Privacy Policy

Personal information

Background

The website you are visiting belongs to Pågen AB (corporate registration number 556078-6708, "us" or "we"). When you visit our webshop or participate in competitions related to our brands and products, we may collect and process Personal Data (see definition below) about you. This information on the processing of Personal Data states which categories of Personal Data we process and for what purposes they are processed (the "Policy").

The domain for this website is not owned by Pågen AB. We use a Shopify solution for this website, but the domain itself is owned by Shopify. Although Pågen AB is responsible for the handling of Personal Data on this website, it is important to note that Shopify owns the actual website address.

The term "processing" is used throughout, which encompasses all actions involving Personal Data, such as collection, storage, sharing, access, use, transfer and deletion of Personal Data.

"Applicable Data Protection Law" means the applicable legislation, regulations, including regulations issued by the relevant supervisory authorities, regarding the protection of the fundamental rights and freedoms of natural persons and in particular the right to protection of natural persons' Personal Data when processing Personal Data that is applicable to us, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, the so-called GDPR.

"Personal data" means any information relating to an identified or identifiable natural person.

For information about Pågen's processing of Personal Data in contexts other than your use of this website, see https://pagen.se/integritetspolicy/ .

Cookies

We use cookies and similar technologies to collect information about your device (e.g. computer or smartphone) when you visit our websites. For more information about the cookies we use, see our information on the use of cookies at https://pagen.se/cookies/ .

The purposes of processing your Personal Data

MANAGE PURCHASES AND DELIVERY OF PRODUCTS

As a consumer with us on this website, we use your Personal Data to be able to handle your order, deliver the selected product to your home and for follow-up of this process. If you choose to order a product from this website, we will process your Personal Data to review, handle, ship and deliver your order. Personal data that we may process for these purposes is:

Category of Personal Data

  • Name
  • Address
  • Email address
  • Payment details
  • Social security number, in case you use a payment or credit company to pay for your products
  • Personal information in free text fields

The legal basis for processing your Personal Data as set out above is to be able to perform the purchase agreement with you. In the event of a potential dispute arising from the purchase agreement, we may also process your Personal Data based on the legal basis to be able to defend, establish and enforce legal claims against you.

We will store your Personal Data for as long as it is necessary to fulfill the purposes stated in this information on the processing of Personal Data, unless a longer retention period is required by national law applicable to our processing. Personal data will therefore be stored as a general rule for as long as it is necessary for our fulfillment of the purchase agreement. Invoice documents will be stored in accordance with applicable law.

MANAGE COMPLAINTS, EXCHANGES AND RETURNS OF PRODUCTS

As a consumer, you can request a return, exchange or complaint regarding your ordered products on our online store. If you choose to use such a service, we will process your Personal Data to investigate, manage and respond to your request for return, exchange or complaint. Personal data that we process for these purposes is:

Category of Personal Data

  • Name
  • Address
  • Email address
  • Personal information in free text fields

The legal basis for processing your Personal Data as described above is to be able to fulfill the purchase agreement with you.

We will retain your Personal Data for as long as it is necessary to fulfil the purposes set out in this Personal Data Processing Information, unless a longer retention period is required by national law applicable to our processing. Personal Data will therefore be retained as a general rule for as long as it is necessary for our performance of the purchase agreement.

MANAGE THE WEBSITE

We use cookies on our website to optimize your experience of the website and to be able to manage purchases and orders through the website. Some such cookies collect Personal Data associated with the device (e.g. computer or smartphone) that you use to visit the website. Personal data that we may process for these purposes is:

Category of Personal Data

  • Technical information generated through your use of the website
  • Information about your internet device, such as IP address, language settings, browser settings, operating system
  • Time and date of your visit to the website

The legal basis for processing your Personal Data as described above is our legitimate interest in providing our website.

This processing continues during your visit to the website and is saved for a maximum of 6 months thereafter.

