1. INTRODUCTION
WHAT COUNTS AS PERSONAL DATA AND WHAT IS PROCESSING OF PERSONAL DATA?
PERSONAL DATA IS DEFINED AS ANY TYPE OF INFORMATION THAT CAN BE ATTRIBUTED, WHETHER DIRECTLY OR INDIRECTLY, TO A NATURAL, LIVING PERSON. FOR EXAMPLE, IMAGES AND SOUND RECORDINGS PROCESSED ON A COMPUTER MAY BE PERSONAL DATA EVEN IF NO NAMES ARE MENTIONED. ENCRYPTED DATA AND VARIOUS TYPES OF ELECTRONIC IDENTITIES (E.G. IP ADDRESSES) ARE PERSONAL DATA IF THEY CAN BE LINKED TO NATURAL PERSONS. EVERY ACTION TAKEN WITH PERSONAL DATA CONSTITUTES AN INSTANCE OF PROCESSING, IRRESPECTIVE OF WHETHER THE ACTION IS AUTOMATED OR NOT. COMMON TYPES OF PROCESSING INCLUDE COLLECTION, REGISTRATION, ORGANISATION, STRUCTURING, STORAGE, TREATMENT, TRANSFER AND DELETION.
WHO IS RESPONSIBLE FOR THE PERSONAL DATA WE COLLECT?
SANDBERG / MURRAY AB, CORPORATE IDENTITY NO. 556960-4316, WITH ADDRESSES AT ARTILLERIGATAN 29, 114 45 STOCKHOLM IS THE DATA CONTROLLER FOR THE COMPANY’S PROCESSING OF PERSONAL DATA.
2. WHAT DOES APPLETREES USE YOUR PERSONAL DATA FOR?
YOU CAN READ ABOUT WHAT APPLETREES USES YOUR PERSONAL DATA FOR AND WHY BELOW.
2.1. FOR YOU TO BE ABLE TO MANAGE AND MONITOR YOUR PURCHASES AND SERVICES
WHEN YOU SHOP AT APPLETREES, YOUR PERSONAL INFORMATION IS SAVED WITH THE ORDER. IN ORDER FOR YOU TO CHANGE THE INFORMATION:
REVIEW THE HISTORY OF YOUR PURCHASES
CHANGE YOUR PERSONAL DATA AND SETTINGS
REMOVE OR EXTRACT THE INFORMATION WE STORE ABOUT YOU.
PLEASE CONTACT US AT INFO@APPLETREES.SE
2.2 TO BE ABLE TO HANDLE ORDERS
WHICH INCLUDES:
DELIVERY (INCLUDING NOTIFICATION AND CONTACTS REGARDING THE DELIVERY).
IDENTIFICATION AND AGE VERIFICATION.
PAYMENT HANDLING (INCLUDING ANALYSIS OF POSSIBLE PAYMENT SOLUTIONS).
HANDLING COMPLAINTS AND WARRANTY CLAIMS.
WE PROCESS THE FOLLOWING DATA:
NAME
PERSONAL IDENTITY NUMBER
CONTACT DETAILS (E.G. ADDRESS, EMAIL AND PHONE NUMBER)
PAYMENT HISTORY
BILLING INFORMATION
CREDIT REPORTS FROM CREDIT REPORT COMPANIES
PURCHASE INFORMATION (E.G. ITEM ORDERED OR IF THE ITEM IS TO BE DELIVERED TO ANOTHER ADDRESS)
USER INFORMATION
LEGAL BASIS: EXECUTION OF THE PURCHASE AGREEMENT. SUCH COLLECTION OF YOUR PERSONAL DATA IS REQUIRED IN ORDER FOR US TO FULFIL OUR OBLIGATIONS UNDER THE PURCHASE AGREEMENT. IF THE DATA IS NOT SUBMITTED, IT WILL NOT BE POSSIBLE TO MEET OUR COMMITMENTS, AND WE WILL BE FORCED TO REFUSE YOUR PURCHASE.
RETENTION PERIOD: UNTIL THE PURCHASE HAS BEEN COMPLETED (INCLUDING DELIVERY AND PAYMENT) AND FOR 36 MONTHS THEREAFTER FOR THE PURPOSE OF HANDLING ANY COMPLAINTS AND WARRANTY CLAIMS.
