Privacy Policy

In your interactions with us at www.reztart.com/sv (Indevex AB), we process personal data about you. This is due to the EU’s new General Data Protection Regulation (GDPR), which is effective from May 25, 2018. In our Privacy Policy, we have compiled how we use the information we have about you and how we work to protect your privacy in accordance with GDPR. You can also read how you can proceed if you want to know what information we have about you.

General information about personal data

What is personal data and what is the processing of personal data?

Any information that can be directly or indirectly attributed to a living physical person is considered personal data. Even images (photos) and audio recordings of individuals processed in a computer can be personal data, even if no names are mentioned. Encrypted data and various types of electronic identities, such as IP numbers, are considered personal data if they can be linked to physical persons. All forms of actions with personal data are personal data processing, for example, collection, registration, organization, structuring, storage, processing, modification, retrieval, reading, use, disclosure, dissemination or otherwise making available, adjustment or combination, restriction, deletion or destruction.

Where does www.reztart.com (Indevex AB) get your personal data from?

The online store www.reztart.com (Indevex AB) retrieves/saves information that you provide to us, e.g. Indevex saves your personal data when registering a warranty, registering for newsletters, and if you make purchases directly via www.reztart.com

Where does www.reztart.com (Indevex AB) process your personal data?

As far as possible, www.reztart.com (Indevex AB) processes your personal data within the EU and EEA countries (Norway, Iceland and Liechtenstein) as the data protection regulation means that all EU member states have equivalent protection for personal data and personal integrity. Since there are no general rules that provide corresponding guarantees outside the EU and EEA, such transfer may only take place in the following situations:

Decision on an adequate level of protection
Appropriate safeguards, e.g. standard contractual clauses or binding corporate rules, BCRs
Special permission from the Swedish Data Protection Authority
Consent or in other specifically stated situations
Transfer on isolated occasions

Will www.reztart.com (Indevex AB) share your personal data with anyone?

We may share your personal data with either a data processor or a company that is independently responsible for personal data. We only share your data with a data processor if it is necessary, and it is carefully regulated in agreements how your data may be processed. Data processors guarantee the security of the personal data processed and undertake, among other things, to comply with our security requirements as well as restrictions and requirements regarding international transfer of personal data. Among other things, our data processors help us with payment solutions, transport, marketing, communication, recruitment and IT services.

We may also share your personal data with companies that are independently responsible for personal data. In that case, we are not responsible for how they process your personal data, but it is their personal data management and privacy policy that applies. Independent data controllers with whom we share your personal data are state authorities (police, tax authorities, etc.), companies that arrange general goods transport and companies that offer finance & payment solutions.

Access, rectification and deletion to/of your personal data

You have the right to access information about what personal data we process, and you also have the right to request rectification if any information is incorrect. Under certain circumstances, you can have your personal data deleted or request restriction of processing, for example if you have not given consent or have withdrawn your consent.

Withdraw consent

In cases where we process your personal data with the support of your consent, you have the right to withdraw your consent with immediate effect.

Object to processing based on a balance of interests

For personal reasons, you may object to the processing of your personal data if the processing itself is based on a balance of interests, a balance between the benefit of the processing and the risk to the personal integrity of individuals. In order to continue processing your personal data after such an objection, we need to be able to show that we have reasons that outweigh your interests, rights or freedoms.

If you do not want us to process your personal data for direct marketing purposes, you can report it to us. The easiest way to do this is via unsubscribing from our newsletter.

The right to data portability

You have the right to receive a copy in a structured format of the personal data you have provided to us. The right to data portability, unlike the right to a register extract, thus only includes data that you yourself have provided to us and that we process with the support of certain legal grounds, e.g. an agreement with you.

Cookies

A cookie is a small text file that is stored on your computer, mobile phone or other device when you visit a website. The cookie helps website providers to recognize your device the next time you visit their website.

At www.reztart.com (Indevex AB), we use both session cookies (which expire when you close your browser) and persistent cookies (which remain on the device for a certain time or until you delete them). www.reztart.com (Indevex AB) uses cookies to improve our site and your shopping experience.

www.reztart.com (Indevex AB) collects cookies when:

Storing information about the delivery point that the visitor has previously chosen, which provides a smoother shopping experience the next time the customer shops.
Storing information about products that the visitor has previously visited in order to be able to show the category “You have previously visited” on the product page.
Storing information about which favorites a visitor has chosen so that the products remain under Favorites (the heart) on the next visit.
Storing information about which country the visitor has previously chosen, so that they do not have to choose a country again on the next visit.
Storing filter settings that a visitor has chosen on a category page, so that the visitor does not have to specify it again after each individual product visit.
Storing visits to Reztart’s website for marketing purposes. Storing cookies means that our advertising can be shown to visitors who are interested in our products on, for example, Google and Facebook as well as other partners’ websites, programs and e-mail messages. Cookies make it possible to show ads based on previous browsing behavior.
Storing user ID in the Google Analytics tool to improve the user experience.

