INTRODUCTION

This privacy policy aims to inform you about how we, PS of Sweden AB, handle your personal data and to ensure that the processing is done in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws when you purchase from us or otherwise interact with us. The privacy policy also describes your rights and how you can exercise them.

In this privacy policy, we describe the personal data we collect and process for:

• Customers

• Members

• Website visitors

• Newsletter subscribers

• Representatives and contacts of suppliers, customers, and business partners

Who is responsible for the processing?

PS of Sweden ("PS of Sweden," "we," "us," etc.) is the data controller for the processing of your personal data according to this privacy policy.

Our contact information is provided below:

PS of Sweden, org. no. 556859-4583
Stureplan 4C, 114 35 Stockholm
For questions about our processing of your personal data or this privacy policy, please contact us at support@psofsweden.com.

TYPES OF PERSONAL DATA PROCESSED

Introduction
Below is an account of the types of personal data we process, the purposes for which it is processed, and the legal basis for the processing.

Customers
When you purchase a product, we collect and process your name, address, phone number, and email address. We need to process this data in order to fulfill our part of the purchase, to deliver the product to you or notify you when the product is available for pickup, and to administer your purchase and provide customer service. The legal basis is that the processing is necessary to fulfill the agreement with you.

We also store your purchase history, i.e., information about the products you have purchased, quantities, dates, and prices, as well as any correspondence and documentation regarding the products you have purchased. We store this information to provide you with qualified service after the purchase and to handle any complaints or warranty claims. The processing is based on a legitimate interest where our legitimate interest is to provide good service, ensuring the safe use of our products, and enabling necessary assessments, fulfilling our obligations, and safeguarding our rights in connection with complaints, warranty claims, and product liability. We are also required by law to store information about returns for accounting purposes.

We may also process your email address and phone number for direct marketing purposes, namely to keep you informed about products, special offers, or campaigns. This processing is based on the legal basis of "legitimate interest," where our legitimate interest is to market our products to existing customers.

Payments made for purchases on our websites are processed through payment services provided by our third-party suppliers. The payment service provider is the data controller for the credit card information and other payment-related data. We do not collect or store any payment information.

Members
On www.psofsweden.se, you can register as a member to take part in exclusive offers. When you register as a member, we collect your name, email address, and your chosen password. This information is necessary for you to have an account and for us to provide the service, and is thus necessary to fulfill the agreement with you.

Website Visitors
If you visit our websites www.psofsweden.com (“Website”) and consent to the use of cookies, we may process your IP address to determine where in the world you are visiting our Website from. The purpose of this processing is to collect data for statistical purposes and for security purposes (e.g., to identify misuse of the Website, hacker attacks, etc.). The processing is based on a legitimate interest where our legitimate interest is to improve our services through the use of visitor statistics on the Website, as well as to counteract security incidents and thereby ensure the safety of the Website and our visitors.

Note that your IP address does not directly identify you as an individual but can be used to identify you with additional information. We will not attempt to identify you as a website visitor.

We may also process data about your activity on the Website, provided that you have consented to the use of cookies. The purpose of the processing is to enable us to market our services and products through "retargeting" and to improve our websites, services, and marketing. The legal basis for the processing is a legitimate interest where our legitimate interest is to market our services and products to existing customers and improve our Website and services.

Regarding personal data processed through third-party cookies (including pixels), we are jointly responsible for such data processing with the third party that provides the cookie/pixel. We have entered into the following agreements to clarify our joint responsibility:

• Facebook Pixel
  We and Facebook Ireland Ltd (“Facebook Ireland”) are joint data controllers for personal data processed in connection with the use of the Facebook Pixel on our Websites. The purpose of the processing of personal data through the use of the Facebook Pixel is to measure and analyze your use of our Websites, direct advertising campaigns, deliver commercial messages, and improve our Websites and marketing.
  Further information on how Facebook Ireland processes personal data can be found in Facebook Ireland's privacy policy: https://www.facebook.com/about/privacy.
  We are responsible for fulfilling your rights regarding personal data processed by us (see Section 7 for more information on your rights). Facebook Ireland is responsible for fulfilling your rights regarding personal data stored and processed by Facebook Ireland.

• Google Analytics
  We and Google Ireland Limited (“Google Ireland”) are joint data controllers for personal data processed in connection with the use of Google Analytics. The purpose of processing personal data through the use of Google Analytics is to measure and analyze your use of our Websites, direct advertising campaigns, deliver commercial messages, and improve our Websites and marketing.
  More information on how Google Ireland processes personal data can be found here: https://policies.google.com/technologies/partner-sites.
  We are responsible for fulfilling your rights regarding personal data stored by us (see Section 7 for more information on your rights). Google Ireland is responsible for fulfilling your rights regarding personal data stored and processed by Google Ireland.

