Shippey Photography AB processes personal data in accordance with the EU’s General Data Protection Regulation (GDPR).
Personal data: any information that relates to an identified or identifiable natural person (hereinafter referred to as a data subject), wherein an identifiable natural person is a person who can be directly or indirectly identified specifically by reference to an identifier such as a name, identification number, location information or online identifiers or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person.
Processing: a measure or combination of measures relating to personal data or sets of personal data, regardless of whether they are automated or not, such as collection, registration, organization, structuring, storage, processing or modification, preparation, reading, use, transfer by transmission, dissemination or otherwise providing, adjusting or merging, limiting, deleting or destroying.
Personal data controller: a natural or legal person, public authority, institution or other body that alone or together with others determines the purposes and means of processing personal data; if the purposes and means of processing are determined by Union or national law, the personal data controller or the specific criteria for how he or she is to be designated may be prescribed by Union or national law.
Personal Data Assistant: a natural or legal person, public authority, institution or other body that processes personal data on behalf of the data controller.
Third party: a natural or legal person, public authority, institution or body that is not the data subject, the data controller, the personal data controller or the persons who are under the direct responsibility of the data controller or personal data controller competent to process the personal data.
Personal Data Incident: A security incident that results in unintentional or unlawful destruction, loss or alteration or unauthorized disclosure of or unauthorized access to the personal data transferred, stored or otherwise processed.
Processing of personal data
Responsible for personal data and data protection representative:
Shippey Photography AB (org. Number: 559051-0805) is the data controller and is responsible for the processing of your personal data at Shippey Photography AB, which means that
Shippey Photography AB has appointed a Data Protection Ombudsman (the “Data Protection Ombudsman”). Among other things, the Data Protection Ombudsman is responsible for monitoring that Shippey Photography AB’s processing of personal data takes place in accordance with applicable legislation. The Data Protection Ombudsman’s contact information is firstname.lastname@example.org
There are several different legal bases that give Shippey Photography AB the right to process your personal information. Completing an agreement that has been made with you is a legal basis. Other legal bases are to fullfill a legal obligation eg. the Accounting Act, obtaining consent or through a balance of interests.
If Shippey Photography AB has obtained your consent, you may at any time, in whole or in part, withdraw your consent.
A balance of interests means that Shippey Photography AB’s processing of your personal data is only allowed if Shippey Photography AB’s interest in processing your personal data is considered to outweigh your interest in privacy. Please note that you always have the right to object to the processing of your personal data based on a balance of interests.
Personal data stored and collected
We collect and store information about you that you yourself provide to us. The information collected about you includes both information that you yourself have provided to us or to third parties as well as information that is automatically collected when using our website. The types of personal data stored and collected are:
Personal and contact information: Name, title, profession, gender, user ID, birth data, social security number, address, telephone / mobile number, e-mail.
Payment information: Payment and credit card information (card number, CVV code and validity date), invoice information and bank account number;
Purchase history: Information on previous purchases and warranty and complaint cases at Shippey Photography AB.
Device information: IP address, MAC address, cookies or the like; and Other personal information that you choose to provide to us.
Purpose and legal basis of personal data processing
The main purpose of processing your personal data is for Shippey Photography AB to be able to fulfill our obligations to you as a customer, and to develop, maintain and quality assure our processes and our operations. Below is a more detailed description of our various types of processing of your personal data and the legal basis linked respectively to the purpose.
CATEGORIES OF PERSONAL DATA
Personal and contact information
PURPOSE OF THE TREATMENT
In order to be able to provide our services safely and efficiently and deliver relevant follow-up.
For invoicing & accounting
To be able to keep in touch with you regarding eg answering questions via email or through customer service.
To enable, payment, part payment, or credit. In such processing, your information is also transferred to the credit company (see purchase terms)
To handle complaints & warranty issues, as well as to handle customized orders.
To enable marketing, including mailing of a general nature via email.
To enable analysis & segmentation for targeted campaigns.
To systematically and continuously develop and ensure the quality of the business, Shippey Photography AB processes your personal data for statistical purposes. This is done, among other things, through customer surveys to analyze our experience with us and the experience of the results of our products and services. To the extent possible in relation to the purpose, your personal data is anonymized when used for statistical purposes.
