The GDPR (Data Protection Ordinance) is a new EU regulation that will become valid throughout the EU on 25 May 2018. GDPR replaces the Swedish Personal Data Act (PUL). A lot is the same, but it means that the requirements for how companies and organizations can process your personal data is sharpened.
Responsible part for collecting personal data
Grandpa AB, CIN: 556643-9328
Gotlandsgatan 46
11665 Stockholm
gdpr@grandpastore.com
Personal data is all the information that can be linked directly or indirectly to a living person. This means that the following is considered personal information: name, address, phone number, e-mail address, IP address, photographs etc.
Grandpa stores the personal data that you as a customer leave to Grandpa in connection with an order. This includes name, address, e-mail address, mobile number, credit card details, other means of payment and also personal identification number for credit check on invoice payments. This information is stored in order for us to manage your order, deliver your goods to the desired address, and manage payment and any returns and claims.
If you have accepted to receive Grandpa's newsletter, Grandpa will save your email address. If you have been to any of our stores and entered your email address to receive the receipt digitally, your email address will be stored.
Grandpa stores information about your cart and the email address that you provide to us when you are starting a purchase. This information is saved to be able to remind you of the product you have left in the cart. Our legitimate interest of processing this personal data is to make it as easy as possible for you to purchase the product you have shown interest in by placing them in the cart.
Personal data may be submitted for processing on behalf of Grandpa through a personal data assistant. In such cases, a written agreement will be created to regulate the personal data processing assistant's handling of personal data and the personal data assistant will not be entitled to use the personal data for purposes other than performing the tasks assigned by Grandpa.
Grandpa is processing personal data on the legal basis that it is necessary to comply with the parties' agreement. Grandpa is also entitled to process the customer's address and other contact information for marketing purposes based on a balance of interest, where Grandpa, as long as you do not oppose it, considers that its interest in marketing its products and services exceeds your integrity.
If you subscribe to Grandpas newsletter your e-mail address will be saved as long as required by law, or to fulfil Grandpas commitments to you in the individual case. Please feel free to request us to delete your personal information at any time. We can not delete your data if there is a statutory requirement for storage, such as accounting rules or other legitimate reasons why the data must be saved, such as unpaid debts.
Grandpa is processing personal data due to the legal basis that it is necessary to meet the parties agreements. Grandpa is also entitled to process your address and other contactinformation for marketing purposes based on interest, where Grandpa, as long as you do not oppose that processing, considers that its interest to market their products and services contemplates your privacy interests.
What does the data inspection do and when do you contact them?
The Data Inspection is responsible for monitoring the enforcement of the legislation. Anyone who considers that a company / organization / authority handles personal information incorrectly may file a complaint to the Data Inspection regardless of relationship. Contact information for the Data Inspection can be found at www.datainspektionen.se.