PRIVACY POLICY FOR LINDSTRÖM & SONDÉN AB

LINDSTRÖM & SONDÉN AB RESPECTS YOUR PRIVACY

Winestoragecompany.co.uk, run by Lindström & Sondén AB, respects your privacy and is committed to processing your personal data with a high level of security and in accordance with applicable data protection legislation. This privacy policy describes how we process your personal data if you are a customer to us or a visitor of our website. If you have any questions about our privacy protection, you are always welcome to contact us. Our and our data protection officer’s contact details are available under the section ”Contact Information” below.

CONTROLLER OF PERSONAL DATA

We are the controller of your personal data and are therefore responsible for ensuring that your personal data is processed correctly and securely in accordance with applicable legislation. We sell products under several different brands and through several different websites. We are the personal data controller for personal data collected on Winestoragecompany.co.uk, Myoutdoorkitchen.co.uk and Myrangecooker.co.uk.

OUR PROCESSING OF YOUR PERSONAL DATA

Information on from where we collect your personal data, what personal data we process, the purposes for which we intend to process your personal data, the legal basis for the respective processing activity and the applicable retention periods are stated in the table below. You are under no obligation to share your personal data with us. However, if you choose not to share any personal data with us we will not be able to sell or deliver products to you, provide any customer support to you, send you marketing or otherwise interact with you for the purpose of providing our services.

Data related to our customers

From where we collect the personal dataCategories of personal dataPurposeLegal basisRetention period
From you or the General Register Office (at your request)Name, email, address & phone numberAdminister your purchase, e.g. identification and age verification, receive the order and deliver the product Performance of contract7 years
From youName, email and any other personal data you choose to share with our customer supportProvide customer supportThe processing is necessary for our legitimate interest in providing customer support at request (legitimate interest)7 years
From youName, email, technical data, e.g. IP address, unique device ID, browser, other data from cookies or similar tracking technologies, online behavior, e.g. what products you have purchasedAnalyse your online behavior, personalise and send marketing to youThe processing is necessary for our legitimate interest to market our products and services (legitimate interest)3 years
From youName, email and any other information you provide in connection with the contestAdminister the contests you choose to participate inThe processing is necessary for our legitimate interest in providing customer contests (legitimate interest)3 years
From youPersonal data you have provided in a review, e.g. nameShare reviews with other customers and customise our products and our offering The processing is necessary for our legitimate interest in sharing reviews and adapt products based on such reviews (legitimate interest)Until the product is discontinued in our assortment
From youName, email, information regarding your purchase and use of the product Administer returnsPerformance of contract1 year
From you, via camera surveillance or via cookies on our websitePurchase and order history, personal identity number or coordination number, video and audio recordings, technical data, such as IP address, unique device ID, browser, other data from cookies or similar tracking technologies, online behavior e.g. purchased or viewed products on our website or on one of our websitesPrevent misuse of our websites, services or products and to prevent crimes, such as fraudThe processing is necessary for our legitimate interest to ensure that our products and services are used in accordance with our terms and conditions and applicable law (legitimate interest)3 years
From youName, email, information about your purchasesTo fulfil legal requirements, e.g. legislation regarding returns, accounting, tax and product safetyThe processing is necessary for compliance with our legal obligationsAs long as is required by law
From youName, email, information about your purchasesProtect our legal interests, e.g. in case of non-paymentThe processing is necessary for our legitimate interest in protecting our legal interests, e.g. to receive payment (legitimate interest)7 years
From youInformation shared during the purchase in a shopAnalyse purchasing behavior, customise and send marketing to youConsent3 years

Data related to our website visitors

From where we collect the personal dataCategories of personal dataPurposeLegal basisRetention period
Via cookies on our websitesTechnical data, such as IP address, unique device ID, browser, other data from cookies or similar tracking technologies, online behavior e.g. purchased or viewed products on our website or on one of our websitesAnalyse your online behavior, personalise and send marketing to youConsent3 years
Via cookies on our websitesTechnical data, such as IP address, unique device ID, browser, other data from cookies or similar tracking technologiesTo ensure our website’s functionalityThe processing is necessary for our legitimate interest in ensuring that our websites function as planned (legitimate interest)1 year
Via cookies on our websitesTechnical data, such as IP address, unique device ID, browser, other data from cookies or similar tracking technologiesTo develop our websites, e.g. based on how the website is usedConsent1 year

PROFILING

We may compile information about you from various sources to draw conclusions about your personal interests and your online behavior. This is called profiling. The profiling enables us to create a customer profile that includes, among other things, your previous purchases and which products you have shown an interest for on our websites. The purpose of our profiling is to ensure that the marketing we send to you, such as personalised offers or targeted ads, is relevant to you.

