Privacy Policy
PRIVACY POLICY
1. INTRODUCTION
JFR ECOMMERCE AB takes your personal privacy very seriously and always strives to maintain a high level of data protection and treat you as a customer with the transparency you expect. Below, together with our Terms and Conditions, you can read in detail about how we process and protect your personal data, why we collect various types of personal data, and which personal data we process and for what purpose. Please take the time to read through and understand our privacy policy. Our goal is to be as clear as possible and keep your personal data protected. Remember that you can always review your personal data and make any changes you wish.
JFR ECOMMERCE AB AB, company registration no. 556856-7514, is the data controller for the personal data collected.
2. WHAT IS PERSONAL DATA?
Personal data (also referred to as “personal information”, “personal data” and/or ) is data/information that can be used to identify or contact you. Personal data does not need to include a name and may therefore also consist of other digital identifiers such as images, IP numbers, email addresses, etc.; in other words, information that can be linked to a natural person.
All information stored about the customer is handled in accordance with the Personal Data Act (1998:204) until it is replaced by the European data protection regulation Directive 95/46/EC (General Data Protection Regulation, or “GDPR”) on 25 May 2018. From 25 May 2018, all information stored and/or handled about the customer will be handled in accordance with the GDPR.
3. WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU AS A CUSTOMER AND FOR WHAT PURPOSE?
A) HANDLING AND OVERVIEW OF ORDERS AND RETURNS
WHY IS THIS INFORMATION COLLECTED?
The information is collected so that we can ensure delivery of your order and provide you with information regarding the order/return, handle claims and warranty matters, and process refunds. The information is also collected to provide you with a relevant shopping experience via the website, email and/or SMS, such as delivery updates, order status and account overview.
PERSONAL DATA PROCESSED:
Name
Contact details (Telephone number, Email)
Address details (Billing address, delivery address, IP number)
Personal identity number
Order history (Selected payment methods, ordered items)
LEGAL BASIS
Performance of the purchase agreement. This collection of your personal data is required for us to fulfil our obligations under the purchase agreement. If the information is not provided, we cannot fulfil our obligations and will therefore be forced to refuse your purchase.
B) HANDLING CUSTOMER SERVICE MATTERS AND CUSTOMER CONTACT
WHY IS THIS INFORMATION COLLECTED?
To resolve your customer service matters and provide you with the best shopping experience. We always want to be able to answer all your questions, and therefore process the information we receive from you when you contact customer service solely to provide a high level of service and assist you, both at the time and throughout the ongoing customer relationship.
PERSONAL DATA PROCESSED:
Name
Contact details (Telephone number, Email)
Address details (Billing address, delivery address, IP number)
Personal identity number
Order history (Selected payment methods, ordered items)
Correspondence history (via email, telephone, social media, chat, digital channels)
Personal identity number (possibly ID documentation during extended verification when you request access to your customer information)
LEGAL BASIS
Legitimate interest. The processing is necessary to meet our and your legitimate interest in handling customer service matters.
C) ENABLE THE COMPANY TO FULFIL ITS LEGAL OBLIGATIONS
WHY IS THIS INFORMATION COLLECTED?
Necessary processing to fulfil the company's legal obligations under statutory requirements, court judgments or decisions by public authorities, e.g. the Accounting Act, the Money Laundering Act or the rules on product liability and product safety.
PERSONAL DATA PROCESSED:
Name
Contact details (Telephone number, Email)
Address details (Billing address, delivery address, IP number)
Personal identity number
Order history (Selected payment methods, ordered items)
Correspondence history (via email, telephone, social media, chat, digital channels)
Personal identity number (possibly ID documentation during extended verification when you request access to your customer information)
LEGAL BASIS
Legal obligation. This collection of your personal data is required by law. If the data is not provided, our legal obligation cannot be fulfilled.
D) ENABLE US TO EVALUATE, DEVELOP AND IMPROVE OUR SERVICES FOR THE CUSTOMER'S BENEFIT
WHY IS THIS INFORMATION COLLECTED?
The information may be collected through reviews, competitions and customer satisfaction surveys in order to tailor our services and make them more relevant and user-friendly for you as a customer.
PERSONAL DATA PROCESSED:
Name
Contact details (Telephone number, Email)
Address details (Billing address, delivery address, IP number)
Age
Purchase- and user-generated data (e.g. click and visit history).
Technical data relating to the devices used and their settings (e.g. language settings, IP address, browser settings, time zone, operating system, screen resolution and platform).
Information about how you have interacted with us, i.e. how you have used the service, login method, where and for how long different pages have been visited, response times, download errors, how you access and leave the service, etc.
LEGAL BASIS
Legitimate interest. The processing is necessary to meet our and our customers' legitimate interest in evaluating, developing and improving our services, products and systems.
E) ENABLE TARGETED MARKETING
WHY IS THIS INFORMATION COLLECTED?
To communicate relevant information and offers to you, we analyse the data we have collected in various ways. The creation of your personalised offers and general offers, tailored news, product recommendations and inspiration.
INFORMATION WE MAY COLLECT:
Contact details (Telephone number, Email, IP number)
Age
Purchase- and user-generated data (e.g. click and visit history).