Many browsers let you manage your settings. You can set your browser to refuse cookies or delete certain cookies.

Keep in mind that if you choose to block cookies, it may impair Reztart’s website or prevent certain parts of it from working.

Keep in mind that changing settings regarding cookies or interest-based advertising must be done on each device (e.g. computer, tablet, etc.) as well as browser (e.g. Chrome, Explorer, Safari, etc.).

Protection of personal data in www.reztart.com (Indevex AB) systems and handling of personal identification numbers

www.reztart.com (Indevex AB) has both IT systems that are designed to protect the confidentiality, integrity and access to personal data as well as well-structured routines for how and who processes personal data. Only authorized personnel process and have access to identifiable personal data at www.reztart.com (Indevex AB) and we only use them for the purposes that we have reported in our policy.

Personal identification numbers will only be processed when it is well justified with regard to the purpose, necessary for us to be able to safely identify you and so that no unauthorized person can access your data or if there is any other significant reason.

Changes to the privacy policy

www.reztart.com (Indevex AB) can make changes to the privacy policy. The latest version is always available on Reztart’s website.

Customer

For us, it is very important that you as a customer feel safe in the meetings you have with us and that you understand how and why we handle your personal data. We are constantly working to improve your customer experience and our handling of your personal data is part of that. Below you can see in more detail which treatments we do and for what purpose.

What personal data does www.reztart.com (Indevex AB) collect and for what purpose for you as a customer?

We are happy that you want to shop with us! Depending on how you shop our products or what matter you have, we will need to handle your personal data for, for example, payment, delivery of goods or customer service matters. We only handle the personal data that is needed to best serve you as a customer. Here you can read more about what information and why?

Purpose: To be able to handle purchases/orders

Processing:

Manage your purchase/order of goods (e-commerce/app; also handling regarding the choice of collection point, notification and contacts regarding ordered goods).
Check that your address matches with the help of an external partner.
Handle returns or complaints.

Categories of personal data:

Name
Contact information (e.g. address, e-mail, mobile number)
Payment history
Order and delivery information (e.g. articles, quantity, price, discounts, choice of delivery point)

Legal basis: Fulfillment of purchase agreement

Purpose: To be able to handle your customer service case

Processing:

Communicate and answer inquiries that come in via telephone or digital channels (including social media).
Ensure your identity
Manage and investigate support cases (e.g. orders in e-commerce or via a reseller)

Categories of personal data:

Name
Contact information (e.g. address, e-mail, mobile number)
Personal identification number (Sweden), date of birth (Norway, Finland, Poland)
Customer’s correspondence (e.g. mail, calls)
Order and delivery history (e.g. articles, quantity, price, discounts, choice of delivery point, order number, package ID)
Technical information about your equipment for support assistance

Legal basis: Legitimate interest (The treatments are necessary for us to be able to satisfy your and our interest in handling customer service cases)

Purpose: To be able to carry out and manage competitions and events

Processing:

Communicate with participants who participate in a competition.
Communicate with participants before and after an event (e.g. confirmation of registrations, questions or evaluations).
Manage identification and age control.
Appoint winners and convey prizes.

Categories of personal data:

Name
Personal identification number or age
Contact information (e.g. address, e-mail, mobile number)
Information provided in competition entries
Information provided in evaluation of event

Legal basis: Legitimate interest (The processing is necessary to be able to satisfy your and our interest in carrying out and managing competitions and events.)

Perform general analyses in summarized and grouped form

I.e. not at the individual level in order to be able to:

Make services more user-friendly, e.g. change the user interface to simplify the flow of information or to highlight functions that are often used in our digital channels.
To be able to know which payment solutions should be offered to the customer.
Produce documentation in order to improve goods and logistics flows, e.g. by being able to forecast purchases, stocks and deliveries.
Produce documentation in order to develop and improve the company’s range.
Produce documentation in order to develop and improve the company’s resource efficiency from an environmental and sustainability perspective, e.g. by streamlining purchasing and planning of deliveries.
Produce documentation in order to plan new establishments of stores and warehouses.
Give customers an opportunity to influence the range that we provide.
Produce documentation in order to improve IT systems in order to increase security for our visitors/customers in general.
Perform tests of existing systems as well as of systems under development.

Categories of personal data:

Age
Place of residence
Your correspondence and feedback regarding the company’s services and products
Technical data regarding devices that the customer uses and settings, e.g. language setting
IP address, browser settings, time zone, operating system, screen resolution and platform
Information about how you interacted with us (e.g. how you use services, login options, when, where)
Purchase and user-generated data (e.g. click and visit history and responses from surveys)
Personal identification number
E-mail
Mobile number
Membership number

Legal basis: Legitimate interest (The processing is necessary for us to be able to satisfy your and our interest in developing and improving our services, products, availability, etc.)

