PRIVACY POLICY FOR ASTRID LINDGREN BUTIKEN AND ASTRID LINDGREN AKTIEBOLAG
At the Astrid Lindgren Group, we care about your privacy, so it is important to us that your personal data is handled in a safe and secure way. In this privacy policy you will find information on how:
Astrid Lindgren Butiken AB (org. reg. no. 559381-6209, Östermalmsgatan 87C, 114 59 Stockholm) and
Astrid Lindgren Aktiebolag (org. reg. no. 556685-6166, Östermalmsgatan 87C, 114 59 Stockholm)
process your personal data, including when you visit our website www.astridlindgren.com and shop at Astrid Lindgren Butiken (the Astrid Lindgren Store). Which company is responsible for the processing of your personal data depends on the processing in question. The personal data processing for which Astrid Lindgren Butiken is responsible is listed in section 2 below and the personal data processing for which Astrid Lindgren Aktiebolag is responsible is listed in section 3 below.
For information on how our group company Astrid Lindgrens Vimmerby AB – which operates Astrid Lindgrens Värld, Astrid Lindgrens Näs and Astrid Lindgrens Vimmerby konferens och möten – processes your personal data, please read Astrid Lindgrens Vimmerby AB’s Privacy Policy, which is available here (at www.astridlindgrensvarld.se as well as www.astridlindgrensnas.se).
CONTACT
You are always welcome to contact us/our customer service at [email protected] or by phone at +46 8 122 025 00 if you have any questions or concerns about this policy or how we handle your data.
2. PROCESSING OF PERSONAL DATA FOR WHICH ASTRID LINDGREN BUTIKEN AB IS RESPONSIBLE
Astrid Lindgren Butiken processes different types of personal data depending on the situation and purpose. We collect some personal data that you provide through your contact with us, such as when you place an order online through Astrid Lindgren Butiken or when you contact us by e-mail, telephone or via our digital channels (including social media). Other personal data is collected by us when you use www.astridlindgren.com. Below is a more detailed description of the personal data processing we do.
(i) For the processing of your online orders through Astrid Lindgren Butiken
Personal data
Personal data you provide in connection with your order, such as your first name and surname, address, telephone number, email address and purchase information (e.g. order number, product, delivery address, payment method). If you choose to pay by invoice, your personal identification number is also stored.
Use and purposes
To manage your purchases, payments, deliveries, complaints, warranty issues, returns and refunds as well as to update and contact you on related matters.
Legal basis
Fulfilment of the contract for your order.
When does processing cease?
We save order information for 36 months from the date of delivery and payment to be able to help you with any complaints and warranty issues. For purchases, your information is stored for 7 years as required by the Book-keeping Act.
(ii) For marketing purposes to you
Personal data
Personal data you provide in connection with your online order, such as your first name and surname, address, order number, email address, telephone number, member ID (if applicable) and data collected at www.astridlindgren.com and from cookies, such as products you have clicked on and pages you have visited (read more in our Cookie Policy here).
Use and purposes
We try to send and show you marketing and promotions tailored to your preferences based on the above personal data that we collect via cookies and other tracking technologies when you visit our websites and social media, known as remarketing. This information also allows us to measure the performance of the various adverts we run. To do this, we mainly use the advertising services and partners listed below.
You can also learn more about the collection, sharing and use of data and, in some cases, delete data stored about you through these channels by following the links below:
Google and YouTube:
https://policies.google.com/privacy/partners
Our website uses remarketing with Google Adwords via the provider Google Inc. This allows personalised ads to be shown to you on other websites and via Google Search based on your previous behaviour on our website. You can opt out of these personalised ad preferences via: https://adssettings.google.com/
Facebook:
https://www.facebook.com/ads/about/?entry_product=ad_preferences
Instagram:
https://help.instagram.com/1415228085373580
You can also read about our use of cookies in our Cookie Policy here.
Legal basis
Legitimate interest: The processing of your personal data in this way is based on our legitimate interest as a company to market ourselves to you.
When does processing cease?
We may choose to market our products to you up to 24 months after your last activity at www.astridlindgren.com, provided you have not actively opted out of further marketing from us.
(iii) For the purpose of sending newsletters and registration of membership upon your request
Personal data
First name and surname, address, telephone number, email address, and other information provided by You upon registering for our newsletter or for a membership account.
Uses and purposes
To be able to send You our newsletter with various purchase offerings and updates about what’s new at The Astrid Lindgren Store, and – if you register to become a member – to administer your membership.
Legal basis
Your consent provided upon registration.
When does processing cease?
You can revoke your consent and request to be deleted from registration/cancel your membership at any time via our customer service (contact details above).
(iv) If you register for social media competitions that we help organise
Personal data
The information you provide to us in connection with the competition, usually your name and contact details (such as your email address, telephone number, address) as well as any information required to enter the competition.
Use and purposes
When we organise a competition, we use your personal data, for example, to send you necessary information.
Legal basis
Legitimate interest: This processing of your personal data in this way is based on our legitimate interest as a company.
When does processing cease?
The processing of this personal data ceases when the competition ends.
