Privacy policy

1. General

This policy relates to privacy and describes how

Gaspalori AB
org. No. 559284-6322
Karlbergsvägen 44, Nomad Works
11362 Stockholm

Collects, discloses and stores your personal data. The privacy policy applies when Gaspalori provides services and products such as e.g. when you shop with us at Gaspalori, have contact with our customer service, or visit our website.

With the privacy policy, we want you to be able to feel safe when you submit your personal data to us and show how we ensure that your personal data is processed in accordance with current personal data legislation.

2. Personal data Controller

Gaspalori s responsible for personal data so that the processing of your personal data takes place in accordance with applicable legislation.

Gaspalori AB
org. No. 559284-6322

 

3. When do we process personal data?

When you visit our website, shop with us, subscribe to the newsletter or contact our customer service, we need to collect and process your personal data. We collect this information in order to be able to offer the service and functionality that is expected and to be able to fulfill our part of e.g. a purchase agreement.

 

4. What personal data do we process?

Our data policy means that we save and handle as little of your data as possible. This means that we only use the data that is necessary to process your order and maintain communication with you. The personal data we collect for you as a customer is as follows:

Name
Address (delivery and billing address
Email address
Phone number
Customer number
Purchase history
IP address and information about use of the website
Personal data that you enter when contacting Gaspalori, e.g. with customer service or via My pages


In order to process your order completely, we hand over your data to our partners, for example PostNord, Budbee and Klarna. We also collect your address information from third-party services for address updates. We may hand over information to our suppliers, for example in the event of a complaint or a spare part purchase. In connection with a spare part purchase, we may also need to request information such as social security number. In these cases, the information is processed according to the privacy policy of our cooperation partners and in accordance with our supplier agreements. When you visit our website, we save the following data for administrative and technical reasons: type and version of the browser used, date and time of the visit and your IP address. This information is anonymized and used in the production of statistics and in the improvement of our e-commerce platform. The anonymized data is separated from your personal data, saved in a secure system and cannot be linked to a specific person. This means that your personal data will always remain protected.

5. Compilation of personal data management

Purpose: Manage order including notices and subsequent support
Example: To deliver, offer payment and delivery options, handle complaints and warranty matters, answer questions
Legal basis: Fulfillment of purchase agreement
Storage period: 7 years after completed purchase

Type of personal data:

Name, address, e‑mail, telephone number
Order information
Delivery information
Payment information
Other personal data provided when contacting us
In connection with the purchase of spare parts, we may also need to request information such as social security number

    Purpose: Compliance with legal requirements
    Examples: Warranty obligations, consumer legislation, product safety, accounting
    Legal basis: Fulfillment of legal obligation
    Storage period: As long as applicable law requires, e.g. 7 years according to the Accounting Act

    Type of personal data:

    Name, address, e‑mail, telephone number
    Order information
    Delivery information
    Payment information
    Purpose: Registration and account management
    Example: Grant authorization to login to "My pages", grant access to order history, maintain relevance in contact details, offer saved favorites
    Legal basis: Fulfillment of purchase agreement


    Type of personal data:

    Name, address, e‑mail, telephone number
    Order information
    Delivery information
    Use of Website
    Other personal data provided when contacting us
    Purpose: Marketing of products and services
    Example: Send relevant offers via e-mail or SMS on similar products and services, show product recommendations, carry out campaigns and events for a certain customer segment
    Legal basis: Fulfillment of purchase and consent agreements
    Storage period: 12 months after completed purchase or until consent is revoked

    Type of personal data:

    Name, address, e‑mail, telephone number
    Order information
    Delivery information
    Use of Website
    Other personal data provided when contacting us
    Purpose: Development of the company's services and products, and analyzes of the customer collective at large
    Examples: Analyzes of user experience, analyzes of assortment
    Legal basis: Legitimate interest
    Storage period: 3 years after completed purchase

    Type of personal data:

    Name, address, e‑mail, telephone number
    Order information
    Delivery information
    Use of Website
    Other personal data provided when contacting us
    Purpose: Prevention of abuse of service and curbing crime
    Examples: Prevent fraud, prevent unauthorized access to accounts
    Legal basis: Fulfillment of legal obligation alt. legitimate interest
    Storage period: As long as applicable law requires

    Type of personal data:

    Name, address, e‑mail, telephone number
    Order information
    Delivery information
    Payment information

      6. How long is the personal data saved?

      Gaspalori only saves the personal data as long as it is justified by the purpose. How long this is can vary depending on the type of personal data and purpose. See point 5 for more details.

