PRIVACY POLICY - WEBSITE
1. Introduction
- We respect and safeguard your personal integrity. It is important to us that you feel comfortable with how we process your personal data, and we therefore ask you to read through this Policy, which we may update from time to time. If we make changes to the Policy, the new version will apply from the time it is published on our Website. At the top of the page, you can see when the Policy was last changed.
2. The scope of this Policy
- This Policy covers our processing of personal data in connection with Website visits and other interactions you make with us through our Website, e.g., customer support through email or by phone, job applications through our Website and re-posting of social media posts for display on our Website. If you contact us via the web form on the Website to set-up of your company-unique Web shop through our platform services, we will process your personal data in accordance with the Privacy Policy for the Online Shop. If you subscribe for our newsletter via the web form on the Website, we will process your personal data in accordance with the Privacy Notice for Newsletter and other types of direct marketing communications, which you can find at https://www.blaklader.se/sv/policies.
- This Policy includes information on, e.g., for what purposes we process your personal data, with which parties we share your personal data as well as information on your rights as a data subject.
- If you want to read more about how we manage cookies on our Website, please read our Cookie Policy Cookie Policy - Blåkläder (blaklader.uk).
3. How we collect your personal data
The personal data we process relating to you is collected directly from you or from your social media account through the hashtag function or the tagging function on the social media platform.
- We only process your personal data to the extent permitted in accordance with applicable data protection legislation. This means inter alia that we need to have a legal basis for the purposes for our processing your personal data, which in our context generally means one of the following legal bases.
- Performance of a contract – the processing is necessary in order for us to provide you with our services or otherwise perform a contract between us (this applies if you conduct your business in a sole proprietorship), or to take steps at your request prior to entering into a contract.
- If you are acting on behalf of someone else, e.g. in the capacity of representative of a company (which usually is the case), our processing is carried out with reference to our legitimate interest balanced against your interests or fundamental rights or freedoms, where our legitimate interest is to conclude and perform the contract with the company you represent.
- Performance of legal obligations – the processing is necessary in order to fulfil our legal obligations according to law or other statutes that we are subject to, or if we are subject to orders or decisions by courts or authorities, which require us to process your personal data.
- Legitimate interests – the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, provided that they are not overridden by your interests or fundamental rights or freedoms (in which case the processing would not be allowed).
- Consent – the processing is carried out with your prior consent, where we inter alia are responsible for clearly informing you of what processing you consent to and your right to withdraw your consent in relation to our continued processing.
- Below, we explain more about the categories of personal data we process, for what purposes we process them and what legal bases we rely on when processing your personal data, including for how long we store your personal data.
4.1 To maintain and improve the functionality of our Website
What we do and why: | The personal data that we process: |
We collect statistical data as well as other technical information generated when visiting our Website, to analyse the web traffic on our Website and maintain as well as improve the Website’s functionality, the user experience, and in order to discover and handle errors, breaches and incidents. We use third party analytic services to produce statistics and carry out analysis which are based on aggregated data and other de-identified or anonymized data. Individuals can, however, be identified by combining the personal data processed with online identifiers. If you are logged into your account on the Website, the information generated by the use of third-party analytical services will be connected to your personal data and our analysis will in those cases no longer be based solely on de-identified or anonymized data. | - IP-address. - Other technical information which is identified upon visiting our Website and derived from online identifiers, such as what type of device is used, web browser used, history of visited sites including the time entry (information from used web browser, time zone of the place from which you visited our Website and other information on web traffic). - Information about how you use the Website, such as your clicks and downloads, how long you stay on the page and what pages of the Website you visit. |
Our legal basis for processing: | |
Legitimate interest, wherein our legitimate interest is to gather information in order to maintain and improve the functionality, content, and security on our Website. Consent, we collect and process your personal data through use of cookies or other similar technologies on the basis of your consent, except such use which is strictly necessary to the foundational functions of our Website. You may withdraw your consent anytime. For more information on how we use cookies and other similar technologies, please see our Cookie Policy Cookie Policy - Blåkläder (blaklader.se). | |
How we share and transfer your data: | |
