INTEGRITY POLICY

1. INTRODUCTION
JFR ECOMMERCE AB takes your personal integrity very seriously and always strives to have a high level of data protection and treat you as a customer with the transparency you request. Below (together with our Purchase Terms) you will be able to read in detail how we process and protect your personal data, why we collect various personal data and which personal data we process and for what purpose. Please take your time to read through and understand our privacy policy. Our goal is to be as clear as possible and keep your personal data protected. Remember that you can always review your personal data and make the changes you want.

JFR ECOMMERCE AB AB, org. no. 556856-7514 is the personal data controller for the personal data collected.

2. WHAT IS PERSONAL DATA?
Personal data (also called "personal information", "personal data" and/or ) is data/information that can be used to identify you or contact you. Personal data does not have to contain names and can therefore also be other digital identifiers such as images, IP numbers, email etc., i.e. data that can be linked to a physical person.

All information saved about the customer is handled in accordance with the Personal Data Act (1998:204) until it is replaced by the European Data Protection Regulation Directive 95/46/EC (General Data Protection Regulation, or “GDPR”) on May 25, 2018. From and as of 25 May 2018, all data stored and/or processed about the customer will be processed in accordance with the GDPR.

3. WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU AS A CUSTOMER AND FOR WHAT PURPOSE?

A) HANDLING AND OVERVIEW OF ORDERS AND RETURNS
WHY IS THIS INFORMATION COLLECTED?
The information is collected so that we can ensure your delivery of the order and provide you with information regarding the order/return, handling complaints and warranty matters and carry out refunds. The information is also collected to provide you with a relevant shopping experience via the website, email and/or SMS; like for example. delivery updates, order status and account overview.

PERSONAL DATA PROCESSED:
Name

Contact details (Phone number, Email)

Address information (Invoicing address, delivery address, IP number)

Social security number

Order history (Selected payment methods, ordered goods)

LEGAL BASIS
Completion of the purchase agreement. This collection of your personal data is required in order for us to be able to fulfill our obligations according to the purchase agreement. If the information is not provided, our obligations cannot be fulfilled and we are therefore forced to refuse you the purchase.

B) HANDLING CUSTOMER SERVICE ISSUES AND CUSTOMER CONTACTS
WHY IS THIS INFORMATION COLLECTED?
To be able to solve your customer issues and give you the best buying experience. We always want to be able to answer all your questions and therefore process the information we receive from you during customer contact only to deliver a high level of service and to assist you, both in the moment but also during an ongoing customer relationship.

PERSONAL DATA PROCESSED:
Name

Contact details (Phone number, Email)

Address information (Invoicing address, delivery address, IP number)

Social security number

Order history (Selected payment methods, ordered goods)

Correspondence history (via email, phone, social media, chat, digital channels)

Social security number (possibly ID documentation in case of extended verification when you request access to your customer information)

LEGAL BASIS
Legitimate interest. The processing is necessary to satisfy our and your legitimate interest in handling customer service matters

C) BE ABLE TO FULFILL THE COMPANY'S LEGAL OBLIGATIONS
WHY IS THIS INFORMATION COLLECTED?
Necessary processing for fulfilling the company's legal obligations according to legal requirements, judgments or authority decisions, e.g. the Accounting Act, the Money Laundering Act or the rules on product liability and product safety.

PERSONAL DATA PROCESSED:
Name

Contact details (Phone number, Email)

Address information (Invoicing address, delivery address, IP number)

Social security number

Order history (Selected payment methods, ordered goods)

Correspondence history (via email, phone, social media, chat, digital channels)

Social security number (possibly ID documentation in case of extended verification when you request access to your customer information)

LEGAL BASIS
Legal obligation. This collection of your personal data is required by law. If the information is not provided, our legal obligation cannot be fulfilled.

D) BE ABLE TO EVALUATE, DEVELOP AND IMPROVE OUR SERVICES FOR THE BEST OF THE CUSTOMER
WHY IS THIS INFORMATION COLLECTED?
The information may be collected during reviews, competitions and customer satisfaction surveys to customize our services and make them more relevant and user-friendly for you as a customer.

PERSONAL DATA PROCESSED:
Name

Contact details (Phone number, Email)

Address information (Invoicing address, delivery address, IP number)

Age

Purchase and user generated data (eg click and visit history).

Technical data concerning devices used and their settings (eg language setting, IP address, browser settings, time zone, operating system, screen resolution and platform).

Information about how you have interacted with us, i.e. how you have used the service, login method, where and how long different pages were visited, response times, download errors, how you reach and leave the service, etc.

LEGAL BASIS
Legitimate interest. The processing is necessary to satisfy our and our customers' legitimate interest in evaluating, developing and improving our services, products and systems.

E) ENABLE TARGETED MARKETING
WHY IS THIS INFORMATION COLLECTED?
In order to communicate relevant information and offers to you, we analyze the data we have collected in various ways. The creation of your personal offers and general offers, customized news, product recommendations and inspiration.

INFORMATION WE MAY COLLECT:
Contact details (Phone number, Email, IP number)

Age

Purchase and user generated data (eg click and visit history).

Specified customer choices regarding products and services.

