Integrity policy

1. GENERAL

Babyshop protects your personal privacy and takes measures to ensure that your personal data is protected when using our services. Below is our policy regarding integrity ("Integrity Policy") that determines how Babyshop Sthlm Holding AB, CIN 559004-3658, BOX 29098, 100 52 Stockholm, Sweden, [email protected] ("Babyshop/we") is using, processing and protects your personal data. The Integrity Policy is applicable when Babyshop is providing services and products related to purchase, service matters and other contact with Babyshop.

Parts of the Integrity Policy also applies to the processing of personal data for persons who consents to customized marketing services ("Subscriber").

2. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

Babyshop is the data controller and has the following contact information:

Via mail: Babyshop Sthlm Holding AB, BOX 29098, 100 52 Stockholm, Sweden

Phone: +46 (10) 7502423

Email: [email protected]

Babyshop intends to process all personal data in a legal, open and fair manner in accordance with applicable law (including the European Union General Data Protection Regulation 2016/679 of 27 April 2016).

3.     WHEN DO WE PROCESS YOUR PERSONAL DATA?

As a customer at Babyshop, we process your personal data when you make a purchase on Babyshop’s website, use Babyshop’s support, visit Babyshop’s website or otherwise contact Babyshop. The purposes of Babyshop’s processing of personal data are specified in section 5.

As a Subscriber at Babyshop we process personal data about you. All personal data is specified in section 4.

Babyshop also collects and updates address information through third party services, such as Klarna and Qliro, for address updates.

 

 

 

4. WHAT PERSONAL DATA DO WE COLLECT AND PROCESS?

Purpose

Legal basis

Types of personal data

Type of processing

Automated decision-making

Storage period

Obligations in connection to order/purchase

Performance of contract

Processing of personal data is required for Babyshop’s fulfilment of obligations in connection with order/purchase. The absence of personal data means that Babyshop cannot fulfil its obligations and may be forced to refuse the purchase.

Name

Social security number or national ID

Address

Email

Phone number

Payment history

Payment details

Credit data

Information regarding purchase

Delivery (including contact in connection to the delivery)

Identification

Handling of payments (including any obtaining of credit data and analysis of payment solutions)

Handling of complaints and warranty matters.

No

Performance of purchase agreement (including delivery and payment) and 36 months thereafter for the purpose of handling any complaints and warranty matters

Fulfil Babyshop's legal obligations

Statutory requirement

Processing of personal data is required by law. The absence of personal data means that Babyshop cannot fulfil its obligations and may be forced to refuse the purchase.

Name

Social security number or national ID

Address

Email

Phone number

Payment history

Payment details

Credit data

Information regarding any defects/complaints

Handling necessary to fulfil Babyshop's legal obligations by law, judgment or public authority decision (such as the Accounting Act and Product Liability Rules and Product Safety)

No

In accordance with the statutory requirement

Segmented marketing of Babyshop’s goods via email, phone or SMS / MMS

Legitimate interest

The processing is necessary to satisfy Babyshop's legitimate interest in certain marketing.

Name

Age

Sex

Address

Email

Phone number

Payment history

Payment details

Purchase history

Purchase and user generated data

Sending newsletters with information and offers

Simplify the use of Babyshop services (e.g. by saving favourites and thus facilitating future purchases or reminding you of items forgotten in the digital shopping cart)

Personal communication based on your behaviour through Babyshop media

No

Performance of purchase agreement (including delivery and payment) and 36 months thereafter for the purpose of giving more offers from Babyshop.

Customised offers as well as targeted communication via mail, email, phone or SMS / MMS

Consent

Processing takes place after obtaining consent for certain customised marketing.

Name

Age

Sex

Address

Email

Phone number

Payment history

Payment details

Purchase history

Purchase and user generated data

Specified customer choices regarding communication channels.

Personalised marketing (e.g. relevant product recommendations, presentation of specific benefits and offers, and other similar actions)

Analysis of your personal data is done at the individual level. The analysis is the basis for Babyshop's communication with you and the offers, benefits and information sent to you

Yes

Until the consent is revoked

Manage customer service issues

Legitimate interest

The processing is necessary to meet your and Babyshop's legitimate interest in customer service.

Name

Address

Email

Phone number

Payment history

Payment details

Purchase history

Correspondence

Any defects / complaints

Communication and response of any questions to our customer service

Identification and investigation of possible complaints and support cases

No

Until the matter is closed

Implementation and handling of competitions and / or events

Consent

Processing takes place after obtaining consent for processing personal data for handling competitions and / or events.