We will share your personal data with: Suppliers of IT-services. We use third party suppliers in order to manage parts of our business. We may share personal data with these suppliers in connection to them providing services to us. Whenever using suppliers, we establish data processor agreements as well as take adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy. Companies within our corporate group. We may share your personal data with companies within our corporate group. If we share your personal data with companies within our corporate group, we will make sure that your personal data are being processed in a way that conforms to this Privacy Policy. Providers of analytic tools and advertising services, as further specified below and in our Cookie Policy Cookie Policy - Blåkläder (blaklader.uk). Strategic business partners. We may share your personal data with other strategic business partners that help us optimise and develop advertising campaigns, designs, and strategy, such as media, branding and advertising agencies that we collaborate with. We will use the third-party services described below to perform analytics activities concerning the use of our Website: We use Google Analytics. You can find information on how Google process your personal data in Google’s privacy policies, which you find here: “How Google uses information from sites or apps that use our services”: https://policies.google.com/privacy. We use Microsoft Clarity. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement available at: https://privacy.microsoft.com/sv-se/privacystatement. We use Meta on our Website. Meta uses cookies and other storage technologies to collect or receive information from our Website and use this information to provide measurement services and target and deliver advertisements. You can opt-out of the collection and use of information for ad targeting through our opt-out procedure through our consent banner. Visit the Meta Privacy Center at https://www.facebook.com/privacy/center for more information. We may transfer your personal data to a country outside the European Union (“EU”)/European Economic Area (“EEA”) within the scope of this processing activity. When we share personal data with Google, Microsoft and Meta, it is possible that personal data will be transferred to the USA. | |
How long we keep your data: | |
We keep personal data on how visitors interact with our Website for a period of maximum fourteen (14) months. You may always withdraw your consent by contacting us. Personal data collected to perform analytics activities will in most cases be transformed into aggregated data (thus anonymized) before the expiration of that period of time, in connection to us creating statistics. |
4.2 Analysis of Website visitor traffic for marketing purposes through use of third-party tools
What we do and why: | The personal data that we process: |
We will process your personal data generated when visiting our Website for marketing purposes, and to be able to provide you with information of our products when we believe our products or services may be of interest to you. We use third party analytic services to produce statistics and carry out analysis which are based on aggregated data and other de-identified or anonymized data. Individuals can, however, be identified by combining the personal data processed with online identifiers. If you are logged into your account on the Website, the information generated by the use of third party analytical services will be connected to your personal data and our analysis will in those cases no longer be based solely on de-identified or anonymized data. | - IP-address. - Other technical information which is identified upon visiting our Website and derived from online identifiers, such as what type of device is used, web browser used, history of visited sites including the time entry (information from used web browser, time zone of the place from which you visited our Website and other information on web traffic). - Information about how you use the Website, such as your clicks and downloads, how long you stay on the page and what pages of the Website you visit. |
Our legal basis for processing: | |
Legitimate interest, wherein our legitimate interest is to be able to market relevant products to our Website visitors, who are potential customers, and offer a more customer-oriented experience on our Website. Consent, we collect and process your personal data through use of cookies or other similar technologies on the basis of your consent. You may withdraw your consent anytime. For more information on how we use cookies and other similar technologies, please see our Cookie Policy Cookie Policy - Blåkläder (blaklader.se). | |
How we share and transfer your data: | |
We will share your personal data with: Suppliers of IT-services. We use third party suppliers in order to manage parts of our business. We may share personal data with these suppliers in connection to them providing services to us. Whenever using suppliers, we establish data processor agreements as well as take adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy. Companies within our corporate group. We may share your personal data with companies within our corporate group. If we share your personal data with companies within our corporate group, we will make sure that your personal data are being processed in a way that conforms to this Privacy Policy.Providers of analytic tools and advertising services, as further specified below and in our Cookie Policy Cookie Policy - Blåkläder (blaklader.se).Strategic business partners. We may share your personal data with other strategic business partners that help us optimise and develop advertising campaigns, designs, and strategy, such as media, branding and advertising agencies that we collaborate with. We will use the third-party services described below to perform analytics activities concerning the use of our Website for marketing purposes: We use Google Analytics and Google Analytics Advertising Features (Google Signals). We link data collected from Google Analytics to Google Signals in order to target advertisements. You can opt-out of the collection and use of information for ad targeting by our opt-out procedure through our consent banner. You can find information on how Google process your personal data in Google’s privacy policies, which you find here: “How Google uses information from sites or apps that use our services”: https://policies.google.com/privacy. We