Who is responsible for the personal data we collect?
Smiling Monkey By Sweden AB, org. No. 559153-7997, is responsible for personal data for the company's processing of personal data.
To be able to provide our products and services.
Your personal data is used to give you the best possible products and services. Examples of how your personal data is used related to this purpose:
We process the following information:
TO BE ABLE TO COMPLETE THE COMPANY'S LEGAL OBLIGATIONS
Necessary handling for fulfillment of the company's legal obligations according to legal requirements, judgments or government decisions (eg the Accounting Act, the Money Laundering Act or the rules on product liability and product safety, which may require development of communication and information to the public and customers about product alarms and product recalls in the event of, for example, a defective or hazardous product). We treat for this purpose;
● Social security number
● Contact information (eg address, e-mail and telephone number)
● Payment history
● Payment information
● Your correspondence
● Information about the time of purchase, place of purchase, any errors / complaints
● Legal basis: Legal obligation. This collection of your personal data required by law. If the information is not provided, our legal obligation can not fulfilled and we are therefore forced to deny you the purchase.
● Storage period: Until the purchase has been completed (including delivery and payment) and for a period of 36 months thereafter, or up to seven years for data which are processed in accordance with the Accounting Act.
TO BE ABLE TO HANDLE CUSTOMER SERVICE ISSUES which includes:
● Communication and answering any questions to customer service (via telephone or in digital channels, including social media).
● Identification and questions regarding user account.
● Investigation of any complaints and support matters (including technical support).
● Questions and advice on and before purchases, questions about products, return handling, change of order and similar matters. We process the following information;
● Social security number
● Contact information (eg address, e-mail and telephone number)
● Your correspondence
● Information about purchase (time, place of purchase, possible error / complaint)
● Legal basis: Legitimate interest, as well as express consent in the cases we processes sensitive data. The treatment is necessary to satisfy our and your legitimate interest in handling customer service matters.
● Storage period: 36 months after the customer service case has been closed.
TO BE ABLE TO PREVENT ABUSE OF A SERVICE OR
TO PREVENT, PREVENT AND INVESTIGATE CRIMES AGAINST
THE COMPANY AND CUSTOMERS
When your personal data is shared with personal data assistants, it only happens for purposes that are consistent with the purposes for which we have collected the information (for example, to be able to fulfill our obligations under the purchase agreement). We check all personal data assistants to ensure that they can provide adequate guarantees regarding the security and confidentiality of personal data. We have written agreements with all personal data assistants, through whom they guarantee the security of them personal data that is processed and undertakes to comply with our security requirements, and restrictions and requirements regarding the international transfer of personal data.
Companies that are independently responsible for personal data. We also share yours
personal data with certain companies that are independently responsible for personal data. To
the company is independently responsible for personal data means that we are not in control
how the information provided to the company is to be processed. Independent
personal data controllers with whom we share your personal data are:
When buying from us, Klarna's cash register is used as standard, Klarna therefore processes yours personal data as personal data controller. Personal data is processed among other for the fulfillment of the agreement, as well as for via external and internal databases carry out identification and credit checks. For more detailed information on Klarna's processing of personal data and your rights in connection with treatment see: Klarnas data protection policy WHERE DO WE PROCESS YOUR PERSONAL DATA? We always strive for your personal data to be processed within the EU / EEA and everyone our own IT systems are located within the EU / EEA. For systemic support and maintenance however, we may have to transfer the information to a country outside the EU / EEA, to example if we share your personal data with a personal data assistant who, either itself or through a subcontractor, is established or stores information in a country outside the EU / EEA. In these cases, the assistant may only take part in that information relevant to the purpose (for example, log files). No matter in which country your personal data is processed, we take all reasonable legal, technical and organizational measures to ensure that the level of protection is the same as within the EU / EEA. In cases where personal data is processed outside the EU / EEA the level of protection is guaranteed either by a decision of the European Commission that the country in question ensures an adequate level of protection or through the use of such called appropriate safeguards. Examples of suitable protective measures are approved code of conduct in the recipient country, standard contractual clauses, binding intra-corporate rules or Privacy Shield.
YOUR RIGHTS & CONSENT
WHAT RIGHTS DO YOU HAVE AS REGISTERED?
Right of access (so-called register extract). We are always open and transparent with how
we process your personal data and if you want to get a deeper insight into which
personal data we process about you, you can request access to the data.
