Privacy Policy

Your integrity is important to us. Our Personal Data Processing Policy describes, among other things, what information we collect, the purpose for which it is collected, how you can control your own information and how to contact us.

Personal data responsibility

Creon Promotion AB (556575-1061, ” Creon “, Annavägen 12, 352 46 Växjö) is responsible for the processing of personal data at Creon. A personal data manager is responsible for ensuring that Creon’s treatment of personal data is according to current legislation.

What personal data is collected about you as a customer and why?

This section describes the purposes for which we treat personal data, the categories of personal data being processed and the legal basis for which you are treated as a Creon customer.

1) In order to handle orders / purchases

Personal data is processed to:

Deliver an ordered/purchased product or service (including delivery information or contact details regarding delivery).
Manage payments (including to analyze which payment solutions are to be offered).
Manage return, complaint and warranty matters.

The categories of personal data processed are:

Name
Contact details (eg address, e-mail, phone number).
Payment information (eg transaction reference, transaction date).
Customer number
Payment History
Order information, such as an item that has been ordered or if the item is to be delivered to another address.

Legal basis: Completion of purchase agreement

2) In order to manage and manage your user account

Personal data is processed to:

Allow permission to log in
Maintain accurate and updated tasks
Make it possible to track purchase history
Manage your options and payment history settings and payment options

The categories of personal data processed are:

Name
Contact details (eg address, e-mail, phone number)
Username and password.
Purchase History
Payment History
Customer number

Legal basis: Completion of purchase agreement

3) In order to promote products and services

Personal data is processed to:

View relevant product recommendations, suggest shopping lists, remind about forgotten/abandoned digital shopping carts, or save shopping lists to simplify future purchases or similar actions
Senddirect marketing by email , social media or other similar electronic channels . The categories of personal data processed are:
Name
Contact details (eg address, e-mail, phone number)
Details of how the customer uses the company’s web pages, and other digital channels
Details of completed purchases
User-generated data(e.g., click and visit history)

In order to understand what kind of marketing or direct marketing to use, analyises is carried out on:

How web pages and other digital channels are used (for example, which pages and sections of pages visited and what searches were made).
Purchase History
Results from customer satisfaction surveys or market research.

Legal basis: The processing is necessary to meet yours and our interest in being able to market products and services.

4) In order to conduct and manage participation in competitions and events

Personal data is processed to:

Communicate with participants participating in a competition.
Communicate with participants before and after an event (eg confirmation of notifications, questions or evaluations).
Enable identification
Appoint winners and convey prizes

The categories of personal data processed are:

Name
Contact details (eg address, e-mail, phone number).
Details provided for the purpose of the contest.
Data provided in evaluations of events.

Legal basis: legitimate interest. The treatment is necessary to meet your and our interest in conducting and managing competitions and events.

5 ) In order to handle customer service issues

Personal data is processed to:

Communicate with the customer and respond to requests that are made to customer service by telephone or in digital channels (including social media).
Enable identification
Investigate complaints and support cases (including technical support).

The categories of personal data processed are:

Name
Contact details (eg address, e-mail, phone number).
Your correspondence
Details of purchase date, place of purchase, defect / complaint on product.
ProfileStore User Details, for example, when logging in.
Technical details of your equipment necessary for support cases.

Legal basis: legitimate interest. The treatment is necessary to meet your and our interest in managing customer service matters.

6 ) In order to fulfill legal obligations (eg regarding requirements in the Accounting Act, Product Liability and Product Security and Personal Data Protection in IT Systems)

Personal data is processed to:

Enable compliance with legal obligations, as required by laws, judgments or government decisions.Such requirements may, for example, refer to product liability and product safety requirements such as the provision of communications and information to the public and customers regarding product alarm announcements and product recalls, for example in case of a defect or health hazard or to the extent required by the Accounting Act or the Money Laundering Act and may be attributed to a specific individual.