2.3 TO MEET THE COMPANY’S LEGAL OBLIGATIONS
HANDLING REQUIRED FOR COMPLIANCE WITH THE COMPANY’S LEGAL OBLIGATIONS PURSUANT TO STATUTE, COURT ORDER OR REGULATORY DECISION (E.G. THE SWEDISH BOOKKEEPING ACT, THE SWEDISH ANTI-MONEY LAUNDERING ACT OR PRODUCT LIABILITY AND PRODUCT SAFETY PROVISIONS, WHICH MAY REQUIRE THAT COMMUNICATION AND INFORMATION BE PROVIDED TO THE PUBLIC AND CUSTOMERS CONCERNING PRODUCT ALARMS AND PRODUCT RECALLS IN CASE OF E.G. DEFECTS OR PRODUCTS HAZARDOUS TO HEALTH).
FOR THIS PURPOSE WE PROCESS THE FOLLOWING:
NAME
CONTACT DETAILS (E.G. ADDRESS, EMAIL AND PHONE NUMBER)
PAYMENT HISTORY
BILLING INFORMATION
YOUR CORRESPONDENCE
DETAILS REGARDING PURCHASE DATE, PLACE OF PURCHASE, ANY DEFECT/COMPLAINT
USER INFORMATION
LEGAL BASIS: LEGAL OBLIGATION. THIS COLLECTION OF YOUR PERSONAL DATA IS REQUIRED BY LAW. IF THE DATA IS NOT SUBMITTED, IT WILL NOT BE POSSIBLE TO MEET OUR LEGAL OBLIGATION AND WE WILL THEREFORE BE FORCED TO REFUSE YOUR PURCHASE.
STORAGE PERIOD: UNTIL THE PURCHASE HAS BEEN COMPLETED (INCLUDING DELIVERY AND PAYMENT) AND FOR 36 MONTHS THEREAFTER, OR FOR UP TO SEVEN YEARS FOR DATA PROCESSED IN ACCORDANCE WITH THE SWEDISH BOOKKEEPING ACT.
2.4 TO BE ABLE TO HANDLE CUSTOMER SERVICE CASES
WHICH INCLUDES:
COMMUNICATION AND RESPONDING TO ANY QUESTIONS PUT TO CUSTOMER SERVICE (BY PHONE OR THROUGH DIGITAL CHANNELS, INCLUDING SOCIAL MEDIA).
IDENTIFICATION AND QUESTIONS CONCERNING USER ACCOUNTS.
INVESTIGATING ANY COMPLAINTS AND SUPPORT CASES (INCLUDING TECHNICAL SUPPORT).
QUESTIONS AND ADVICE ABOUT AND AHEAD OF PURCHASES, QUESTIONS ABOUT PRODUCTS, RETURN MANAGEMENT, ORDER MODIFICATION AND SIMILAR ISSUES.
WE PROCESS THE FOLLOWING DATA:
NAME
CONTACT DETAILS (E.G. ADDRESS, EMAIL AND PHONE NUMBER)
YOUR CORRESPONDENCE
DETAILS REGARDING PURCHASE (DATE, PLACE OF PURCHASE, ANY DEFECT/COMPLAINT)
USER INFORMATION
LEGAL BASIS: LEGITIMATE INTEREST, AND EXPLICIT CONSENT IN CASES WHERE WE PROCESS SENSITIVE DATA. PROCESSING IS NECESSARY IN ORDER TO CATER TO BOTH OUR OWN AND YOUR LEGITIMATE INTEREST IN THE HANDLING OF CUSTOMER SERVICE CASES.
STORAGE PERIOD: 36 MONTHS AFTER THE CUSTOMER SERVICE CASE HAS BEEN CLOSED.
2.5 IN ORDER TO PREVENT ABUSE OF A SERVICE OR IN ORDER TO PREVENT, DETER AND INVESTIGATE CRIMES AGAINST THE COMPANY AND CUSTOMERS
PREVENTION AND INVESTIGATION OF POTENTIAL FRAUD OR OTHER OFFENCES. PREVENTION OF JUNK MAILING, PHISHING, HARASSMENT, ATTEMPTED ILLEGAL USER ACCOUNT LOGON OR OTHER ACTIONS PROHIBITED BY LAW OR UNDER OUR TERMS OF PURCHASE, MEMBERSHIP OR SERVICE. PROTECTING AND IMPROVING OUR IT ENVIRONMENT AGAINST ATTACK AND INTRUSION.
