Who is responsible for the personal data we collect? 

Smiling Monkey By Sweden AB, org. No. 559153-7997, is responsible for personal data for the company's processing of personal data.

When your personal data is shared with personal data assistants, it only happens for purposes that are consistent with the purposes for which we have collected the information (for example, to be able to fulfill our obligations under the purchase agreement). We check all personal data assistants to ensure that they can provide adequate guarantees regarding the security and confidentiality of personal data. We have written agreements with all personal data assistants, through whom they guarantee the security of them personal data that is processed and undertakes to comply with our security requirements, and restrictions and requirements regarding the international transfer of personal data. 

Companies that are independently responsible for personal data. We also share yours personal data with certain companies that are independently responsible for personal data. To the company is independently responsible for personal data means that we are not in control how the information provided to the company is to be processed. Independent personal data controllers with whom we share your personal data are:

• Government agencies (police, tax authorities or other agencies) if we are obliged to do so by law or on suspicion of crime 
• Companies that handle general goods transport (logistics companies and freight forwarders)
• Companies that offer payment solutions (card-redeeming companies, banks and others payment service providers) When your personal information is shared with a company that is independent the person responsible for personal data applies to the company's privacy policy and personal data management. 

When buying from us, Klarna's cash register is used as standard, Klarna therefore processes yours personal data as personal data controller. Personal data is processed among other for the fulfillment of the agreement, as well as for via external and internal databases carry out identification and credit checks. For more detailed information on Klarna's processing of personal data and your rights in connection with treatment see: Klarnas data protection policy WHERE DO WE PROCESS YOUR PERSONAL DATA? We always strive for your personal data to be processed within the EU / EEA and everyone our own IT systems are located within the EU / EEA. For systemic support and maintenance however, we may have to transfer the information to a country outside the EU / EEA, to example if we share your personal data with a personal data assistant who, either itself or through a subcontractor, is established or stores information in a country outside the EU / EEA. In these cases, the assistant may only take part in that information relevant to the purpose (for example, log files). No matter in which country your personal data is processed, we take all reasonable legal, technical and organizational measures to ensure that the level of protection is the same as within the EU / EEA. In cases where personal data is processed outside the EU / EEA the level of protection is guaranteed either by a decision of the European Commission that the country in question ensures an adequate level of protection or through the use of such called appropriate safeguards. Examples of suitable protective measures are approved code of conduct in the recipient country, standard contractual clauses, binding intra-corporate rules or Privacy Shield. 

YOUR RIGHTS & CONSENT 

WHAT RIGHTS DO YOU HAVE AS REGISTERED? 

Right of access (so-called register extract). We are always open and transparent with how we process your personal data and if you want to get a deeper insight into which personal data we process about you, you can request access to the data. The information is provided in the form of a register extract stating the purpose, categories of personal data, categories of recipients, storage periods, information about where the information was collected from and the presence of automated decision making. Keep in mind that if we receive a request for access, we may ask additional information to ensure the efficient handling of your request and that the information is provided to the right person.

Right to rectification. You can request that your personal information be corrected if the information is wrongfully. Within the framework of the stated purpose, you also have the right to supplement possibly incomplete personal data. You have the right to withdraw any consent you have given us at any time. For example consent to send newsletters. Right to delete. You can request deletion of personal data we process about you if:

● The information is no longer necessary for the purposes for which it was collected in or treated 

● You object to a balance of interests we have made based on justified interest and your reason for objection outweighs our legitimate interest 

● You object to processing for direct marketing purposes 

● Personal data is processed illegally 

● Personal data must be deleted in order to fulfill a legal obligation vi covered by 

● Personal information has been collected about a child (under the age of 13) that you have parental responsibility for and collection has taken place in connection with the offer of information society services (eg social media) Keep in mind that we may have the right to deny your request if there are legal obligations such as prevents us from immediately deleting certain personal data. These obligations comes from accounting and tax legislation, banking and money laundering legislation, but also from consumer law. It may also be that the treatment is necessary for us to be able to establish, assert or defend legal claim. Should we be prevented from accommodating a request for deletion coming we instead block personal data from being used for purposes other than the purpose that prevents the requested deletion.

Right to restriction. You have the right to request our treatment of yours personal data is limited. If you dispute that the personal data we process is correct, you can request a limited treatment for the time we need to check whether the personal data is correct. If we no longer need personal data for the stated purposes, but you need them for to be able to establish, assert or defend legal claims, you can request limited processing of the data with us. That means you can request that we does not delete your data. If you have objected to a balance of interests interest that we have made as a legal basis for a purpose you can request limited treatment for the time we need to check whether our eligible interests outweigh your interests in having the data deleted. If the treatment has been limited according to any of the situations above, we can only, in addition to the actual storage, process the data to determine, assert or defend legal claims, to protect someone else's rights or if you have have given your consent. The right to object to a certain type of treatment. You always have the right to escape direct marketing and to object to any processing of personal data such as based on a balance of interests. Legitimate interest: In cases where we use a balance of interests as a legal basis for one purpose, you have the opportunity to object to the treatment. To be able to continue process your personal data after such an objection, we need to be able to show one compelling justified reasons for the current treatment that weigh heavier than yours interests, rights or freedoms. Otherwise, we may only process the data in order to establish, exercise or defend legal claims. Direct marketing (including analyzes performed for direct marketing purposes): You have the opportunity to object to your personal data processed for direct marketing. The objection also includes the analyzes of personal data (so-called profiling) which is performed for direct marketing purposes. Direct marketing refers to all types of outreach marketing measures (for example via mail, e-mail and SMS). Marketing measures where you as a customer actively chose to use one of our services or otherwise contacted us to find out more about our services does not count as direct marketing (for example product recommendations or other features and offers). If you object to direct marketing, we will stop processing of your personal information for that purpose as well as cease all types of direct marketing measures. You can change this by changing the settings via unsubscribe link in marketing mail or contact customer service. Right to data portability. If our right to process your personal data is established either with your consent or the performance of an agreement with you, you have the right to request to have the information concerning you and which you have provided to us transferred to another personal data controller (so-called data portability). A condition for data portability is that the transfer is technically possible and can be automated.

HOW LONG DO WE SAVE YOUR PERSONAL DATA? 

We never store your personal information longer than is necessary for each purpose. See more about the specific storage periods under each purpose.