Privacy policy

1. introduction

1.1 What is personal data and what is processing of personal data?

1.2 Who is responsible for the personal data we collect?

2. What does Idyll Sweden use your personal data for?

2.1. För att du ska kunna hantera och följa upp dina köp och tjänster

When you shop at Idyll Sweden, a customer account is generated for you. In logged in mode you will find My Account where you have the opportunity to;

• See the history of your purchases.
• Change your personal data and settings.

2.2. För att kunna hantera beställningar

• Delivery (including notification and contacts regarding the delivery).
• Identification and age verification.
• Payment processing (including analysis of possible payment solutions, which may include checking against payment history and obtaining credit information from Billmate).
• Handling of complaints and warranty cases.

We process the following data:

• Name
• Personal identification number
• Contact details (e.g. address, email and phone number)
• Payment history
• Payment information
• Credit information from credit reference agencies
• Purchase information (e.g. which item has been ordered or if the item is to be delivered to a different address)
• My Account credentials (if you have a customer account).

Legal basis: Performance of the sales contract. This collection of your personal data is necessary for the performance of our obligations under the sales contract. If the data is not provided, our obligations cannot be fulfilled and we are therefore forced to refuse you the purchase. Storage period: Until the purchase has been completed (including delivery and payment) and for a period of 36 months thereafter in order to be able to handle any complaints and warranty matters.

2.3. För att kunna fullgöra företagets rättsliga förpliktelser

Processing necessary to comply with the company’s legal obligations under legal requirements, judgments or decisions of public authorities, e.g:

• Accounting Act and Money Laundering Act.

or the rules on product liability and product safety, which may require the development of communication and information to the public and customers on product alerts and recalls in the event of, for example, a defective or unsafe product).

We process for this purpose;

• Name
• Personal identification number
• Contact details (e.g. address, email and phone number)
• Payment history
• Payment information
• Your correspondence
• Information on time of purchase, place of purchase, possible error/complaint
• My Account credentials (if you have a customer account)

Legal basis: Legal obligation. This collection of your personal data is required by law. If the data is not provided, our legal obligation cannot be fulfilled and we are therefore forced to refuse you the purchase.

Retention period: Until the completion of the purchase (including delivery and payment) and for a period of 36 months thereafter, or up to 7 years for data processed under the Accounting Act.

2.4. För att kunna hantera kundserviceärenden

Which includes:

• Communicating and answering any questions to customer service (by phone or in digital channels, including social media).
• User account identification and questions.
• Investigation of any complaints and support cases (including technical support).
• Questions and advice on and before purchases, questions about products, handling returns, changing orders and similar matters.

We process the following data;

• Name
• Personal identification number
• Contact details (e.g. address, email and phone number)
• Your correspondence
• Details of purchase (date, place of purchase, any fault/complaint)
• My Account credentials (if you have a customer account)

Legal basis: Legitimate interest, and explicit consent where we process sensitive data. The processing is necessary for the purposes of our legitimate interest and yours in dealing with customer service matters.

Retention period: 36 months after the customer service case has been closed.

2.5. För att kunna utvärdera, utveckla och förbättra våra tjänster, produkter och system för kundkollektivet i stort samt erbjuda dig en personlig och relevant upplevelse i vårt utbud av tjänster och produkter

We and our partners track ads to know what ads you’ve seen online and what products you’ve seen with us so that we can customize the website to your interests, and show you relevant ads next time.

• Adapting services to be more user-friendly (for example, changing the user interface to simplify the flow of information or to highlight features frequently used by customers in our digital channels).
• Adapting marketing services such as Google Search, Display and Video and Facebook to become more relevant in our communications (for example, excluding existing customers from Facebook or Google marketing).
• Developing data to improve the flow of goods and logistics (e.g. by forecasting purchases, stocks and deliveries).
• Developing a basis for developing and improving our product range.
• Developing a basis for developing and improving our resource efficiency from an environmental and sustainability perspective (for example, by streamlining purchasing and supply planning).
• Preparation of documentation for the purpose of planning new and possible decommissioning of warehouses.
• Give our customers the opportunity to influence and review our range.
• Developing a basis for improving IT systems with the aim of increasing overall security for the company and our visitors/customers.

