Privacy policy

We at Action och Trend i Skurup AB care about your privacy and therefore work continuously to clarify our handling of your personal data. Within the framework of this work, we have adopted this policy that describes how your information is handled by us. And which also provides guidelines for ourselves in these processes. We will never process your personal data in a way that you have not been informed of.

This privacy policy explains how we collect and use your personal information. It also describes your rights and how you can exercise them.

It is important that you read and understand the privacy policy and feel confident about our processing of your personal data. You are always welcome to contact us if you have any questions.

In addition to ensuring that our processing of your personal data is correct and transparent in relation to you, we always strive to maintain a high level of security in all processing of personal data. Because of this, Action and Trend have taken appropriate and necessary technical and organizational measures to protect your personal data from unauthorized access, use, alteration and deletion.

Personal data, processing and data controller

Personal data is any information that can be directly or indirectly attributed to a natural person who is alive. For example, name, social security number, address, image, e-mail and IP address. Even information that does not in itself identify you can be personal data if it can be linked to you in combination with other information. For example, images and sound recordings processed on a computer can be personal data even if no names are mentioned.

Processing of personal data is anything that happens to personal data. Any action taken with personal data constitutes processing, whether or not it is carried out by automated means. Examples of common processing operations are collection, recording, organization, structuring, storage, processing, transfer and erasure.

The controller is the organization that decides on the purposes and means of the processing of personal data, i.e. how and why a personal data processing operation is carried out. The controller is therefore not necessarily the one who carries out the processing itself.

The following company is the data controller for the company's processing of personal data

Action och Trend i Skurup AB
Korrehusgatan 3
27430 Skurup
E-mail: order@actionochtrend.se
Tel: +46411211442

Valid from 2022-05-27

What personal data do we process about you and why?

Below is a description of what personal data we process, what we do with it and why, based on the purpose of the processing in question. Our processing of your personal data is always limited to that which is necessary for the purpose stated below.

Purpose: Processing of orders and purchases

Processing operations carried out

• Transportation and delivery (including notification and contacts regarding the delivery).
• Identification and age verification.
• Payment processing (checking against payment history and obtaining credit information from Klarna).
• Address check against SPAR.
• Handling of complaints and warranty cases.

Categories of personal data

• Name and address
• Personal identification number
• Contact details (e.g. address, e-mail and telephone number)
• Payment history
• Payment information
• Credit information
• Purchase-specific information, including product, delivery address and choice of payment method.

Legal basis: Performance of the sales contract. In order for us to be able to fulfill our obligations to you as a customer arising from our agreement with you, the above processing of personal data is necessary. If the information is not provided, our obligations cannot be fulfilled and we must then refuse you the purchase.

Storage period: Until the purchase has been completed (including delivery and payment) and for a period of 36 months thereafter in order to handle any complaints and warranty matters.

Purpose: To fulfill the legal obligations of the company

Processing carried out: Necessary processing for the fulfillment of the company's legal obligations under legal requirements, judgments or decisions by the authorities, e.g. the Accounting Act, the Money Laundering Act or the rules on product liability and product safety, which may require both collection and external communication.

Categories of personal data

• Name of the data subject
• Personal identification number
• Contact details (e.g. address, email and phone number)
• Payment history
• Payment information
• Your correspondence
• Information about time of purchase, place of purchase, any errors/complaints

Legal basis: Legal obligation. In some cases, we need to process the personal data we hold about you because of a legal obligation or mandatory requirement from a public authority. Without this data and this processing, our obligation cannot be fulfilled and we are therefore forced to refuse you the purchase

Retention period: Until the completion of the purchase (including delivery and payment) and for a period of 36 months thereafter.

 

Purpose: To be able to handle customer service cases

Processes carried out

• Communication and answering of possible questions to customer service (by phone or in digital channels, including social media)
• Identification
• Investigation of any complaints and support cases (including technical support)

Categories of personal data

• Name of the data subject
• Personal identification number
• Contact details (e.g. address, email and phone number)
• Your correspondence
• Information about the time of purchase, place of purchase, any fault/complaint
• Technical data about your equipment
• Health data (e.g. allergic reactions and health conditions you inform us about).

Legal basis: Legitimate interest. The processing is necessary for the purposes of our legitimate interest to handle customer service matters.

Retention period: Until the customer service case has been closed

Purpose: To be able to implement and manage participation in competitions and/or events.

Processes carried out

• Communication before and after participation in a competition or event (e.g. confirmation of entries, questions or evaluations).
• Identification and verification of age
• Selection of winners and communication of any prizes (e.g. payments or travel bookings).

