Privacy Policy kaffeparken eco

1. Introduction

At Kaffeparken, we prioritize your confidentiality and privacy. This Privacy Policy outlines how we handle and process your personal data when you interact with our website and services.

Kaffeparken Eco, Company reg. 881222451001, vanstadskogsväg 279 2, SE-270 75 Lövestad, is the data controller responsible for the processing of your personal data. This Privacy Policy applies to users of our website and webshop located at kaffeparken.se.

Our website may contain links to third-party websites. Please note that this Privacy Policy does not apply to those third-party sites.

For any questions about our processing of your personal data, please contact our Data Protection Officer at dpo@kaffeparken.se.

2. We Process Your Personal Data

We process customer and website users’ personal data for various purposes, which are detailed below.

We only process and retain personal data when necessary to fulfill the purposes for which it was collected or if required to comply with the law.

2.1 When You Use Our Website (Cookies)

Legitimate Purpose and Legal Basis

To manage, develop, and administer our website, and to provide you with relevant news and offers, we use cookies. The types of cookies and their purposes are outlined in our Cookie Policy.

If You Accept Marketing Cookies: We process personal data such as IP address, visited sites, products of interest or purchase, device type, operating system, browser, ISP, referring website, viewed pages, services used, and location data. This processing is based on your consent to marketing cookies (GDPR Art. 6 (1)(a)).

If You Accept Statistical Cookies: We process similar personal data to develop and manage the user experience on our website. This processing is based on your consent to statistical cookies (GDPR Art. 6 (1)(a)).

If You Accept Preference Cookies: We process data such as personalized choices on our website (e.g., location or language) to provide a tailored user experience. This is based on your consent to preference cookies (GDPR Art. 6 (1)(a)).

If You Accept Functional Cookies: We process data to provide you with the most relevant news and offers on our website. This is based on your consent to functional cookies (GDPR Art. 6 (1)(a)).

You can change your consent settings or withdraw consent at any time via our Cookie Policy. Withdrawal does not affect the legality of processing prior to withdrawal.

Disclosure and Joint Data Responsibility

We share personal data collected through cookies with third-party cookie providers for the purposes described. This may include providers like Meta Platforms Inc. and Google Inc. You can review their privacy policies and joint data responsibility agreements through the links provided in our Cookie Policy.

Retention Policy

The retention period for personal data collected via cookies depends on the type of cookies used. Specific retention periods are detailed in our Cookie Policy.

2.2 When You Shop at Kaffeparken Webshop

Legitimate Purpose and Legal Basis

When you purchase products, we process personal data related to your account to handle and administer purchases and provide customer service. This includes data such as purchased products, payment information, name, address, and correspondence. This processing is based on the necessity to fulfill our agreement with you and safeguard interests (GDPR Art. 6 (1)(b) and (f)).

If you have an account and accept marketing cookies, we may also process data for profiling to provide targeted offers. This is based on our legitimate interests (GDPR Art. 6 (1)(f)).

Disclosure

To provide our services, we may disclose your information to suppliers, partners, and data processors.

Retention Policy

We retain personal data related to invoices and returns for five (5) years to comply with bookkeeping obligations. Data related to your webshop account is retained as long as you are a registered customer. Inactive accounts are deleted after 3 years or upon withdrawal of consent, unless required by law.

2.3 If You Consent to Our Newsletter

Legitimate Purpose and Legal Basis

When you sign up for our newsletter, we process personal data such as your name, email address, preferences, and interaction with our newsletters. This is based on your consent (GDPR Art. 6 (1)(a)).

Disclosure

We may share your data with relevant suppliers and partners as needed.

Retention Policy

You can withdraw consent by following the ”unsubscribe” instructions in our newsletters. Withdrawal does not affect the legality of processing before withdrawal.

2.4 If You Sign Up for a Kaffeparken Course

Legitimate Purpose and Legal Basis

When signing up for a course, we process personal data to administer your purchase and provide service. This includes data such as your name, email address, and payment information. This is based on the necessity to fulfill our agreement with you and safeguard interests (GDPR Art. 6 (1)(b) and (f)).

Disclosure

To provide our services, we may disclose information to relevant suppliers and partners.

Retention Policy

We store personal data related to invoices for five (5) years. Data related to your account is retained as long as you are registered. Inactive accounts are deleted after 3 years or upon withdrawal of consent, unless legally required to retain data longer.

3. Third Country Transfers

If necessary, we may transfer personal data to third countries outside the EU/EEA. Such transfers are only made if there is a legal basis, such as adequate protection levels, standard contracts, or exemptions under GDPR Art. 49.

For more information on third-country transfers, please contact us via our online chat.

4. Withdrawal of Consent

You can withdraw your consent at any time by contacting us as detailed above. Withdrawal does not affect the legality of processing before withdrawal and may not prevent continued processing in certain cases.

5. Data Subject Rights

You have rights including access, objection, rectification, erasure, restriction, and data portability. To exercise these rights or if you have questions, please contact us via our online chat.

6. Complaints

If dissatisfied with our processing of your personal data, you have the right to file a complaint with the Swedish Data Protection Authority or the relevant authority in your country of residence.

7. Amendments

We may update this Privacy Policy from time to time. The updated date will be reflected at the bottom of the policy. The current policy is available on our website.

This Privacy Policy was last updated on December 2023