Policy regarding privacy and personal data

1. General

This policy regarding privacy and personal data ("Privacy Policy") describes how Humlegårdens Ekolager AB, Swedish organization number 556563-5199, Bergkällavägen 28, SE-19279 Sollentuna, Sweden, email info@humle.se ("Humlegårdens Ekolager","we") collects, uses, discloses and stores your personal data. This policy is valid from 2018-05-25.

1.1 This Privacy Policy applies to the processing of personal data when Humlegårdens Ekolager provides services and products in connection with the purchase, service requests and other contact between you and Humlegårdens Ekolager, such as visits to our website. This Privacy Policy applies to the processing of personal data carried out within the framework of the holding of an account at Humlegårdens Ekolager's website (the "Account Holder") and the sending of newsletters and other marketing by email or mail.

1.2 You should always be able to feel safe when you provide your personal information to us. With this Privacy Policy, we want to show how we ensure that your personal information is treated in accordance with current data protection legislation (GDPR).

2. Data Controller

Humlegårdens Ekolager is the Data Controller, i.e. responsible for the processing of your personal data, and ensures that such treatment is in accordance with applicable law.

3. When do we process your personal data?

3.1 For you to visit our website, buy our products or services or contact us for service or information we need to collect and process personal information about you.

3.2 Humlegårdens Ekolager collects and processes personal information about you when you make a purchase on Humlegårdens Ekolager’s website, use our support, visit our website or visit an event that we organize, or when you otherwise have contact with Humlegårdens Ekolager. When you place an order, a sales contract with Humlegårdens Ekolager is established, and in order for us  to be able to fulfil this contract and to deliver your goods and services, the information you provide at the time of placing an order is necessary.

3.3 If you are an Account Holder, Humlegårdens Ekolager collects the personal information about you that you provide when you register an account on our site. We also collect information about your purchase history while you are the account holder. Humlegårdens Ekolager also collects the data that you from time to time enter to your account through our site. As the Account Holder, you can at any time update your details by going to "My Pages".

3.4 We also collect and update your address information via third party services for address updating.

4. What personal information do we process?

4.1 If you are a customer of Humlegårdens Ekolager

The personal data Humlegårdens Ekolager collects and processes about you as a customer placing an order and using our support services are:

• Name
• Address
• Phone
• E-mail
• Personal Identity Number
• Customer Number
• Order / Invoice Number
• Items purchased (order lines)
• Payment Data
• IP address and information about your use of our site

4.2 if you are an Account Holder

The personal data Humlegårdens Ekolager collects and processes about you as the account holder are:

• Name
• Address
• Phone
• E-mail
• Personal Identity Number
• Order / Invoice Number
• Payment details
• Account login information
• IP address and information about your use of Humlegårdens Ekolager's website
• Details of your purchases (order history)

4.3 If you receive our newsletter

The personal data Humlegårdens Ekolager collects and processes about you to get our newsletter are:

• Name
• Email
• How you interact with the newsletter

5. Why do we process information about you?

5.1 If you are a customer of Humlegårdens Ekolager

Humlegårdens Ekolager processes your personal data for different purposes. Mainly, we treat your personal information in order to:

• Fulfil our obligations to you, the customer, such as delivering goods purchased by you, and provision of support
• Enable general customer care and customer service, such as to answer questions and correct information
• Provide you with relevant information and marketing emails regarding Humlegårdens Ekolager’s goods and services
• Assess the payment methods we can offer you, for example, through credit ratings
• Improve our customer offering, including the development of services, products and features
• Prevent fraud and perform risk management
• Comply with applicable laws, including accounting laws and customer protection laws
• Allow communication via mail and e-mail
• Enable personalized offers, marketing and event invitations via mail and e-mail
• The information may also serve as a basis for market and customer analysis, market research, statistics, business monitoring and business and method development related to the purchase of goods and services.

5.2 If you are an Account Holder

In addition to the above, for Account Holders we also process personal information in order to:

• Manage the account settings, for example to give you the opportunity to set a new password
• Allow you to see your purchase history
• Give you the opportunity to have pre-filled name and address data in the checkout when placing an order
• Give you the opportunity to manage multiple addresses

6. The lawful basis for our processing of your personal data

The processing of personal data by Humlegårdens Ekolager is based on four of the six available lawful bases, in accordance with GDPR. These bases are described in this section.