Categories of personal data

• Name of the winner
• Social security number or age
• Contact details (e.g. address, email and telephone number)
• Data provided in competition entries
• Data provided in event evaluations

Legal basis: Legitimate interest. The processing is necessary for the purposes of our legitimate interest in managing your participation in competitions and/or events.

Storage period: For the duration of the competition/event (including any evaluation).

 

Purpose: To be able to prevent misuse of a service or to prevent, prevent and investigate whether crimes against the company have taken place

Treatments carried out

• Prevention and investigation of possible fraud or other breaches of law.
• Preventing spam, phishing, harassment, attempts to illegally log in to user accounts or other actions prohibited by law or our terms of purchase, membership or service
• Protecting and improving our IT environment against attacks and intrusions

Categories of personal data

• Personal identification numbers
• Purchase and user-generated data (e.g. click and visit history)
• Technical data related to devices used and their settings (e.g. language setting, IP address, browser settings, time zone, operating system, screen resolution and platform)
• Data on how our digital services are used.

Legal basis: Legitimate interest. We pursue our legitimate interest to prevent misuse of a service or to prevent, deter and investigate whether crimes against the company have taken place.

Retention period: From collection and for a period of 36 months thereafter

 

Where do we get your personal data from and where do we process it?

In addition to the data you provide to us, or that we collect from you based on your purchases and how you

use our services, we may also collect personal data from someone else (so-called third parties). The data we collect from third parties is as follows:

• Address information from public records to make sure we have the right address details for you.
• Creditworthiness data from credit rating agencies, banks or credit reference agencies.

As a general rule, our processing of your personal data takes place in Sweden. In exceptional cases, some processing of your personal data may take place outside the EU/EEA, for example by a data processor based in the USA. In such exceptional cases, we will always apply adequate legal, technical and organizational measures to ensure that the level of protection is the same as within the EU/EEA. If you would like to receive a copy of the safeguards in place or information on where these have been made available, please contact us.

Who may we share your personal data with?

Data processors. To the extent necessary and appropriate for the purposes above and for the provision of our services, we may share your personal data with companies that are so-called data processors to us. A processor is a company that processes your personal data on our behalf and according to our instructions. We have data processors involved in the following parts of the services we provide to you as a customer

• Transportation (logistics companies and freight forwarders).
• Payment solutions (card companies, banks and other payment service providers)
• Marketing (via advertising agencies, web/media agencies and related distribution and social media)
• IT services (companies that handle the necessary operation, technical support and maintenance of our IT solutions).

We have written agreements with all processors whereby they guarantee the security of the personal data being processed and undertake to comply with our security requirements and restrictions and requirements regarding the international transfer of personal data.

Companies that are independent data controllers. Your personal data is shared with certain companies that are independent controllers for the processing they carry out. This means that we do not control how the information provided to the company is processed and that company's privacy policy and personal data management applies to this processing.

Independent data controllers that we share your personal data with are:

• Government authorities (police, tax authorities or other authorities) if we are required to do so by law or on suspicion of crime.
• Companies that provide general transportation of goods (logistics companies and freight forwarders)
• companies offering payment solutions (card companies, banks and other payment service providers).

Your rights as a data subject

Right of access (so-called 'record extracts'). We are always transparent about how we process your personal data and if you want to know more about what personal data we process about you, you can request access to the data in the form of a record extract that includes purposes, categories of personal data, categories of recipients, retention periods,

and information on collection). To ensure that we do not disclose information to the wrong person, we may ask you additional questions or request more information before providing you with a record extract.

Right to rectification. You can request that your personal data be rectified if it is inaccurate. Within the framework of the stated purpose, you also have the right to complete any incomplete personal data.

Right to erasure. You can request the erasure of personal data we process about you if

• The data is no longer necessary for the purposes for which it was collected or processed.
• You object to a balancing of interests we have made based on legitimate interest and your reason for objecting outweighs our legitimate interest.
• You object to processing for direct marketing purposes.
• The personal data is processed in an unlawful manner.
• the personal data must be erased to comply with a legal obligation to which we are subject
• Personal data has been collected about a child (under the age of 13) for whom you have parental responsibility and the collection has taken place in the context of offering information society services (e.g. social media).

Please note that we may have the right to refuse your request if there are legal obligations that prevent us from immediately deleting certain personal data. These obligations come from accounting and tax legislation, banking and money laundering legislation, but also from consumer rights legislation. It may also be that the processing is necessary for the establishment, exercise or defense of legal claims. Should we be prevented from complying with a request for erasure, we will instead block the personal data from being used for purposes other than the purpose preventing the requested erasure.