FOR THIS PURPOSE WE PROCESS:
PERSONAL IDENTITY NUMBER
PURCHASE AND USER-GENERATED DATA (E.G. CLICK AND VISIT HISTORY)
TECHNICAL DATA RELATING TO THE DEVICES USED AND THEIR SETTINGS (SUCH AS LANGUAGE SETTING, IP ADDRESS, BROWSER SETTINGS, TIME ZONE, OPERATING SYSTEM, SCREEN RESOLUTION AND PLATFORM)
DETAILS ABOUT HOW OUR DIGITAL SERVICES ARE USED
LEGAL BASIS: COMPLIANCE WITH LEGAL OBLIGATION (IF ANY) OR LEGITIMATE INTEREST. IN THE ABSENCE OF A LEGAL OBLIGATION, THE PROCESSING IS NECESSARY IN ORDER TO CATER TO OUR LEGITIMATE INTEREST IN PREVENTING ABUSE OF A SERVICE OR IN ORDER TO PREVENT, DETER AND INVESTIGATE CRIMES AGAINST THE COMPANY.
STORAGE PERIOD: FROM THE TIME OF COLLECTION AND FOR A PERIOD OF 36 MONTHS THEREAFTER.
2.6 IN ORDER TO CONDUCT FOLLOW-UP WITH REFERENCES FOR RECRUITMENTS
WHERE SOMEONE HAS PROVIDED CONTACT DETAILS FOR REFERENCES DURING THE RECRUITMENT PROCESS, WE SAVE ONLY THEIR NAMES, TELEPHONE NUMBERS AND EMAIL ADDRESSES. WE KEEP THE DATA UNTIL THE RECRUITMENT PROCESS IS COMPLETE.
3. WHICH SOURCES DO APPLETREES RETRIEVE YOUR PERSONAL DATA FROM?
WHICH SOURCES DO WE RETRIEVE YOUR PERSONAL DATA FROM?
IN ADDITION TO THE DATA YOU PROVIDE US YOURSELF, OR WHICH WE COLLECT FROM YOU BASED ON YOUR PURCHASES AND HOW YOU USE OUR SERVICES, WE MAY ALSO COLLECT PERSONAL DATA FROM OTHERS (REFERRED TO AS THIRD PARTIES). THE DATA WE COLLECT FROM THIRD PARTIES ARE AS FOLLOWS:
ADDRESS DATA FROM PUBLIC RECORDS IN ORDER TO BE CERTAIN THAT WE HAVE THE CORRECT ADDRESS DETAILS FOR YOU
CREDIT RATING DATA FROM CREDIT RATINGS AGENCIES, BANKS OR CREDIT REPORT BUREAUS
4. WHO HAS ACCESS TO/PROCESS YOUR PERSONAL DATA?
WHO MAY WE SHARE YOUR PERSONAL DATA WITH?
PERSONAL DATA ASSISTANTS. WHERE REQUIRED TO, AND IN ORDER FOR US TO BE ABLE TO OFFER OUR SERVICES, WE SHARE YOUR PERSONAL DATA WITH COMPANIES SERVING AS WHAT ARE REFERRED TO AS PERSONAL DATA ASSISTANTS. A PERSONAL DATA ASSISTANT IS A COMPANY THAT PROCESSES THE INFORMATION ON OUR BEHALF AND ACCORDING TO OUR INSTRUCTIONS. WE HAVE PERSONAL DATA ASSISTANTS THAT ASSIST US WITH:
1) TRANSPORTS (LOGISTICS AND FREIGHT COMPANIES)
2) PAYMENT SOLUTIONS (ACQUIRING COMPANIES, BANKS AND OTHER PAYMENT SERVICE PROVIDERS)
3) MARKETING (PRINT, SOCIAL MEDIA, MEDIA AGENCIES OR ADVERTISING AGENCIES)
4) IT SERVICES (COMPANIES THAT HANDLE THE NECESSARY OPERATION, TECHNICAL SUPPORT AND MAINTENANCE OF OUR IT SOLUTIONS)
WHEN YOUR PERSONAL DATA IS SHARED WITH PERSONAL DATA ASSISTANTS IT IS PURELY DONE FOR PURPOSES CONSISTENT WITH THE REASONS FOR WHICH WE COLLECTED THE INFORMATION (FOR INSTANCE IN ORDER TO FULFIL OUR OBLIGATIONS UNDER THE PURCHASE AGREEMENT). WE RUN CHECKS ON ALL PERSONAL DATA ASSISTANTS TO ENSURE THAT THEY ARE ABLE TO PROVIDE SUFFICIENT GUARANTEES AS TO THE SECURITY AND CONFIDENTIALITY OF PERSONAL DATA. WE HAVE WRITTEN AGREEMENTS IN PLACE WITH ALL PERSONAL DATA ASSISTANTS UNDER WHICH THEY GUARANTEE THE SECURITY OF THE PERSONAL DATA PROCESSED AND IT IS COMPULSORY FOR THEM TO COMPLY WITH OUR SECURITY REQUIREMENTS AND WITH RESTRICTIONS AND REQUIREMENTS CONCERNING THE INTERNATIONAL TRANSFER OF PERSONAL DATA.