The categories of personal data that can be processed are:

Name
Contact details (eg address, e-mail, phone number).
Your correspondence
Details of purchase date, place of purchase, defect / complaint on product.
UserProfile for Profile Store
Payment information

Legal basis: Legal obligation

7 ) In order to be able to evaluate, develop and improve our services, products and systems for the customer collective agreement as a whole

Personal data is processed to:

Make services more user-friendly, such as changing the user interface to simplify information flow or to highlight features commonly used in our digital channels
Provide supportive information to improve product and logistics flows, for example, by forecasting purchases, inventory and deliveries
Provide supportive information to analyze and improve our product range
Provide supportive evidence to develop and improve our resource efficiency from an environmental and sustainability perspective, eg by streamlining purchasing and scheduling of deliveries.
Give you an opportunity to influence the range we provide.
Provide supportive information to improve IT systems in order to increase the security of our visitors and customers in general.

The categories of personal data processed are:

Purchase anduser generated data (e.g., click and visit history).
Delivery address
Your correspondence and feedback regarding our services and products.
Technical datarelating to devices used and settings, such as language setting, IP address, browser settings, time zone, operating system, screen resolution and platform.
Information on how you interact with Creon i.e. how services are used, login method, where and how long different pages were visited, response times, download errors, how services can be reached and when customers leave the service, etc.

In order to fulfill the purpose, we perform general analysis in aggregated form, ie. not at the individual level, regarding:

How our web pages and other digital channels are used (for example, which pages or sections of pages visited and what searches are carried out).
Purchase History
Geographical Location and / or Demographic Location.
Feedback regarding our services and products and results from customer satisfaction surveys or market research.
Data from customer units and technical settings.

Legal basis: legitimate interest. This processing is necessary to meet ours and your legitimate interest in evaluating, developing and improving our services, products and systems.

8 ) In order to prevent abuse of a service or to prevent, prevent and investigate crimes against the company

Personal data is processed to:

Prevent spam,phishing , harassment, unauthorized login to user accounts, or other prohibited actions.
Protect and improve our IT environment from attack and intrusion.

The categories of personal data processed are:

Purchase anduser generated data (e.g., click and visit history).
Data relating to devices that the customer uses and settings, such as language setting, IP address, browser settings, time zone, operating system, screen resolution and platform.
Details of how our digital services are used.

Legal basis: Legal obligation if there is such an alternative legitimate interest (if there is no legal obligation) if the treatment is necessary to satisfy our legitimate interest in preventing abuse of a service or preventing, investigating and preventing crimes against the company.

Sharing and transfer of personal data

Personal data may also be transferred for necessary processing to other companies that Creon collaborates with, for example, marketing (print and distribution, media agencies, etc.), distribution and transportation, payment solutions and IT services. When your personal information is shared with Creon partners, the information will be processed according to Creon’s instructions and on behalf of Creon, and for purposes only consistent with the purposes for which Creon has collected the information. Third parties are forbidden to pass on personal information.

In addition to this, Creon may, by law, be forced to provide information to government authorities (eg police and tax authorities). In addition, Creon may provide personal data to companies that offer payment solutions (such as payment service providers and banks) and companies that handle general goods transport (eg logistics companies and freight forwarders). In such cases, partners treat the tasks as independent personal data administrators in accordance with their own privacy policies and management instructions.

Creon strives to process personal data within the EU / EEA and collaborate with partners and suppliers dealing with personal data within the EU / EEA. If this is not possible, processing of personal data may be outside the EU / EEA in countries that are considered to have an adequate level of protection in accordance with the EU Commission’s decision or by the use of appropriate safeguards such as standard contract clauses, binding company internal rules or US Privacy Shield. No matter in which country personal data is being processed, Creon takes recommended technical, legal and organizational measures to ensure that the level of protection is the same as in the EU / EEA.

Storage of personal data

The treatment is in accordance with current legislation and means that personal data is not retained for a longer period than necessary for the purpose of the treatment. This implies that data will be deleted when they are no longer relevant or necessary for analysis or direct marketing and the purposes for which they have been collected. For promotional purposes, information about purchase transactions older than 3 years is not used. However, all handling of personal data always ensures high security and confidentiality.

Your rights and choices

Right of access:

We want to be open and transparent about how we process your data and if you want to get more knowledge about the personal data processing carried out, you have the right to request access to your information provided by us in the form of a so-called ” registry” (purpose, categories of personal data , categories of recipients of personal data, storage period or criteria for determining storage period, information on where data was collected). If we receive a request for access, we may ask for additional information to ensure what information you want to share and to ensure that we provide the information to the correct person.

