PRIVACY POLICY

 

GDPR - Your Rights

 

The General Data Protection Regulation is an EU regulation that regulates how we process personal data. It replaces PUL (Personal Data Act) from 25 May 2018. 

You can read more about the law and your rights on the Data Inspection website.

 

How do we process your personal information?

 

We at ENERI protect your privacy and always strive for a high level of data protection. In this privacy policy, we explain how we collect and use your personal information in our ENERI webshop. It also describes your rights and how you can apply them.

We want you to feel safe with how we treat your personal information and it is therefore important that you read and understand our privacy policy before using our services. You can always contact us at info@eneristudios.com if you have any questions.

 

What information do we collect about you?

 

We collect as little information as possible. The information we collect is the information required to fulfil our commitment to you and to fulfil your commitment to us (i.e. pay for your order). 

When paying by card, you must provide your credit card number. It goes via a secure server and Stripe manages the card payments for us.

In addition we collect the personal information you provide to us, such as when you make a purchase or contact us and what products you order. Below you will find more information about what information we collect and why. 

 

What are cookies and how do we use them?

 

ENERI uses cookies which are short text files sent from our web server and stored by your browser when you visit ENERI. We do so to store your goods in your shopping cart and to enhance your user experience on our website.

We also use Google's services "Google Analytics" and "Google Remarketing." These services also use cookies. Here you can read more about what it means to you .

 

Why do we need your personal information?

 

- In order for you to make a purchase on ENERI

We need information about you to make a purchase at ENERI. The personal information we need is:

  • Contact details (e.g. name, e-mail address, address and telephone number)
  • Details of your purchase (such as product information and payment information)
  • The information is required in order for us to fulfil the purchase agreement with you.

The personal data will be saved for this purpose for three years from your last purchase.

 

- In order to handle your customer service issues

We need your personal information to assist you when you contact our customer service. The personal data that may be processed for our customer service are:

  • Contact details (e.g. name, e-mail address, address and telephone number)
  • Purchase history
  • Support history
  • Other information that can be documented when you contact customer service
  • The information is required to meet your and ENERI's legitimate interest in handling your questions and/or any complaints about the products you have purchased in our webshop.

Your personal data will be saved for this purpose for three years after your customer service has ended.

 

- To send newsletters and offers

We need your personal information to send you newsletters, offers, samples and the like to you via email and mail. The personal data processed to enable us to do that is:

  • Contact details (e.g. name, e-mail address, address and telephone number)
  • Purchase history
  • User behaviour (e.g. click and visit history)
  • The information is needed to meet your and ENERI's legitimate interest in contacting you and marketing our services and news as well as giving you offers, promotions and the like in our webshop.

Your personal information will be saved for this purpose in one year from your latest purchase or your latest interaction with ENERI (e.g. by opening our mail or otherwise showing interest in ENERI’s products or services). You can always choose to cancel our mailings earlier by following the instructions in the mail or contact our customer service at info@eneristudios.com.

 

- In order to fulfil ENERI's legal obligations

We need your personal information to comply with our legal obligations according to legal requirements, judgments or government decisions (such as the Accounting Act, Money Laundering, or Product Liability Rules and Product Safety). The personal information we need is: 

  • Contact details (e.g. name, e-mail address, address and telephone number)
  • Purchase history
  • Support history
  • Personal data as required by law in which we have a legal obligation.

The personal data will be saved for this purpose for three years from your last purchase.

 

- In order to prevent abuse of our services or to prevent and investigate crimes against ENERI

We need your personal information in order to prevent and investigate any fraud, harassment or other actions prohibited by law or ENERI’s General Terms and Conditions. The personal information we need is:

  • Contact details (eg name, e-mail address, address and telephone number)
  • Purchase history
  • Support history
  • User behaviour (e.g. click and visit history)
  • Personal data required to fulfil a legal obligation (if any) or to meet ENERI's legitimate interest in preventing abuse of our services or preventing and investigating violations of the company.

Personal data will be saved for this purpose for three years from suspicion of abuse or crime.

 

- In order to handle notices of infringement of intellectual property rights

If you make a notification that you suspect that someone infringes your intellectual property rights, your personal information will need to be processed to investigate the matter. The personal data that can be processed in the course of the handling of such a case are:

  • Contact details (e.g. name, e-mail address, address and telephone number)
  • Personal identification number (if you have an individual company)
  • Any other personal information as stated in your application
  • The personal data are required to meet your and ENERI's legitimate interest in handling the IPR.

The personal data will be saved for this purpose for three years after your case has been completed.

 

Who do we share your personal information with?