COMPANIES THAT ARE INDEPENDENT DATA CONTROLLERS. WE ALSO SHARE YOUR DATA WITH CERTAIN COMPANIES THAT ARE INDEPENDENT DATA CONTROLLERS. THE FACT THAT THE COMPANY IS AN INDEPENDENT DATA CONTROLLER MEANS THAT WE DO NOT CONTROL HOW THE INFORMATION SUBMITTED TO THE COMPANY IS TO BE PROCESSED. INDEPENDENT DATA CONTROLLERS WITH WHOM WE SHARE YOUR PERSONAL DATA ARE AS FOLLOWS:
1) GOVERNMENT AUTHORITIES (THE POLICE, THE SWEDISH TAX AGENCY OR OTHER AUTHORITIES) IF WE ARE REQUIRED TO DO SO BY LAW OR IN THE EVENT OF A SUSPECTED CRIME
2) COMPANIES THAT PROVIDE GENERAL GOODS TRANSPORTATION (LOGISTICS AND FREIGHT COMPANIES)
3) COMPANIES THAT OFFER PAYMENT SOLUTIONS (ACQUIRING COMPANIES, BANKS AND OTHER PAYMENT SERVICE PROVIDERS)
WHEN YOUR PERSONAL DATA ARE SHARED WITH A COMPANY THAT IS AN INDEPENDENT DATA CONTROLLER, THE DATA IS SUBJECT TO THAT COMPANY’S PRIVACY POLICY AND PERSONAL DATA MANAGEMENT.
WHERE DO WE PROCESS YOUR PERSONAL DATA?
WE ALWAYS STRIVE TO ENSURE THAT YOUR PERSONAL DATA IS PROCESSED WITHIN THE EU/EEA, AND ALL OF OUR OWN IT SYSTEMS ARE LOCATED WITHIN THE EU/EEA. FOR PURPOSES OF SYSTEM SUPPORT AND MAINTENANCE HOWEVER, WE MAY BE FORCED TO TRANSFER THE INFORMATION TO A NON-EU/EEA COUNTRY, FOR INSTANCE IF WE SHARE YOUR PERSONAL DATA WITH A PERSONAL DATA ASSISTANT THAT IS, WHETHER IN ITS OWN CAPACITY OR THROUGH A SUBCONTRACTOR, ESTABLISHED IN OR STORES INFORMATION IN A NON-EU/EEA COUNTRY. IN THESE CASES THE ASSISTANT MAY ONLY EXAMINE THE INFORMATION OF RELEVANCE TO THE PURPOSE (SUCH AS LOG FILES).
REGARDLESS OF THE COUNTRY IN WHICH YOUR PERSONAL DATA IS PROCESSED, WE TAKE ALL REASONABLE LEGAL, TECHNICAL AND ORGANISATIONAL MEASURES TO ENSURE THAT THE LEVEL OF PROTECTION IS THE SAME AS THAT WITHIN THE EU/EEA. IN CASES WHERE PERSONAL DATA IS PROCESSED OUTSIDE THE EU/EEA, THE LEVEL OF PROTECTION IS GUARANTEED EITHER BY A DECISION OF THE EU COMMISSION TO THE EFFECT THAT THE COUNTRY IN QUESTION ENSURES AN ADEQUATE LEVEL OF PROTECTION, OR THROUGH THE APPLICATION OF WHAT IS REFERRED TO AS APPROPRIATE SAFEGUARDS. EXAMPLES OF APPROPRIATE SAFEGUARDS INCLUDE AN APPROVED CODE OF CONDUCT IN THE RECIPIENT COUNTRY, STANDARD CONTRACT CLAUSES, BINDING INTERNAL COMPANY RULES OR PRIVACY SHIELD. FEEL FREE TO CONTACT US IF YOU WISH TO RECEIVE A COPY OF THE SAFEGUARDS THAT HAVE BEEN IMPLEMENTED OR INFORMATION ABOUT WHERE THEY HAVE BEEN POSTED.