Stated customer preferences regarding products and services.
LEGAL BASIS
Legitimate interest. The processing is necessary to meet our legitimate interest in communicating personalised and relevant information and offers to you.
4. RETENTION PERIOD
We will not retain your personal data for longer than necessary for the respective purposes and to fulfill our legal obligations. As long as you have a customer account with us, we will also retain information associated with the account; this can be deleted at any time at your request. When we no longer need to retain your information, it will be deleted and destroyed.
5. ACCESS TO AND PROCESSING OF PERSONAL DATA
We will never sell your personal data to any third party. However, we work with selected suppliers and services with which we partially share your personal data to improve and/or enable your customer experience and purchases from us; these are known as data processors. All our partners are carefully selected and comply with GDPR requirements to ensure the security and protection of your data. Personal data may be shared with our data processors in the following cases:
IT operations (companies that assist with IT development, operations, and IT support)
Marketing (media agencies and marketing agencies)
Finance and administration (accounting and auditing firms)
We also share your personal data with certain parties that are independently responsible for processing personal data. When your personal data is shared with a party that is independently responsible for processing personal data, that party’s privacy policy and personal data processing practices apply. These parties may include:
Government authorities with which we are legally required to share information or in cases of suspected crime (the Swedish Tax Agency, the police, and insurance companies)
Payment providers (banks, payment service providers, and card acquirers)
Freight forwarders, to complete delivery of orders (logistics companies and transport firms)
If our data processors are located outside the EU/EEA, we will take the same measures and implement procedures to ensure that they comply with and take the necessary legal, technical, and organizational measures to achieve a level of protection equivalent to that within the EU/EEA or the “Privacy Shield” standard. We limit the collection of your personal data to the minimum necessary, both within and outside the EU/EEA.
6. YOUR RIGHTS
You have the right to access the personal data we hold about you. This means that you have the right to receive a record of what information we have about you and the contexts in which it is processed and shared. Please note that if we receive an access request, we will ask for additional information to ensure that the information is disclosed to the correct person.
You have the right to rectification, meaning that you can supplement or correct your personal data where information is missing or inaccurate.
Right to withdraw consent. You have the right to withdraw the consent you have given us at any time, for example, by unsubscribing from newsletters.
Right to erasure, meaning that you can request that we erase all personal data stored and relating to you that we have no legal requirement or obligation to retain.
Right to restriction. You have the right to request that our processing of your personal data be restricted.
You have the right to object to the processing of personal data based on our legitimate interest. We will not continue to process the personal data unless we can demonstrate a legitimate reason for the processing that overrides your interests and rights, or due to legal claims.
Right to data portability. You have the right to receive a copy of your personal data in a structured, commonly used format and, in certain cases, have this data transferred to another data controller. This only includes information that you have provided to us.
Direct marketing. You have the right to refuse or make changes to the personal data used for direct marketing, including profile analyses conducted for direct marketing purposes. This includes, for example, newsletters and SMS messages, where you can make the necessary changes for each channel by following the instructions in each marketing communication.
Contacting the supervisory authority. The Swedish Authority for Privacy Protection is responsible for monitoring compliance with the legislation, and anyone who believes that a company is handling personal data incorrectly can file a complaint with the Swedish Authority for Privacy Protection.
7. COOKIES
Cookies are small text files stored on your computer or another device that contain data and enable data exchange to save certain settings. You are not required to accept Cookies from our website, but to get full functionality from the site and use certain services, Cookies are necessary. They may be used, for example, to allow you to return to your shopping cart, save language settings, and provide general analytical information about your use of the site. We also use cookies to target relevant marketing to you so that you can have as personalized a purchasing experience as possible. The cookies we use on our website can be divided into the following categories:
Session cookies: These are automatically deleted when you close your browser and are used, for example, to provide shopping cart functionality.
Persistent/temporary cookies: These remain on your computer after you close your browser and disappear when you delete them or automatically when they expire. They are used, for example, to allow you to resume your shopping session where you left off, avoid having to log in again, and provide you with a personalized experience on the website.
First-party cookies: These cookies are placed by our website and are used to ensure that the website has full functionality and provides a good shopping experience.
Third-party cookies: Cookies placed by third-party websites operated by our business partners and used, for example, to provide you with relevant product recommendations and information that reflects your interests.
Other technologies: These may be similar to cookies and may include IP-based technology that, for example, allows you to resume your shopping session on any device and receive relevant product information tailored to you.
You can change your cookie settings yourself by going to your browser settings, where you can limit, delete, or block cookies.
8. SECURITY
We take all possible measures to protect your personal data. This applies to both the digital and physical environments where it may be stored. The website and its information are protected with SSL/TLS encryption that meets high industry standards. We never store your card details and encrypt your personal passwords in our data storage systems.
Your personal identity number is not stored and/or processed by us unless it is highly justified and necessary, such as in connection with identification.
9. CONTACT
If you have any questions regarding our Privacy Policy, you can contact us at hello@jfr.se.
We will keep our Privacy Policy under constant review, so you will always find the latest version on our website. In the event of significant changes affecting the processing of your personal data, we will notify you by email.