(v) To develop and improve Astrid Lindgren Butiken and www.astridlindgren.com
Personal data
User data (such as which web pages you visit/have visited and where on the web pages you click/have clicked) as well as technical data on devices used (such as IP addresses).
Use and purposes
We use the above personal data to improve and develop Astrid Lindgren Butiken and its range, www.astridlindgren.com and your customer experience.
Legal basis
Legitimate interest: This processing of your personal data in this way is based on our legitimate interest as a company.
When does processing cease?
The processing of this personal data ends when you are no longer active on the website. No personal information about you as a visitor is stored. The information processed after you close your browser does not constitute personal data and thus cannot be traced to you.
(vi) To provide customer service to you as a customer of Astrid Lindgren Butiken
Personal data
First name and surname, address, telephone number, email address, purchase information, purchase history and information about your order(s) (order number, product, delivery address, payment method) and communications you include in any enquiries.
Use and purposes
To help you with questions that you send to us, such as regards complaints, support or improvements to our services based on the feedback you provide.
Legal basis
Legitimate interest: This processing of your personal data in this way is based on our legitimate interest as a company.
When does processing cease?
After 36 months from the date of delivery and payment.
(vii) To comply with laws and regulations related to the activities of Astrid Lindgren Butiken
Personal data
First name and surname, address, payment information, payment history and information about your order (e.g. order number, product, delivery address) as well as other personal data that needs to be processed according to relevant legislation.
Use and purposes
To comply with laws to which we are subject to, among others, the Book-keeping Act and consumer legislation.
Legal basis
Legal obligation, which means that we have to process the data to comply with laws to which we are subject.
When does processing cease?
We store personal data for the time required by law. For example, the Book-keeping Act requires certain data to be stored for 7 years. The information is not available to our customer service during this period.
(viii) To safeguard the legal interests of Astrid Lindgren Butiken
Personal data
First name and surname, address, payment information, payment history and information about your order (e.g. order number, product, delivery address) as well as other personal data that needs to be processed according to relevant legislation.
Use and purposes
We process your personal data above to the extent necessary to safeguard our legal interests in the event of a dispute.
Legal basis
Legitimate interest: The processing of your personal data in this way is based on our legitimate interest as a company to protect our rights.
When does processing cease?
We cease processing of this personal data when the dispute is settled
(ix) If you are a contact person/employee/representative of one of Astrid Lindgren Butiken’s partners (e.g. shipping agent or supplier) or of their partners
Personal data
Usually your name (and personal identification number if you are a sole trader), contact details (such as your email address, phone number, address), the company you represent and your title.
Use and purposes
We process your personal data to the extent necessary in the context of our business relationship and related activities conducted with you or the company you represent.
Legal basis
Fulfilment of a contract or legitimate interest for us as a company.
When does processing cease?
When the processing is no longer necessary to achieve the purpose of the processing as described above. As a rule, we do not save contact details for longer than one year after the business relationship with the partner has ended or you have terminated your employment/assignment with the partner.
3. PROCESSING OF PERSONAL DATA FOR WHICH ASTRID LINDGREN AKTIEBOLAG IS RESPONSIBLE
Astrid Lindgren Aktiebolag processes different types of personal data depending on the situation and purpose. Below is a more detailed description of the personal data processing we do. We collect personal data that you provide through your contact with us, such as when you contact us by email or telephone.
(i) If you register for an event or competition that Astrid Lindgren Aktiebolag is involved in organising
Personal data
The information you provide to us when registering for the event or competition, usually your name, contact details (such as your email address, phone number and address), and if food is provided: any allergies and dietary requirements.
Use and purposes
We are regularly involved in organising different types of events, for our partners, but also events and competitions for the public related to Astrid Lindgren’s stories, her authorship or the issues that Astrid Lindgren was involved in.
When we organise events and competitions, we use your personal data to, for example, send you necessary information, meet your dietary requirements and send you a post-event evaluation survey that you can choose to complete. We also store your contact details in order to invite you to future events.
Legal basis
Legitimate interest: The processing of your personal data in this way is based on our legitimate interest as a company.
When does processing cease?
If you participate in the event or competition as an employee of one of our partners, we will continue to store your contact details for future events/competitions that we hope will interest you and your company for as long as you are an employee of our partner.
If you participate in an event or competition as a private individual, we will store your contact details for the following year in order to invite you to further events we think you might be interested in.
(ii) If you contact Astrid Lindgren Aktiebolag with a general enquiry (or regarding any other matter of a general nature)
Personal data
The information you provide to us when you contact us, such as your name and contact details (email address, phone number, address).
Use and purposes
When you contact us (by email, post, phone, social media) to, for example, ask a question about Astrid Lindgren Aktiebolag’s rights, Astrid Lindgren’s authorship, stories and characters, make a licence request or inform us about something, we will use the personal data you provide to respond to you or forward your question/information to the appropriate partner.
Legal basis
Legitimate interest: The processing of your personal data in this way is based on our legitimate interest as a company.
When does processing cease?
This depends on the scope and nature of the case. We cease processing as soon as it is no longer relevant to the required purpose.
