Data protection policy

Data protection and privacy at Plums AB

GDPR, or the General Data Protection Regulation, is a law that applies throughout the EU from May 25, 2018. The purpose of the law is to give us all greater control over how personal data is handled and to increase the security of how our personal data is processed. Personal data is defined as all information that can be directly or indirectly linked to an individual. In addition to personal data numbers, other information such as address, telephone number or email address can also be considered personal data.

When you use our services, you accept our data protection policy and our processing of your personal data. This information aims to explain how Plums AB collects and uses your personal data. It also describes your rights towards us and how you can assert your rights. If you have any questions about our processing of personal data, you are welcome to contact us with your questions or concerns.

Plums AB, Corporate ID No. 556888-7938, Lilla Bommens torg 2, 411 04 is the data controller for the processing of your personal data.

What personal data is collected and for what purpose?

Information that you provide to us . You may directly or indirectly provide us with information about yourself in a number of different ways, for example when you place an order, register for newsletters, contact us, when you use "My Pages" or any of our other services where you provide personal information. This may include:

• Personal and contact information - name, date of birth, social security number, billing and delivery address, email address, mobile phone number, etc.

Information we collect about you . When you use our services (such as when you place an order or use “My Pages”), we may collect the following information:

• Personal and contact information - name, date of birth, social security number, billing and delivery address, email address, mobile phone number, etc.
• Information about goods/services - details regarding the goods/services you have purchased.
• Historical information - your purchase history.
• Information about how you interact with Plums AB - how you use our services, including page response times, download errors, how you reached and left the service, as well as delivery notifications when we contact you.
• Device information - e.g. IP address, language settings, browser settings, time zone, operating system, platform and screen resolution.

The information you provide to us, as well as information about the goods/services, is generally necessary to enter into a contractual relationship with us, while the other information we collect is generally necessary for other purposes, as described below.

Purpose	Purpose	Legal basis
Purchase/order	So that we can fulfill our commitment to purchase or order.	Agreement with the data subject.
Customer service	So that we can receive and handle matters via telephone, post or email, as well as social media.	Agreement with the data subject and other legitimate interests.
Comply with the legislation	To comply with applicable legislation, such as anti-money laundering laws, accounting laws and capital adequacy requirements.	Legal obligation
Personalized experience	To customize the website and offer you the best possible experience.	Balancing interests, legitimate interest
Marketing	To display our products and offers both on our site and through partners.	Balancing interests
Newsletter	To send out information and customer offers.	Consent

Who may we share your information with?

We may transfer to, or share your information with, selected third parties, as set out below. We take all reasonable legal, technical and organisational measures to ensure that your data is handled securely and with an adequate level of protection when transferred to or shared with such selected third parties.

Logistics company
Logistics and transport companies that deliver your goods. These companies may only process your personal data in accordance with our express instructions and may not use your data for anything other than this.

Payment service company
To process payments through the site, we use various payment service providers. The payment service providers are data controllers for their own processing of your personal data, and have separate terms and conditions that apply to them.

Authorities

If required by law, we may transfer your personal data to other recipients, such as the Police or the Swedish Tax Agency.

Outside the EU/EEA

We may transfer your personal data to a country outside the EU/EEA, if any of our suppliers or partners are located there. If personal data is transferred to a country outside the EU/EEA, we will take steps to ensure that the personal data continues to be protected.

Recipient upon disposal

If all or part of our business is sold or integrated with another business, your personal data may be disclosed to our advisors, any buyer and their advisors and passed on to the new owner of the business.

What we NOT will do with your data. We will not sell your personal information to third parties unless we have your permission to do so.

How long do we store your personal data?

We store your data for as long as you are a customer and then for 36 months for analysis and communication and for as long as required by statutory retention periods. When we store your data for purposes other than our contractual obligations, e.g. to meet accounting and regulatory requirements, we only store the data for as long as is necessary and/or required by law for the respective purpose.