Privacy Policy for aim’n
In this privacy policy, aim'n describes how we process your personal data. We process your personal data when you visit our website, make a purchase from us, receive marketing, have an Aim'n Society account with us, participate in one of our events or competitions, or when you are otherwise in contact with us.
Summary – How do we process your personal data?
When you visit our website we process your personal data to:
- analyse how our website is used with the help of Google's analytics service, DEMA's analytics service, Stift Lab's analytics service, and Microsoft's analytics service (if you have consented to this),
- show you interesting offers from us on our own and other websites you visit, using marketing services from Google, Meta, Snapchat, and Pinterest (if you have consented to this), and
- ensure that the website works and to remember your choices.
If you make a purchase form us, we process your personal data to:
- handle your purchase,
- communicate with you regarding your purchase, if necessary,
- handle any questions about your purchase, returns, right of withdrawal, and complaints, and
- send you a request to review your purchase and publish your reviews.
If you receive marketing or otherwise communicate with us, we process your personal data to:
- send you newsletters and other marketing,
- send you personalised marketing,
- improve our email communications,
- remind you about products you have left in your shopping cart, and
- inform you that products you have requested are in stock.
If you register or use an Aim’n Society account with us, , we process your personal data to:
- create, provide, and manage your membership account,
- send you newsletters and other personalised marketing, and improve our mailings,
- manage your bonus points and membership level, and show previous and current purchases,
- remind you about products you have left in your shopping cart, and
- communicate with you about your Aim'n Society account.
If you save your favourites in a wish list, we process your personal data to provide you with this digital service.
If you participate in a contest or event with us, we process your personal data to carry out and manage your participation in competitions and events.
If you have questions, complaints, legal claims, or similar, we process your personal data to:
- comply with marketing laws, if you have unsubscribed from our mailings,
- comply with accounting legislation,
- communicate with you and, for example, be able to answer your questions,
- send updated privacy policies, and
- handle complaints, discussions, or legal claims.
Our processing of personal data means that your personal data is shared with certain suppliers who process it outside the EU/EEA.
Your rights
You have the following rights:
We want to be transparent when processing your personal data. Below you can read more details about our processing of your personal data. The privacy policy is detailed in order to comply with the legal requirements of the General Data Protection Regulation (”GDPR”), so please use our summary above and the table of contents below to click your way to the section you are interested in. Please do not hesitate to contact us if you have any questions or wish to exercise your rights.
- Data controller and our contact details
- Who process your personal data and why?
- Do we transfer your personal data outside the EU/EEA?
- Detailed information about how we process your personal data
- What rights do you have when we process your personal data?
- Balancing of interests
Aim Apparel AB, with organization number 556958-2207 (“aim'n”), is responsible for the processing of your personal data as described in this privacy policy. If you have any questions regarding our processing of your personal data or if you wish to exercise any of your rights, please contact us. Our contact details are:
Email: hello@aimn.com
Letter: Box 7116, 300 07 Halmstad
We collect your personal data directly from you. Primarily, your personal data is only processed by us at aim'n. In certain cases, we share your personal data. More details about when we share your personal data in relation to the respective purposes and what personal data we share in such cases can be found in the tables below. In summary, the following applies:
- If you visit our website and leave your consent your personal data is processed by the analysis and marketing services we use, i.e Google, Microsoft, DEMA, Stift Lab, Meta (Facebook and Instagram), Pinterest, and Snapchat. These recipients process personal data on our behalf as our data processors, but also process your personal data as independent data controllers. These providers will inform you separately about their processing of your personal data, for which they are responsible.
- If you visit our website, your personal data is also processed by the service providers we use to ensure the website functions and to remember your choices. You can find a complete list of these providers in our cookie policy
- If you make a purchase from us, your personal data will be processed by ourpayment service providers, who receive the personal data you provide to handle your purchase and who are responsible for the processing of personal data in connection with the payment. Read more in the payment service providers' information about personal data processing here. In addition, your personal data is processed by the carrier you choose so that the products can be delivered to you. These recipients are independently responsible for the processing of your personal data. The carriers that process your personal data are indicated by the choice you make at checkout when purchasing.