Purpose: To be able to market products and services

Processing:

Show relevant product recommendations, give suggestions, remind about forgotten/abandoned digital shopping carts to simplify future purchases or similar measures.
Send direct marketing via e-mail, SMS, social media (such as, for example, Facebook and Google) or other similar electronic channels for communication as well as via post, including offers from partners to existing customers outside a loyalty program.
To understand what type of marketing or direct marketing should be used, we carry out analyses, e.g. about:
- How web pages and other digital channels are used.
- Purchase history
- Age and geographic information
- Results from surveys

Categories of personal data:

Name
Contact information (e.g. address, e-mail, mobile number)
Membership information
Age
Gender
Purchase history
Customer segment
Date of birth
Cookie data
Specified personal choices regarding communication

Legal basis: (not specified in the text, but normally legitimate interest or consent)

Are there other situations when www.reztart.com (Indevex AB) collects personal data about you as a customer?

www.reztart.com (Indevex AB) only handles your personal data when it is necessary. In order for us to be able to handle all the obligations that rest on us and counteract crime and abuse linked to www.reztart.com (Indevex AB), we need to handle your data. Below you can read about when and why.

Purpose: To be able to fulfill the company’s legal obligations

Processing:

Fulfill legal obligations, according to requirements in laws, judgments or decisions by authorities. Such requirements can, for example, refer to requirements regarding product liability and product safety such as the production of communication and information to the public and customers about product alarms and product recalls, e.g. in the event of a defective or hazardous product. Or to the extent required by the Accounting Act or the Money Laundering Act and can be attributed to an individual.

Categories of personal data:

Name
Contact information (e.g. address, e-mail, mobile number)
Your correspondence
Information about purchase time, place of purchase, defect/complaint about product
Personal identification number
Purchase history

Legal basis: Legal obligation

How long is my personal data stored?

We at www.reztart.com (Indevex AB) need to save part of your data in order to fulfill contractual relationships, fulfill legal requirements such as accounting, but also to, for example, be able to handle complaints. The personal data is only stored for as long as it is required to fulfill the purposes of the reported processing. After that, all personal data is deleted in accordance with www.reztart.com (Indevex AB) routines for weeding. Personal data in the form of purchase history that is processed within www.reztart.com (Indevex AB) is never saved for more than 36 months.

Object to processing for direct marketing purposes

You as a customer have the right to waive direct marketing. If you do not want us to process your personal data for direct marketing purposes, you can report it to us via our customer service or via unsubscribing from our newsletter.

Who do I contact with questions?

If you have questions about our processing of your personal data, want to obtain a register extract, withdraw consent, object to processing for direct marketing purposes, etc., you are welcome to contact us. We take these questions very seriously so do not hesitate to contact us if you have any concerns!

www.reztart.com (Indevex AB) is responsible for personal data for the processing of the personal data that we process about you. You can reach us at info@reztart.se

If you are not satisfied with our processing of your personal data, and/or the answers you have received from us, you have the right to lodge a complaint with the Swedish Data Protection Authority, which is the supervisory authority regarding the processing of your personal data.

Recruitment

When you apply for a position with us at www.reztart.com (Indevex AB), we need to manage your personal data. By registering your interest and submitting your application, you consent to us processing your data and managing it until the process is over or a reasonable time thereafter.

What personal data does www.reztart.com (Indevex AB) collect and for what purpose for you as part of a recruitment process?

Purpose: In order for us to manage a recruitment process

Processing:

Registration of applicants
Receive and manage CVs and cover letters
Make a selection of candidates
Complete the recruitment process

Categories of personal data:

First name and last name
Email address
Mobile number
CV
Cover letter

Legal basis: Consent to the processing of personal data.

How long is my personal data stored?

The information is stored until the process is over or for a reasonable time thereafter.

Other

You who are in contact with us in one way or another, which may be different types of business or interest relations, have the same rights as everyone else. To the extent that www.reztart.com (Indevex AB) processes personal data, only necessary personal data is registered for well-thought-out purposes in each case and in accordance with current legislation.

Rights – how long is my personal data stored?

The processing takes place in accordance with current legislation and means that personal data is not stored for a longer period than is necessary with regard to the purposes of the processing.

Who do I contact with questions?

www.reztart.com (Indevex AB) is the data controller for the processing of personal data that we process about you. www.reztart.com (Indevex AB), Fridhemsvägen 3, 602 13 Norrköping, is the data controller for the processing of personal data that we process about you. info@reztart.com