INFORMATION ON THE PROCESSING OF PERSONAL DATA

This information on the processing of personal data (hereinafter referred to as " Personal Data Information ") explains how we, Schalins Ringar AB, org. no. 556161-6110, Box 3036, 831 03 Östersund, (" Schalins ") processes your personal data. The terms "we, our, our and us" below refer to Schalins.

Schalins provides the webshop www.schalins.com. In order to be able to provide the webshop and associated customer service, we need to process the personal data of our customers and visitors. Schalins is the personal data controller for the processing described in this Personal Data Information and we process personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (“ GDPR ”).

Schalins wants you to feel safe with which data we process and for what purposes we process your data. We therefore ask you to read this Personal Data Information, which explains how we process your personal information. Here you can also find information about the rights you have according to law. You are always welcome to contact us if you have any questions regarding our processing of your personal data. You will find contact details for us in section 6 below.

1. Cookies

We use cookies on our webshop www.schalins.com . We do this to analyze how our visitors use the webshop and with the results of our analyzes we can optimize the user experience by improving the content, navigation and structure of the webshop. We also use cookies to customize offers and advertising on the webshop and on other websites. You can read more about how we use cookies here .

2. What personal data do we process about you?

We process the following personal data about you:

• Contact and identification information

Name, contact details such as postal address, telephone number and e-mail address as well as customer number and user details for your customer account. Social security numbers are only processed when it is necessary for secure identification or if there is another considerable reason.

• Information about orders

Orders and order history, payment information, information about the item you purchased, date and time of the transaction, delivery address, place of delivery, selected payment method and other information about your purchase.

• Data related to customer service

Information about your contacts with us via, for example, chat, telephone, e-mail, and social media such as Facebook and Instagram (such as business and correspondence), information related to complaints or size changes, order history and payment information, as well as information about possible compensation.

• Data for marketing

Name, e-mail address, phone number, customer number, customer segment, order history and information in any competition entries.

In cases where we do not receive the above-mentioned personal data directly from you, we can get access to them from our partners or from official registers such as e.g. SAVE. Schalins may also receive information about you from Schalins payment service providers and transport companies regarding payment and delivery of orders.

Personal data is processed by using the cookie on the website i
marketing purposes and that you can find more information about this in our Cookie Policy.

3. For what purposes and according to what legal basis do we process your personal data?

• For administration of customer relationship, customer account and orders:

We process your contact and identification details as well as information about your orders in order to be able to administer your customer account, your orders, exchanges, returns, size changes, possible refunds and otherwise to be able to fulfill our commitments to you. This includes, for example, enabling you to create a customer account and to order our products, ensuring that we can send notifications about delivery status and packaging and delivering ordered products to you. The legal basis for our processing of your personal data is in this part that it is necessary to fulfill our agreement with you or to take measures at your request before entering into our agreement. The legal basis for our processing to send you an order confirmation on a placed order is to fulfill a legal obligation owed to us.

If you do not provide the above-mentioned personal data, it is not certain that we will be able to offer and deliver our services and products to you or otherwise fulfill our commitments to you.

Schalins processes your personal data for these purposes as long as you have a customer account with us or until we have delivered the products to you. Personal data that we process to handle any complaint matters is saved for up to three (3) years from when we have delivered your jewellery.

• To prevent and investigate fraud:

We can process all information that we have collected about you according to this Personal Data Information to prevent, detect and investigate fraud or attempted fraud through our webshop. The legal basis for our processing is our legitimate interest in identifying you as a customer and preventing and preventing fraud from occurring through our webshop. Personal data that we process for this purpose is saved for up to three (3) years from when we have delivered your jewellery. We may release current information to the police or other authorities on request if it is required for investigative purposes.

• To provide customer support and service

We process your contact and identification information, information about your orders and information related to customer service in order to handle customer service issues and provide good service, such as answering questions you have and providing support via chat, phone, email or other channels such as social media. If the matter concerns an existing order and you who contact us have already shopped with us or are about to do so, the legal basis is that the processing is necessary for us to be able to fulfill our contract with you or to be able to take action at your request before agreement is concluded. For those of you who contact you in other matters or when the matter does not concern an existing customer relationship, the legal basis for the processing is that it is necessary for our legitimate interest in meeting your needs, answering your questions and providing you with the best possible service.

Personal data that is processed to provide customer service and that has to do with a completed purchase is saved for up to three (3) years after your jewelry has been delivered. Other information and correspondence is deleted or anonymized after one (1) year.

• For handling complaints, etc.:

We process contact and identification information, information about your orders and information related to customer service in order to handle your possible request to advertise products or if you would assert your rights as a consumer against us. The legal basis for our processing in this part is that it is necessary for our legitimate interest in being able to handle complaints and to be able to respond to any claims and demands from customers.

Personal data that we process for handling complaints and responding to any claims and requirements is saved for up to three (3) years after your jewelry has been delivered.

• For marketing:

We process data for marketing in order to inform you about our products and services. We can e.g. send you relevant marketing offers. The legal basis for our processing of your personal data for this purpose is that the processing is necessary for our legitimate interest in being able to market products and services that we believe you may be interested in.