- After your purchase, you will receive a request to write a review. We use Lipscore to Lipscore to manage your reviews. Lipscore will process your personal data on our behalf in its capacity as our data processor.
- If you contact us via social media, if we share your posts on social media, or if you participate in a contest on social media, the social media platform we use will have access to your personal data, for example Instagram.
-
We use a marketing agency to
- We use Voyado to manage memberships, send text messages, emails, and newsletters, and analyse them.
- In the event of a legal dispute, we will share your personal data with authorities and lawyers as necessary.
- For us to have functioning IT systems and conduct our business in an efficient manner, our IT suppliers (such as Microsoft) will process your personal data. These IT suppliers process personal data on our behalf as our data processors.
If you want more information about how we share your personal data, please read the tables below or contact us .
As a general rule, aim'n only processes your personal data within the EU/EEA, but some of our service providers process personal data outside the EU/EEA. This applies in the following cases:
- If you visit our website, your personal data will be transferred outside the EU/EEA if you consent toGoogle, Microsoft, DEMA, Stift Lab, Meta (Facebook and Instagram), Pinterest, and Snapchat. processing your personal data.
- If you contact us via Instagram or Facebook, your personal data will be processed outside the EU/EEA byMeta when you have chosen to be active on Meta or Facebook.
- If you have consented to receiving marketing and other information from us, your personal data will be transferred outside the EU/EEA when we use our email service provider Voyado.
When your personal data is transferred to the US, it is done so on the basis of an adequacy decision by the European Commission pursuant to Article 45 of the GDPR. This means that the EU has assessed that the US has adequate protection for your personal data – through an agreement between the EU and the US called the EU-US Data Privacy Framework. Google, Meta, and Microsoft are certified under the EU-US Data Privacy Framework. On the Data Privacy Framework's website you can search for information about certified providers..
When your personal data is transferred from our suppliers to their subcontractors in a country that does not have an adequacy decision, or if the service provider is not certified under the EU-US Data Privacy Framework, the transfer is made in accordance with the European Commission's standard contractual clauses. We will then transfer your personal data in accordance with the standard contractual clauses (Article 46.2 (c) GDPR), Module 1 (controller to controller) and Module 2 (controller to processor), together with supplementary measures. You can find the standard contractual clauses here. In cases where we conclude that legislation or similar in a specific country outside the EU/EEA to which we transfer your personal data affects the effectiveness of the standard contractual clauses, we will take additional protective measures to ensure adequate protection of your personal data. .
If you would like to know more about the protective measures we implement when transferring your personal data, please contact us.
In this detailed description, you can read more about
- why we process your personal data,
- the categories of personal data we process,
- the legal basis for processing your personal data,
- how long we store your personal data,
- where we obtain your personal data,
- whether you must provide us with your personal data, and
- which recipients have access to your personal data.
When you visit our website
If you consent, we analyse how our website is used and show you relevant offers on other pages and social media you visit based on such analysis. In addition, we process your personal data to ensure that the website works and to remember your choices. We explain this in detail in the tables below.
Personal data is collected from your device (e.g., mobile phone, computer, or tablet) when you visit our website. Google, Microsoft, Stift Lab, DEMA, Meta, Pinterest, and Snapchat also use information they already have to perform analysis and show you interesting offers from us.
To protect your privacy, we and our suppliers have taken measures to avoid identifying you as a user of our website. For example, we only share an encrypted version of your IP address with Google.
We use cookies and similar technologies to collect personal data when you visit the website, as described below. In our information about cookies which you can find on our website, we explain in more detail how this works.
Analyse how our website is used
| Purpose | Personal data processed | Legal basis |
|---|---|---|
|
Analyse how you use our website with the help of cookies. We do this to improve the functionality of the website, to customize the website to suit our visitors, and to be able to draw conclusions about our visitors. To do this, we use, among other things, an analytics service from Google Analytics and Microsoft Clarity which means that a random ID is used to distinguish your device from other visitors and to confirm patterns in how our website is used. . For the same reason, we use DEMA:s and Stift Labs analytics service, which records visitor activity on the website and creates activity maps so that we can see patterns in website usage.. We are only interested in how visitors interact with us on an overall level. We at aim'n do not know who you are and do not take any measures to find out. |
|
Consent (article 6.1 a of the GDPR) We obtain your consent when you visit our website. You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can avoid Google Analytics by, for example, downloading and installing this browser program. To avoid cookies, you can also adjust your browser settings.. |
Storage period: Personal data is stored for five years after your visit to our website.