Name

Social security number or national ID

Address

Email

Phone

Information regarding competition entries

Information regarding event evaluations

Contact before and after competitions or events where you participated (e.g. notifications, questions or evaluations)

Identification

Selection of winners

Provision of possible winnings

No

Meanwhile the competition / event and stages in connection thereto are in progress

Evaluation, development and improvement of Babyshop’s services, products and systems

Legitimate interest

The processing is necessary to satisfy your and Babyshop's legitimate interest in the evaluation, development and improvement of Babyshop’s services, products and systems.

Age

Sex

City

Correspondence / feedback about Babyshop’s products

Purchase and user generated data

Technical data (e.g. language setting, IP address, browser settings, operating system, screen resolution and platform)

Information about your integration with Babyshop

Adaptation of services

Development of information for improving commodity and logistics flows (e.g. forecasting of purchases, inventories and deliveries)

Development of information regarding development and improvement of Babyshop's product range

Development of information for the development and improvement of Babyshop’s resource efficiency

Development of information for planning of establishments

Offer the opportunity to influence product range

Development of information for the improvement and development of IT systems

Personal data analyses are made through segmentation of customers and made on an aggregated level using unidentified or pseudonymised data

No

36 months from collection

Prevent, avoid and investigate crimes against Babyshop as well as prevent abuse of Babyshop services

Statutory requirements and legitimate interest

1) The processing of personal data subject to statutory requirements.

2) The processing is necessary to satisfy your and Babyshop's legitimate interest in preventing, avoiding and investigating crimes as well as preventing abuse of Babyshop services.

Social security number or national ID

Video recordings from camera surveillance

Purchase and user generated data

Technical data (e.g. language setting, IP address, browser settings, operating system, screen resolution and platform)

Information about your integration with Babyshop

Prevent and investigate possible fraud / legal offense

Prevent harassment, junk mail, phishing, or other actions prohibited by law or Babyshop’s terms

Protection and improvement of IT environment

No

36 months from collection

Administration of customer profile

Legitimate interest

The processing is necessary to satisfy your and Babyshop's legitimate interest in managing your customer profile and facilitating you to use your rights to modify, delete, limit your stored personal data and data portability.

Name

Social security number or national ID

Address

Email

Phone

Payment history

Payment details

Purchase history

Purchase information

Username and password

Settings regarding your profile and your personal choices

Enable login

Ensure identity

Allow you to change, delete and restrict the storage of personal data

Ensure correct and updated personal data

Offer access to purchase and payment history

Managing your customer choices

No

36 months from collection

When Babyshop processes personal data based on a balance of interest, we have assessed that our interest in processing personal data outweighs the privacy violation that the processing may imply, partly because the processing is limited and that the data subject can contact Babyshop and at any time have its data deleted. Babyshop never processes sensitive personal data based on a balance of interest and does not perform automated decision making without your consent.

When Babyshop processes personal information with the consent of you, your consent must be voluntary, specific, informed and imply unambiguous consent to be considered as legal basis. If you have given your consent to Babyshop, you are entitled to withdraw it at any time.

5. PROFILING

For Subscribers, Babyshop may process personal data through profiling. Such profiling is done with your consent. You can revoke your consent at any time.

Profiling means that we analyse information about how you use our website, what products, services and offers you have shown interest in, information about your purchases, which of our newsletters you have interacted with, if you have signed up for any of our events and information about your account. We do this to provide you with offers we think is suitable for you and to invite you to events we think you are interested in.

You are entitled to object to such profiling at any time. Any objection may be emailed to [email protected] Upon receiving your notification, Babyshop will stop processing your personal data for this purpose.

6. ACCESS TO STORED PERSONAL DATA

Babyshop may disclose personal data to other companies that are part of the same group as Babyshop, as well as to partners to fulfil our commitments and the purposes mentioned above. Our partners are: Panagora, Daniel Jernström, QlickView, Element Logic, PerfectIT, Unifaun, Posti, PostNord, Budbee, UPS, Shipwallet, Hörby Bruk, Captech, Leggodt, Pragma, NSH Nordic, Zendesk, Xcally, Relation Desk, Netigate, PayPal, Qliro, Nets/DIBS, Trustly, Klarna, Customer Value, Rule, Preglife, Google, Forward3D, Lifeler, Nosto, TradeDoubler, Criteo, Facebook, Hojtar, Sitegainer, Disqus, Yandex, vk.com, Sogou, Baidu, Microsoft, Naver, Affiliate Window, CrazyEgg, Datafeedwatch, Wordpress, Relex, Redeal och Veinteractive.

Data forwarded to third parties is only used to provide the abovementioned services to you, such as freight forwarders in the field of delivery of goods, media agencies for distribution of marketing and credit reporting or debt collection agencies for credit reporting, identity checks and debt collection.

