Privacy policy

Privacy Policy

Background

The website you are visiting belongs to Redhead Sverige AB, company registration number 5594711409, "us" or "we"). When you visit our web shop or take part in competitions connected to our brands and products, we may collect and process Personal Data (see definition below) about you. This information on the processing of Personal Data sets out which categories of Personal Data we process and for which purposes they are processed (the "Policy").

Redhead Sverige AB is responsible for the handling of Personal Data on this website.

Throughout, the term "processing" is used, which covers all operations involving Personal Data, such as collection, storage, sharing, access, use, transfer and erasure of Personal Data.

"Applicable data protection legislation" means the legislation and regulations in force from time to time, including guidelines issued by the relevant supervisory authorities, concerning the protection of the fundamental rights and freedoms of natural persons and in particular the right to protection of natural persons' Personal Data in the processing of Personal Data that apply to us, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, the so-called GDPR.

"Personal Data" means all information relating to an identified or identifiable natural person.

Cookies

We use cookies and similar technologies to collect information about your device (e.g. computer or smartphone) when you visit our websites.

The purposes of processing your Personal Data

HANDLING PURCHASES AND DELIVERING PRODUCTS

As a consumer with us on this website, we use your Personal Data in order to handle your order, deliver the chosen product to your home and to follow up on this process. If you choose to order a product from this website, we will process your Personal Data in order to review, handle, ship and deliver your order. Personal Data that we may process for these purposes are:

Category of Personal Data

Name
Address
E-mail address
Payment details
Personal identity number, in the event that you use a payment or credit company to pay for your products
Personal Data in free-text fields

The legal basis for processing your Personal Data as above is to be able to perform the purchase agreement with you. In the event of a potential dispute arising from the purchase agreement, we may also process your Personal Data on the legal basis of being able to defend, establish and assert legal claims against you.

We retain your Personal Data for as long as they are necessary to fulfil the purposes stated in this information on the processing of Personal Data, unless a longer retention period is required by national legislation applicable to our processing. As a general rule, the Personal Data are therefore retained for as long as is required for our performance of the purchase agreement. Invoice documentation is retained in accordance with applicable legislation.

HANDLING COMPLAINTS, EXCHANGES AND RETURNS OF PRODUCTS

As a consumer, you can request a return, exchange or complaint regarding the products you have ordered from our web shop. If you choose to use such a service, we will process your Personal Data in order to investigate, handle and respond to your request for a return, exchange or complaint. Personal Data we process for these purposes are:

Category of Personal Data

Name
Address
E-mail address
Personal Data in free-text fields

The legal basis for processing your Personal Data as above is to be able to perform the purchase agreement with you.

MANAGING THE WEBSITE

We use cookies on our website in order to optimise your experience of the website and to be able to handle purchases and orders via the website. Some such cookies collect Personal Data linked to the device (e.g. computer or smartphone) that you use to visit the website. Personal Data that we may process for these purposes are:

Category of Personal Data

Technical information generated through your use of the website
Information about your internet device, e.g. IP address, language settings, browser settings, operating system
Time and date of your visit to the website

The legal basis for processing your Personal Data as above is our legitimate interest in being able to provide our website.

This processing takes place during your visit to the website and is stored for a maximum of 6 months thereafter.

Transfer of Personal Data and use of processors

If we process your Personal Data, some or all of these Personal Data may be shared with certain specific recipients. When we share your Personal Data, we ensure that the recipient processes them in accordance with this Policy, by entering into data processing agreements with the recipients. The agreements ensure that your data are processed in accordance with Applicable data protection legislation.

If you would like information about which recipients may process your Personal Data, please contact us. We would like to emphasise that we never sell your Personal Data to third parties.

We may share your Personal Data with the following categories of recipients:

Warehousing, logistics and delivery companies

We use external partners in order to deliver the products you have ordered from us. We may share your Personal Data with these parties so that we can fulfil our obligations under the purchase agreement with you. These parties may not process or use your Personal Data for other purposes.

This sharing of your Personal Data takes place on the legal basis that we must be able to perform our purchase agreement with you.

Payment and credit companies

We have agreements with companies that perform payment and credit services on our behalf in connection with the purchase of our products. If you choose a payment option handled by such a company, we may share your Personal Data with that party so that we can fulfil our obligations under the purchase agreement with you. These companies are given access to your Personal Data to the extent they need them to carry out their assignment, but they may not use your Personal Data for other purposes. It is clearly stated when such a party is involved in your purchase.

We have a legitimate interest in being able to offer our customers certain payment and credit services in connection with the purchase of our products. If sharing your Personal Data is necessary to pursue that interest, and the interest outweighs your right not to have your Personal Data processed, such sharing may take place on the legal basis of legitimate interest.

Website providers

The company Shopify provides the solution for our website. Some of the cookies used that collect Personal Data about you as a website visitor are provided by Shopify. Shopify therefore has access to such Personal Data. Shopify may not process or use your Personal Data for purposes other than providing and optimising our website.

We have a legitimate interest in being able to handle purchases and orders on the website and in being able to offer our customers a fully functional website. Some sharing of your Personal Data is necessary to pursue that interest. Where our interest outweighs your right not to have your Personal Data processed, such sharing may take place on the legal basis of legitimate interest.

TRANSFER OF PERSONAL DATA OUTSIDE THE EU/EEA

As a general rule, our processing of your Personal Data takes place within the EU/EEA. However, the provider of our website is an Irish company with a Canadian parent company. This means that Personal Data collected from cookies on our website may in some cases be transferred to Canada. When such transfers are made, we ensure that appropriate measures are taken to ensure that your Personal Data are sufficiently protected. The European Commission has adopted a binding adequacy decision meaning that transfers may be made to such Canadian recipients to whom Canada's legislation on the protection of Personal Data in the private sector applies. That legislation applies to Shopify's Canadian parent company, and the transfer is therefore carried out in accordance with the European Commission's adequacy decision.