Right to restriction. You have the right to request that our processing of your personal data be restricted. If you contest the accuracy of the personal data we process, you can request a restriction of processing for the time we need to verify the accuracy of the personal data. If we no longer need the personal data for the identified purposes, but you need it to establish, exercise or defend legal claims, you can request restricted processing of the data by us. This means that you can request that we do not delete your data.

If you have objected to our legitimate interest as a legal basis for processing, you can request restricted processing for the time we need to verify whether our interests outweigh your interests in having the data erased.

If processing has been restricted under any of the situations above, we may only process the data for the establishment, exercise or defense of legal claims, for the protection of the rights of another person or if you have given your consent, in addition to the storage itself.

Right to object to certain types of processing. You always have the right to opt out of direct marketing

Legitimate interest: Where we use legitimate interest as the legal basis for a purpose, you have the right to object to the processing. In order to continue processing your personal data after such an objection, we need to be able to demonstrate a compelling legitimate ground for the processing in question that overrides your interests, rights or freedoms. Otherwise, we may only process the data for the establishment, exercise or defense of legal claims.

Direct marketing (including analyses carried out for direct marketing purposes): You have the possibility to object to the processing of your personal data for direct marketing purposes. The objection also covers the analysis of personal data (so-called profiling) carried out for direct marketing purposes. Direct marketing refers to all types of marketing outreach (e.g. by post, email and SMS). Marketing activities where you as a customer have actively chosen to use one of our services or otherwise sought us out to learn more about our services do not count as direct marketing (e.g. product recommendations or other website features and offers).

If you object to direct marketing, we will cease processing your personal data for that purpose as well as cease all types of direct marketing activities.

Keep in mind that you always have the opportunity to influence which channels we use for mailings and personalized offers. For example, you can choose to only receive offers from us via email, but not SMS. In that case, you should not object to the personal data processing as such, but instead limit our communication channels (by contacting customer service).

Right to data portability. If our right to process your personal data is based on either your consent or the performance of a contract with you, you have the right to request that the data concerning you that you have provided to us be transferred to another controller (so-called data portability). A prerequisite for data portability is that the transfer is technically feasible and can be automated.

How do we handle personal data?

We will only process your personal data when it is clearly justified by the purpose, necessary for secure identification, or if there is any other compelling reason. We always minimize the use of your social security number as much as possible by using your birth number instead, where it is sufficient.

Information on cookies

Cookies are small text files consisting of letters and numbers that are sent from our web server and stored on your browser or device. On www.actionochtrend.se we use the following cookies:

• Session cookies (a temporary cookie that expires when you close your browser or device).
• Persistent cookies (cookies that remain on your computer until you delete them or they expire).
• first-party cookies (cookies set by the website you are visiting)
• Third-party cookies (cookies set by a third-party website). In our case, these are primarily used for analytics, e.g. Google Analytics).
• Similar technologies (technologies that store information in your browser or device in a way similar to cookies).

The cookies we use normally improve the services we offer. Some of our services need cookies to work properly, while others improve the services for you. We use cookies for overall analytical information regarding your use of our services and to save functional settings such as language and other data. We also use cookies to target relevant marketing to you. You can read more about cookies specifically for Action och Trend i Skurup AB at actionochtrend.se/cookies.

Own settings regarding cookies?

Your browser or device allows you to change the settings for the use and scope of cookies. Go to the settings of your browser or device to learn more about how to adjust your cookie settings. Examples of things you can adjust include blocking all cookies, accepting only first-party cookies or deleting cookies when you close your browser. Please note that some of our services may not work if you block or delete cookies. You can read more about cookies in general on the Swedish Post and Telecom Authority's website, pts.se.

How we protect your personal data

We use IT systems to protect the confidentiality, integrity and availability of personal data. We have put in place specific security measures to protect your personal data against unlawful or unauthorised processing (such as unauthorised access, loss, destruction or damage). Only those people who actually need to process your personal data in order for us to fulfil our stated purposes have access to it.

Contact us or the Data Protection Authority.

The Data Protection Authority (DPA) is responsible for monitoring the application of the law, and if you believe that a company is handling personal data incorrectly, you can lodge a complaint with the DPA.

As we take data protection very seriously, we have dedicated customer service staff to deal with these issues and you can always reach them at order@actionochtrend.se

We may make changes to our privacy policy. The latest version of the privacy policy is always available on this website. In case of updates that are essential to our processing of personal data (e.g. change of specified purposes or categories of personal data) or updates that are not essential to the processing but may be essential to you, you will be informed on actionochtrend.se and by email (if you have provided an email address) well in advance of the updates taking effect. When we make information about updates available, we will also explain the implications of the updates and how they may affect you.

The privacy policy was last updated on 2022-05-27