We therefore treat:

• Name
• Age
• E-mail address
• Place of residence
• Payment information
• Correspondence and feedback regarding our services and products
• Purchase and user-generated data (e.g. click and visit history)
• Customer satisfaction survey and questionnaires
• Technical data regarding devices used and their settings (e.g. language setting, IP address, browser settings, time zone, operating system, screen resolution and platform)
• Information about your browsing habits and how you have interacted with us, including, among other things, your geographical location, which external sites you have previously visited, which sites you visit with us, how you have otherwise used the Service, login method, response times, download errors, your interests, how you access and leave the Service, etc.
• Information on how you use our websites via “cookies”. You can read more about what cookies are and how we use them here.

Legal basis: Legitimate interest. The processing is necessary to meet our and our customers’ legitimate interest in evaluating, developing and improving our services, products and systems.

Storage period: From collection and for a period of 36 months thereafter.

2.6. För att kunna förhindra missbruk av en tjänst eller för att förhindra, förebygga och utreda brott mot företaget och kunder

Preventing and investigating possible fraud or other violations of law. Preventing spam, phishing, harassment, attempts to illegally log into user accounts or other actions prohibited by law or our terms of purchase, membership or service. Protecting and improving our IT environment against attacks and intrusions.

For this purpose we process:

• Personal identification number
• Purchase and user-generated data (such as click and visit history)
• Technical data regarding devices used and their settings (for example
• language setting, IP address, browser settings, time zone, operating system, screen resolution and platform)
• Data on how our digital services are used

Legal basis: Compliance with a legal obligation (if any) or legitimate interest. If there is no legal obligation, the processing is necessary for the purposes of our legitimate interest in preventing the misuse of a service or for the prevention, investigation and prosecution of criminal offences against the company.

Storage period: From collection and for a period of 36 months thereafter.

2.7. För att kunna erbjuda kunder personlig rådgivning

We process your personal data to be able to recommend products based on your needs and wishes and to inform you how the products should be used for the desired result. Your personal data is also processed in order for us to be able to offer and follow up via telephone, chat, video, e-mail and for physical treatment.

If you have created a customer account on our website, we may also process your personal data in order to send you marketing messages such as newsletters, inspiration, tips and offers on various products. We may also send you reminders about items left in your digital shopping cart. If you do not want us to process your personal data for marketing purposes, please contact us.

For the above-mentioned purposes, we process the following personal data about you:

• Name
• Contact details (e.g. address, email and phone number)
• Purchase information

Legal basis: Performance of the agreement and explicit consent in cases where users provide sensitive information about themselves. Balancing of interests for marketing, it is in the interest of both Idyll Sweden and the user that users buy products that suit them. Follow-up of treatments over time.

Storage period: 60 months from collection.

2.8. För rekrytering och personaladministration

Processing of the job application and possible new recruitment termination of employment administration of any rehabilitation and discrimination cases

• CV
• Name
• Telephone number
• E-mail address
• Physical address
• Personal identification number
• Personal letter where there may be a medical history or similar
• Mail exchange between us and the candidate
• Notes kept by us regarding interviews
• Contact details of references

Legal basis: Legitimate interest in completing or terminating recruitment processes and, where appropriate, retaining information as security in discrimination cases or similar. Explicit consent in cases where sensitive information may be involved.

Retention period: 60 months from the end of the collection or recruitment process.