LEGAL BASIS
Legitimate interest. The processing is necessary to satisfy our legitimate interest in communicating personal and relevant information and offers to you.

4. STORAGE PERIOD
We will not save your personal data longer than is necessary for the respective purpose and to fulfill our legal obligations. As long as you have a customer account with us, we will also save information related to the account, this can be deleted at any time at your request. When we no longer need to store your information, it will be deleted and destroyed.

5. ACCESS AND PROCESSING OF PERSONAL DATA
We will never sell your personal data to any third party. However, we cooperate with selected suppliers and services with which we partly share your personal data in order to improve and/or enable your customer experience and purchases with us, these are so-called personal data assistants. All our partners are carefully selected and follow the requirements of GDPR to ensure all information and protection of your data. In the following cases, personal information may be shared with our personal data assistants:

IT operation (Companies that help with IT development, operation and IT support)

Marketing (Media agencies and marketing agencies)

Finance and administration (Accounting and audit firms)

We also share your personal data with certain parties who are independent personal data controllers. When your personal data is shared with a party that is an independent personal data controller, the party's privacy policy and personal data handling apply. These actors can be the following:

Government authorities that we are obliged to share with according to law or in case of suspicion of crime (Tax Agency, the police and insurance companies)

Payment providers (banks, payment service providers and card issuers)

Freight forwarders, to complete the delivery of the order (Logistics companies and transport companies)

In cases where our Personal Data Processors are located outside the EU/EEA, we will take the same measures and implementation of routines to ensure that they follow and take the necessary legal, technical and organizational measures to achieve an equivalent level of protection as within the EU/EEA or "Privacy Shield" standard. We limit the collection of your personal data to the minimum necessary, both within and outside the EU/EEA.

6. YOUR RIGHTS
You have the right to access the personal data that we have in relation to you. You therefore have the right to receive an extract of what information we have about you and in what contexts this is processed and shared. Keep in mind that if we receive a request for access, we will ask for additional information to ensure that the information is disclosed to the correct person.

You have the right to rectification, where you can supplement or correct your personal data where information is missing or incorrect.

Right to withdraw consent. You have the right to withdraw the consent you have given us at any time, e.g. unsubscribe from the newsletter.

Right to deletion, where you can request that we delete all personal data that is stored and related to you, which we have no legal requirement or obligation to save.

Right to limit. You have the right to request that our processing of your personal data be restricted.

You have the right to object to the processing of personal data based on our legitimate interest. We will not continue to process the personal data unless we can demonstrate a legitimate reason for the process that takes precedence over your interests and rights or due to legal claims.

Right to data portability. You have the right to receive a copy of your personal data in a structured, commonly used format and, in certain cases, to have this data transferred to another personal data controller. This only includes information that you have provided to us.

Direct marketing. You have the right to refuse or make changes to the personal data used for direct marketing, including profile analyzes carried out for direct marketing purposes. This includes e.g. newsletters and SMS, where you can therefore make the necessary changes for each channel by following the instructions in each marketing mailing.

Contact the supervisory authority. The Swedish Data Protection Authority is responsible for monitoring the application of the legislation, and anyone who believes that a company is handling personal data incorrectly can submit a complaint to the Swedish Data Protection Authority.

7. COOKIES
Cookies are small text files that are saved on your computer or other device that contain data and data exchange to save display settings. It is not a requirement to accept Cookies from our side, but in order to extract full functionality from the page and to use certain services, the use of Cookies is necessary. These can be used, for example, to enable you to return to your shopping cart, save language settings and for overall analytical information regarding your use of the site. We also use cookies to be able to direct relevant marketing to you so that you get as personal a shopping experience as possible. Cookies that we use on our site can be divided into the following categories:

Session cookies: These are automatically deleted when you close your browser and are used to, for example, give you the functionality of the shopping cart.

Permanent/Temporary cookies: These remain on your computer after you close the browser and disappear when you delete them or automatically when they expire. These are used, for example, so that you can resume your shopping session where you left it, so that you don't have to log in again and so that you get a personalized experience on the site.

First-party cookies: These cookies are placed by our website and are used for the website to have full functionality and a good shopping experience.

Third-party cookies: Cookies placed by third-party websites from our business partners and used so that you can, for example, receive relevant product recommendations and information that reflects your interest.

Other technologies: These may be similar to cookies and may be an IP technology that, for example, enables you to resume your shopping trip on devices of your choice and have relevant product information presented to you.

You can change the settings for the use of cookies yourself, by going to the settings via in your browser where you can limit, delete or block cookies.

8. SECURITY
We take all possible measures to protect your personal data, this affects both the digital and the physical environment where it may be stored. The website and information are protected with SSL/TLS encryption that corresponds to high standards in the industry. We never save your card details and encrypt your personal passwords in our data storage.

Your social security number is not stored and/or processed by us as long as it is not highly motivated and necessary, such as in connection with identification.

9. CONTACT
If you have questions regarding our Privacy Policy, you can contact us at hello@jfr.se.

We will keep our Integrity Policy under constant review, so you will always find the latest version on our site. In the event of significant changes affecting the processing of your personal data, we will notify you of this via email.