Bagheera’s Privacy Policy

Bagheera values ​​your personal privacy and wants you to feel secure when you provide us with your personal information. We therefore strive for a high level of data protection, to always protect your personal information in the best possible way, and to comply with all applicable laws and regulations for personal data protection at all times.

This privacy policy explains how Bagheera collects, uses and stores your personal data. It also describes your rights towards us and how you can correct, delete or supplement your data.

You are always welcome to contact us with any questions.

1. What is personal data?

All types of information that can be directly or indirectly attributed to a living natural person are considered personal data under the Personal Data Act. Images (photos) and sound recordings of individuals processed on a computer can also be personal data even if no names are mentioned. Encrypted data and various types of electronic identities, such as IP numbers, are considered personal data if they can be linked to natural persons.

2. Data controller

Bagheera AB (“Bagheera”, “We”) is the data controller of the personal data you send to us and is responsible for your personal data in accordance with applicable data protection regulations.

Bagheera AB
Industrial Street 8
774 35 Avesta
Sweden

Corporate registration number: 556241-5611

3. What personal data do we collect?

When you visit Bagheeras’ website, purchase our products, contact us about a matter, register/log in to a customer account or participate in competitions and/or events, we collect your personal data such as full name, address, email address, telephone number, IP address, purchase, order, usage history and other matter-related information (e.g. information you provide when contacting our customer service).

4. Why does Bagheera process your personal data?

When you have provided your personal data to us at Bagheera, we will use the data for the purposes and on the legal basis set out below:

Purpose	Legal basis	Categories of personal data	Storage period
To be able to handle orders/purchases	Completion of purchase agreements (terms of sale).	· Name · Contact details (address, email and phone number) · IP address, device information, log information · Geographic information	Two years after you were last active at Bagheera, for example by shopping with us or contacting our customer service.
To be able to fulfill the company’s legal obligations	Legal obligation, such as the Accounting Act, the Money Laundering Act or the rules on product liability and product safety which may require communication and information regarding product alerts or product recalls.	· Name · Contact information (address, email and telephone number) · Payment information · Your correspondence · Information about time of purchase, place of purchase, any complaints about errors · User details for my pages (members only)	As long as we are required to store the data in accordance with applicable law or authority decisions.
To be able to handle customer service issues	Legitimate interest.	· Name · Contact information (e.g. address, email and telephone number) · Your correspondence · Information about the time of purchase, place of purchase, any errors/complaints · User details for My Pages (only for registered customers)	Until the customer service case is closed.
To be able to implement and manage participation in competitions and/or events.	Legitimate interest	· Name · Contact information (e.g. address, email and telephone number) · Information provided in competition entries	During the time the competition/event is running.
To be able to evaluate, develop and improve our services, products and systems	Legitimate interest	Age · Gender · Geographic information · Technical data and settings from devices (e.g. IP address, operating system, screen resolution, browser settings) · Interaction information (e.g. how long different pages were visited, response times)	From the country of collection and for 36 months onwards.
To be able to administer your membership and to be able to create My Pages.	Fulfillment of contracts	· Name · Contact information (e.g. address, email and telephone number) · Purchase history · Username and password.	Until membership is terminated (can be done manually or automatically due to inactivity for a period of 24 months).

5. Who do we share personal data with?

We may disclose your information to third parties, such as partners, card and communication service providers and logistics providers.

Third parties to whom Bagheera discloses information or otherwise provides information about a customer or Account Holder may only use the information for the purpose of selling and marketing the services and products of Bagheera and Bagheera’s partners and group companies or for the purpose of delivering services related to Bagheera’s agreement with you as a customer or Account Holder.

Personal data may also be disclosed by Bagheera if it is necessary to comply with applicable legal requirements or requirements from authorities, to safeguard Bagheera’s legal interests or to detect, prevent or alert to fraud and other security or technical problems.

Recipient of data where the recipient is a data processor

Where necessary for us to be able to offer our services, we share your personal data with companies that are so-called data processors for us. A data processor is a company that processes the information on our behalf and according to our instructions. This applies, for example, to companies that provide payment services, IT services and companies that help us with mailings.

Recipient of data where the recipient is an independent data controller

We also share your personal data with certain companies that are independent data controllers. The fact that the company is an independent data controller means that we do not control how the information provided to the company is processed. When your personal data is shared with a company that is an independent data controller, the company’s privacy policy and personal data handling policy apply. Independent data controllers with whom we share your personal data are:

1) Government authorities (the police, tax authorities or other authorities) if we are required to do so by law or in the event of suspicion of a crime.

2) Companies that provide general goods transport (logistics companies and freight forwarders).

Forwarders will receive the personal data required to fulfill and deliver an order in accordance with the fulfillment of the purchase agreement.

The freight forwarder in this case is:

Postnord terms and conditions

6. Where do we process your personal data?

We always strive for your personal data to be processed within the EU/EEA and all of our own IT systems are located within the EU/EEA.

Bagheera may transfer your personal data to a country outside the EU/EEA, if any of Bagheera’s suppliers or partners are located there. If personal data is transferred to a country outside the EU/EEA, Bagheera will take all reasonable steps to ensure that the personal data continues to be protected and will also take the steps necessary to legally transfer personal data to countries outside the EU/EEA. Examples of appropriate measures are approved codes of conduct in the recipient country, standard contractual clauses, binding corporate rules or Privacy Shield. If you would like a copy of the measures taken or information on where these are made available, you are welcome to contact us.

7. How long do we store personal data?

We never store your personal data longer than is necessary for the respective purpose.
See more about the specific storage periods under each purpose (section 4).

8. What rights do you have?

Right to access your data . You can request a copy of the information you would like to know and verify the information we hold about you. Please note that if we receive a request for access, we may ask for more information to ensure that the information is provided to the right person.

Right to rectification. You have the right to request correction of incorrect or supplement any incomplete information.

Right to erasure. You have the right to request the deletion of your personal data in cases where the data is no longer necessary for the purpose for which it was collected. Please note that we have the right to refuse your request if there are legal obligations that prevent us from immediately deleting certain personal data. These obligations come from accounting and tax legislation, banking and money laundering legislation but also from consumer law. We will then terminate the processing that is carried out for purposes other than complying with the legislation.

Right to restriction of processing. This means that your personal data is marked so that it may only be processed for certain limited purposes. For example, you can request restriction when you believe that your data is incorrect and you have requested correction. While we are investigating whether the data is correct, the processing of it will be restricted.

Right to object to certain types of processing. You have the right to avoid direct marketing and to object to all processing of personal data based on a balancing of interests.

9. How is your personal data protected?

At Bagheera we use IT systems to protect personal data against unlawful or unauthorized access to the information. At Bagheera, only the information that is needed is handled and only by the people who need it, in order to provide the best service to our customers.

10. Cookies

When you visit our website we use cookies, you can find more information about how we process cookies in our cookie policy .

11. Complaints and supervisory authority

If you believe that we have handled your personal data incorrectly, you can always contact us at Bagheera. The Swedish Data Protection Authority is responsible for supervision under data protection legislation and anyone who believes that there has been incorrect handling of personal data can file a complaint with the Swedish Data Protection Authority .

12. How do you contact us most easily?

Our goal is to always provide you with simple and accurate information about how we use your personal data. If you have any questions about how we use your personal data, please contact our customer service via our contact form which you can find on our website. You can also call us at: 0226-58500.

We may make changes to our privacy policy. The latest version of the privacy policy is always available on our website.

Last modified 2018-05-23