OUR CHANNELS IN SOCIAL MEDIA

We process personal data accessed via our social media channels for the purposes of promoting us and our products, and to interact with existing customers, potential customers and partners. The processing is necessary for our legitimate interest in marketing ourselves and our products and interacting with existing customers, potential customers and partners (legitimate interest). The personal data is processed for as long as necessary to fulfil the purposes of the processing. For information on the platforms' processing of personal data in connection with your visit to our social media channels such as Facebook and Instagram, please refer to the respective platform's privacy policy.

WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

We do not disclose personal data to third parties, except when necessary to fulfil a legal obligation or to fulfil the purposes for which we process your personal data.
Third partyReason for third party disclosurePersonal data disclosed
Other companies within our company groupPersonal data may need to be disclosed to other companies within our group as central functions such as analysis, marketing and finance are managed jointly within the company group we are part of.3 years
Suppliers and partnersWe may disclose your personal data to suppliers and/or partners, if the suppliers and/or partners need your personal data to fulfil their undertakings toward us, e.g. cloud service providers.3 years
AuthoritiesPersonal data may be disclosed to authorities when necessary for compliance with our legal obligations.7 years
SaleIf we intend to transfer all or part of our business, personal data may be disclosed to a potential buyer.7 years

YOUR RIGHTS

A summary of the rights you have as a data subject under the GDPR follows below.

Right to withdraw your consent

When the processing of your personal data is based on your consent as a legal basis, you have the right to withdraw your consent at any time by contacting us via the contact information listed at the bottom of this privacy policy.

Right of access

You have the right to receive information about whether we process personal data about you and in such cases receive a copy of the personal data including information on the purposes of the processing, categories of personal data processed, categories of recipients of the personal data, retention periods, your rights regarding the processing, the existence of automated decision-making (including profiling), information on the appropriate safeguards relating to the transfer of your personal data to countries outside the EU/EEA and, if the personal data has not been collected from you, from where the data is collected.

Right to rectification

If the personal data we process about you is inaccurate, incomplete or outdated, you have the right to ask us to rectify or complete such personal data without undue delay.

Right to be forgotten

You often have the right to request deletion of your personal data without undue delay. Such is the case when (i) the personal data is no longer necessary for the purposes for which they were processed, (ii) you withdraw your consent and there is no other legal basis for the processing, (iii) you have objected to the processing of your personal data for direct marketing purposes or to processing based on legitimate interest as legal basis and we cannot show definitive reasons for the processing which outweigh your interests, rights and freedoms, (iv) the processing does not take place to establish, exercise or defend legal claims, (v) the personal data has been unlawfully processed or (vi) the personal data has to be erased for compliance with a legal obligation.

Right to object

You have the right to object at any time to the processing of personal data based on legitimate interest as legal basis, including e.g. profiling. In addition, you always have the right to object to the processing of your personal data for direct marketing purposes. We will then cease to process the personal data, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing takes place for the establishment, exercise or defense of legal claims.

Right to restriction of processing

Under certain circumstances you have the right to request that we restrict the processing of your personal data. Such is the case when (i) you consider that the personal data is not correct and you are awaiting our verification of the accuracy of the personal data, (ii) the processing is unlawful and you, instead of deleting the personal data, wish the processing to be restricted, (iii) we no longer need the personal data for the purposes of the processing but you need them to establish, exercise or defend legal claims or (iv) when you have objected to processing based on a legitimate interest and you are waiting for a verification on whether our legitimate reasons outweigh yours.

Right to data portability

When personal data you have provided to us is processed by automated means and based on your consent or on a contract with you as legal basis, you have the right to obtain your personal data in a commonly used and machine-readable format and request that such personal data is transmitted to another controller.

Right to lodge complaints

You have the right to file complaints regarding our processing of your personal data with the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten), Box 8114, SE-104 20 Stockholm.

COOKIES

We use cookies and other similar tracking technologies to help make our websites functional by enabling certain functions, to improve the website and send better and more personalised marketing. We use cookies in accordance with this privacy policy and our cookie policy, see link to cookie policy.

CHANGES TO THIS POLICY

We reserve the right to change this Privacy Policy at any time. In the event of changes to this Privacy Policy, we will publish the amended Privacy Policy on [website] with information on when the changes will come into effect. Further, we may also notify amendments by other appropriate means.

CONTACT INFORMATION

Do not hesitate to contact us if you have any questions about this privacy policy, the processing of your personal data or if you wish to exercise your rights under this privacy policy or applicable legislation.