(iii) If you are a contact person/employee/representative of one of Astrid Lindgren Aktiebolag’s partners (e.g. licensee, supplier, illustrator) or of their partners
Personal data
Usually your name (and personal identification number if you are a sole trader), contact details (such as your email address, phone number, address), the company you represent and your title.
Use and purposes
We process your personal data to the extent required in the context of our business relationship with you or the company you represent.
Legal basis
Fulfilment of a contract or our legitimate interest as a company.
When does processing cease?
When the processing is no longer necessary for the purposes described above. As a rule, we do not save contact details for longer than one year after the business relationship with the partner has ended or you have terminated your employment/assignment with the partner.
(iv) To comply with laws and regulations related to Astrid Lindgren Aktiebolag’s activities
Personal data
First name and surname, your contact details (such as your address and work telephone number) as well as any other personal data that we are required to process according to relevant legislation.
Use and purposes
To comply with the laws to which we are subject, including the Book-keeping Act.
Legal basis
Legal obligation, which means that we have to process the data to comply with laws to which we are subject.
When does processing cease?
We process personal data for the time required by law. For example, the Book-keeping Act requires certain data to be stored for 7 years.
(v) To safeguard the legal interests of Astrid Lindgren Aktiebolag
Personal data
Personal data we collect about you in your capacity as an employee or representative of a company that we consider, for example, to be using our rights unlawfully, typically name (and personal identification number if you are a sole trader) and contact details (such as your work email address, work phone number and the address of your employer).
Use and purposes
We process your personal data above to the extent necessary to enforce our rights, such as contacting you in your professional capacity to present claims and to discuss, dispute and/or settle them. We may also share your personal data with our agents.
Legal basis
Legitimate interest: The processing of your personal data in this way is based on our legitimate interest as a company.
When does processing cease?
When the purpose of the processing described above ceases.
4. COOKIES
We use cookies on our website www.astridlindgren.com. Read more about our cookies and how to refuse them here.
5. DO WE SHARE OR DISSEMINATE YOUR PERSONAL DATA?
We do not share your personal data other than when it is necessary to conduct our business and to fulfil the purposes of our processing. Below you can find a list of the companies we share information with and why we do so.
(i) Other companies within our group, when it is necessary to fulfil the purpose of the processing, such as for information and marketing purposes.
(ii) Processors of personal data: Partners in different fields who process personal data on our behalf according to our instructions, i.e. as processors, when necessary to fulfil the purpose of the processing as described above, such as our:
a. Shipping companies
b. Payment processing companies
c. Advertising and marketing companies
d. IT system providers
(iii) Companies that are data controllers: We also share your personal data with certain companies that are independent data controllers. As independent data controllers, we do not control how the information provided to these companies is processed; this is governed by each company’s privacy policy and privacy processing. Independent data controllers with whom we share your personal data include:
a. State authorities (the police, the Swedish Tax Agency or other authorities) if we are required to do so by law or in the case of a suspected criminal offence.
b. Companies involved in the general transport of goods (logistics companies and freight forwarders).
c. Payment method providers (card issuers, banks and other payment service providers).
If we process your personal data because you work with one of our partners, such as publishers, licensees, event partners and agents, we may also share your personal data with other partners if there is a reason to do so in the context of our respective business relationships (such as sharing contact details with each other in our authorisation system).
6. TRANSFER OF PERSONAL DATA TO SO-CALLED THIRD COUNTRIES (COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA – EEA)
Our processing of personal data takes place mainly within Sweden and the EU/EEA. If and to the extent that the transfer of data to a third country is necessary, such transfers will be made in accordance with applicable law, e.g. by checking whether the European Commission has determined the third country in question to have an adequate level of protection for personal data processing, by applying the European Commission’s model clauses, or with your consent.
7. WHAT RIGHTS DO YOU HAVE AS A DATA SUBJECT?
Upon request (to be made to our email address above and below) you have the right to:
(i) Request a register withdrawal, i.e. a confirmation of whether personal data belonging to you is being processed, and if so, obtain a copy of the personal data;
(ii) Request the correction of personal data stored about you if it is inaccurate or incomplete;
(iii) Request the erasure (‘right to be forgotten’) of your personal data if the purpose of the processing is no longer authorised, necessary or reasonable under the circumstances;
(iv) Transfer personal data that you have provided to us to another data controller (‘right to data portability’) if the legal basis for our processing is to fulfil a contract or your consent.
(v) Restrict the processing of personal data in certain cases if the processing is based on legitimate interest; and
(vi) Object to the processing of personal data if it is based on legitimate interest.
8. COMPLAINTS TO THE SWEDISH AUTHORITY FOR PRIVACY PROTECTION
If you have any questions or concerns about this policy or how we handle your data, or if you wish to exercise your rights in any way, you are always welcome to contact us at [email protected] or by phone on +46 8 122 025 00. If you are not satisfied with how we process your personal data, we hope you will contact us so that we can try and resolve the issue. You also have the right to submit a complaint about our processing of personal data to the Swedish Authority for Privacy Protection; please visit www.datainspektionen.se.
9. CHANGES TO THIS PRIVACY POLICY
We may make changes to this Privacy Policy. The latest version of the Privacy Policy is available on our website.