PRIVACY POLICY

Privacy policy

Your privacy is important to Schiacciata AB (hereinafter “us” or “we”). When you use our mobile application and/or e-commerce site Bar Schiacciate (hereinafter “platform”), your personal data may be processed by us. We want to ensure that your personal data is processed in a lawful, secure and transparent manner.
This privacy policy aims to describe why we process your data, when it happens and how we process it. In the policy you can also read about what obligations we have and what rights you have.

Who is responsible for your personal data?

We are the data controller for the processing of personal data required to receive, administer and fulfill an order via the platform, and to administer any user account on our platform. We are also responsible for the processing of personal data for the purpose of keeping statistics on how many individual users we have on our platform and how often these individual users visit the platform.

Our platform is provided via Caspeco AB which in this regard is our
personal data processor. This means that Caspeco AB only processes your data in accordance with our instructions.

In order to offer a customer club, we cooperate with Piggy Netherlands BV, who then acts as our data processor. This means that Piggy Netherlands BV only processes your data in accordance with our instructions.
In cases where payment is required to complete or order is collected as usual
information when paying over the Internet in. Data is stored in a PCI-certified environment and the data cannot be viewed by us or our personal data processors in clear text.

What personal data do we process?

When you place an order via our platform, create a user account on the platform and/or join our customer club, we need certain information about you to fulfill your request, administer your user account on the platform and/or join the customer club.
This information is first and last name, email address, telephone number, geographical information and payment information. We only process personal information that you have voluntarily chosen to share with us.

Purpose and legal basis for processing

We use your personal data to be able to handle and complete your order via our platform, and to administer your payment. If you have chosen to create a user account on our platform, we use your data to administer your user account. This processing is required in order for us to be able to fulfill our agreement with you.

We also use your personal data to keep statistics on how many
individual users we have on our platform and how often these individual users visit the platform. This statistical processing is based on a legitimate interest in being able to provide you with an improved version of our platform.
If you have chosen to join our customer club, we also use your data to administer your membership. The customer club is provided in collaboration with Piggy Netherlands BV. This processing is necessary for us to be able to fulfill our agreement with you.

How long your personal data is stored

When you place an order via our platform, we will save your personal data until your request is completed by us.
If you have chosen to create a user account on our platform, we will store your personal data for as long as you have a user account and for a maximum of twelve (12) months thereafter. If you request it, this storage period can be shortened.

We also store your personal data for statistical purposes for a maximum of twelve (12) months from the current use of our platform. Statistics containing information that is not considered personal data are stored until further notice.

If you have chosen to join our customer club, we will store your personal data for as long as you choose to be affiliated with the customer club and for a maximum of twelve (12) months thereafter. If you request it, this storage period can be shortened.
Your personal data may also be stored for the period required by applicable law.

Who has access to your personal data?

We share your personal data with Caspeco AB and Piggy Netherlands BV who act as data processors. This means that they only process your data in accordance with our instructions.

We may also share your personal information with third parties, provided that we are required to do so by law. However, please note that we do not sell your personal information to third parties.

Transfer of personal data outside the EU/EEA

We and our partner(s) generally process personal data only within the EU/EEA.
If processing takes place outside the EU/EEA, there is either a decision from the EU Commission that the country has an adequate level of protection or that appropriate safeguards, such as the EU Commission's standard data protection provisions or binding corporate rules, apply to ensure that the personal data is protected.

Your rights

Right of access: You have the right to contact the data controller and request access to the personal data processed about you and request information (so-called register extracts) about, among other things, the purposes of the processing, who has received the personal data, etc. The data controller will provide you with a free copy of the personal data processed. For any additional copies, an administration fee may be charged.

Right to rectification and restriction: You have the right to receive your personal data without undue delay.
personal data corrected or, under certain conditions, restricted. If you believe that the data controller is processing personal data about you that is incorrect or incomplete, you can demand that this be corrected or supplemented.

Right to erasure: You have the right to have your personal data erased (the right to be forgotten) under certain conditions. For example, if the personal data is no longer necessary for the purpose or if the processing is based on consent and this has been withdrawn. However, there may be legal requirements or contractual relationships that prevent the controller from erasing your personal data.

Right to object and withdraw consent: You have the right to withdraw consent with effect from the time of withdrawal. You also have the right to object at any time to the processing of your personal data if the legal basis for the processing is a balancing of interests. You as a data subject also have the right to object at any time to the processing of your personal data if these are processed for marketing purposes and they will then no longer be processed for this purpose.

Right to data portability: You have the right to obtain assistance in transferring the personal data you have provided to the controller in a structured, commonly used and machine-readable format to another controller. This applies, however, provided that it is technically feasible and that the processing was necessary for the performance of a contract or that you have given your consent.

Right to lodge a complaint: If you are dissatisfied with the processing of your personal data, please contact the data controller, see contact details below. You also have the right to lodge a complaint with the supervisory authority, the Swedish Data Protection Authority (www.imy.se).

Changes to this Privacy Policy

We reserve the right to change and update this privacy policy. In the event of significant changes or if existing personal data is to be processed in a manner other than as stated in this policy, we will inform you of this in an appropriate manner.

Contact details

Company: Schiacciata AB
E-mail: info@barschiacciate.se
Address: Rörstrandsgatan 6, 113 40 Stockholm