2.9. För att följa upp referenser vid rekrytering

2.10. För opt-in hantering

3. What sources does Idyll Sweden collect your personal data from?

In addition to the information you provide to us, or that we collect from you based on your purchases and how you use our services, we may also collect personal information from someone else (known as a third party). The information we collect from third parties is as follows:

• Address information from public registers to make sure we have the right address details for you
• Information on creditworthiness from credit rating agencies, banks or credit reference agencies

4. Who has access to/processes your personal data?

4.1. Vilka kan vi komma att dela dina personuppgifter med?

4.1.1. Personuppgiftsbiträden

Where it is necessary for us to provide our services, we share your personal data with companies that are so-called data processors for us. A processor is a company that processes the information on our behalf and according to our instructions. We have data processors who help us with:

1. Transport (logistics companies and freight forwarders)
2. Payment solutions (card acquirers, banks and other payment service providers)
3. Marketing (print, social media, media agencies or advertising agencies)
4. IT services (companies that handle the necessary operation, technical support and maintenance of our IT solutions)

When your personal data is shared with processors, it is only done for purposes that are compatible with the purposes for which we collected the information (for example, to fulfill our obligations under the purchase agreement). We check all data processors to ensure that they can provide sufficient guarantees regarding the security and confidentiality of personal data. We have written agreements with all processors, whereby they guarantee the security of the personal data processed and undertake to comply with our security requirements, as well as restrictions and requirements regarding the international transfer of personal data.

Companies that are independent data controllers. We also share your personal data with certain companies that are independent data controllers. The fact that the company is an independent data controller means that we do not control how the information provided to the company is processed. Independent data controllers with whom we share your personal data are:

1. Government authorities (police, tax authorities or other authorities) if we are required to do so by law or on suspicion of a crime
2. Companies providing general cargo transportation (logistics companies and freight forwarders)
3. Payment solution providers (card acquirers, banks and other payment service providers)

When your personal data is shared with a company that is an independent data controller, that company’s privacy policy and data processing practices apply.

4.1.2. Andra tjänsteleverantörer

Other companies and individuals may perform functions in accordance with our privacy policy on our behalf. Examples include customer support specialists, web hosting companies, data analysis companies and email service providers. Such third parties may have access to the personal information needed to perform their functions but may not use it for any other purpose.

4.1.3. Företagsöverlåtelser

As we continue to develop our business, we may sell some of our assets. In such transactions, user information, including personal information, is generally one of the transferred business assets. By providing your personal information on idyllsweden.com, you consent to the transfer of your information to such parties in these circumstances.

4.1.4. Billmates behandling av personuppgifter

When purchasing from us, Billmate’s checkout is used as standard, Billmate therefore processes your personal data as a data controller. The personal data is processed, among other things, for the fulfillment of the agreement, and to carry out identification and credit control via external and internal databases. For more detailed information about Billmate’s processing of personal data and your rights in connection with the processing, see: https://www.billmate.se/policyer/

4.2. Vi delar inte personlig information med en tredje part utan ditt samtycke

4.3. Var behandlar vi dina personuppgifter?

We always aim to process your personal data within the EU/EEA and all our own IT systems are located within the EU/EEA. However, in the case of system support and maintenance, we may need to transfer the information to a country outside the EU/EEA, for example if we share your personal data with a processor who, either itself or through a subcontractor, is established or stores information in a country outside the EU/EEA. In these cases, the processor may only access the information relevant for the purpose (for example, log files).

Regardless of the country in which your personal data is processed, we take all reasonable legal, technical and organizational measures to ensure that the level of protection is the same as within the EU/EEA. In cases where personal data is processed outside the EU/EEA, the level of protection is guaranteed either by a decision of the European Commission that the country in question ensures an adequate level of protection or by the use of so-called appropriate safeguards. Examples of appropriate safeguards are an approved code of conduct in the recipient country, standard contractual clauses, binding corporate rules or Privacy Shield. If you would like to receive a copy of the safeguards in place or information on where these have been made available, please contact us.

4.4. Hur länge sparar vi dina personuppgifter?

5. Your rights & consent

5.1. Vad har du för rättigheter som registrerad?

Right of access (so-called register extracts). We are always open and transparent about how we process your personal data and if you want to get a deeper insight into what personal data we process about you, you can request access to the data. The information is provided in the form of a register extract indicating the purposes, categories of personal data, categories of recipients, storage periods, information on where the information has been collected and the existence of automated decision-making.

Right of rectification. You can request that your personal data be rectified if it is inaccurate. Within the framework of the stated purpose, you also have the right to complete any incomplete personal data.