6.1 Contract
We process your personal information in order to fulfil the sales contract which is automatically established between us as a seller and you as a customer when you place your order on our website. In order for payment and delivery of goods you buy on our website to work, we need to process information about you.

6.2 Consent
We process your personal information in order to fulfil our commitments to you as an Account Holder, such as simplified management and order history. This is done on the basis of consent, i.e. that by creating an account on our website and entering information about yourself, you agree that the information is stored and can be used to, for example, pre-populate the fields for your name and address when you place an order.

6.3 Legitimate interests
Some of the processing of personal data that we perform is based on legitimate interests. This applies, for example, to the processing we perform in order to send newsletters and offers to you about our products and services. Humlegårdens Ekolager does not process any sensitive personal data on the basis of legitimate interests.

6.4 Legal obligation
In some cases Humlegårdens Ekolager has a legal obligation to process your personal information. This applies for example to the processing of personal data that we perform in order to comply with the requirements from accounting legislation.

7. For how long do we keep information about you?

7.1 Your personal information is stored as long as there is a need in order to fulfil the purposes for which the data were collected in accordance with this Privacy Policy.

7.2 Humlegårdens Ekolager saves data for the Account Holder as long as the Account Holder has an Account with Humlegårdens Ekolager.

8. Summary of our personal data processing

9. Who do we share personal information with?

Humlegårdens Ekolager may share your information with third party data processors, such as suppliers of payment and shipping services.

9.1 Any third party Humlegårdens Ekolager provides personal information to may only use that information in order to achieve the above purposes. This includes providers of payment and shipping services. If you apply for a credit for your purchase, your information may also be disclosed to the credit bureau.

9.2 Personal information may also be disclosed by Humlegårdens Ekolager if it is necessary in order to comply with applicable law or regulatory requirements or to detect, prevent, or pay attention to fraud and other security or technical issues.

9.3 We will never sell your personal information to third parties.

10. The protection of your personal data

You should always be able to feel safe when you provide your personal information to us. Humlegårdens Ekolager has therefore taken security measures required to protect personal data against unauthorized access, modification and deletion.

11. Your rights

11.1 Humlegårdens Ekolager is responsible for your personal data to be processed in accordance with applicable law.

11.2 Humlegårdens Ekolager will at your request or on its own initiative correct, de-identify, delete or complement information that is found to be inaccurate, incomplete or misleading.

11.3 You have the right to request

1. access to your personal data.
   This means that you have the right to request a transcript of your personal data. You are also entitled to receive information about where the data is collected, and the anticipated period during which the data will be stored, or the criteria used to determine this period. You also have the right to know your other rights specified in this paragraph.
   
   
2. Correction of your personal information.
   We will at your request as quickly as possible correct any inaccurate or incomplete information we hold about you.
   
   
3. Deletion of your personal information.
   You have the right to request that your personal information will be removed if it is no longer necessary for the purpose it was collected for. There may however be a legal obligation which means that we cannot immediately erase your personal data.
   
   
4. Limitation of treatment.
   This means that your personal information is marked so that it is processed only for certain limited purposes.

11.4 Humlegårdens Ekolager will inform each recipient with which the personal data is shared as above about any corrections or deletion of data and the limitation of processing.

11.5 You have the right to data portability. This means the right under certain conditions to have your data transferred  in a structured and machine readable format to another data controller. A prerequisite for data portability is that the transfer is technically possible and may be automated.

11.6 You have the right to object to the processing of personal data carried out on the lawful basis of legitimate interest.

11.7 If you do not want us to process your personal data for direct marketing, you always have the right to object to such treatment by sending an email to info@humle.se. Once we have received your complaint, we will cease to process personal data for such marketing purposes.

11.8 Those who believe that a company handles personal data in the wrong way can make a complaint to the Information Commissioner.

12. Cookies

Humlegårdens Ekolager uses cookies. These cookies are deleted when you close your browser. If you open a new browser window new cookies will be created. We store information in a cookie as a random value that is used to create anonymous statistics in our webshop.

13. Contact

Please do not hesitate to contact us if you have any questions about this Privacy Policy, the processing of your personal data or to request a transcript. Our contact information can be found below.

HUMLEGÅRDENS EKOLAGER AB
Bergkällavägen 28
SE-19279 Sollentuna
Sweden
info@humle.se