We never transfer your personal data for marketing purposes conducted by third parties outside the Babyshop Group and our partners. We will neither sell your personal data to third parties without your permission. Babyshop may disclose your personal data if it is necessary to comply with applicable laws or government requirements, to safeguard Babyshop's legal interests or to detect, prevent or notice fraud and other security or technical issues.

Babyshop always strives to store personal data within the EU/EEA. The data may be transferred and processed in a non-EU/EEA country (third country). Transfers made are made to the United States, for Google Analytics (analysis) and Zendesk (customer service). Any transfer is made in accordance with applicable legislation and persons subject to the transfer will be notified.

7. HOW DO WE PROTECT YOUR PERSONAL DATA?

We have taken technical and organizational measures to protect your data from loss, manipulation and unauthorized access. We are continuously adjusting our security measures in accordance with the progress and developments in the technical field. To make card purchases as secure as possible, all data is sent in an encrypted form. This means that the information is transmitted via a secure connection and that your personal data cannot be read by third parties. For card purchases, we collaborate with an authorized payment agent that helps us to instantly check with the bank that the card is valid for purchase. Our payment agent processes your card details in accordance with the international security standard PCI DSS developed by VISA, MasterCard, Diners, American Express and JCB card companies. This means that the security is very high when processing your card details. When you pay by card, we reserve the right to carry out an identity check.

 

Babyshop may allow third parties to use your personal data for marketing purposes upon request by us to promote our products and services, but we will never allow a third party to use your personal information to conduct their own marketing towards you.

8. WHAT ARE YOUR RIGHTS?

Babyshop will, at your request or on its own initiative, rectify, delete, disassociate or supplement your personal data if the data is found to be incorrect, incomplete or misleading.

As a data subject, you have the right to request:

1.     Access to your personal data. You have the right to have a filing extract or a copy of all personal data Babyshop is processing about you. This right can be used at any time through a written and signed request.

2.     Rectification of your personal data. You have the right to request that Babyshop will correct incorrect or incomplete processed personal data without unnecessary delay.

3.     Deletion of your personal data. You are entitled to request that your personal data is deleted if the storage of data no longer is necessary for the purpose for which it was collected. If there is a statutory requirement to store your personal data or if there are other legitimate reasons why Babyshop must store your data, such as unpaid debts, your personal data cannot be erased. We will end all processing of personal data for other purposes than complying with the legislation.

4.     Restriction of processing. You are entitled to request that your personal data be processed for certain restricted purposes. For example, you may request a restriction when you believe your information is incorrect and you have requested a correction according to the above. While the accuracy of the data is being investigated, its processing will be restricted.

If your personal data is stored at Babyshop, you have the right to data portability. That means the right to, under certain conditions, extract and transfer some of your personal data in a structured, widely used and machine-readable format to another personal data controller.

If Babyshop is processing personal data based on a balance of interest, you have the right to object to such processing. In the case of opposition, Babyshop will continue the processing only if there are more compelling interests to do so.

You may at any time object to your personal data being processed for direct marketing. Babyshop does not process your personal data for direct marketing purposes if you oppose to such processing. Once we have received your objection, we will cease to process your personal data for such marketing purposes. Any objection is sent to [email protected] If you have consented to Babyshop storing and using your personal data for marketing purposes, you may revoke such consent at any time. Such recall may be limited to only part of the processing, such as direct marketing. Any recall is sent to [email protected]

As a data subject, you own the right to file any complaints regarding the processing of your personal data to the Swedish Data Protection Authority.

9. USE OF COOKIES AND OTHER TRACKING TECHNIQUES

Our website uses cookies and other tracking techniques to enhance your online experience. You will find more information about this in our cookie policy. Babyshop uses, among other things, Google's advertising services. You can read more about Google's collection, sharing, and use of data here.

10.   POSSIBLE CHANGES OF BABYSHOP’S INTEGRITY POLICY

Babyshop reserves the right to make changes to this Integrity Policy at any time. If the Integrity Policy materially changes, then Babyshop will, with reasonable notice, communicate this on its website and/or through email to you.

11.   CONTACT INFORMATION TO THE DATA CONTROLLER

We are protecting our customers' personal data! Do not hesitate to contact us if you have any questions about how we process your personal data, this privacy policy or if you wish to request a filing extract.

Our contact information:

Babyshop Sthlm Holding AB

BOX 29098

100 52 Stockholm

Sweden

Phone: +46 (10) 7502423

Email: mydata@babyshop.com

Business register: Bolagsverket

CIN: 556699-1542