Privacy Policy

Integrity Policy for Modelljärnvägsspecialisten Tåg & Hobby i Luleå AB.

Updated 2018-05-23

Applies to Modelljärnvägsspecialisten Tåg & Hobby i Luleå AB. (organization number 556576-4775).

This privacy policy applies from May 25, 2018.

Content:


Integrity Policy for Modelljärnvägsspecialisten Tåg & Hobby i Luleå AB.


1. General

2. What is a personal data and what is a processing of personal data?

3. Who is responsible for the personal data we collect?

4. How do we collect personal data?

5. What personal data do we collect and why?

6. How long do we save information about you?

7. Do we share personal information?

8. Can children use our services?

9. How are your personal data protected?

10. Social media

11. How do we use cookies?

12. What rights do you have?

13. How do you contact us easiest with questions about data protection?

14. Complaints to the supervisory authority.

1. General
At Modelljärnvägsspecialisten Tåg & Hobby i Luleå AB. we will protect your personal integrity. In this privacy policy, we inform you about how we handle your personal information when you visit our web pages, register an account in our webshop, buy our products or services, or when you are in contact with us. In this policy you will also find information about what rights you are in the management of your personal data in accordance with the Data Protection Regulation GDPR.
We may make changes to our privacy policy to reflect changes in our business, our website or services, or current law. The latest version of the privacy policy is always available on this site.
Please contact us if you have any questions or concerns.

2. What is a personal data and what is a processing of personal data?
Personal data is all information directly or indirectly (with or without other information) can be linked to you, such as  name, social security number, IP address or purchase history.
All forms of personal data processing include personal data processing, such as collection, registration, organization, storage, processing or modification, reading, use, disclosure, dissemination or other provision of data, aggregation or interception, blocking, erasure or destruction.

3. Who is responsible for the personal data we collect?
Modelljärnvägsspecialisten Tåg & Hobby i Luleå AB (Org. Nr. 556576-4775), Kungsgatan 20D, 972 34 Luleå, is personally responsible for the personal data collected and processed by the company and responsible for such treatment in accordance with applicable legislation.

4. How do we collect personal data?
When you visit our websites as a logged in customer, buy our products or services or otherwise contact us, we collect personal information such as full name, address, e-mail address, phone number, social security number, payment details, purchase, order and usage history, IP address and other case-related information, such as the information you provide in contact with our customer service.
We may also collect and update your address information through third-party payment solutions, address updates, and creditworthiness data from credit rating agencies, banks and other financial institutions.

5. What personal data do we collect and why?
a) In order to handle orders and purchases:
Personal data is processed to enable the following:
- Delivery of an ordered / purchased product or service (including delivery or contact details in connection with delayed delivery).
- Identification and age control
- Payment handling (including analysis of possible payment solutions, which may include a check over payment history and collection of credit reports from credit reporting companies.
- Handling of complaint and warranty matters

The categories of personal data processed are:
- Name
- Personal identification number (if invoice payment is selected)
- Contact details (eg address, email, phone number)
- Payment information (eg card number, transaction date, cardholder)
- Payment form
- Credit reports from credit reporting companies
- Order information
- User Details for My Account
- Your correspondence

Legal basis:
- Completion of purchase agreement.  This collection of your personal information is required in order to fulfill our obligations under the purchase agreement.

Storagetime:
- Until the purchase has been completed (including delivery and payment) and for a period of 36 months thereafter in order to handle any complaints and warranty cases.

b) To manage "My Account":
Personal data is processed to enable the following:
- Give permission to log in
- Ensure identity and age
- Maintain accurate and updated tasks
- The opportunity for you to follow your purchase and payment history
- The opportunity for you to save favorites and similar facilitation measures
- Managing your customer choices (such as your profile and your settings)

The categories of personal data processed are:
- Name
- Personal identification number
- Contact details (eg address, email, phone number)
- Username and password
- Order history
- Payment information
- Settings regarding your profile and your personal choices

Legal basis:
- Completion of agreement.  The processing is necessary to create and manage your customer page in accordance with our terms and conditions, thereby fulfilling our agreement with you.

Storagetime:
- Until you complete your account.  If your membership has been inactive for 36 months, we will delete your account and associated information, provided you have no debts to us.  With inactivity, we mean that you did not register a purchase.

c) In order to handle customer service issues:
Personal data is processed to enable the following:
- Communication and response of customer service questions by phone, email or digital channels (including social media).
- Identification
- Examination of complaints and support cases (including technical support)

The categories of personal data processed are:
- Name
- Personal identification number
- Contact details (eg address, email, phone number)
- User Details for My Account
- Your correspondence
- Details of purchase date, possible error / complaint
- Technical information about your products
- User Details for My Account

Legal basis:
- Legitimate interest. The processing is necessary to meet our and your legitimate interest in handling customer service matters.

Storagetime:
- The data is processed until the customer service has been terminated and for a period of 12 months thereafter in order to provide better customer service in case of a renewed case.

d) In order to fulfill legal obligations (eg, requirements in the Accounting Act, Product Liability and Product Safety and the Protection of Personal Data in IT Systems):
Personal data is processed to enable the following:
- Comply with legal obligations, as required by laws, judgments or government decisions.  Such obligations can for example be  refer to product liability and product safety requirements such as communication and information to the public and customers about product alarms and product recalls, e.g.  in case of a defect or health claim or to the extent required by the Accounting Act or the Money Laundering Act and may be attributed to an individual.

