Privacy policy

1. General

This privacy and marketing policy ("Privacy Policy") describes how Hemset AB, org. no. 559089-0736, Flensburgsgatan 3B, 214 28 Malmö, e-mail: info@hemset.se, ("Hemset", "we") collect, use, disclose, and store your personal data.

1.1 This Privacy Policy applies when Hemset provides services and products in connection with purchases, customer service inquiries, and other interactions with Hemset, such as visiting our website.

1.2 You should always feel secure when providing your personal data to us. With this Privacy Policy, we aim to demonstrate how we ensure that your personal data is processed in accordance with applicable data protection laws.

2. Personal data controller

Hemset is the data controller for Hemset's processing of your personal data and is responsible for ensuring that such processing complies with applicable legislation.

3. When do we process your personal data?

3.1 In order for you to visit our website, purchase our goods or services, or contact us for support or information, we need to collect and process personal data about you.

3.2 Hemset collects and processes personal data about you when you place an order on Hemset's website, use Hemset's customer support, visit Hemset's website, or when you otherwise interact with Hemset. The information collected from you during bookings and purchases is required for you to enter into an agreement with Hemset and for Hemset to provide its services and offerings.

3.3 We also collect and update your address information through third-party services for address updates.

4. What personal data do we process about you?

4.1 For you as a user of Hemset, the personal data Hemset collects and processes are:
- Name and identification number (personal identification number, national ID, or organization number)
- Address
- Phone number and email
- Payment information
- Customer number
- IP address and information about your use of Hemset's website

5. Why do we process information about you?

5.1 For you as a user of Hemset, Hemset processes your personal data for various purposes. Primarily, Hemset processes your personal data for the following reasons:
- To fulfill our obligations towards you as a user, such as processing purchases, invoicing, and providing support.
- To enable general customer care and service, including answering questions and correcting incorrect information.
- To provide information and direct marketing, via mail, email, and telephone, regarding Hemset's and selected partners' goods and services.
- To manage the customer relationship and provide our services.
- To provide you with relevant information and personalized offers in newsletters and on the website.To assess the payment methods we can offer you, for example, through credit assessments.
- To improve our customer offering, such as developing services, products, and features.
- To prevent fraud and perform risk management.
- To comply with applicable laws, such as accounting laws.

The data may also serve as a basis for market and customer analyses, market research, statistics, business monitoring, and business and method development related to the purchase of goods and services.

6. The legal grounds for our processing of your personal data are as follows:

6.1 Hemset bases the processing of your personal data on several legal grounds. These are described in this section.

6.2 We process your personal data, among other things, to fulfill the contract with you as a user, such as processing bookings and purchases.

6.3 Some of the processing of personal data that we carry out is based on a so-called balancing of interests. This applies, for example, to the processing we perform to send offers to you about our goods and services and to perform limited user segmentation, such as based on total purchase amounts. Hemset does not process sensitive personal data based on a balancing of interests, and we do not perform any processing that constitutes profiling based on a balancing of interests.

6.4 In some cases, Hemset may have a legal obligation to process your personal data. This applies, for example, to the processing of personal data that we perform to fulfill the requirements of the Accounting Act.

7. Summary of our personal data processing:
Purpose
Legal basis
Categories of personal data
Storage time

To administer and deliver our goods and services and provide support.

Fulfillment of purchase agreements (terms and conditions of sale)

- Name, address, phone number, and email
- Geographical information
- IP address, device information, log information
- Customer number
- Information about your purchases

As long as we are obligated to store the information according to applicable law.

To ensure compliance with legal requirements, such as the Accounting Act.

Fulfillment of purchase agreements (sales terms and conditions)

- Name, address, phone number, and email
- Geographical information
- IP address, device information, log information
- Customer number
- Information about your purchases

As long as we are obligated to store the data according to applicable law.

To market Hemset's or affiliated company's goods and services through mail, email, and telephone, and to develop Hemset's services, goods, and offerings, as well as provide support.

Balancing of interests

- Name, address, phone number, and email
- Geographical information
- IP address, device information, log information

Two years after your last activity with Hemset, for example, by making a purchase from us or contacting our customer service.

8. Profiling

8.1 Hemset may process your personal data through profiling if you are a user. If you are a user, information about how you use our website, your interests in our goods, services, and offers, and your interactions with our newsletters, as well as information about your purchases, will be analyzed to provide you with offers that we believe suit your preferences. This is done based on the legal ground of a balancing of interests.