Security

We ensure that technical and organisational measures have been taken to protect Personal Data from unlawful or accidental loss or corruption, and from unauthorised or unlawful access to Personal Data. Appropriate protective measures have therefore been taken to safeguard Personal Data, taking into account the particular risks associated with a given processing of Personal Data and the level of sensitivity of the Personal Data.

Your rights

Under applicable legislation you have the right to exercise certain rights when we process your Personal Data. Below we describe each right and what it means for you in relation to the Personal Data we process. If you would like to read more about what the Swedish Authority for Privacy Protection writes about these rights, there are links under each section to the relevant page on the Authority's website.

If you wish to exercise any of these rights, want to know more, or have questions, you are welcome to contact us using the contact details provided at the bottom of this Policy.

RIGHT TO INFORMATION

You have the right to be informed about how we process your Personal Data. In this Policy we describe in general terms which Personal Data are processed by us in connection with your use of this website. If you want to know more about whether we process your particular Personal Data, and to what extent this takes place, you can contact us as above and request information about which Personal Data we process.

If you would like to read more about the right to information – see here.

RIGHT TO RECTIFICATION

We strive to always hold accurate Personal Data about you and to update these when necessary. If you discover that we are nevertheless processing incorrect data about you, you have the right to contact us as above to have these corrected. You also have the right to ask us to complete incomplete data if this is relevant in view of the purposes for which your data are processed, by providing us with additional information.

If you would like to read more about the right to rectification – see here.

RIGHT TO OBJECT

If the processing of your Personal Data is based on a balancing of interests and you consider that your privacy interest outweighs our legitimate interest in processing your Personal Data, you have the right to object to the processing by contacting us using the contact details provided at the bottom of this Policy.

If you object, we are no longer entitled to process the data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if it is for the establishment, exercise or defence of legal claims. If we consider that we have such legitimate grounds, or if the data are needed for the establishment, exercise or defence of legal claims, we will notify you of this and of the reasons for the assessment.

If you would like to read more about the right to object – see here.

RIGHT TO ERASURE

You have the right to request erasure of your Personal Data. However, this right is not absolute. For us to erase your data, certain conditions must be met. For example, you may have the right to have data erased if they are no longer necessary for the purposes for which they were collected, or if you withdraw your consent.

The right to erasure is also limited where an exception applies to the data in question. For example, we have the right to retain the data if this is necessary in order to establish, assert or defend legal claims.

If you would like to read more about the right to erasure – see here.

RIGHT TO RESTRICTION

You can request that the processing of your data be restricted, for example if you do not think the data we hold about you are accurate, or if you consider the processing to be unlawful. You can also request that the processing of personal data be restricted for the period during which we verify whether our legitimate interest outweighs your privacy interest after you have objected to the processing (see more about this under "Right to object" above).

If you would like to read more about the right to restriction – see here.

RIGHT OF ACCESS (COPY OF RECORDS)

We can also provide you with a copy, a so-called record extract, of the Personal Data processed by us. In the record extract we provide information about, among other things, which categories of Personal Data are processed, what the Personal Data are used for, how long the data will be retained, who the Personal Data have been shared with and where the data come from. Please note that we are entitled to charge a reasonable fee if you request more than one copy of your Personal Data, in accordance with our price list in force at the time.

If you would like to read more about the right of access – see here.

RIGHT TO TRANSFER PERSONAL DATA (DATA PORTABILITY)

If the legal basis for our processing is consent or performance of a contract, you have the right to receive the Personal Data you have provided to us in a structured, commonly used and machine-readable format. This does, however, presuppose that the processing is automated (i.e. not in physical form on paper). If it is technically possible, and you so wish, we can transfer your data to another data controller.

If you would like to read more about the right to transfer Personal Data (data portability) – see here.

RIGHT TO WITHDRAW CONSENT

You can withdraw all or part of the consent you have given at any time, with effect from the withdrawal (i.e. the processing of Personal Data that we carried out before the withdrawal is not affected). You can do this by contacting us using the contact details you will find at the bottom of this Policy.

COMPLAINT TO THE SUPERVISORY AUTHORITY

You are welcome to contact us with questions or concerns regarding the processing of your Personal Data. You also have the right to submit any complaints regarding the processing of your Personal Data. This is done to the Swedish Authority for Privacy Protection, Box 8114, 104 20 Stockholm, Sweden, tel. +46 8 657 61 00, e-mail: imy@imy.se

If you would like to read more about the right to lodge a complaint – see here.

REQUIREMENTS FOR EXERCISING YOUR RIGHTS

To protect your privacy we may, if necessary, require you to verify your identity when you contact us to exercise your rights.

We handle your request to exercise your rights promptly. Your request is normally answered within one month from the day the request reached us. Only in the case of an unusually complex request, or if we have received a large number of requests, may the response time be extended by up to two months. If the response time is extended, you will be notified of this.

CHANGES TO, AND UPDATES OF, THE PRIVACY POLICY

We may make changes to the Policy if this is necessary to describe how we process your Personal Data. All such changes are published here on the website, which is why you should read through the Policy at regular intervals and every time you use our services.

Contact us

If you have any questions about or comments on Redhead's handling of Personal Data, you are welcome to contact us at:

Redhead Sverige AB

Kölnagatan 8, 120 64 Stockholm

E-mail info@redhead.se