PERSONAL DATA & PRIVACY POLICY

KitchenLab AB ("KitchenLab" or "we") protects your privacy. We therefore want to inform you about how we process the personal data you provide to us and what rights you have.

Our goal is for you to feel confident that your personal integrity is respected and that your personal data is processed correctly. We take responsibility for personal data processed by KitchenLab being used only for intended purposes and protected against unauthorised access. All processing of personal data within KitchenLab takes place in accordance with applicable personal data legislation. Within the EU/EEA, the data protection regulation (GDPR) applies from May 2018.

In summary, we process your personal data to:

Administer your purchase or order

Communicate with you in connection with the purchase, e.g. send order confirmation and reviews about your purchase

Send marketing and customised information about products, your shopping cart, competitions and events via e-mail and SMS

Give you customised marketing in digital channels

Help you with customer service matters

Fulfill legal obligations such as right of withdrawal, complaints and comply with accounting laws

Who is responsible for the processing of your personal data?

KitchenLab AB with organisation number 556785-6199, is responsible for the processing of your personal data (personal data controller) when we process your data for our own purposes.

If you have any questions regarding our processing of your personal data or if you want to exercise any of your rights, you can contact us at our email address info@kitchenlab.se or call us at telephone number 08-410 95 200. Our postal address is Birger Jarlsgatan 106, 114 20 Stockholm.

Who has access to your personal data?

Your personal data is primarily processed by us at KitchenLab. However, we will share your personal data in accordance with below.

In order to have functioning IT systems and conduct our business efficiently, we share your personal data with our IT suppliers. When we share your personal data with our IT suppliers, it is only done so that they can fulfill their obligations towards us.

To administer your payment, we share your personal data with our payment service provider. If you choose to pay via invoice, the payment service provider (formerly Klarna) can share your personal data with credit reporting companies to assess your financial situation.

In order to deliver your order and handle any returns, we will share your personal data with the carrier you select at checkout (formerly PostNord).

In order to handle customer service matters, we share your personal data with the company that provides our customer service.

In order to provide you and other potential customers with customised marketing in digital channels, we will share your personal data with the third party that provides services within this.

We share your personal data with external partners who help us administer our marketing via digital channels

How can you influence our processing of your personal data?

In accordance with data protection legislation, you have certain rights that you can use to influence how we process your personal data. Read more below.

Right to withdraw your consent and to object to processing

You have the right to withdraw all or part of the given consent to the processing of your personal data. The withdrawal of your consent takes effect after the withdrawal took place.

You always have the right to object to your personal data being processed for marketing purposes and profiling, such as newsletters and customised marketing.

You also have the right to object at any time to the processing of your personal data based on a balancing of interests. Read more about what a balancing of interests means below. In some cases, however, you do not have the right to object to processing based on a balancing of interests, (e.g. because we have to save your personal data). This is the case if we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or if it is for the establishment, exercise or defense of legal claims.

Right of access

You have the right to receive confirmation of whether personal data concerning you is processed by us as well as information about the processing that we carry out, e.g. the purposes of the processing and how long the data is saved. You can also access the personal data and receive a copy of the personal data processed by us.

Right to rectification

You have the right to correct any incorrect personal data concerning you and to ask us to complete incomplete personal data.

Right to erasure (the right to be forgotten) and restriction of processing

Under certain conditions, you have the right to request the deletion of your personal data. Such prerequisites exist if, for example, the personal data is no longer necessary for the purposes for which it was collected or processed or if you withdraw your consent on which the processing is based and there is no other legal basis for the processing.

You also have the right to request that we limit our processing of your personal data. Such prerequisites exist if you e.g. dispute the correctness of the data or if the processing is illegal and you object to the deletion of the personal data and instead request a limitation of the use of the data.

Right to lodge a complaint with a supervisory authority

You always have the right to submit a complaint to a competent supervisory authority.