8.2 You can object to the processing of your personal data through profiling at any time. You can do this by calling Hemset's customer service or by contacting info@hemset.com. Once Hemset receives your objection, Hemset will cease processing your personal data for this purpose.

9. How long do we store data about you?

9.1 Your personal data will only be stored as long as there is a need to keep them to fulfill the purposes for which the data was collected in accordance with this Privacy Policy.

9.2 Hemset retains user data for a maximum of 24 months after the user's last purchase or other interaction with Hemset.

9.3 Hemset may keep the data for a longer period if required to comply with legal requirements or to protect Hemset's legal interests, for example, during an ongoing legal process.

10. Who do we disclose personal data to?

10.1 Hemset may disclose your information to third parties, such as Hemset's affiliated companies and other partners necessary for delivering the service to you, as well as providers of card and communication services. Hemset may also disclose your information to companies providing address update services to ensure we have correct address information for you.

10.2 Third parties receiving information from Hemset may only use the information to sell and market Hemset and Hemset's services and products or to deliver services related to Hemset's agreements with you as a user.

10.3 Personal data may be disclosed by Hemset if necessary to comply with applicable legal requirements or demands from authorities, to safeguard Hemset's legal interests, or to detect, prevent, or address fraud and other security or technical issues.

10.4 Hemset may transfer your personal data to a country outside the EU/EEA if any of Hemset's suppliers or partners are located there. If personal data is transferred to any country outside the EU/EEA, Hemset will take measures to ensure that the personal data remains protected and also take the necessary steps to legally transfer personal data to countries outside the EU/EEA.

10.5 We will not sell your personal data to third parties without your permission.

11. Changes to the Privacy Policy

11.1 Hemset has the right to modify the Privacy Policy at any time. Hemset will provide reasonable notice to inform you of any changes to the Privacy Policy. If you do not agree with the changes, you have the right to terminate the agreement with Hemset before the amended Privacy Policy takes effect. You can terminate the agreement by contacting Hemset.

12. Protection of your personal data

You should always feel confident when providing your personal data to us. Therefore, Hemset has implemented the necessary security measures to protect your personal data from unauthorized access, alteration, and deletion. For instance, all information about users is stored in a database protected by access controls and a firewall.

13. Your rights

13.1 Hemset is responsible for processing your personal data in accordance with applicable law.

13.2 Upon your request or on our own initiative, Hemset will rectify, anonymize, delete, or complete any personal data found to be incorrect, incomplete, or misleading.

13.3 You have the right to:Access your personal data: You can request a record of the processing we conduct concerning your personal data, including the purposes of the processing and to whom the data has been or will be disclosed. You also have the right to receive a copy of the processed personal data free of charge.Rectify your personal data: Upon your request, we will correct any inaccurate or incomplete personal data we process about you.Erase your personal data: You can request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected. However, certain legal obligations may prevent us from immediately deleting certain data, such as accounting and tax legislation. In such cases, we will stop processing the data for purposes other than compliance with the law.Restrict processing: You have the right to have your personal data marked and processed only for specific purposes. You can request restriction, for example, when you believe your data is inaccurate and have requested correction according to section 12.3(b). During the investigation of the accuracy of the data, processing will be restricted.

13.4 Hemset will inform any recipient to whom the personal data has been disclosed according to section 10 above about any corrections, erasure, or restriction of processing of the data.

13.5 You have the right to data portability, which means the right, under certain conditions, to obtain and transfer your personal data in a structured, commonly used, and machine-readable format. Where technically feasible, you also have the right to have the data transferred to another data controller.

13.6 You have the right to object to the processing of personal data based on legitimate interests. If you object to such processing, we will only continue processing if there are compelling legitimate grounds for the processing that outweigh your interests.

13.7 If you do not wish for Hemset to process your personal data for direct marketing purposes, you have the right to object to such processing by sending an email to info@hemset.se. Once we receive your objection, we will stop processing the personal data for such marketing purposes.

13.8 You have the right to lodge complaints concerning the processing of your personal data with the Swedish Data Protection Authority (Datainspektionen).

14. Cookies

When you visit our website, we use cookies. You can find more information about how we process cookies in our cookie policy.

15. Contact information

15.1 Do not hesitate to contact us if you have any questions about this Privacy Policy, the processing of your personal data, or if you want to request a record of the processing. You can find our contact information below.

Hemset AB
Flensburgsgatan 3B
214 28 Malmö
info@hemset.se