Transfer of Personal Data and use of assistants

If we process your Personal Data, some or all of that Personal Data may be shared with certain specific recipients. When we share your Personal Data, we ensure that the recipient processes it in accordance with this Policy, by entering into data processing agreements with the recipients. The agreements ensure that your data is processed in accordance with Applicable Data Protection Laws.

If you would like information about which recipients may process your Personal Data, please contact us. We would like to emphasize that we never sell your Personal Data to third parties.

We may share your Personal Data with the following categories of recipients:

Warehousing, logistics and delivery companies

We use external partners to deliver the products you have ordered from us. We may share your Personal Data with these parties in order to fulfill our obligations under the purchase agreement with you. These parties may not process or use your Personal Data for any other purpose.

This sharing of your Personal Data takes place on the legal basis that we are able to fulfill our purchase agreement with you.

Payment and credit companies

We have agreements with companies that perform payment and credit services on our behalf, in connection with the purchase of our products. If you choose a payment option handled by such a company, we may share your Personal Data with such party, in order for us to be able to fulfill our obligations under the purchase agreement with you. These companies have access to your Personal Data to the extent they need it to fulfill their mission, but they may not use your Personal Data for any other purpose. It will be clearly stated when such a party is involved in your purchase.

We have a legitimate interest in being able to offer our customers certain payment and credit services in connection with the purchase of our products. If sharing your Personal Data is necessary to pursue that interest, and that interest outweighs your right not to have your Personal Data processed, such sharing may be based on the legitimate interest legal basis.

Website provider

The company Shopify provides the solution for our website. Some of the cookies used and which collect Personal Data about you as a website visitor are provided by Shopify. Shopify thus has access to such Personal Data. Shopify may not process or use your Personal Data for any purpose other than providing and optimizing our website.

We have a legitimate interest in being able to handle purchases and orders on the website and to be able to offer our customers a satisfactory website. Some sharing of your Personal Data is necessary to fulfill that interest. In the event that our interest outweighs your right not to have your Personal Data processed, such sharing may take place on the legal basis of legitimate interest.

TRANSFER OF PERSONAL DATA OUTSIDE THE EU/EEA AREA

As a general rule, our processing of your Personal Data takes place within the EU/EEA. However, the provider of our website is an Irish company with a Canadian parent company. This means that Personal Data collected from cookies on our website may in some cases be transferred to Canada. When such transfers are made, we ensure that appropriate measures are taken to ensure that your Personal Data is adequately protected. The European Commission has made a binding adequacy decision which means that transfers may take place to such Canadian recipients to which Canada's legislation for the protection of Personal Data in the private sector applies. That legislation applies to Shopify's Canadian parent company, and the transfer is therefore carried out in accordance with the European Commission's adequacy decision.

Security

We ensure that technical and organizational measures have been taken to protect Personal Data from unlawful or accidental loss or corruption, as well as from unauthorized or unlawful access to Personal Data. To protect Personal Data, appropriate safeguards have been taken, taking into account the specific risks associated with a particular processing of Personal Data and the level of sensitivity associated with the Personal Data.

Your rights

Under applicable law, you have the right to exercise certain rights when we process your Personal Data. Below we describe each right and what it means for you in relation to the Personal Data we process. If you would like to read more about what the Swedish Data Protection Authority says about these rights, there are links under each section to the relevant page on the Swedish Data Protection Authority's website .

If you would like to exercise any of these rights, find out more, or have any questions, please contact us using the contact details provided at the bottom of this Policy.

RIGHT TO INFORMATION

You have the right to be informed about how we process your Personal Data. In this Policy we generally describe what Personal Data is processed by us in connection with your use of this website. If you would like to know more about whether we process your Personal Data, and to what extent, you can contact us as above and request information about what Personal Data we process.

If you want to read more about the right to information – seehere .