Recipients of your personal data: VOur analytics service Google Analytics, Microsoft Clarity, DEMA and Sift Labsreceive your personal data. For more information about Googles, Microsofts, DEMA:s and Stift Labs’ processing of personal data and how long they store your personal data, please refer to their respective privacy policies, which you can find by clicking on the names.
Show interesting offers from us on other websites you visit
| Purpose | Personal data processed | Legal basis |
|---|---|---|
|
Promote our products by showing offers and new products that we think are interesting to you. We show marketing tailored to you on other websites and social media that you visit. We can show offers by using marketing services from Google, Meta (Facebook and Instagram), Pinterest and Snapchat. We do this based on analysis of our website, through cookies or similar technology, as well as information that these parties already have about you. We tailor the marketing to suit you based on information that the marketing services already have about you and based on your previous browsing history with us. This means that your browsing history is subject to profiling*. |
|
Consent (article 6.1 a of the GDPR) We obtain your consent when you visit our website. You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Here you will find more information about your choices on Instagram, and here on Facebook, under the heading “Ad Settings,” you can choose what marketing you want to see on Facebook. Here ou can read more about your choices on Snapchat. Here you can choose what marketing you want to see on Pinterest. |
Storage period:You will see marketing from us for 18 months after your visit to our website.
Recipients of your personal data: Your personal data is shared with the marketing services we use. These marketing service providers will continue to process your personal data as independent data controllers. You can read more about how Google , Meta , Pinterest and Snapchat process your personal data and how long they store your personal data in the providers' respective privacy policies. Click on the names to read more. We share your IP address with providers who help us with our marketing.
*Profiling: Your personal data is used to show you the offers that we and the marketing services we use believe are best suited to you. So-called profiling is done because otherwise we would not be able to show you relevant offers and marketing, and instead you would see offers that are not relevant to you. You have the right to object You can read more about your right to object below, where your rights are explained in detail.
For the website to function and to remember your choices
| Purpose | Personal data processed | Legal basis |
|---|---|---|
We and our suppliers do not track how you use the website; this is done automatically through technical functions. |
|
Balancing of interests (article 6.1 f of the GDPR) The processing is necessary for our legitimate interest in providing a well-functioning and secure website. |
Storage period: Personal data collected using cookies for website functionality is stored for six months.Personal data collected using cookies to remember your choices is stored in OneTrust after you have given your consent.
Recipients of your personal data: Your personal data is processed through the services we use on our website, such as the service that provides our consent solution. We list these services as “necessary” in our cookie policy. These services are used to enable us to conduct our business efficiently, and the companies behind the services act as our data processors.
If you make a purchase from us
When you make a purchase from us, we process the personal data you provide to us. The purposes for which we process your personal data are set out in the tables below. If, in connection with your purchase, you have chosen to consent to us sending you marketing you can read more about how we process the personal data we have received from you in connection with your purchase here.
Handle your purchase
| Purpose | Personal data processed | Legal basis |
|---|---|---|
|
|
Performance of a contract (article 6.1 b of the GDPR) The processing is necessary for us to fulfil your purchase agreement. If the personal data is not provided, you will not be able to make a purchase from us. |
Storage period: The personal data linked to your purchase will be actively processed by us for a few weeks to administer and manage your order so that you can receive the goods you have ordered. Information about your purchase will be stored as accounting material for seven to eight years after your purchase. For more information, see see here.
Recipients of your personal data: We will share your name, address, and contact details with the carrier you select at checkout so that they can deliver your products. The carriers we use are independent data controllers for the processing of your personal data. In addition, we share information about your wish to make a purchase with our payment service providers, who receive the personal data you provide in order to process your purchase and are themselves responsible for the processing of your personal data in connection with the payment. Read more in the payment service providers' information about processing of personal data here. We also share your personal data with our IT providers who process personal data on our behalf as our data processors.
