Personal Data & Privacy Policy

KitchenLab AB (“KitchenLab”, “we” or “us”) protects your privacy. This policy explains how we process the personal data you provide to us and what rights you have.

Our aim is for you to feel confident that your personal integrity is respected and that your personal data is processed correctly. We take responsibility for ensuring that personal data processed by KitchenLab is used only for its intended purposes and is protected against unauthorised access. All processing of personal data within KitchenLab takes place in accordance with applicable data protection legislation; within the EU/EEA, the General Data Protection Regulation (GDPR) applies.

In summary, we process your personal data to:

• Administer your purchase or order.
• Communicate with you in connection with your purchase, e.g. send order confirmations and requests to review your purchase.
• Send marketing and tailored information about products, your shopping cart, competitions and events by email and SMS.
• Provide tailored marketing in digital channels.
• Help you with customer service matters.
• Fulfil legal obligations, such as the right of withdrawal, complaints and accounting requirements.

Who is responsible for the processing of your personal data?

KitchenLab AB, company reg. no. 556785-6199, is responsible for the processing of your personal data (the controller) when we process your data for our own purposes.

If you have any questions regarding our processing of your personal data, or if you wish to exercise any of your rights, you can contact us:

KitchenLab AB, Birger Jarlsgatan 106, 114 20 Stockholm, Sweden
Email: info@kitchenlab.se
Phone: +46 (0)8-410 95 200

Who has access to your personal data?

Your personal data is primarily processed by us at KitchenLab. We also share your personal data as set out below.

• To maintain functioning IT systems and run our business efficiently, we share your personal data with our IT suppliers, solely so that they can fulfil their obligations towards us.
• To administer your payment, we share your personal data with our payment service provider (e.g. Klarna). If you choose to pay by invoice, the payment service provider may share your personal data with credit reference agencies to assess your financial situation.
• To deliver your order and handle any returns, we share your personal data with the carrier you select at checkout.
• To handle customer service matters, we share your personal data with the company that provides our customer service.
• To provide you and other potential customers with tailored marketing in digital channels, we share your personal data with the third-party providers of those services and with external partners who help us administer our marketing in digital channels.

How can you influence our processing of your personal data?

Under data protection legislation you have certain rights that you can use to influence how we process your personal data, as described below.

Right to withdraw consent and to object to processing

You have the right to withdraw all or part of any consent you have given to the processing of your personal data. The withdrawal takes effect from the point at which it is made.

You always have the right to object to your personal data being processed for marketing purposes and profiling, such as newsletters and tailored marketing.

You also have the right to object at any time to processing based on a balancing of interests (see below for what this means). In some cases, however, you cannot object to such processing — for example if we are required to retain your personal data — namely where we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where the processing is for the establishment, exercise or defence of legal claims.

Right of access

You have the right to receive confirmation of whether we process personal data concerning you, together with information about that processing, e.g. the purposes and how long the data is stored. You can also access the personal data and receive a copy of the data we process.

Right to rectification

You have the right to have inaccurate personal data concerning you corrected and to ask us to complete any incomplete personal data.

Right to erasure and restriction of processing

Under certain conditions you have the right to request the erasure of your personal data — for example where the data is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and there is no other legal basis for the processing.

You also have the right to ask us to restrict our processing of your personal data — for example where you dispute the accuracy of the data, or where the processing is unlawful and you object to erasure and instead request restriction of use.

Right to lodge a complaint with a supervisory authority

You always have the right to lodge a complaint with a competent supervisory authority. Such a complaint should preferably be submitted to the authority in the EU/EEA member state where you usually reside, where you work, or where the alleged infringement took place. The competent supervisory authority in Sweden is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). This right is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to ask us to transfer certain personal data we hold about you to another company (data portability). This applies to personal data you have provided to us in a structured, commonly used and machine-readable format, where the processing is based on your consent or on a contract and is carried out automatically. Where technically possible, you have the right to have the data transferred directly from us to another controller.

Detailed description of how we process your personal data

Below you can read in more detail why we process your personal data, which categories of data we process, the legal basis for the processing and how long we store your data.

Purpose: To administer your purchase

Processing carried out:

• Deliver your products.
• Handle payment.
• Send order and delivery confirmations.

Personal data processed:

• Name.
• Contact details (postal address, email address and phone number).
• Order information (e.g. which products you have ordered).
• Payment information.

Legal basis: Performance of a contract. The processing is necessary for us to fulfil the agreement regarding your purchase. If the information is not provided, you will not be able to make a purchase with us.

Storage period: The data is processed for twelve months after the purchase has been completed. Order data that we are required to retain under the Swedish Accounting Act (Bokföringslagen) is kept for as long as the law requires (currently seven years).

In addition, some of your personal data — including your personal identity number (personnummer) — is processed by the payment service provider Klarna in order to complete your payment. Klarna is an independent controller for that processing and informs you separately about how your data is handled.

Purpose: To send you review requests after a completed purchase

Processing carried out: Send requests to review the products you have purchased and your shopping experience.

Personal data processed:

• Name.
• Email address.
• Order number.

Legal basis: Balancing of interests. The processing is justified by our legitimate interest in contacting you with a request to review or rate the products you have purchased and your shopping experience.

Storage period: We send the review request approximately one week after the purchase.

Purpose: To send marketing by email and SMS

Processing carried out:

• Send marketing and newsletters with offers and information by email and SMS.
• Send you personalised marketing with offers and information we believe you will find relevant.
• Send a reminder about your shopping cart if you leave our website without completing the purchase.

Personal data processed:

• Name.
• Email address.
• Phone number.

For personalised communication and shopping cart reminders, we also process:

• Browsing history.
• Order history.

Legal basis: Balancing of interests — justified by our legitimate interest in sending relevant marketing to you as our customer. You have the right to object to the marketing both when the data is collected and at each sending. Where you have registered for our newsletters on our website or given your consent by email, we send you marketing on the basis of your consent.

Storage period: On the basis of balancing of interests, the data is processed for one year from the completed purchase. Where you have given your consent, we send newsletters until you unsubscribe or otherwise object to the marketing.

Purpose: To provide tailored marketing in digital channels

Processing carried out: Providing tailored marketing in digital channels, social media and third-party websites, including sharing data with those parties.

Personal data processed:

• Email address.
• IP address.
• Cookies.

Legal basis: Balancing of interests — justified by our legitimate interest in providing you and other potential customers with tailored marketing. Your data is processed for this purpose only if you have made a purchase with us and have not objected to marketing.

Storage period: The data is processed for one year from the completed purchase.

It is important to us that you feel safe with how we handle your personal data. If you have any questions or comments, please contact us using the details below. The same applies if you wish to receive a copy of your data, have it corrected, or have your personal data deleted from our systems. By law, we undertake to handle such requests within 30 days. Please note that if you choose to have your personal data deleted, you will need to be able to prove your purchase yourself in order for us to handle returns and warranty matters.

Cookies

You can read more about which cookies we use, and edit your consent, on our cookie page.

Klarna

In order to offer you Klarna’s payment methods, we need to share some of your personal data with Klarna, such as contact and order information, so that Klarna can assess whether their payment methods can be offered to you and tailor those methods accordingly. You can find more information in Klarna’s privacy notice. The use of this information is regulated in accordance with applicable data protection law and Klarna’s privacy policy.

Contact

KitchenLab AB
Birger Jarlsgatan 106
114 20 Stockholm, Sweden
Email: info@kitchenlab.se