RIGHT TO CORRECTION

We strive to always have accurate Personal Data about you and update it when necessary. If you discover that we are still processing incorrect data about you, you have the right to contact us as above to have it corrected. You also have the right to ask us to complete incomplete data if this is relevant based on the purposes for which your data is processed, by providing us with additional information.

If you want to read more about the right to rectification – see here .

RIGHT TO OBJECT

If the processing of your Personal Data is based on a balancing of interests and you consider that your privacy interests outweigh our legitimate interest in processing your Personal Data, you have the right to object to the processing by contacting us at the contact details provided at the bottom of this Policy.

If you object, we will no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. If we consider that we have such legitimate grounds, or if the data is necessary for the establishment, exercise or defence of legal claims, we will inform you of this and the reasons for our assessment.

If you want to read more about the right to object – seehere .

RIGHT TO DELETION

You have the right to request the deletion of your Personal Data. However, this right is not absolute. In order for us to delete your data, certain conditions must be met. For example, you may have the right to have data deleted if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.

The right to erasure is also limited if an exception applies to the data in question. For example, we have the right to retain the data if it is necessary to establish, exercise or defend legal claims.

If you want to read more about the right to erasure – see here .

RIGHT TO RESTRICTION

You can request that the processing of your data be restricted, for example if you do not believe that the data we have about you is accurate, if you believe that the processing is unlawful. You can also request that the processing of your personal data be restricted while we check whether our legitimate interest outweighs your privacy interest when you object to the processing (see more about this under “Right to object” above).

If you want to read more about the right to restriction – see here .

RIGHT OF ACCESS (REGISTER EXTRACT)

We can also provide you with a copy, a so-called register extract, of the Personal Data processed by us. In the register extract, we provide information about, among other things, which categories of Personal Data are processed, what the Personal Data is used for, how long the data will be stored, with whom the Personal Data has been shared and where the data comes from. Please note that we have the right to charge a reasonable fee if you request more than one copy of your Personal Data according to our price list valid at any time.

If you want to read more about the right of access – see here .

RIGHT TO PORT PERSONAL DATA (DATA PORTABILITY)

If the legal basis for our processing is consent or the performance of a contract, you have the right to receive the Personal Data you have provided to us in a structured, commonly used and machine-readable format. However, this requires that the processing is carried out by automated means (i.e. not in physical form on paper). If technically feasible and you wish, we may transfer your data to another data controller.

If you would like to read more about the right to transfer Personal Data (data portability) – see here .

RIGHT TO WITHDRAW CONSENT

You may withdraw all or part of the consent you have given at any time, with effect from the date of withdrawal (i.e. the processing of Personal Data we have carried out prior to the withdrawal will not be affected). You can do this by contacting us using the contact details provided at the bottom of this Policy.

COMPLAINT TO SUPERVISORY AUTHORITY

You are welcome to contact us with any questions or concerns regarding the processing of your Personal Data. You also have the right to submit any complaints regarding the processing of your Personal Data. This should be done to the Swedish Data Protection Authority, Box 8114, 104 20 Stockholm, tel. 08-6576100, e-mail: imy@imy.se

If you want to read more about the right to file a complaint – see here .

REQUIREMENTS TO EXERCISE YOUR RIGHTS

To protect your privacy, we may, if necessary, require you to prove your identity when you contact us to exercise your rights.

We will handle your request to exercise your rights promptly. Your request will normally be responded to within one month of the date on which the request was received by us. Only in the event of an unusually complex request, or if we have received a large number of requests, the response time may be extended by up to two months. If an extension of the response time is made, you will be notified.

CHANGES TO, AND UPDATES TO, THE PRIVACY POLICY

We may make changes to the Policy if necessary to describe how we process your Personal Data. Any such changes will be posted here on the website, so you should review the Policy periodically and each time you use our services.

Contact us

If you have any questions or comments about Pågen's handling of Personal Data, you are welcome to contact us at:

Pågen AB, Box 8143, 200 41 Malmö

Phone: 040-32 36 00

Email personal data@pagen.se