HOW LONG DO WE SAVE YOUR PERSONAL DATA FOR?
WE WILL NEVER SAVE YOUR PERSONAL DATA FOR LONGER THAN NECESSARY FOR THE RESPECTIVE PURPOSE. SEE MORE ABOUT THE SPECIFIC STORAGE PERIODS UNDER THE RESPECTIVE PURPOSE.
5. YOUR RIGHTS & CONSENT
WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?
RIGHT OF ACCESS (REFERRED TO AS A ‘REGISTER EXTRACT’). WE ARE ALWAYS OPEN AND TRANSPARENT ABOUT HOW WE PROCESS YOUR PERSONAL DATA, AND IF YOU WISH TO GAIN DEEPER INSIGHT INTO THE PERSONAL DATA THAT WE PROCESS ABOUT YOU IN PARTICULAR, YOU MAY REQUEST ACCESS TO THE DATA. THE INFORMATION IS PROVIDED IN THE FORM OF A REGISTER EXTRACT, SPECIFYING THE PURPOSE(S), CATEGORIES OF PERSONAL DATA, CATEGORIES OF RECIPIENT, STORAGE PERIODS, INFORMATION ABOUT WHERE THE INFORMATION WAS COLLECTED, AND THE OCCURRENCE OF AUTOMATED DECISION MAKING.
PLEASE REMEMBER THAT IF WE RECEIVE A REQUEST FOR ACCESS, WE MAY REQUEST ADDITIONAL INFORMATION IN ORDER TO ENSURE EFFECTIVE HANDLING OF YOUR REQUEST, AND TO ENSURE THAT INFORMATION IS DISCLOSED TO THE RIGHT PERSON.
RIGHT TO RECTIFICATION. YOU MAY REQUEST THAT YOUR PERSONAL DATA BE RECTIFIED IF THE DATA IS INCORRECT. WITHIN THE SCOPE OF THE STATED PURPOSE, YOU ALSO HAVE THE RIGHT TO SUPPLEMENT ANY INCOMPLETE PERSONAL DATA.
KEEP IN MIND THAT IF YOU WOULD LIKE TO DELETE YOUR CUSTOMER DATA, PLEASE CONTACT INFO@APPLETREES.SE
YOU HAVE THE RIGHT TO WITHDRAW A CONSENT YOU HAVE GIVEN US AT ANY TIME. A CONSENT TO SEND NEWSLETTERS, FOR EXAMPLE.
RIGHT TO BE FORGOTTEN. YOU MAY REQUEST ERASURE OF PERSONAL DATA WE PROCESS ABOUT YOU IF:
THE DATA IS NO LONGER NECESSARY FOR THE PURPOSES FOR WHICH THEY WERE COLLECTED OR PROCESSED
YOU OBJECT TO A BALANCING OF INTERESTS WE PERFORMED ON THE BASIS OF A LEGITIMATE INTEREST AND YOUR REASON FOR OBJECTING OUTWEIGHS OUR LEGITIMATE INTEREST
YOU OBJECT TO PROCESSING FOR PURPOSES OF DIRECT MARKETING
THE PERSONAL DATA IS BEING PROCESSED IN AN UNLAWFUL MANNER
THE PERSONAL DATA MUST BE ERASED IN ORDER TO COMPLY WITH A LEGAL OBLIGATION TO WHICH WE ARE THE SUBJECT IN QUESTION
PERSONAL DATA HAS BEEN COLLECTED ABOUT A CHILD (UNDER AGE 13) FOR WHOM YOU HAVE PARENTAL RESPONSIBILITY, AND THE DATA COLLECTION OCCURRED IN CONNECTION WITH THE OFFERING OF INFORMATION SOCIETY SERVICES (E.G. SOCIAL MEDIA)
KEEP IN MIND THAT WE MAY HAVE THE RIGHT TO DENY YOUR REQUEST IF LEGAL OBLIGATIONS PREVENT US FROM IMMEDIATELY ERASING CERTAIN PERSONAL DATA. THIS OBLIGATION DERIVES FROM BOOKKEEPING AND TAX LEGISLATION, BANKING AND ANTI-MONEY LAUNDERING LEGISLATION, BUT ALSO FROM CONSUMER RIGHTS LEGISLATION. THE PROCESSING MAY ALSO BE NECESSARY FOR US TO ESTABLISH, ASSERT OR DEFEND LEGAL CLAIMS. SHOULD WE BE UNABLE TO ACCOMMODATE A REQUEST FOR ERASURE, WE WILL INSTEAD BLOCK THE PERSONAL DATA FROM USE FOR PURPOSES OTHER THAN THE PURPOSE PRECLUDING THE REQUESTED ERASURE.
