To administrate your payment, your personal information is processed by our payment service provider (Nets) and/or PayPal.
|
Privacy Policy
Last updated: 2022-05-31
Zinkvit KB ("BigPen" or "we") care about your privacy. Our approach is to be as open and transparent as possible about how we collect and use your information. We want you to be able to shop with confidence on our websites (www.bigpen.co.uk, www.bigpen.eu, www.bigpen.se and/or www.zinkvit.se).
If you submit your personal data, for example your name, e-mail and mobile number, we will be able to process this information. To protect your rights and freedom, such processing is governed by certain legislation. In the EU union, this is done mainly by the General Data Protection Regulation (the "GDPR"). Below we let you know about: ● Who is responsible for the processing of your personal data ● When we collect data and what data we collect ● What we do with your information and who we share it with ● Processing of data, legal basis and storage periods ● Your rights under the GDPR ● Data security
The data processing carried out on this web site is conducted by Zinkvit KB, corporate identity number 969757-5422, as data controller. If you have questions or requests, please contact us at our postal address Aspnäsvägen 10, 755 91 Uppsala, Sweden.
We collect personal data when you (i) place an order on our website, (ii) request support and (iii) subscribe our newsletter. In general, such personal data will include your name, e-mail address, mobile number, delivery address, IP address, browsing device and other information that you voluntarily provide us.
We must process certain personal data in order to complete your purchase and/or subscription and to be able to meet legal or other requirements. Your personal data is primarily processed by us. The following third parties will have access to some of your personal information as set out below.
Payment service providers
To administrate your payment, your personal information is processed by our payment service provider (Nets) and/or PayPal.
Postal services and parcel carriers
To deliver your order and handle any returns we will share your personal information with the Swedish Post (Postnord) and/or UPS.
IT providers
In order to have a working IT system and run our business efficiently, we share your personal information with our IT suppliers. When we share your personal data, this is only done so that our IT suppliers can fulfill their obligations to us in accordance with the agreement we have.
Accounting firm
If we have an agreement with you or the company you represent, we may share your personal data to our third party who handles our accounting and bookkeeping.
1. Purchases
When you place an order on our web site, we will process your personal data to fulfil our contractual obligations towards you. At the checkout point, the purchase form specifies what information you must provide, in order for us to complete your purchase.
1.1 Legal basis
The processing is necessary for the performance of our contract with you (i.e. the purchase agreement).
1.2 Storage period
We will only retain your personal data for as long as is necessary to administer your purchase and meet any legal, accounting or reporting requirements. Certain accounting information must be stored for seven years in accordance with the Swedish Bookkeeping Act (1999: 1078). In some cases, for example for statistical analysis or company reports, we may anonymise your personal data so that it can no longer be associated with you. In these cases, we may use the information indefinitely without further notice to you.
2. Support 2.1 Legal basis
The treatment is necessary to be able to provide support, ie to fulfill the request you make.
2.2 Storage period
If you are a BigPen customer, we will store the information about your support case for up to three years to improve our services and follow up on any customer complaints.
3. Newsletter 3.1 Legal basis
The processing is necessary for our performance of the contract with you (i.e. your request to receive our newsletter).
3.2 Storage period
If you unsubscribe from our newsletter we will no longer process your personal information for this purpose.
In accordance with data protection legislation, and depending on the circumstances, you have the right to a number of different rights when we process your personal data. We list these below. If you have any questions regarding BigPen's processing of your personal information, or wish to exercise any of your rights, please feel free to contact us. Our contact information can be found at the beginning of this privacy policy. Please note that your rights under the GDPR are not unconditional. Your rights under the GDPR include the following:
Right to access
According to article 15 of the GDPR legislation, you are entitled to access your personal data and receive certain information about the processing. That information is provided in this document.
Right to rectification
According to article 16 of the GDPR, you are entitled to obtain rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
Right to erasure
Under certain circumstances, you are according to article 17 of the GDPR entitled to have your personal data erased. This is the so-called "right to be forgotten".
Right to limitation of processing
In certain circumstances, under Article 18 of the GDPR, you have the right to restrict the processing of personal data performed.
Right to data portability
According to article 20 of the GDPR you are entitled to receive your personal data or have it directly transmitted to another data controller. Where technically feasible, this should be done in a structured, commonly used and machine-readable format from BigPen.
Right to object
Under Article 21 of the GDPR, you have the right to object to certain processing activities that BigPen performs on the personal data. The right to object applies when personal data is processed in order to carry out a task in the public interest, as part of the exercise of official authority or after a weighing of interests has been made.
Automated decision-making
Under Article 22 GDPR, you have the right to not be the subject of a decision that is only based on some form of automated decision-making, including profiling, if the decision can have legal consequences for you or in a similar way affect you to a considerable degree.
Complaints
Finally, you also have the right to submit a complaint to the Privacy Protection Authority, which in Sweden (seat of Zinkvit KB, "BigPen") is Integritetsskyddsmyndigheten. You can contact Integritetsskyddsmyndigheten on their home page www.imy.se
BigPen uses appropriate technical and organizational security measures to protect your personal information from being accessed by unauthorized persons and to prevent the loss of stored data. Security measures we have taken include the implementation of secure private connections, incident recovery and access restrictions. We regularly review our security policies and procedures to keep them up to date and to ensure that all our systems are safe and secure.
|