Right to rectification:

You are always entitled to request that your personal information be corrected if the information is incorrect. Within the stated purpose, you also have the right to supplement any incomplete personal data. Please contact profilestore@creon.se .

Right of deletion:

You are entitled to request the deletion of personal data that we are dealing with, if:

The data is no longer necessary for the purposes for which they have been collected or processed.
You have revoked a consent upon which the treatment is based and there is no other legal basis for the treatment.
You oppose a stakeholder interest for legitimate reasons we have done and there is nolegitimate interest in Creon that weighs heavier than your opposition.
You oppose processing for direct marketing purposes.
Personal data has been processed illegally.
Personal data must be erased to comply with a legal obligation to which we are subject.

There may reasons for us not to comply with your request for deletion if there are legal obligations that prevent us from doing so. It may be if the treatment is needed to exercise our right to freedom of opinion and information, in order to fulfill a legal obligation to which we are subject or in order to determine, enforce or defend legal claims.

Right to restriction:

You are entitled to request that our processing of your personal data be limited.

You have the right to object to certain types of treatment:

Eligible Interest: You are entitled to object to treatments that support you in a legitimate interest that we have if you have personal reasons regarding the situation. However, we may continue to process your information, even if you oppose your treatment, if we have compelling legitimate reasons for your consideration that affect your privacy interest.

Direct marketing (including analyses conducted for direct marketing purposes):

You may object to your personal data being processed for direct marketing. The objection also includes the analysis of personal data (“profiling”) performed for direct marketing purposes. If you oppose direct marketing, we will discontinue the processing of your personal data for that purpose and terminate any direct marketing action.

Of course, you have the opportunity to only refuse mail and personal offers in certain channels. In that case, you should not object to personal data processing because we will find it difficult to assess which marketing is relevant to you.

You can change your settings at Profile Store at any time by contacting us via profilestore@creon.se.

Data Portability Right:

If our right to process your personal data is based on your agreed consent or fulfillment of commitments in an agreement with you, you have the right to request the data relating to you and which you have provided to us be transferred to another personally responsible person (ie data sorting) .

About cookies

Personal data can be collected when you use Profilestore. Information about your use and the pages that are visited is stored. This could be technical information about your device and internet connection such as operating system, browser version, IP address, cookies, and unique identifiers. When visiting Profilestore.se where our services are provided, different techniques can be used to recognize you in order to learn more about our users. This can be done directly or through the use of third party technology. This may be the use of, for example, cookies.

What is a cookie?

There are two types of cookies. One type saves a text file for a long time but has an expiration date. This cookie aims, for example, to tell you what’s new since the last visit. The other type of cookie is a so-called session cookie, which has no expiration date. The text file is temporarily stored for as long as you are browsing and browsing a page, for example, helps keep track of which language you want to use. As soon as the browser closes, the text file is also deleted.

Why do we use cookies?

At Creon , we use cookies to find out, for example, the items you’ve added to your shopping cart. We also use cookies to get web statistics. These statistics, we need to develop ourselves. The information is not available to parties other than Creon Promotion AB .

In order to use profilestore In full, you must accept cookies, and you do so through your browser’s settings. If you do not want to accept cookies, you can turn off cookies through your browser’s security settings. This means, however, that profilestore.se will not work as intended.

Complaint

You are entitled to file a complaint with the Swedish Data Inspectorate , www.datainspektionen.se .

Contact details

For further information on data handling, or if you have questions, please contact us at:

AB Creon Promotion , Customer Service

Annavägen 12, 352 46 Växjö

Email Address : profilestore@creon.se

Phone : +46 (0) 470 – 70 05 40

Creon Promotion AB has a data protection agent. Contact information for the company’s data protection representative is support@creon.se

Changes to the policy

This Privacy Policy may be updated to correct any interference or to comply with new legal or technical requirements. The latest updated version of the privacy policy is always available on this page. In the case of significant changes (for example, the purposes of personal data processing or categories of personal data), you will receive information about this by e-mail or at creon.se.

Last updated 2018-05-07