       

      7. How is personal data protected?

      Gaspalori has taken all the necessary security measures to protect your personal data and you can feel completely safe when you provide us with personal data. We prevent improper access, dissemination and change, i.a. by saving personal data in databases that are protected by authorization control and firewall. When communicating about your personal data to partners, there is always a personal data processing agreement as a basis and the communication is encrypted.

      8. Is the personal data disclosed to anyone?

      Gaspalori only discloses your personal data to necessary collaboration partners or group companies with personal data processing agreements. Examples of collaboration partners are companies that perform services on behalf of Gaspalori in, for example, delivery, payment and communication. These partners only handle your personal data in order to ensure that we fulfill our obligations according to legal obligation, fulfillment of purchase agreements or consent. We may hand over information to our suppliers, for example in connection with a complaint case or a spare part purchase. In connection with the purchase of spare parts, we may also need to request information such as social security number. In these cases, the information is processed according to the privacy policy of our cooperation partners and in accordance with our supplier agreements.

      Gaspalori may also disclose your personal data if it follows from legal requirements or requirements from authorities, if it is a matter of securing Gaspalori's legal interests or to detect or prevent fraud or other security issues. If any of Gaspalori's suppliers or partners are located outside the EU/EEA, Gaspalori may transfer your personal data there. If personal data is transferred to a country outside the EU/EEA, Gaspaloris will take the necessary measures to transfer personal data to countries outside the EU/EEA in a legal manner. If you do not have permission to sell your personal data to third parties, this will not happen.

       

      9. What rights do you have?

      You can always contact us if you want to be informed about which personal data we save about you, or if you want to correct inaccuracies or delete this data. We will also, at your request or on our own initiative, correct, de-identify, delete or supplement information that is found to be incorrect or incomplete. You also have the right to request the following:

      Access to your personal data:
      This means that you have the right to request a register extract of the processing we carry out regarding your personal data. You also have the right to receive a copy of the personal data being processed. You have the right, through a written and signed application, to receive a register extract from Gaspaloris about which personal data is registered about you, the purposes of the processing and to which recipients the data has been or is to be disclosed. You also have the right to receive information in the register extract about where the data has been taken from if the personal data has not been collected from you, the existence of automated decision-making (including profiling) as well as the anticipated period during which the data will be stored or the criteria used to determine this period. You also have the right to receive information about your other rights specified in this point in the register extract.

      Correction of your personal data:
      At your request, we will correct the incorrect or incomplete data we process about you as quickly as possible. However, we do not have the option to change personal data on existing orders.

      Deletion of your personal data:
      At your request, we will delete the personal data we process about you if they are no longer needed for the purposes for which they were collected. If there are legal requirements for the processing of your personal data, we will end the processing of the data for purposes other than complying with the legislation, for example accounting and tax legislation.

      Limitation of processing of your personal data:
      At your request, we limit our processing of your personal data to certain limited purposes.
      You have the right to data portability, which means that under certain conditions you have the right to obtain and transfer your personal data in a structured and general format to another personal data controller.
      You have the right to object to the processing of personal data carried out for the purpose of balancing interests. If you object to such processing, we will only continue to process the personal data if there are legitimate reasons for the processing that outweigh your interests.
      In the case of processing for direct marketing, you always have the right to object to such processing by sending an email to info@gaspalori.com. Once we receive your objection, we will stop processing your personal data for such marketing purposes. There is also always the option to decline further marketing in all our mailings.
      You also have the right to submit any complaints regarding the processing of your personal data to the Data Inspectorate.

       

      10. Cookies

      Gaspaloris uses cookies on the websites, you can find more information in our cookie policy.

      11. Changes to the privacy policy

      We reserve the right to change our data protection declarations should it become necessary due to new technology. Please ensure you have the most current version. If we change basic paragraphs in this data protection declaration, we will publish information about this on our website.