Privacy Policy

Generally

This Privacy Policy describes how Konditori Edsviken (Konditori Edsviken AB, org. nr 559105-0918), hereinafter referred to as Konditori Edsviken, handles your personal data. With this policy, we want to demonstrate with how we ensure that your personal data is processed in accordance with applicable privacy laws so that you can feel confident when you submit your company and personal information to us.

Data controller

Konditori Edsviken is responsible for the processing of your personal data and ensure that the processing is carried out in accordance with this Privacy Policy and all the provisions of the General Data Protection Regulation (GDPR). 

Collection of information

We regularly receive and process various types of personal data in connection with our business operations. “Personal data” are data that can be used to identify you or data that can otherwise be linked to you. 

We mainly process personal data we obtain from you directly, for example when you place an order, sign up for our newsletter, send emails to us or communicate with us through other channels. Where applicable, we also process personal data obtained from publicly available sources.

We mainly process the following types of personal data:

• Basic information, such as your name and your contact information (email, address(es), phone number(s)). If you are a company representative, we will also process data such as the company's name, organization number, contact details and your title or position
• Any other information relating to you which you may provide to us

Use of information

We use the personal data we collect from you for the following purposes: 

• Management and administration of our business relationship with you and/or your organisation, including the processing of payments, accounting, auditing, billing, and collection as well as related support services
• Business development and marketing, such as (i) communicating with you with respect to news, events, products and services which may be of interest to you; (ii) maintaining our contact lists; and (iii) compiling statistics and improving our services and communications with you
• Compliance with our legal obligations, such as accounting laws, and to prevent fraud and carry out risk management

Lawful basis for data collection

We process your personal data for different purposes. All personal data is lawfully processed, as described below.

Purpose 1: To deliver purchased goods and provide services correlated to your purchase

• Lawful basis: Completion of purchase agreement (terms of sale)
• What personal data is stored: Name, billing address, delivery address, phone number(s), email address. If you represent a company, we will also store the company's name, organization number and/or VAT nr.
• Storage time: Three years after your last contact with Konditori Edsviken. 

Purpose 2: To communicate with you with respect to news, events, products and services which may be of interest to you

• Lawful basis: Legitimate interests
• What personal data is stored: Email address, and also name, billing address, delivery address and phone number(s) if you have provided us with this. If you represent a company and have provided us with the company's name, organization number and/or VAT nr, this will also be stored.
• Storage time: Three years after your last contact with Konditori Edsviken. 

Purpose 3: To ensure that current legislation is complied with, such as the Swedish Accounting Act

• Lawful basis: Obligation under applicable law
• What personal data is stored for this purpose: Name, billing address, delivery address, phone number(s), email address. If you represent a company, we will also store the company's name, organization number and/or VAT nr.
• Storage time: As long as we are required to store the data in accordance with applicable law

How long we will store your data

Your personal data will only be stored as long as there is a need to save them to fulfil the purposes for which the data was collected in accordance with this Privacy Policy. We may save the data for longer if necessary to comply with applicable legislation or, where appropriate, to safeguard legal interests.

Disclosure to third parties

We do not sell, trade, or otherwise transfer to outside parties your personal data. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.

We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property, or safety. 

Security & Information Protection

We take a variety of security measures to protect your personal information. We use encryption methods to protect sensitive data transmitted over the Internet. Only employees who will perform a specific job (e.g. billing or customer service) will have access to personally identifiable information. The computers/servers used to store personally identifiable information are therefore intended as well as safe environments in Sweden.

Do we use cookies?

Yes. We use cookies to help us remember and process the items in your shopping cart, understand and save your preferences for future visits and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. Our use of cookies is not linked to personally identifiable information on our site.

Your rights

Under applicable data protection laws, you have the following rights:

• Right to access and obtain a copy of your personal information: You are entitled to request confirmation whether we process any of your personal information. Where this is the case, you may have access to your personal information and to certain information about how it is processed. In some cases, you can ask us to provide you with an electronic copy of your information.
• Right to correct your personal information: If you can demonstrate that personal information we hold about you is not correct, you can ask that this information is updated or otherwise corrected.
• Right to be forgotten/have data deleted: In certain circumstances you have the right to have your personal data deleted. You may make such a request at any time and Konditori Edsviken will evaluate if your request should be granted, however this right is subject to any legal rights or obligations we may have to retain data. For situations where in accordance with the law, we determine that your request to have your personal information deleted must be granted, Konditori Edsviken will do so without undue delay.

Change of privacy policy

Konditori Edsviken is entitled to amend and supplement the privacy policy as needed.

Contact

Please do not hesitate to contact us if you have any questions about this privacy policy, the processing of your personal information or if you wish to request a registry extract. 

Konditori Edsviken AB

Ulvsätersvägen 4A

191 45 Sollentuna

SWEDEN

Phone: +46 (0)8 601 32 22

E-mail: info@fikamix.com

Organisation no: 559105-0918

This Privacy Policy was established by Konditori Edsviken 2019-03-06.