RIGHT TO RESTRICTION. YOU ARE ENTITLED TO REQUEST THAT OUR PROCESSING OF YOUR PERSONAL DATA BE RESTRICTED. IF YOU DISPUTE THE CORRECTNESS OF THE PERSONAL DATA THAT WE PROCESS, YOU MAY REQUEST RESTRICTED PROCESSING DURING THE PERIOD WE REQUIRE IN ORDER TO VERIFY WHETHER THE PERSONAL DATA IS CORRECT. IF WE NO LONGER NEED THE PERSONAL DATA FOR THE DEFINED PURPOSES, BUT YOU DO NEED THEM IN ORDER TO BE ABLE TO ESTABLISH, ASSERT OR DEFEND LEGAL CLAIMS, YOU MAY REQUEST THAT WE SUBJECT THE DATA TO RESTRICTED PROCESSING. THIS MEANS THAT YOU MAY REQUEST THAT WE REFRAIN FROM ERASING YOUR DATA. IF YOU HAVE OBJECTED TO THE BALANCING OF A LEGITIMATE INTEREST THAT WE HAVE PERFORMED AS THE LEGAL BASIS OF A PURPOSE, YOU MAY REQUEST RESTRICTED PROCESSING DURING THE PERIOD WE REQUIRE IN ORDER TO VERIFY WHETHER OUR LEGITIMATE INTERESTS OUTWEIGH YOUR INTERESTS IN HAVING THE DATA ERASED.
IF DATA PROCESSING HAS BEEN RESTRICTED IN ACCORDANCE WITH ANY OF THE ABOVE SITUATIONS, WE MAY ONLY, BEYOND THE ACT OF STORAGE, PROCESS THE DATA IN ORDER TO ESTABLISH, ASSERT OR DEFEND LEGAL CLAIMS, IN ORDER TO PROTECT SOMEONE ELSE’S RIGHTS, OR IF YOU HAVE GIVEN YOUR CONSENT.
RIGHT TO OBJECT TO A CERTAIN TYPE OF PROCESSING. YOU ARE ALWAYS ENTITLED TO AVOID DIRECT MARKETING AND TO OBJECT TO ANY PROCESSING OF PERSONAL DATA BASED ON A BALANCING OF INTERESTS.
LEGITIMATE INTEREST: IN CASES WHERE WE RELY ON A BALANCING OF INTERESTS AS THE LEGAL BASIS FOR A PURPOSE, YOU HAVE THE OPPORTUNITY TO OBJECT TO THE PROCESSING. IN ORDER TO CONTINUE PROCESSING YOUR PERSONAL DATA AFTER SUCH AN OBJECTION, WE MUST BE ABLE TO REFER TO A COMPELLING LEGITIMATE INTEREST IN THE PROCESSING IN QUESTION THAT OUTWEIGHS YOUR INTERESTS, RIGHTS OR FREEDOMS. OTHERWISE, WE MAY ONLY PROCESS THE DATA IN ORDER TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.