 

- Personal advisors

In order to provide our services, we share your personal information with companies that are so-called personal information assistants for us. A personal information officer is a company that processes the information on our behalf and according to our instructions. We have personal information assistants who help us with logistics, payment solutions, marketing and IT services.

When your personal information is shared with personal data counsel, it is only for purposes that are consistent with the purposes for which we have collected the information. We have agreements with all personal information officers and they guarantee the security of the personal data processed and undertake to comply with our security requirements as well as restrictions and requirements regarding the international transfer of personal data.

 

- Other personal data administrators

We also share your personal information with some others who are independent personally responsible, such as government agencies if we are obliged to do so by law or in suspicion of crime. When your personal information is shared with others who are independent personal data protection, their privacy policy and personal data management apply.

 

What systems are your data stored in?

 

When you shop with us, your order goes through several steps to enable us to process your order and ship your goods to you. 

We work with the following systems / vendors and your information may need to be addressed by some of these. 

  • Squarespace - our website solution
  • Stripe - credit card processing company if you pay with a card
  • Tictail AB - e-commerce platform if you place an order through Tictail
  • Postnord - if we ship your order with traceable mail
  • DHL - if we ship your order with DHL
  • MailChimp - email marketing solution if you sign up for our newsletter
  • Gmail - mail management system
  • Redonomen Redovisning AB - our accountant

 

How long to we save your information?

 

We will never save your personal information longer than is necessary for each purpose. See more about the specific storage periods under the respective purposes above. 

 

Where do we process your personal information?

 

Our personal information assistants can be found in different parts of the world. Therefore, your personal data may be processed both inside and outside the EU / EEA. However, regardless of where your data is processed, we look forward to protecting your personal information with all reasonable legal, technical and organizational measures at the same level as the protection offered in the EU/ EEA.

 

How do we protect your personal information?

 

We use IT systems to protect the privacy and access to personal data. We have taken special security measures to protect your personal data against unauthorized or unauthorized treatment (such as unauthorized access, loss, destruction or damage). Only those persons who actually need to process your personal information to fulfil our stated purposes have access to them.

 

What are your rights?

 

- Right to rectification and registries

ENERI will do what is required by law to keep your personal information accurate, complete and up to date. You are entitled to correction of incomplete or invalid personal data. You are also entitled to request a record of your personal data that we are processing.

 

- Right to object

If the processing of your personal data is based on a balance of interests and you believe that your integrity interests outweigh the interest of ENERI in processing your personal information, you may, by reference to your specific situation, object the use of your personal data by contacting ENERI. If you object ENERI’s use of your personal data, ENERI must show a compelling legitimate reason for continued processing of personal data. 

 

- Right to erasure (‘right to be forgotten’)

Under certain conditions, e.g. Once you have revoked a previously issued consent and there is no other legal basis for the continued processing of your personal information, you are entitled to request the deletion of your personal information.

 

- Right to restriction of processing

You may, under certain conditions, limit the processing of your personal data to include only the storage of personal data, such as, for example, while ENERI investigates whether you are entitled to deletion.

 

- Right of access

You are entitled to receive a confirmation from ENERI that your personal information is processed by the company and, if so, have access to the personal data and the following information:

  • the purpose of the treatment,
  • the categories of personal data being processed,
  • recipients of personal data (especially if they are located outside the EU / EEA),
  • the time of processing of personal data,
  • information about the rights reproduced in this privacy policy,
  • Information about the source from which the personal data comes from, as well as
  • in the event of automated decision making, including profiling.

If you make the request electronically, you also have the right to receive a copy of your personal information in electronic format. ENERI is entitled to charge a fee if you request more than one (1) copy of your personal data per year.

 

- Right to data portability

When processing your personal information based on your consent or for completing or concluding an agreement with you, and provided that your personal information has been collected directly from you, you are entitled to receive a copy of your personal data in a structured and widely used machine-readable format. 

 

- Rights in relation to automated decision-making, including profiling

You are entitled not to be subject to automated decision-making, including profiling, if such decision-making and/or profiling produces legal effects or similarly significantly affects you. However, this right is not applicable if the automated decision-making is necessary to fulfil an agreement with you, whether the decision is expressly permitted by law or if you have expressly consented to this.

 

- Complaints to the supervisory authority

You may contact us at ENERI with any questions or complaints regarding the processing of your personal information. You also have the right to make complaints regarding the processing of your personal data to the Data Inspectorate.

 

Who is responsible for the personal information we collect?

 

ENERI AB, org. no. 559050-4493 is the responsible entity for the processing of personal data.

 

If you have any questions or concerns about the processing of your personal information, please contact us at info@eneristudios.com.