Last Updated: January 2024
Svenskt Tehus is committed to compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This page provides information about how we handle your personal data in accordance with GDPR requirements.
Data Controller
The data controller responsible for your personal data is:
Svenskt Tehus
Storgatan 42
114 55 Stockholm
Sweden
Email: [email protected]
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: When you voluntarily submit information through our contact forms or subscribe to communications.
- Contractual Necessity: To fulfil orders and provide requested services.
- Legitimate Interest: To improve our services and communicate relevant information about our products.
- Legal Obligation: To comply with applicable laws and regulations.
Your Rights Under GDPR
As a data subject, you have the following rights:
Right of Access (Article 15)
You have the right to obtain confirmation of whether we process your personal data and to access that data along with information about how it is processed.
Right to Rectification (Article 16)
You have the right to request correction of inaccurate personal data and completion of incomplete data.
Right to Erasure (Article 17)
You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for its original purpose.
Right to Restriction of Processing (Article 18)
You have the right to request restriction of processing in certain situations, such as when you contest the accuracy of your data.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object (Article 21)
You have the right to object to processing based on legitimate interests, including profiling, and to processing for direct marketing purposes.
Rights Related to Automated Decision-Making (Article 22)
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making.
Exercising Your Rights
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by up to two additional months, in which case we will inform you.
Data Protection Officer
For questions regarding data protection or to exercise your rights, please contact our data protection representative at [email protected].
International Data Transfers
We primarily process data within the European Economic Area. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where necessary, communicate the breach to affected individuals.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Sweden, this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
Website: www.imy.se
Updates to This Information
We may update this GDPR compliance information periodically. The date of the last update is indicated at the top of this page.