Communicate with you about your purchase and handle customer service issues
| Purpose | Personal data processed | Legal basis |
|---|---|---|
|
VTo communicate with you about your purchase, for example if the product you ordered is out of stock or to notify you of any delivery delays To keep you informed and updated about our terms and conditions or other information that you, as a customer or representative of our customer, need to know |
|
Balancing of interests (article 6.1 f of the GDPR) The processing is necessary for our legitimate interest in being able to communicate with you about your purchase if necessary. |
|
Handle any questions, right of withdrawal, returns, and complaints smoothly and in accordance with applicable consumer regulations and our agreement. |
|
Performance of a contract (article 6.1 b of the GDPR): The processing is necessary for us to fulfil the agreement regarding your purchase. If the personal data is not provided, we will not be able to help you with, for example, a return. Legal obligation (article 6.1 c of the GDPR): The processing is necessary for us to be able to act in accordance with consumer law and thus comply with a legal obligation we have. If you do not provide us with your personal data, we will not be able to comply with consumer regulations. Balancing of interests (article 6.1 f of the GDPR): The processing is necessary for purposes related to our legitimate interest in being able to handle your questions, complaints, and other requests in an efficient and customer-friendly manner. |
Storage period: We store your personal data for five years after your purchase.
Recipients of your personal data: Your personal data is shared with our IT suppliers who process this personal data on our behalf as our data processors..
Send request if you want to review your purchase and publish your review
| Purpose | Personal data processed | Legal basis |
|---|---|---|
|
|
Balancing of interests (article 6.1 f of the GDPR): legitimate interest in being able to contact you with a request to evaluate us and our products in order to improve our products and our range. Consent (article 6.1 a of the GDPR): We obtain your consent to publish your review when you submit your review. You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. |
Storage period: Your personal data will be stored for the purpose of sending you a request six months after your purchase. However, we will cease processing your personal data earlier if you object to our processing. If you leave a review, we will use it until further notice. You can contact us at any time if you no longer want us to use your review.
Recipients of your personal data: VWe share your personal data with Lipscore to manage your reviews, as well as with our IT providers who process personal data on our behalf as our data processors.
If you receive marketing or otherwise communicate with us
When you receive our marketing or otherwise contact us, we will process your personal data as described in the tables below. We receive, or have received, your personal data from you when you contact us, when you have registered to receive our newsletters and other marketing, or when you have registered your email address to receive a reminder that an item you have requested is in stock. We also receive your personal data from you if you become a member of our customer club, Aim’n Society, or if you have consented to receive newsletters and other marketing from us in connection with your purchase.
You can read more about how we process your personal data if you have unsubscribed from our marketing here.
Send newsletters and other marketing
| Purpose | Personal data processed | Legal basis |
|---|---|---|
|
We send information via email and SMS about news, marketing, offers, benefits, discounts, and invitations (“newsletters”).. |
|
Consent (article 6.1 a of the GDPR): We obtain your consent to send you marketing. You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its. |
|
We use data from your previous orders and your browsing activity to tailor individual product recommendations based on your interests, known as profiling*. |
Browsing history and purchase history Type of device Location of IP address, for example, the postal code where the IP address is located Delivery address you have chosen as a customer Information about which products you show interest in on our website |
Same as above. |
|
We improve and develop our newsletters by analysing how you open them and what you click on in the newsletters. However, we never perform such analysis at an individual level, i.e., we do not look at how you specifically interact with our newsletters. |
|
Same as above |
Storage period: You will continue to receive newsletters until you object to marketing or withdraw your consent. If you object or withdraw your consent, your contact details will be stored in our unsubscribe register until further notice, see table below. Certain information will be retained for statistical purposes.
If you are a member of our customer club, you will stop receiving our mailings if you delete your Aim'n Society account or withdraw your consent.
Recipients of your personal data: To customize our email communications, we use Voyado, which processes your personal data on our behalf as our data processor. We share your personal data with our IT suppliers, who process personal data on our behalf as our data processors.
*Profiling: Your personal data is used to show you the offers that we and the marketing services we use believe are best suited to you. So-called profiling is done because otherwise we would not be able to show you relevant offers and marketing, and you would instead see offers that are not relevant to you. You have the right to object to profiling. You can read more about your right to object below, where your rights are explained in detail.