DIRECT MARKETING (INCLUDING ANALYSES PERFORMED FOR DIRECT MARKETING PURPOSES): YOU HAVE THE OPTION TO OBJECT TO YOUR PERSONAL DATA BEING PROCESSED FOR DIRECT MARKETING. SUCH AN OBJECTION ALSO INCLUDES THE ANALYSIS OF PERSONAL DATA (REFERRED TO AS PROFILING) PERFORMED FOR DIRECT MARKETING PURPOSES. DIRECT MARKETING REFERS TO ALL TYPES OF MARKETING OUTREACH (E.G. VIA MAIL, EMAIL AND SMS). MARKETING ACTIONS ARE WHERE YOU AS THE CUSTOMER HAVE ACTIVELY CHOSEN TO USE ONE OF OUR SERVICES OR HAVE OTHERWISE SOUGHT US OUT TO LEARN MORE ABOUT SERVICES DO NOT COUNT AS DIRECT MARKETING (SUCH AS PRODUCT RECOMMENDATIONS OR OTHER FEATURES AND OFFERS IN MY ACCOUNT).
IF YOU OBJECT TO DIRECT MARKETING, WE WILL DISCONTINUE THE PROCESSING OF YOUR PERSONAL DATA FOR THAT PURPOSE, AND WILL CEASE EVERY TYPE OF DIRECT MARKETING ACTION AS WELL. YOU MAY CHANGE THIS BY CHANGING THE SETTINGS IN MY ACCOUNT, BY USING THE UNSUBSCRIBE LINK IN MARKETING MAILINGS, OR BY CONTACTING CUSTOMER SERVICE.
RIGHT TO DATA PORTABILITY. IF OUR RIGHT TO PROCESS YOUR PERSONAL DATA IS BASED EITHER ON YOUR CONSENT OR ON THE PERFORMANCE OF AN AGREEMENT WITH YOU, YOU ARE ENTITLED TO REQUEST THAT THE DATA CONCERNING YOU AND WHICH YOU HAVE SUBMITTED TO US BE TRANSFERRED TO ANOTHER DATA CONTROLLER (REFERRED TO AS DATA PORTABILITY). A PREREQUISITE FOR DATA PORTABILITY IS THAT THE TRANSFER MUST BE TECHNICALLY POSSIBLE AND CAN TAKE PLACE IN AUTOMATED FORM.
6. HOW DOES APPLETREES HANDLE PERSONAL IDENTITY NUMBERS?
HOW DO WE HANDLE PERSONAL IDENTITY NUMBERS?
WE WILL ONLY PROCESS YOUR PERSONAL IDENTITY NUMBER IF CLEARLY JUSTIFIED WITH REFERENCE TO THE PURPOSE, IF NECESSARY FOR SECURE IDENTIFICATION, OR IF THERE IS SOME OTHER NOTEWORTHY REASON. WE ALWAYS MINIMISE THE USE OF YOUR PERSONAL IDENTITY NUMBER TO THE GREATEST EXTENT POSSIBLE BY USING YOUR BIRTH REGISTRATION NUMBER INSTEAD, WHEREVER SUFFICIENT.
HOW IS YOUR PERSONAL DATA PROTECTED?
WE USE IT SYSTEMS IN ORDER TO SHIELD CONFIDENTIALITY, PRIVACY AND ACCESS TO PERSONAL DATA. WE HAVE IMPLEMENTED SPECIAL SECURITY MEASURES IN ORDER TO PROTECT YOUR PERSONAL DATA AGAINST UNLAWFUL OR UNAUTHORISED PROCESSING (SUCH AS UNLAWFUL ACCESS, LOSS, DESTRUCTION OR DAMAGE). ONLY THOSE PERSONS WHO ACTUALLY NEED TO PROCESS YOUR PERSONAL DATA IN ORDER FOR US TO BE ABLE TO FULFIL OUR SPECIFIED PURPOSES HAVE ACCESS TO THEM.
7. COOKIES
WHAT ARE COOKIES AND HOW DO WE USE THEM?