use Tiktok Business Products on our Website to collect information about how users use our Website. The information that is collected is used to provide measurement services and/or to target ads. You can opt-out of the collection and use of information for ad targeting by our opt-out procedure through our consent banner. For more information about how Tiktok collects and uses your data, visit the Tiktok Privacy Policy at https://www.tiktok.com/legal/page/row/privacy-policy/en.We use Meta on our Website. Meta uses cookies and other storage technologies to collect or receive information from our Website and use this information to provide measurement services and target and deliver advertisements. You can opt-out of the collection and use of information for ad targeting through our opt-out procedure through our consent banner. Visit the Meta Privacy Center at https://www.facebook.com/privacy/center for more information. We use Criteo on our Website. Criteo may use cookies and other storage technologies to collect or receive information from our Website. You can opt-out of the collection and use of information for ad targeting by our opt-out procedure through our consent banner. Visit the Criteo Privacy Policy at https://www.criteo.com/privacy/ to know more about their services. We may transfer your personal data to a country outside the EU/EEA within the scope of this processing activity. When we share personal data with Google, Tiktok, Meta and Criteo, it is possible that personal data will be transferred to e.g., the USA. | |
How long we keep your data: | |
We keep personal data on how visitors interact with our Website for a period of maximum fourteen (14) months. You may always withdraw your consent by contacting us. Personal data collected to perform analytics activities will in most cases be transformed into aggregated data (thus anonymized) before the expiration of that period of time, in connection to us creating statistics. |
4.3 When you contact our customer service
What we do and why: | The personal data that we process: |
If you contact our customer service by e-mail or phone, we will process your personal data to respond to your queries and handle your request. We will document our communication and retain your personal data to enable further communication with you regarding your request. | - First and last name. - E-mail address (if contact is made through email). - Phone number (if contact is made through phone) - The company and organization you represent, if you contact us as such representative. - Customer-ID (if applicable). - Information about your matter. - Order references (if applicable) and related information that is relevant for your request. |
Our legal basis for processing: | |
Legitimate interest, where our legitimate interest is to be able to respond and handle such requests for customer support which we receive through our Website. Performance of contract, where we process your personal data as necessary to fulfil our contract with you, if applicable. | |
How we share and transfer your data: | |
We will share your personal data with: Suppliers of IT-services. We use third party suppliers in order to manage parts of our business. We may share personal data with these suppliers in connection to them providing services to us. Whenever using suppliers, we establish data processor agreements as well as take adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy. We will not transfer your personal data to a country outside EU/EEA within the scope of this processing activity. | |
How long we keep your data: | |
We retain your personal data as long as necessary for us to assess how the matter should be handled/forwarded within our organisation in order to respond to your question, and thereafter until your question has been answered. When we process your personal data to fulfil our contract with you, we process your data for the duration of the contract. |
4.4 When you use our service Blåkläder Matchmaker
What we do and why: | The personal data that we process: |
When you use our service “Blåkläder Matchmaker” available on our Website we process your personal data to create and provide you with personalised content and recommend appropriate products via our Website, via e-mail and text message, based on your personal preferences. | - First and last name. - E-mail address (if you have provided us with it). - Customer-ID (if applicable). - Information about your preferences. |
Our legal basis for processing: | |
Legitimate interest, where our legitimate interest is to be able to provide our service of creating personalised content and providing recommended products based on your preferences. Our legitimate interest is also to be able to market relevant products to you. | |
How we share and transfer your data: | |
We will share your personal data with: Suppliers of IT-services. We use third party suppliers in order to manage parts of our business. We may share personal data with these suppliers in connection to them providing services to us. Whenever using suppliers, we establish data processor agreements as well as take adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy. Companies within our corporate group. We may share your personal data with companies within our corporate group. If we share your personal data with companies within our corporate group, we will make sure that your personal data are being processed in a way that conforms to this Policy. For the purpose of this processing activity, we may transfer your personal data to a country outside the EU/EEA when sharing information about the Website form within our corporate group (such as to the USA). | |
How long we keep your data: | |
We keep your personal data as a user of Blåkläder Matchmaker and your preferences necessary for customised marketing for a period of maximum twenty-four (24) months, calculated from the time your personal data was collected though our Website form or since our last interaction regarding your request. You can opt-out of receiving direct marketing at any time. A procedure for opt-out is included in every type of direct marketing communication. |
4.5 When you use any of our Website forms