Remind you about products you left in your shopping cart
| Purpose | Personal data processed | Legal basis |
|---|---|---|
| Send reminders via email to you that you have left products in your shopping cart on our website without completing the purchase. | Email address and information about products you have left in your shopping cart |
Consent (article 6.1 a of the GDPR). We obtain your consent to send you marketing. You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. |
Storage period: Personal data will be processed by us for 24 months after you have left products in your shopping cart.
Recipients of your personal data: For mailings, we use Voyado, which process your personal data on our behalf as our data processors. We also share your personal data with our IT suppliers, who process personal data on our behalf as our data processors.
Send information that a product you requested is available
| Purpose | Personal data processed | Legal basis |
|---|---|---|
|
Send information that your requested item is in stock. We improve and develop our newsletters by analysing how you open them and what you click on in the newsletters. However, we always perform such analysis at the individual level, meaning we do not look at how you specifically interact with our newsletters. |
|
Consent (article 6.1 a of the GDPR). We obtain your consent to send you marketing. You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. |
Storage period: You will receive marketing until you choose to unsubscribe from our mailings, object to marketing or withdraw your consent. If you do so, your personal data will be stored in our unsubscribe register until further notice. Seetable below. for more information.
Recipients of your personal data: To analyse our email campaigns, we use Voyado, which processes your personal data on our behalf as our data processor.
If you register or use an Aim’n Society account with us
You can choose to become a member of our customer club, Aim'n Society, via our website or in one of our stores. In order to create your membership in Aim'n Society and fulfil what follows from it, we must process your personal data. If you do not provide us with your personal data, we will not be able to create or administer your membership. If you do not wish to provide your personal data, you cannot be a member of our club.
Based on your member profile, we will also market our products to you via email and text message. You can find information about this above. If you do not want to receive marketing from us, you always have the right to opt out. Read more about your rights below.
We also process your personal data to show current and previous purchases, to evaluate and improve our services, to remind you of products you have left in your shopping cart, and to enable you to save your favourites in a wish list.
We obtain your personal data from you when you register an Aim'n Society account. In some cases, personal data is created within your membership, such as your bonus points.
Create, manage, and maintain your Aim’n Society account
| Purpose | Personal data processed | Legal basis |
|---|---|---|
| Create, manage, and maintain your Aim'n Society account. | Name and Contact details (address, email address and telephone number) |
Performance of a contract (article 6.1 b of the GDPR):The processing is necessary for us to perform our obligations to you under the Aim'n Society account membership terms and conditions. You accepted these terms and conditions when you created your account. If you do not provide your name, contact details, and password, you will not be able to create an Aim'n Society account. |
Storage period: We store your personal data until you delete your Aim'n Society account or if your account has been inactive for two years..
Recipients of your personal data: We share your personal data with our IT suppliers who process personal data on our behalf as our data processors.
Manage you bonus points, membership level, view past and current purchases
| Purpose | Personal data processed | Legal basis |
|---|---|---|
|
|
Performance of a contract (article 6.1 b of the GDPR): The processing is necessary for us to manage your bonus points and membership level in accordance with our membership terms and conditions, and thereby fulfil our agreement with you. If the personal data is not provided, we will not be able to calculate your bonus points. |
| Enable you to view and track your current and previous purchases. | Purchase and order history |
Performance of a contract (article 6.1 b of the GDPR): The processing is necessary to administer your member pages in accordance with the membership terms and conditions and thereby fulfil our agreement with you. If the personal data is not provided, you will not be able to view your purchases and order history. |
Storage period: Your earned bonus points and membership level are stored for as long as you have an Aim'n Society account.
Information about your purchase is stored as accounting material for seven to eight years after your purchase. See more information here.
All other personal data is stored until you delete your Aim'n Society account.
Recipients of your personal data: To manage your bonus points and membership level, and to display current and previous purchases, we use IT suppliers who process your personal data on our behalf in their capacity as our data processors.