If we have your approval, we may also for marketing purposes publish an image or quote from you about our products on the website or in social media, which includes personal data about you such as your name, account or profile, image and/or quote. The legal basis for this processing is your consent.

Personal data that we process for marketing purposes is processed until your customer relationship with us ends and one (1) year thereafter. This means that you may receive marketing from us for a year from the last time we delivered jewelery to you. Personal data about you that is based on your consent is stored for two (2) years from the time you gave your consent. If you withdraw your consent, we will delete the data.

• For promotions and competitions:

We process data for marketing in order to enable you to participate in competitions and campaigns, which we arrange on e.g. social media, and thereby win great prizes. The legal basis for our processing of your personal data for this purpose is that the processing is necessary for our legitimate interest in being able to provide competitions and promotions to you.

Personal data that we process for campaigns and competitions is saved until the current campaign or competition has ended.

• For quality assurance of our operations:

We process contact and identification data as well as data related to customer service in order to ensure the quality of our operations and our service to you. The legal basis for our processing in this section is that it is necessary for our legitimate interest in meeting your needs, providing you with the best possible service and developing our business.

The personal data that we process about you in order to ensure the quality of our operations is saved for up to (2) years after the case has been closed.

• For statistics:

We may process information about orders in order to produce overall statistics and follow up our operations and sales. The legal basis for our processing of your personal data is that it is necessary for our legitimate interest in being able to evaluate the quality of our products and services over time and develop these for the future.

The personal data that we process about you for statistics are saved for a maximum of five (5) years before they are anonymized. Anonymizing the personal data means that we will not process any of your personal data for this purpose after five (5) years.

• For accounting purposes:

For accounting purposes, we process information about the transaction that took place between Schalins and you and that relates to the order you placed. For this reason, we will process the personal data needed to verify the business event, such as contact and identification information, information about orders and other information that is necessary as accounting documents. The legal basis for our processing of your personal data for this purpose is that it is necessary to fulfill a legal obligation incumbent upon us according to the Accounting Act.

Personal data that we process for accounting purposes is saved for (7) years from the end of the calendar year to which the current purchase relates.

4. To whom do we pass on the personal data and where do we process them geographically?

Your personal data may be disclosed to and processed by others. Examples of third parties to whom we disclose your personal data include service providers of payment solutions, freight forwarders in connection with the delivery of goods and external advisers such as accountants or law firms for handling accounting and legal issues in our business. These actors are independently responsible for their handling of your personal data.

We also disclose your personal data to our collaboration partners and to our service providers who process personal data on our behalf, so-called personal data processors. We have agreements with our personal data processors which ensure that they process your personal data in accordance with this Personal Data Information and our instructions.

We may disclose your personal data to authorities that require us to disclose such personal data.

We may also share your personal data to allow a merger, acquisition or sale of all or part of Schalin's assets.

As a general rule, Schalins processes your data within the EU/EEA. If you have consented to Schalin's use of cookies, Schalin's data is transferred to Google in the USA, which provides services for customized marketing as well as for statistics and optimization of the webshop. For transfers of data to the USA, we have entered into an agreement with Google based on the EU's standard contractual clauses . By doing so and taking additional security measures for the data where necessary, we ensure that your data is protected in the same way as if it had stayed within the EU/EEA.

5. Storage of personal data

We only process personal data for as long as there is a need to preserve it to fulfill the purposes for which the data was provided or collected, in accordance with what is stated for each purpose under point 2 above. The same personal data can be stored in several different places for different purposes. This may mean that data that has been removed from a system because it is no longer necessary there and for that purpose, may remain in another system for another purpose where the personal data is still needed.

Your personal data may be saved for a longer period of time than stated above if it is necessary to comply with legal requirements or authority decisions.

6. Your rights

When we process your personal data, you have certain rights according to law. Contact us as below for questions.

• Information, access, restriction, correction and deletion, etc

You have the right, free of charge, to request in writing information about which personal data we have registered about you. You can request the correction of incorrect information at any time and you can also have the right to ask us to delete the personal data we have registered about you, request that the processing be limited or object to the processing and request that we give you a copy of this personal data.

If you have no basis for your request or your request is unreasonable, we have the right to refuse to comply with your request or charge a fee that covers the administrative costs that your request entails.

• Data portability

You may also have the right to obtain the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and have the right to transfer this data to another personal data controller when technically possible.

• Objections

You can object at any time to the processing of personal data based on our legitimate interests, e.g. direct marketing. We may then no longer process the personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or if it is for the establishment, exercise or defense of legal claims. If you want to know more about how we balanced our interests against yours, you can contact us.

• Your right to file a complaint

If you are dissatisfied with how we have processed your personal data, please contact us, see our contact details below. You also have the right to submit a complaint about our personal data processing to:

The Swedish Privacy Agency (IMY)
Box 8114, 104 20 Stockholm
08-657 51 00
imy@imy.se

7. Contact Schalins

You can contact us in the following ways:

• e-mail: privacy@schalins.se
• telephone: 010-777 15 15.

8. Changes

Schalins reserves the right to change and update this Personal Data Information. In the event of material changes to the Personal Data Information, or if existing personal data is to be processed in a different manner than stated in the Personal Data Information, Schalins will inform of such changes in an appropriate manner.