and IT systems), financial services (e.g., accounting systems), and statistical services. The service providers we have engaged may only process your personal data according to our explicit instructions and may not use your data for their own purposes. They are also legally and contractually obligated to take appropriate technical and organizational security measures to protect your data.
Appropriate safeguards for transfers of personal data to third countries
If reirei transfers or discloses your personal data to a recipient in a country outside the EU/EEA area (third country), reirei will ensure that appropriate safeguards have been taken (such as the EU Commission's standard contractual clauses and other necessary measures) to protect the personal data. reirei may transfer personal data to the USA and India.
According to the General Data Protection Regulation, you have the right to request a copy of the documentation that demonstrates that necessary safeguards have been taken to protect your personal data during transfer to a third country.
If you want to know more about the processing of your personal data and if your personal data is transferred to a third country, please contact us at the contact details provided below.
YOUR RIGHTS
Rights in relation to your personal data
In connection with our processing of your personal data, you have the right, under certain conditions, to assert the following rights:
Access
You can request confirmation on whether your personal data is being processed or not and, if it is being processed, request access to your personal data and additional information such as the purpose of the processing. You also have the right to obtain a copy of the personal data that is being processed. If the request is made electronically, the information will also be provided in an electronic format that is commonly used unless you request otherwise.
Correction
If you discover that personal data related to you is incorrect, incomplete, or inaccurate, you have the right to have your personal data corrected.
|
Object to special treatment You can object to the processing of your personal data based on legitimate interest, considering the specific situation and to processing carried out for direct marketing purposes. If we cannot demonstrate a compelling legitimate reason to continue the processing that outweighs your interests, or if the processing is not necessary to establish, exercise, or defend legal claims, we are obliged to cease the processing. |
Etching
You can have your personal data deleted under certain circumstances, e.g., when the personal data is no longer needed to achieve the purpose for which the personal data was collected.
Restriction of processing
You can ask us to restrict the processing of your personal data to only include the storage of your personal data under certain circumstances, such as when the processing is illegal but you do not want your personal data to be deleted.
Withdraw consent
You always have the right to withdraw your consent to the processing of personal data to the extent that the processing is based on your consent.
Data portability
You have the right to request a machine-readable copy of the personal data processed based on your consent or when the processing is necessary to fulfill an agreement with you, and when personal data has been obtained from you (data portability), and to request that the information be transferred to another data controller (if possible).
Complaint to supervisory authority
You are welcome to contact us with questions or complaints regarding the processing of your personal data. However, you also always have the right to lodge complaints regarding the processing of your personal data with the Swedish Authority for Privacy Protection. For more information on how to contact the Swedish Authority for Privacy Protection, visit www.imy.se.
CONTACT US
If you have any questions regarding the processing of your personal data or if you wish to exercise any of your rights under Applicable Data Protection Law, please contact reirei at the contact details below. We reserve the right to amend and supplement this privacy text as necessary.
The data controller is: reirei AB
12 North Oskar Street
582 73 Linköping
Email address:
kundservice@reirei.se
Phone number:
+46 (0) 13-51030
This Privacy Policy was last updated on 2023-11-03
CATEGORIES OF PERSONAL DATA
Below you will find an explanation of the categories of personal data that we may collect and store about you.
|
Categories of personal data |
Example of personal data |
|
User-generated data |
Click and visit history, technical data regarding devices used and their settings (e.g., language setting, IP address, browser settings, time zone, operating system, screen resolution, and platform), information on how you have interacted with us, login method, where and for how long different pages were visited, response times, how you access and leave our website, etc. |
|
Your communication |
Personal data that you provide in your communication with us, e.g., emails, e.g., regarding complaints |
|
Geographical data |
Location information from your device, such as collected via cookies |
|
Identity information |
Name, IP address |
|
Account details |
Username/email address and password |
|
Contact information |
Address, email address, phone number |
|
Information about purchase |
Details about the purchase such as purchased product, time of purchase, order history, order number, delivery address |
|
Organizational tasks |
The company you are associated with, title, position, professional role |
|
Payment details |
For corporate customers: Time of completed payment, billing address. |
|
Information about requests for custom-made products |