The categories of personal data processed are:
- Name
- Personal identification number
- Contact details (eg address, email, phone number)
- Your correspondence
- Details of purchase date, place of purchase, defect / complaint on product
- User Details for My Account
- Payment History

Legal basis:
- Legal obligation.

Storagetime:
- As long as we are required to store the data in accordance with applicable law.

e) In order to prevent abuse of a service or to prevent, prevent and investigate crimes against the company:
Personal data is processed to enable the following:
- Investigate or prevent fraud or other offenses through eg.  incident reporting in store.
- Prevent spam, phishing, harassment, unauthorized login to user accounts, or other actions prohibited by a company's Terms of Service.
- Protect and improve the company's IT environment from attacks and intrusion

The categories of personal data processed are:
- Purchase and user generated data (e.g., click and visit history)
- Personal identification number
- Video recordings from camera surveillance
- Data related devices used by the customer and settings, such as  language setting, IP address, browser settings, time zone, operating system, screen resolution and platform.
- Information on how our digital services are used

Legal basis:
- Compliance with legal obligation (if any) or justified interest.  If no legal obligation exists, treatment is necessary to meet our legitimate interest in preventing abuse of a service or preventing, preventing and investigating violations of the company.

Storagetime:
- From collection and for a period of 36 months thereafter.

f) In order to handle product bookings (such as upcoming news and products):
Personal data is processed to enable the following:
- Receipt of bookings, cancellations and cancellations
- Outgoing booking confirmation
- Communication around the reservation

The categories of personal data processed are:
- Name
- Personal identification number
- Contact details (eg address, email, phone number)
- Payment information (eg card number, transaction date, cardholder)
- Payment form
- Credit reports from credit reporting companies
- Order information
- User Details for My Account
- Your correspondence

Legal basis:
- Completion of purchase agreement.  This collection of your personal information is required in order to fulfill our obligations under the purchase agreement.

Storagetime:
- Until the purchase has been completed (including delivery and payment) and for a period of 36 months thereafter in order to handle any complaints and warranty cases.

g) In order to promote products and services:
Personal data is processed to enable the following:
- View relevant product recommendations, suggest shopping lists, remind for forgotten / abandoned digital shopping carts, save shopping lists to simplify future purchases or similar actions, simplifying your shopping experience.
- Send direct marketing via email, text message, social media or other similar electronic channels for communication as well as mail, including promotional partner offers to existing customers.
- Perform campaigns or send offers and invitations to events.

The categories of personal data processed are:
- Name
- Contact details (eg address, email, phone number)
- User Details for My Account
- Details of completed purchases
- Purchase and user generated data (e.g., click and visit history)

Legal basis:
- Completion of agreements for customers with My Account
- Importance for recipients of newsletters and site visitors

Storagetime:
- For completion of a contract: Until you complete your account.
- For balance of interest: From collection and for a period of 36 months thereafter.

6. How long do we save information about you?
Your personal information is only stored for as long as it is required to fulfill the purpose of the treatment, or as long as we have to store them by law.  See more about the specific storage periods under the respective purposes under item 5 of this privacy policy.

7. Do we share personal information?
We only share your personal information when this is a legal requirement or otherwise as permitted by law.
We also share your personal data with certain companies that are independent personal data administrators, such as government agencies or companies that offer independent payment solutions or general freight services.  These companies themselves determine how the information should be processed in accordance with their privacy policy.

8. Can children use our services?
Our websites and services are not targeted at children under the age of authority.  We do not collectively collect information, including personal data, from children or other persons who have no legal right to use our sites and services.  If we learn that we have received personal data from a child under the age of authority, we will delete them, unless the law requires us to save them.  Contact us at info@modellhobby.se if you think we have collected information about a child under the age of authority by mistake.

9. How are your personal data protected?
We take the necessary legal, technical and organizational security measures to protect your personal data from being manipulated, lost or destroyed or unauthorized access to them.  Our safety routines are updated as technology evolves and improves.

10. Social media
At the moment you can follow us through various social media, including Facebook.  In these accounts, we are solely responsible for any personal information that we publish or may affect the publication of.

11. How do we use cookies?
Information on how to use cookies is available on our Cookie Information page.  You can also read more about cookies on the National Post and Telecom Agency website, www.pts.se.

12. What rights do you have?
In accordance with the GDPR, you have certain rights regarding the processing of your personal data.

Access to your personal data (eg registry extract):
You are entitled to request access to your information through a registry extract.  Because it is important that we do not disclose your personal information to anyone else, a request for registry extracts must be made in writing and signed by you.  Download the application form request form from https://www.modellhobby.se/registerutdrag/RegisterutdragGB.pdf.  We will respond to your request without undue delay and as soon as possible within a month.

Correction of personal data:
You are always entitled to request that your personal information be corrected.  You have the option to log in to "My Account" and correct incorrect information, or contact our customer service.

Deletion of your personal information:
You may request the deletion of your personal information, provided that we do not have an obligation to save personal data in accordance with applicable laws and regulations.

Limitation of treatment:
You are entitled to object to the processing of your personal data at any time based on a balance of interest.  You also have the right to object to the processing of your personal data for marketing purposes.  This means you have the right to say no to newsletters and other marketing messages from us.  If you oppose promotion, your personal data will no longer be processed for such purposes.

13. How do you contact us easiest with questions about data protection?
If you have questions relating to data protection and integrity or believe that we have processed your personal information incorrectly, you can always contact us via our customer service at info@modellhobby.se or 0920-16035.

14. Complaints to the supervisory authority
Anyone who considers that there is an incorrect handling of personal data may make complaints to the Data Inspection / Privacy Authority, which is responsible for supervision under applicable data protection legislation.