The information is provided in the form of a register extract stating the purpose,
categories of personal data, categories of recipients, storage periods, information
about where the information was collected from and the presence of automated
Keep in mind that if we receive a request for access, we may ask
additional information to ensure the efficient handling of your request and that
the information is provided to the right person.
Right to rectification. You can request that your personal information be corrected if the information is wrongfully. Within the framework of the stated purpose, you also have the right to supplement possibly incomplete personal data. You have the right to withdraw any consent you have given us at any time. For example consent to send newsletters. Right to delete. You can request deletion of personal data we process about you if:
● The information is no longer necessary for the purposes for which it was collected in or treated
● You object to a balance of interests we have made based on justified interest and your reason for objection outweighs our legitimate interest
● You object to processing for direct marketing purposes
● Personal data is processed illegally
● Personal data must be deleted in order to fulfill a legal obligation vi covered by
● Personal information has been collected about a child (under the age of 13) that you have
parental responsibility for and collection has taken place in connection with the offer of
information society services (eg social media)
Keep in mind that we may have the right to deny your request if there are legal obligations such as
prevents us from immediately deleting certain personal data. These obligations
comes from accounting and tax legislation, banking and money laundering legislation,
but also from consumer law. It may also be that the treatment is
necessary for us to be able to establish, assert or defend legal
claim. Should we be prevented from accommodating a request for deletion coming
we instead block personal data from being used for purposes other than
the purpose that prevents the requested deletion.
Right to restriction. You have the right to request our treatment of yours
personal data is limited. If you dispute that the personal data we process is
correct, you can request a limited treatment for the time we need to
check whether the personal data is correct. If we no longer need
personal data for the stated purposes, but you need them for
to be able to establish, assert or defend legal claims, you can request
limited processing of the data with us. That means you can request that we
does not delete your data. If you have objected to a balance of interests
interest that we have made as a legal basis for a purpose you can request limited
treatment for the time we need to check whether our eligible
interests outweigh your interests in having the data deleted.
If the treatment has been limited according to any of the situations above, we can only,
in addition to the actual storage, process the data to determine, assert or
defend legal claims, to protect someone else's rights or if you have
have given your consent. The right to object to a certain type of treatment. You always have the right to escape
direct marketing and to object to any processing of personal data such as
based on a balance of interests.
Legitimate interest: In cases where we use a balance of interests as a legal basis for one
purpose, you have the opportunity to object to the treatment. To be able to continue
process your personal data after such an objection, we need to be able to show one
compelling justified reasons for the current treatment that weigh heavier than yours
interests, rights or freedoms. Otherwise, we may only process the data in order to
establish, exercise or defend legal claims.
Direct marketing (including analyzes performed for direct
marketing purposes): You have the opportunity to object to your personal data
processed for direct marketing. The objection also includes the analyzes of
personal data (so-called profiling) which is performed for direct marketing purposes.
Direct marketing refers to all types of outreach marketing measures
(for example via mail, e-mail and SMS). Marketing measures where you as a customer
actively chose to use one of our services or otherwise contacted us to find out
more about our services does not count as direct marketing (for example
product recommendations or other features and offers).
If you object to direct marketing, we will stop processing
of your personal information for that purpose as well as cease all types of direct
marketing measures. You can change this by changing the settings via
unsubscribe link in marketing mail or contact customer service.
Right to data portability. If our right to process your personal data is established
either with your consent or the performance of an agreement with you, you have the right to request
to have the information concerning you and which you have provided to us transferred to another
personal data controller (so-called data portability). A condition for
data portability is that the transfer is technically possible and can be automated.
HOW LONG DO WE SAVE YOUR PERSONAL DATA?
We never store your personal information longer than is necessary for each
purpose. See more about the specific storage periods under each purpose.
HOW DOES SMILING HANDLE MONKEY PERSONNEL & -TASKS? HOW DO WE HANDLE PERSONAL NUMBERS?
HOW IS YOUR PERSONAL DATA PROTECTED?
WHAT DOES IT MEAN THAT THE DATA INSPECTION IS
DO YOU HAVE QUESTIONS ABOUT DATA PROTECTION?
crucial for our processing of personal data (e.g. change of
specified purposes or categories of personal data) or updates that are not
crucial for the treatment but which may be crucial
for you, you will receive information on smilingmonkey.se and via email (if you have
specified email address) in good time before the updates take effect. When we make available
information about updates, we will also explain the meaning of
the updates and how they may affect you.