Such a complaint should preferably be submitted to the authority in the member state within the EU/EEA where you have your usual residence, where you work or where a violation of applicable data protection laws and regulations is alleged to have occurred. The competent supervisory authority in Sweden is the Data Inspectorate. This right is without prejudice to any other administrative review process or remedy.

Right to data portability

You have the right to ask us to transfer some of your personal data we have about you to another company (data portability).

The right applies to personal data that you have provided to us in a structured, commonly used and machine-readable format if the processing is based on your consent or on an agreement and the processing is automated. You have the right to transfer the personal data directly from us to another personal data controller when this is technically possible.

Detailed description of how we process your personal data

Here you can read more in detail about why we process your personal data, which categories of personal data we process and what the legal basis for the processing is. You can also read about how long we save your personal data.

Purpose: To administer your purchase

Treatments performed:

Deliver your products

Make payment

Send order and delivery confirmation

Personal data processed:

Name

Contact details (postal address, email address and phone number)

Order information (e.g. which product you have ordered)

Payment information

Legal basis: Performance of contract. The processing is necessary for us to be able to fulfill the agreement regarding your purchase. If the information is not provided, you will not be able to make a purchase with us.

Storage period: The data is processed for twelve months after the purchase has been completed.

In addition to the above, your personal data is processed, e.g. to social security number, also by the payment service provider Klarna to complete your payment. Klarna is the independent personal data controller for your treatments and informs you separately about how your data is processed.

Purpose: To send you reviews after a completed purchase

Treatments carried out:

Send product reviews and reviews about your purchase experience

Personal data processed:

Name

Email address

Order number

Legal basis: Balancing of interests. The processing is motivated by our legitimate interest in being able to contact you with a request to review or rate the products you have purchased and your shopping experience.

Storage period: We send you product reviews one week after the purchase.

Purpose: To send marketing via e-mail and SMS

Treatments performed:

Send marketing and newsletters with offers and information via e-mail and SMS

Send you personalised marketing so that you receive offers and information that we think you are interested in.

Send information about your shopping cart if you have left our website without completing the purchase

Name

Email address

Phone number

For customized communication and reminders about your shopping cart, the following are also processed:

Browsing history

Order history

Legal basis: Balancing of interests. The processing is motivated by our legitimate interest in sending relevant marketing to you as a customer of ours. You have the right to object to the marketing when the data is collected and at each sending.

Consent. If you have registered for our newsletters on our website or provided your consent via e-mail, we will send you marketing based on your consent.

Storage period: The data is processed for one year from the completed purchase with the support of the balancing of interests. If you have given your consent, we will send newsletters until you unsubscribe from our mailings or otherwise object to the marketing.

Purpose: Provide customised marketing in digital channels

Treatments carried out: Providing customised marketing in digital channels, social media and third party websites including sharing data with said actors.

Personal data processed:

Email address

IP address

Cookies

Legal basis: Balancing of interests. The processing is motivated by our legitimate interest in being able to provide you as a customer and other potential customers with customised marketing. Your data is only processed for this purpose if you have made a purchase with us and have not objected to marketing.

Storage period: The data is processed for one year from the completed purchase.

It is important to us that you as a customer feel safe with our handling of your personal data. If you have any questions or comments, please contact us using the details below. This also applies if you want to receive a register extract, have your data corrected or if you wish to have your personal data deleted from our systems. According to law, we undertake to carry out such processing within 30 days of your request. Keep in mind that if you choose to have your personal data deleted from our systems, you yourself need to be able to prove that you made a purchase in order for us to be able to handle buybacks and warranty matters.

Cookies

Read more about which cookies are used and edit your consent here. 

Klarna

In order for us to be able to offer you Klarna's payment methods, we need to share some of your personal data with Klarna, such as contact and order information, so that Klarna can assess whether you can be offered their payment methods and to tailor the payment methods for you.

You can find more information about Klarna  here . The use of this information is regulated in accordance with the current data protection law and Klarna's data protection policy .

KitchenLab AB

Birger Jarlsgatan 106A

114 20 Stockholm

support(a)kitchenlab.se