Please note that if you have a customer profile on idyllsweden.com, you can change certain information directly via My Account. You have the right to withdraw any consent you have given us at any time. For example, consent to send newsletters.

Right to erasure. You can request the erasure of personal data we process about you if

• the data are no longer necessary for the purposes for which they were collected or processed
• You object to a balance of interests we have made based on legitimate interest and your reason for objecting outweighs our legitimate interest
• You object to processing for direct marketing purposes
• Personal data is processed illegally
• The personal data must be erased to comply with a legal obligation to which we are subject
• Personal data has been collected about a child (under the age of 13) for whom you have parental responsibility and the collection has taken place in the context of offering information society services (e.g. social media)

Please note that we may be entitled to refuse your request if there are legal obligations that prevent us from immediately deleting certain personal data. These obligations come from accounting and tax legislation, banking and money laundering legislation, but also from consumer law. It may also be that the processing is necessary for the establishment, exercise or defense of legal claims. Should we be prevented from complying with a request for erasure, we will instead block the personal data from being used for purposes other than the purpose preventing the requested erasure.

Right to restriction. You have the right to request that our processing of your personal data be restricted. If you contest the accuracy of the personal data we process, you can request a restriction of processing for the time necessary for us to verify the accuracy of the personal data. If we no longer need the personal data for the identified purposes, but you need it to establish, exercise or defend legal claims, you can request restricted processing of the data by us. This means that you can request that we do not delete your data. If you have objected to a legitimate interest assessment that we have made as a lawful basis for a purpose, you can request restricted processing for the time we need to verify whether our legitimate interests outweigh your interests in having the data erased.

If processing has been restricted under any of the situations above, we may only, in addition to the storage itself, process the data for the establishment, exercise or defense of legal claims, for the protection of the rights of another person or if you have given your consent.

Right to object to certain types of processing. You always have the right to opt out of direct marketing and to object to any processing of personal data based on a balance of interests.

Legitimate interest: Where we use a balancing of interests as the legal basis for a purpose, you have the possibility to object to the processing. In order to continue processing your personal data after such an objection, we need to be able to demonstrate a compelling legitimate ground for the processing in question which overrides your interests, rights or freedoms. Otherwise, we may only process the data for the establishment, exercise or defense of legal claims.

Direct marketing (including analyses carried out for direct marketing purposes): You have the possibility to object to the processing of your personal data for direct marketing purposes. The objection also covers the analysis of personal data (so-called profiling) carried out for direct marketing purposes. Direct marketing refers to all types of outreach marketing activities (for example, by post, email and SMS). Marketing activities where you as a customer have actively chosen to use one of our services or otherwise sought us out to learn more about our services are not considered direct marketing (for example, product recommendations or other features and offers on My Account).

If you object to direct marketing, we will stop processing your personal data for that purpose, as well as cease all types of direct marketing activities. You can change this by changing the settings on My Account, unsubscribe link in marketing emails or contacting customer service.

Right to data portability. If our right to process your personal data is based on either your consent or the performance of a contract with you, you have the right to request that the data concerning you that you have provided to us be transferred to another controller (so-called data portability). A prerequisite for data portability is that the transfer is technically feasible and can be automated.

6. How does Idyll Sweden handle social security numbers?

7. How is your personal data protected?

8. cookies

8.1. Vad är cookies och hur använder vi det?

Cookies are a small text file consisting of letters and numbers that are sent from our web server and stored on your browser or device. We use cookies so that we can recognize you as a returning user and personalize your experience and use of idyllsweden.com. We use the following cookies:

1. Session cookies (a temporary cookie that expires when you close your browser or device)
2. Persistent cookies (cookies that stay on your computer until you delete them or they expire)
3. First-party cookies (cookies set by the website you are visiting)
4. Third-party cookies (cookies set by a third-party website. In our case, these are primarily used for analytics, such as Google Analytics)
5. Similar technologies (technologies that store information in your browser or device in a way similar to cookies)

The cookies we use normally improve the services we offer. Some of our services need cookies to function properly, while others improve the services for you. We use cookies for overall analytical information regarding your use of our services and to save functional settings such as language and other data. We also use cookies to target relevant marketing to you.