Remind you about products you left in your shopping cart
| Purpose | Personal data processed | Legal basis |
|---|---|---|
| Send reminders via email to members who have left products in their shopping cart on our website without completing the purchase. | Email address and information about products you have placed in your shopping cart |
Consent (article 6.1 a of the GDPR): We obtain your consent to send you marketing. You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. |
Storage period: Personal data will be processed by us for 24 months after you have left products in your shopping cart or until you withdraw your consent. Recipients: FFor mailings, we use Voyado, which processes your personal data on our behalf as our data processor. We also share your personal data with our IT suppliers, who process personal data on our behalf as our data processors.
Communicate with you about your Aim’n Society account
| Purpose | Personal data processed | Legal basis |
|---|---|---|
| Send information about updated membership terms or other information relating to your Aim'n Society account. | Name, contact details (address, email address and telephone number), information about your purchases , membership level and information about bonus points |
Performance of a contract (article 6.1 b of the GDPR): The processing is necessary for us to fulfil our obligations to you under the Aim'n Society account membership terms and conditions. You accepted the terms and conditions when you created your account. If you do not provide your name and contact details, we will not be able to communicate with you about your membership. |
Storage period: We store your personal data until you delete your Aim'n Society account.
Recipients: For mailings, we use Voyado, which processes your personal data on our behalf as our data processor. We also share your personal data with our IT suppliers, who process personal data on our behalf as our data processors.
If you save your favourites in a wish list
If you save your favourites in a wish list, we will process your personal data. We receive your data from you when you use our feature to save favourites in a wish list as a visitor to the website or via your account if you are a member of Aim'n Society and are logged in. Below you can read more about why we process your personal data and what personal data we collect.
Save your favourites in a wish list
| Purpose | Personal data processed | Legal basis |
|---|---|---|
| Offer you a feature to save your favourites in a wish list. | Information about your favourites and wish list | Balancing of interests (article 6.1 f of the GDPR): The processing is necessary for purposes related to our legitimate interest in being able to offer you a feature for saving your favourites in a wish list. |
Storage period: Your favourites and wish list are saved until you delete them yourself.
Recipients: To offer favourites and wish lists, we use IT providers who process personal data on our behalf as our data processors.
If you participate in a contest or event with us
If you participate in a contest or event with us, we will process your personal data. We obtain your personal data from you through your participation in the contest, through your registration for the event, and from your social media accounts (if you participate through your social media account).
Organize and manage participation in contests and events
| Purpose | Personal data processed | Legal basis |
|---|---|---|
|
|
Balancing of interests (article 6.1 f of the GDPR)):The processing is necessary for our legitimate interest in being able to conduct and manage your participation in our contests and events, as well as sending out evaluations after you have participated in an event. |
Storage period: Personal data will be processed by us for as long as necessary to manage the contest or event, but for a maximum of twelve months.Recipients: We share your personal data with our IT suppliers who process personal data on our behalf as our data processors.
If you have questions, complaints, and to comply with legal obligations
The tables below describe how we process your personal data if you have unsubscribed from our marketing or if you are in contact with us, for example via social media or our customer service. We obtain your personal data from you when you contact us or unsubscribe from marketing.
To comply with marketing legislation
| Purpose | Personal data processed | Legal basis |
|---|---|---|
| If you unsubscribe from our mailings, we will store your email address in a “register of unsubscriptions” to ensure that we do not market to you. This is not personal data that we actively process, we do not look at your email address and do not use it for anything other than ensuring that you do not receive marketing from us. |
Email address, telephone number, where applicable, information that you no longer wish to receive marketing from us | Legal obligation (article 6.1 c of the GDPR): The processing is necessary to fulfil our obligation under the marketing legislation to ensure that you do not receive mailings that you have requested not to receive. You need to provide us with your personal data, as otherwise we cannot ensure that you will no longer receive marketing from us and that we comply with marketing legislation. |
Storage period: Your personal data will remain in our “register of unsubscriptions” until you ask us to remove your email address or phone number from it. Recipients: Your personal data is shared with Voyado, which has unsubscribe register functions. Our email service provider Voyado processes this personal data on our behalf in its capacity as our personal data processor.
To comply with accounting legislation
| Purpose | Personal data processed | Legal basis |
|---|---|---|
| Comply with accounting legislation by recording, accounting for, and archiving payments and other transactions. | Payment history, transactions, and other material constituting accounting records. | Legal obligation (article 6.1 c of the GDPR):The processing is necessary to comply with mandatory law, i.e., the Accounting Act. If you do not provide your personal data, we will not be able to complete your purchase, as we need the data to ensure that our business complies with the Accounting Act. |
Storage period: Personal data included in our accounting records is stored for seven to eight years to comply with the Accounting Act (end of the seventh financial year).
