Privacy Policy
Privacy Policy
We respect your privacy
On May 25, 2018, the new General Data Protection Regulation (GDPR) will take effect. The regulation imposes stricter requirements on how we, as a company, handle your personal data and replaces the Swedish Personal Data Act. However, this will not make any noticeable difference for you as a customer or subscriber to our newsletter, as your privacy has always been a top priority for us.
Personal Information
Personal data is any type of information that can be linked to a living individual. Typical examples of personal data include a social security number, name, and address.
Data Controller
The entity responsible for the processing of personal data is Bikemaestro Göteborg AB (559425-4319), Lundehagsgatan 10, 416 56 Gothenburg.
What Personal Information We Collect
Order and Shipping Information
When you shop with us, you only need to provide the information necessary for us to fulfill our warranty obligations, provide you with the promised service, and ensure that your order is delivered correctly.
This means that we request this information at the time of purchase:
- Name
- Email address
- Personal Identification Number (stored only by the payment provider; required for the selected payment method)
- Address on the National Population Register
- Cell phone number
Payment Information
When you make a purchase from us, you provide the information required for the payment method you choose.
We use external payment providers to process all our payments, and we never store any of your payment information in our systems.
Contact Customer Service
If you have contacted customer service via email, we will save this information if it is important for future purchases, such as promised discounts, etc.
Reviews
After making a purchase from us, you may be asked to leave a review of the product you bought. The review may be published on Bikemaestro.se.
Of course, leaving a review is entirely voluntary.
Purpose and Legal Basis
In order for us to process your personal data, we must have a legal basis for such processing. Below are the purposes for which we process your personal data, along with the legal basis for each type of processing.
Your personal data will never be used for any purpose other than the one for which it was collected without your consent.
Your Rights
With the entry into force of the GDPR, you will have several rights regarding the processing of your personal data. You can exercise these rights by contacting us.
Right of Access
In accordance with the law, you have the right to request information from us, free of charge, regarding which of your personal data we process and the purpose of our processing. We will respond to your requests without undue delay. In cases where we are unable to fulfill your requests, we will notify you and explain why. When you submit a request, we may ask you to provide information to verify your identity to ensure that your personal data does not fall into the wrong hands. We will send the data extract to your registered address or verified email address.
Right to Correction
You have the right to request that your personal data be corrected without undue delay if the data is inaccurate or incomplete.
Right to Erasure
You have the right to request the deletion of your personal data provided that:
- The data is no longer necessary for the purposes for which it was collected or processed.
- You have withdrawn the consent on which the processing is based, and there is therefore no longer any legal basis for the processing.
- You object to a balancing of legitimate interests conducted by the Company, and there is no legitimate interest on the part of the Company that outweighs the risk to you as an individual (you have the right to review how the Company conducted this balancing).
- The personal data has been collected or processed unlawfully
- The personal data must be deleted to comply with a legal obligation to which the Company is subject
We cannot always comply with your request for deletion, for example if:
- The processing is necessary to exercise a person's right to freedom of expression and freedom of information
- To comply with a legal obligation to which we are subject
- To establish, assert, or defend legal claims
Right to Limitation
In certain cases, you have the right to request that our processing of your personal data be restricted. Restriction means that the data is flagged and may only be used in the future for specific, limited purposes. For example, this may apply if you believe your personal data is inaccurate and have requested a correction. In that case, the use of your personal data may be restricted while the accuracy is being investigated. You will be notified when any such restriction is lifted.
Right to Object to Certain Types of Processing
Under the law, you have the right to object to certain types of processing.
Legitimate interest
You have the right to object to processing based on our legitimate interest, for reasons related to your specific situation. We may continue to process data even if you have objected to the processing, if we have compelling legitimate grounds for the processing that outweigh your interest in privacy.
Advertising, Marketing, and Promotions
You can opt out of communications and marketing at any time by contacting us. Please note that even if you opt out of marketing messages, you will still receive administrative messages from us, such as order confirmations or other transaction information, messages regarding account activity (account confirmations, password changes, etc.), and other important messages.
Right to Data Portability
You have the right to receive a copy of the personal data we process about you in a structured format (data portability). The right to data portability applies only to data that you yourself have provided to us and that we process on certain legal grounds, such as a contract with you.
Protection of Your Personal Information
Limited availability
Only authorized personnel have access to your personal data during working hours. The personal data that is processed is determined by the purpose and scope of the task.
Storage of Personal Data
In accordance with applicable law, we process your personal data only for as long as necessary to fulfill the purposes for which your personal data was collected or to comply with our legal obligations.
Your personal data will be securely stored within the group in a structured format, and we strive to store data within the EU/EEA. If any of our partners are located outside the EU/EEA, safeguards will be put in place to ensure that personal data remains protected and that any transfer to countries outside the EU/EEA is carried out in accordance with the law.
Actions We've Taken
- We store your personal information in systems that use appropriate security measures to prevent unauthorized access.
- We adhere to reasonable standards for the protection of personal data.
- In the event of a data breach or loss of sensitive personal data, the supervisory authority will be notified, and in cases where the loss poses a specific risk to individuals, they will also be informed.
- We use a secure method for data transmission. The information you provide when placing an order is encrypted using SSL before it is transmitted. SSL (Secure Sockets Layer) is the most proven method on the Internet for protecting data and ensuring secure data transmission. We always use SSL when transmitting sensitive data.
Actions You Need to Take
We ask you, as a customer, to help ensure safe and secure data management.
- Do not disclose information to unauthorized persons, and never provide more information than is necessary.
- Choose a strong password and change it regularly.
- Log out of your account every time you leave your computer (be especially careful when using a shared or public computer).
- Avoid including sensitive personal information in the body of a message, such as in our “Contact Us” forms or in emails to customer service.
How long do we retain your information?
Your personal data is never stored for longer than permitted under applicable law.
To fulfill our obligations during and after your purchase of a product: four (4) years from your most recent purchase.
For marketing and customer service communications based on a balancing of interests: twelve (12) months from your most recent purchase.
For accounting purposes: seven (7) years plus the current year, in accordance with applicable law.
For all legal obligations, the data is retained for as long as required by applicable law.
Where does the personal data come from?
We collect personal information directly from you when you make a purchase, contact us, etc.
Is providing your personal information voluntary?
All of your personal data, except for “company” and “saved credit cards,” is required for you to complete a purchase with us.
Who do we share your personal data with?
We share your personal data with companies that provide payment solutions, deliver your products, and offer marketing-related services to us—for example, to manage and communicate mailings and offers—as well as IT-related services, such as storage and maintenance. These service providers may only process your personal data in accordance with our instructions and may not use it for their own purposes.
The recipients of your personal data are located within the EU/EEA and in Ukraine. For recipients located outside the EU/EEA, we have ensured that there is adequate protection for your personal data through so-called standard data protection clauses. Please contact us if you would like to review these: info@bikemaestro.se.
Are automated decisions being made?
We do not make any automated decisions about you.
Changes, Feedback, Complaints, and Contact Information
Changes
Bikemaestro Gothenburg reserves the right to make changes to this privacy policy. Significant changes will be communicated well in advance of their effective date, and you have the right to terminate your agreement with us before the change takes effect.
Complaints
If you have any comments or objections regarding our processing of your personal data in accordance with applicable laws and regulations, please notify us as soon as possible. You also have the right to contact the Swedish Data Protection Authority if you have a complaint regarding our handling of personal data.
Contact Information
If you have any questions or would like to provide feedback on the policy and/or our privacy practices, please feel free to contact us at any time.