What we do and why: | The personal data that we process: |
When you use any of our forms available on our Website, we process your personal data to respond to communications sent by you via the form. This includes communication via e-mail about your question or matter, our business and ongoing activities. | - First and last name. - E-mail address (if you have provided us with it). - Phone number (if you have provided us with it). - Information that you otherwise provide us with in connection with us communicating with you, for example in the message you provide in our contact form. |
Our legal basis for processing: | |
Legitimate interest, where our legitimate interest is to be able to communicate with you and respond to the messages you send to us when using any of our Website forms. | |
How we share and transfer your data: | |
We will share your personal data with: Suppliers of IT-services. We use third party suppliers in order to manage parts of our business. We may share personal data with these suppliers in connection to them providing services to us. Whenever using suppliers, we establish data processor agreements as well as take adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy. Companies within our corporate group. We may share your personal data with companies within our corporate group. If we share your personal data with companies within our corporate group, we will make sure that your personal data are being processed in a way that conforms to this Policy. For the purpose of this processing activity, we may transfer your personal data to a country outside the EU/EEA when sharing information about the Website form within our corporate group (such as to the USA). | |
How long we keep your data: | |
We will keep your personal data for a maximum of twenty-four (24) months, calculated from the time your personal data was collected though our Website form or since our last interaction regarding your request. If you have registered for our newsletter through our Website form, we will keep your personal data for as long as you are an active subscriber. You can unsubscribe/opt-out from receiving our newsletter or other types of direct marketing communications at any time. A procedure for opt-out is included in every newsletter or other type of direct marketing communication. |
4.6 When you apply for a job at Blåkläder through our Website
What we do and why: | The personal data that we process: |
We will collect the personal data you provide to us through the Website, and use it during the recruitment process to enable us to evaluate your application. If we decide to call you to an interview, we will process your personal data to be able to carry through the interview and keep notes from the interview. We will assess the compatibility of your application and personal profile as a candidate for our job offering, and contact your stated references for reference taking. We will retain your personal data in order to contact you regarding your application and/or for other recruitment purposes. | First and last name (including prefix or title). Age or date of birth. Address. Telephone number. Email address. Your qualifications. Your education. Your areas of expertise. Place of practice. Interview notes.Your references.Results on recruitment tests.CV/resume.Photo.Academic information.Interests.Other information that you may choose to provide us with in connection with your application. |
Our legal basis for processing: | |
Legitimate interest, where our legitimate interest is to make it possible for us to evaluate your qualifications and personal qualities in connection with decisions on recruitment. Legal obligation, for fulfilment of a legal obligation to document information about education, professional experience and other qualifications for the persons employed to meet the legal requirements in Chapter 2 Section 4 of the Swedish Discrimination Act (sw. diskrimineringslagen). | |
How we share and transfer your data: | |
We will share your personal data with: Suppliers of IT-services. We use third party suppliers in order to manage parts of our business. We may share personal data with these suppliers in connection to them providing services to us. Whenever using suppliers, we establish data processor agreements as well as take adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy. Companies within our corporate group. If relevant to your application, we may share personal data with companies within our corporate group. If so, will make sure that your personal data are being processed in a way that conforms to this Policy.Suppliers of recruiting systems. We use third party suppliers in our recruitment process. We may share personal data with these suppliers in connection to them providing services to us. Whenever using suppliers, we establish data processor agreements as well as take adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy. For the purpose of this processing activity, our suppliers of IT-services and recruiting systems may transfer your personal data to a country outside the EU/ EEA, as they are established or have their headquarters outside of the EU/EEA. The countries outside the EU/EEA to which your personal data may be transferred is: USA. For the purpose of this processing activity, we may transfer your personal data to a country outside the EU/EEA when sharing information about your application within our corporate group (such as to the USA). | |
How long we keep your data: | |
We will keep your personal data until the recruitment process is over (until the candidate is either selected or rejected), and thereafter for twenty-four (24) months, provided that the candidate has given their consent to being kept in our systems for future jobs. |
4.7 When we re-post social media posts relating to Blåkläder’s products
What we do and why: | The personal data that we process: |