Newsletter Subscribers
If you register for our newsletter, we will process your email address to provide you with the newsletter. The legal basis for the processing is a legitimate interest, where our legitimate interest is to market our products via the newsletter.

If you no longer wish to receive our newsletters, you can unsubscribe at any time.

Representatives and Contacts at Business Customers, Suppliers, and Partners
If you are a contact person at one of our suppliers, partners, or business customers (“Partners”), we process your name, phone number, email address, and your role at the Partner organization. We process this data to manage our relationship with the Partner, meaning to administer and exercise our rights and obligations under the agreement with the Partner, place or manage orders or provided services, and to otherwise enable us to communicate and conduct our business. The processing is based on a "legitimate interest" as the legal basis, where our legitimate interest is to administer our contractual obligations and rights, communicate with, and otherwise maintain a good relationship with the Partner.

If you cooperate with us as a sole proprietor, we process your name, phone number, email address, and personal identification number (since it is the same as your sole proprietorship’s organization number). We process this data to manage the relationship with the Partner, meaning to administer and exercise our rights and obligations under the agreement with the Partner, place or manage orders or provided services, and to otherwise enable us to communicate and conduct our business. The legal basis for the processing is that it is necessary for us to fulfill our contractual obligations with your sole proprietorship.

DATA SHARING

We do not sell or share your personal data with others. We may, however, transfer your personal data to various systems and service providers necessary for our operations, such as business systems. These recipients may only process your data on our behalf when performing a service for us. We take all reasonable legal, technical, and organizational steps to ensure data is handled securely and with adequate protection when shared with selected third parties.

DATA STORAGE AND TRANSFERS

Typically, we store your personal data on servers within the EU/EEA. However, if a service provider outside the EU/EEA is involved, we ensure adequate protection in line with GDPR through mechanisms like EU standard contractual clauses.

HOW LONG WE KEEP YOUR PERSONAL DATA

Introduction

We may retain your personal data longer if necessary to comply with legal obligations (e.g., accounting laws) or establish, exercise, or defend legal claims.

Customers

Your email may be stored for up to twelve months post-purchase for direct marketing purposes, unless you choose to opt out. Purchase history data will be retained for up to 36 months for complaint handling and warranty obligations.

Newsletter

We retain your email as long as you are subscribed. If you unsubscribe, we delete your email address.

YOUR RIGHTS

You have certain legal rights that you can assert against us. Below is a summary of these rights. For full information about your rights, please refer to the GDPR, Sections 3–5.

Right of Access/Registration Extract. You have the right to be informed whether we are processing personal data about you. If we are processing such data, you have the right to information about, among other things, which personal data is being processed, the purposes of the processing, the external recipients who have access to your personal data, and how long we will retain your personal data.

Right to Data Portability. You have the right to request a copy of the personal data you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to request that we transfer this personal data to another data controller. The right to data portability applies to personal data processed in an automated manner, based on your consent or a contract to which you are a party.

Correction of Incorrect Data. You have the right to request that we correct inaccurate or incomplete information about yourself.

Deletion of Certain Data. You have the right to request that we delete your personal data under certain conditions, such as if the data is no longer necessary for the purpose for which we collected it.

Right to Object to Our Processing of Personal Data. You have the right, under certain circumstances, to object to our processing of your personal data.

Right to Restrict Processing of Your Personal Data. You have the right to request a restriction on our processing of your personal data in certain cases. For example, if you dispute the accuracy of your personal data, you can request a restriction on the processing while we verify whether the personal data is correct.

Complaints. If you have complaints regarding our processing of your personal data, you have the right to file such a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten).

If you wish to make a request for access, data portability, correction, deletion, objection, or restriction, please contact us.

IS IT MANDATORY TO PROVIDE PERSONAL DATA?

Certain personal data must be provided in order for you to access certain services, such as when you purchase a product online or use our services. In such cases, providing personal data is necessary for us to fulfill our contractual obligation to you in accordance with the applicable terms and conditions.

CHILDREN'S PERSONAL DATA

We do not wish to collect personal information from anyone under the age of sixteen (16). Therefore, you are asked not to register for newsletters, become a member, or otherwise contact us if you are under 16 years old.

COOKIES

As previously mentioned, we use cookies on our Website. Please refer to our separate policy on the placement of cookies, which you can find on our Websites.

CHANGES TO THE POLICY

We may need to update our privacy policy. The latest version of the privacy policy is always available on our website. We will inform you of any significant changes to the privacy policy, such as changes to the purpose of the use of your personal data, changes to contact information, or your rights.