The treatment is necessary to fulfill the agreement with you, i.e. when you make a purchase from Shippey Photography AB, and to fulfill our legal obligations.
The treatment is necessary for Shippey Photography AB’s legitimate interest in marketing its services to you (interest weighing)
The treatment is necessary for Shippey Photography AB’s legitimate interest in improving its services by achieving a safer & more relevant treatment for customers & visitors, as well as increasing the rate of repeat customers (balance of interest).
For information on how we handle cookies and other types of tracking see Cookies, as well as www.shippeyphotography.com/cookies
Transfer of personal data
We strive to process your personal data within the EU / EEA and do not transfer your personal data to countries outside the EU / EEA beyond what is stated below.
Shippey Photography AB discloses personal information to third parties in situations where this is a legal obligation or to fulfill our commitment to you as a customer. Your personal data will not be transferred or sold to third parties for advertising purposes. Shippey Photography AB also discloses your personal information to third parties for updating and posting information from the public records or other public records.
Shippey Photography AB takes the help of a third party in, for example, conducting customer satisfaction surveys, e-mailing or handling insurance matters, which means that your personal data may be transferred to a third party providing such services.
For those who wish to pay via partial payment, Shippey Photography AB forwards your social security number to payment and credit companies who need this for credit information purposes and the establishment of associated credit agreements.
The personal information we collect about you through your use of the Shippey Photography AB website may be transferred to an IT provider in countries outside the EU / EES who host, develop and provide support for our website shippeyphotography.com, as well as Google in the United States, through Google Analytics. Shippey Photography AB has ensured that your rights are guaranteed upon transfer to the United States through Google’s connection to the EU-US Privacy Shield. More information is available at www.privacyshield.gov.
Right to information
Request for extracts
You have the right to request, at no cost, an extract of which of your personal data that Shippey Photography AB has registered.
Request for correction
You always have the right to contact Shippey Photography AB, as personal data manager, to have your information corrected. It also means that you have the right to supplement any personal data that is missing and that is relevant to the purpose of the personal data processing. If information is corrected at your request, Shippey Photography AB must ensure that third parties to whom your information has been disclosed receive information about the correction. It does not, however, apply if it proves impossible or involves an overly burdensome effort.
You have the right to contact Shippey Photography AB and request that the information relating to you be deleted. The personal data must be deleted in the following cases:
– If the data is no longer needed for the purposes for which it was collected
– If the treatment is based on your consent and you withdraw the consent
– If the processing is for direct marketing and you oppose the processing of the data
– If you oppose personal data processing after a balance of interest and there are no justifiable reasons that outweigh your interest
– If the personal data has been processed illegally; or
– If deletion is required to fulfill a legal obligation.
If you request that your data be deleted, Shippey Photography AB must also inform those to whom we have provided information about the deletion. It does not, however, apply if it proves impossible or involves an overly burdensome effort. Shippey Photography AB is in some cases obliged to process your personal data even though you have requested that it be deleted.
Right to restriction of treatment
In some circumstances, you may request limitation on the continued processing of your personal data and a right to object to the processing under the conditions permitted by applicable personal data legislation (for example, if you question whether the personal data is accurate or whether the processing is legal).
Right to complain to the supervisory authority
If you believe that Shippey Photography AB processes information about you in violation of the Data Protection Regulation, you have the right to file a complaint with the Data Inspectorate. The Data Inspectorate examines all complaints and assesses whether supervision should be initiated and then leaves a message to you who brought the complaint. The Data Inspectorate must announce whether supervision should be initiated or not within three months of receiving the complaint. If, as a complainant, you are not notified within that time, you can go to court to request a notice.
Protection of information
Preservation and thinning
Your personal data will be stored by us only for the period necessary to fulfill the purposes for which the data was collected or as long as Shippey Photography AB is required to store your personal data by law or to safeguard Shippey Photography AB’s legal interests, t.ex. whether a legal process is in progress. Your personal data will then be deleted.
Links to other websites