COOKIES ARE SMALL ALPHANUMERIC TEXT FILES THAT ARE SERVED BY OUR WEB SERVER AND STORED ON YOUR BROWSER OR DEVICE. AT appletrees.se, WE USE THE FOLLOWING COOKIES:
1) SESSION COOKIES (A TEMPORARY COOKIE THAT EXPIRES WHEN YOU CLOSE YOUR BROWSER OR DEVICE)
2) PERMANENT COOKIES (COOKIES THAT REMAIN ON YOUR COMPUTER UNTIL YOU REMOVE THEM OR THEY EXPIRE)
3) FIRST-PARTY COOKIES (COOKIES PLACED BY THE WEBSITE YOU VISIT)
4) THIRD-PARTY COOKIES (COOKIES PLACED BY A THIRD-PARTY WEBSITE. WE PRIMARILY USE THEM FOR ANALYTICS, SUCH AS GOOGLE ANALYTICS)
5) SIMILAR TECHNIQUES (TECHNIQUES THAT SAVE INFORMATION TO YOUR BROWSER OR DEVICE IN A MANNER SIMILAR TO COOKIES)
THE COOKIES WE USE GENERALLY IMPROVE THE SERVICES WE OFFER. SOME OF OUR SERVICES REQUIRE COOKIES IN ORDER TO WORK PROPERLY, WHEREAS OTHERS IMPROVE THE SERVICES FOR YOU. WE USE COOKIES FOR HIGHER-LEVEL ANALYTICAL INFORMATION ABOUT THE WAY YOU USE OUR SERVICES AND IN ORDER TO SAVE FUNCTIONAL SETTINGS LIKE LANGUAGE AND OTHER INFORMATION. WE ALSO USE COOKIES IN ORDER TO HELP US TARGET YOU WITH RELEVANT MARKETING.
CAN YOU CONTROL THE USE OF COOKIES YOURSELF?
YES! YOUR BROWSER OR DEVICE ALLOWS YOU TO CHANGE THE SETTINGS REGARDING THE USAGE AND SCOPE COOKIES. GO TO YOUR BROWSER SETTINGS OR DEVICE SETTINGS TO LEARN MORE ABOUT HOW TO ADJUST THE SETTINGS FOR COOKIES. EXAMPLES OF PARAMETERS YOU CAN ADJUST INCLUDE BLOCKING ALL COOKIES, ONLY ACCEPTING FIRST-PARTY COOKIES, OR DELETING COOKIES WHEN YOU CLOSE YOUR BROWSER. KEEP IN MIND THAT SOME OF OUR SERVICES MAY NOT WORK IF YOU BLOCK OR DELETE COOKIES. YOU CAN READ MORE ABOUT COOKIES IN GENERAL ON THE SWEDISH POST AND TELECOM AUTHORITY WEBSITE, PTS.SE.
8. THE SWEDISH DATA PROTECTION AUTHORITY
WHAT DOES IT MEAN THAT THE SWEDISH DATA PROTECTION AUTHORITY IS THE SUPERVISORY AUTHORITY?
THE SWEDISH DATA PROTECTION AUTHORITY IS RESPONSIBLE FOR MONITORING IMPLEMENTATION OF THE LAW, AND ANYONE WHO BELIEVES THAT A COMPANY IS HANDLING PERSONAL DATA IMPROPERLY MAY FILE A COMPLAINT WITH THE SWEDISH DATA PROTECTION AUTHORITY.
9. DO YOU HAVE QUESTIONS REGARDING DATA PROTECTION?
WHAT IS THE EASIEST WAY TO CONTACT US WITH QUESTIONS ABOUT DATA PROTECTION?
YOU CAN ALWAYS POSE YOUR QUESTIONS TO CUSTOMER RELATIONS AT INFO@APPLETREES.SE
WE MAY MAKE CHANGES TO OUR PRIVACY POLICY. THE LATEST VERSION OF THE PRIVACY POLICY IS ALWAYS AVAILABLE HERE ON THE WEBSITE. FOR UPDATES THAT ARE OF CRITICAL IMPORTANCE TO OUR PROCESSING OF PERSONAL DATA (SUCH AS CHANGES TO SPECIFIED PURPOSES OR CATEGORIES OF PERSONAL DATA) OR UPDATES THAT ARE NOT OF CRITICAL IMPORTANCE TO PROCESSING BUT WHICH MAY BE OF CRITICAL IMPORTANCE TO YOU, YOU WILL RECEIVE INFORMATION ON appletrees.se AND BY EMAIL (IF YOU HAVE PROVIDED YOUR EMAIL ADDRESS) IN DUE TIME BEFORE THE UPDATES TAKE EFFECT. WHEN WE MAKE INFORMATION ABOUT UPDATES ACCESSIBLE, WE WILL ALSO EXPLAIN THE MEANING OF THE UPDATES AND HOW THEY MAY AFFECT YOU.