8.2. Kan du själv styra användningen av cookies?

Yes, you can. Your browser or device allows you to change the settings for the use and scope of cookies. Go to the settings of your browser or device to learn more about how to adjust your cookie settings. Examples of things you can adjust include blocking all cookies, accepting only first-party cookies or deleting cookies when you close your browser. Please note that some of our services may not work if you block or delete cookies. You can read more about cookies in general on the Swedish Post and Telecom Authority’s website, pts.se.

8.3. Ytterligare spårningsåtgärder

We may also use IP addresses to analyze trends, administer the site, track traffic patterns, and gather demographic information for aggregate use. We may also use it in combination with your personal information to protect against and reduce the risk of credit fraud.

When you visit this website or read one of our emails, we may use pixel tags (also known as “clear” gifs), tracking links and/or similar technologies to note some of the pages you visit on idyllsweden.com and personalize your experience. We may also use pixel tags to determine what type of email your browser supports. We may use the information collected through pixel tags, tracking links and similar technologies in combination with your personal information.

9. #IDYLLSWEDEN

We at Idyll Sweden are so happy when you share your results and experiences with our products – and we love to see our products in home environments! So much so that we may ask if we can use your pictures in our various channels, such as instagram, newsletter, blog and on idyllsweden.com.

If you receive a request from us to share an image (and you feel you would like to), you can respond to our request, which we will then put to you.

Nordic & other countries: You grant Idyll Sweden AB (a Swedish company with org no 559262-1717) a non-exclusive, royalty-free, worldwide license to use your photos at Idyll Sweden’s sole discretion and without any obligations to you, for use in its marketing and/or advertising, including, among other things, the right to reproduce, distribute, modify and edit your photos. In addition, you give Idyll Sweden your consent to use photos where you can be identified for marketing and/or advertising purposes, in accordance with Swedish law: Lag om namn och bild i reklam (1978:800).

You represent and warrant that you own or control the rights to the material you have submitted and that you have the permission of all persons appearing in the images. In addition, you represent that you are an individual (i.e. not a company), that you are at least 18 years old or have parental consent, and that Idyll Sweden’s use of your images will not violate the rights of any third party or any law.

You hereby release Idyll Sweden from any and all obligations to pay you for the use of your images and for the intellectual property rights thereto in connection with the uses described above and you hereby release and agree to indemnify Idyll Sweden and all persons acting on Idyll Sweden’s behalf from any and all claims, demands and liabilities of any nature whatsoever in connection with the use of the images as described above.

Swedish law governs these Terms, with the competent courts in Stockholm having exclusive jurisdiction for any dispute that may arise from these Terms.

If you wish to withdraw your consent to share your images with Idyll Sweden, you must contact us at info@idyllsweden.com

10. Links

This website may contain links to or from other websites. Please note that we are not responsible for the privacy practices of other websites. This privacy policy applies solely to the information we collect on our website. We therefore encourage you to read the privacy policies of the websites you link to from our website or otherwise visit.

11. correctly updating your information

We will take reasonable steps to create an accurate record of any personal information that you have provided through this website. However, we take no responsibility for confirming that your personal information is current and up-to-date.

You are responsible for keeping your information with us up to date. You can review and change the information you provide to us at any time by logging into your account and changing the details.

12. the Data Inspectorate

What does it mean that the DPA is the supervisory authority?
The DPA is responsible for monitoring the application of the legislation, and anyone who believes that a company is handling personal data incorrectly can lodge a complaint with the DPA.

13. Do you have questions about data protection?

What is the easiest way to contact us with questions about data protection?
You can always ask us your questions at info@idyllsweden.com

We may make changes to our privacy policy. The latest version of the privacy policy is always available on this website. In the event of updates that are essential to our processing of personal data (for example, changes to specified purposes or categories of personal data) or updates that are not essential to the processing but may be essential to you, you will receive information on idyllsweden.com and by email (if you have provided an email address) in good time before the updates take effect. When we make information about updates available, we will also explain the meaning of the updates and how they may affect you.