Recipients: We share your personal data with our IT suppliers who process personal data on our behalf as our data processors.
Communicate with you
| Purpose | Personal data processed | Legal basis |
|---|---|---|
|
|
|
Balancing of interests (article 6.1 f of the GDPR): The processing is necessary for purposes related to our legitimate interest in being able to communicate with you via the channel you choose to contact us on. Fulfil legal obligations: If you exercise any of your rights under the GDPR, the processing is necessary to comply with our obligations under the GDPR. You must provide us with your personal data, as otherwise we will not be able to respond to your request and we will not be able to comply with the GDPR.. |
| Send out an updated privacy policy to keep you informed about our personal data processing. | Name and email address | Legal obligation (article 6.1 c of the GDPR): The processing is necessary to fulfil our obligations under the GDPR. You must provide us with your personal data so that we can comply with the GDPR. |
Storage period: We store personal data contained in communications in our customer service cases for five years from the date on which our contact regarding the case has been concluded.
We send updates to our privacy policy as long as it is relevant to you. For example, if you are affected by our updated privacy policy, you will receive a copy of it when it is updated.
Recipients: Within the scope of a customer service case or when you interact with us, your personal data is shared with our IT and service providers who process this personal data on our behalf in their capacity as our data processors.In the event of a legal dispute, we will share your personal data with authorities and lawyers as necessary.
In accordance with the GDPR, you have certain rights – see more information below.
If you have any questions about your rights or wish to exercise any of them, please contact us using the contact details above. You can also find more detailed information about when your rights apply and what exceptions there are at the Swedish Data Protection Authority.
-
Right to complain – Article 77 of the GDPR
You have the right to lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data violates the GDPR. In Sweden, the competent supervisory authority is the Swedish Data Protection Authority. You can find a list of supervisory authorities in the EU here. -
Right to withdraw consent – Article 7.3 of the GDPR
You have the right to withdraw your consent at any time by contacting us using the contact details above. If you choose to give your consent on the website, you can always withdraw your consent directly on the website. Your withdrawal of consent does not affect the lawfulness of processing before consent is withdrawn. -
Right of access – Article 15 of the GDPR
You have the right to obtain confirmation as to whether or not we are processing your personal data. You can send a request by contacting us using the contact details above. If we are processing your personal data, you also have the right to obtain a copy of the personal data we are processing and information about our processing, such as the purposes of the processing and how long your personal data will be stored. -
Right to rectification of processing – Article 16 of the GDPR
You have the right to have inaccurate personal data concerning you rectified without undue delay. You also have the right to have incomplete personal data completed. -
Right to erasure (”the right to be forgotten”) – Article 17 of the GDPR
Under certain circumstances, you have the right to have your personal data erased by us without undue delay. For example, if you withdraw your consent and there is no other legal basis for the processing, or if the personal data is no longer necessary for the purposes for which it was collected or processed. -
Right to restriction of processing – Article 18 of the GDPR
Under certain circumstances, you have the right to request that we restrict our processing of your personal data. For example, if you contest the accuracy of the personal data, or if the processing is unlawful and you oppose the erasure of the personal data but instead request a restriction on the use of the data. -
Right to data portability -
Article 20 i GDPR
If we process your personal data based on your consent or to fulfill a contract, you have the right to receive personal data concerning you. This right applies to personal data that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit those personal data to another data controller, when technically feasible. -
Right to object – Article 21 of the GDPR
You have the right to at any time object to our processing of your personal data for direct marketing purposes (including any profiling) and to the processing of your personal data based on a legitimate interest (including any profiling).
As stated in the tables above, we process some of your personal data on the legal basis of “balancing of interests.” Balancing of interests means that we have assessed that our legitimate interest in performing the processing outweighs your interest and your fundamental rights not to have your personal data processed. Our legitimate interest is stated in the tables above.
If you would like to know more about how we have made these assessments, please contact us.
This privacy policy was established by aim'n on 2025-10-15.