We process your personal data for advertising purposes when we strive to inspire our customers and show our products in use by using customer created content in social media. By using our hashtag, #Blaklader, or tag our social media accounts, for example @blaklader, in your social media posts we may process your images, profiles and captions within our marketing activities. This means that we may publish content on our social media channels and/or publish user generated content at our Website. | Images.Your social media profile alias.Your social media caption on the picture in question. |
Our legal basis for processing: | |
Legitimate interest, where our legitimate interest is to provide information regarding and market our products and services. Consent, the processing is carried out with your prior consent, both when we work with customer created content in social media and when we process images to publish user generated content at our Website. We are inter alia responsible for clearly informing you of what processing you consent to and your right to withdraw your consent in relation to our continued processing. Performance of a contract, where we process your personal data as a social media content creator in collaboration with Blåkläder, to fulfil our contract with you. | |
How we share and transfer your data: | |
Your personal data is made public on our Website. We will share your personal data with: Our platform application providers. We use providers to deliver your on-site experience on our Website and integrate your social media content with our Website. We may share personal data with these providers in connection to them providing services to us. Whenever using providers, we establish data processor agreements as well as take adequate measures in order to make sure that your personal data is processed in a way that conforms with this Policy.Providers of analytic tools and advertising services, as further specified below and in our Cookie Policy Cookie Policy - Blåkläder (blaklader.se) We will use the third-party services described below in our use of social media and to create social media content: We use Meta Products, including its social media platforms. You can find information on how Meta process your personal data in Meta’s privacy policies, which you find here: https://www.facebook.com/privacy/policy/. We will transfer your personal data to a country outside the EU/EEA within the scope of this processing activity. When we share personal data with Meta it is possible that personal data will be transferred to the USA. | |
How long we keep your data: | |
We will keep your content on our social media accounts for as long as we have your consent or your agreement with us is expired or until you delete your own social media posts (if applicable). However, if we choose not to use the content, we will process your personal data for a maximum period of forty-four (44) days. You may always withdraw your consent by contacting us. |
5. Security measures
We have taken measures to ensure that your personal data is handled in a safe way. For example, access to systems where personal data is stored is limited to our employees and service providers who require it in the course of their duties. Such parties are informed of the importance of maintaining security and confidentiality in relation to the personal data we process. We maintain appropriate safeguards and security standards to protect your personal data against unauthorized access, disclosure or misuse. We also monitor our systems to discover vulnerabilities.
6. Where we process your personal data
We strive to always process your personal data within the EU or EEA. However, if we transfer your personal data, in accordance with what is stipulated in the tables above, to service providers who, either themselves or by their sub-contractors, are located or have business activities in a country outside the EU or EEA. In such cases, we are responsible for ensuring that the transfer is made in accordance with applicable data protection legislation before it occurs, e.g. by ensuring that the country in which the recipient is located ensures an adequate level of data protection according to the European Commission, or by ensuring appropriate safeguards based on the use of standard contractual clauses that the European Commission has adopted and other appropriate measures to safeguard your rights and freedoms.
You may access a list of the countries that the European Commission has decided provide an adequate level of data protection at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
You may access the European Commission’s standard contractual clauses at https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32021D0914.
You are welcome to contact us for more information about the transfers of your personal data outside the EU/EEA.
7. Your rights
You have rights in relation to us and our processing of your personal data. Below, you will find information about your rights and how you can exercise them.
Please note that your rights apply to the extent that follows from applicable data protection legislation and that there may be exceptions to the rights where applicable. We also ask you to note that we may need more information from you in order to e.g. confirm your identity before proceeding with your request to exercise your rights.
To exercise your rights or request information about them we ask that you contact us, which is most easily done via email: gdpr@blaklader.com.
7.1 Right of access
You have the right to obtain a confirmation as to whether we process your personal data. If that is the case, you also have the right to receive copies of the personal data concerning you that we process as well as additional information about the processing, such as for what purposes the processing occurs, relevant categories of personal data and the recipients of such personal data.
7.2 Right to rectification
You have the right to, without undue delay, have incorrect personal data about you rectified. You may also have the right to have incomplete personal data completed.
7.3 Right to erasure
You have the right to obtain that we erase your personal data without undue delay in the following circumstances:
- The personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- Our processing is based on your consent and you withdraw your consent to the relevant processing;
- You object to processing that we carry out based on a legitimate interest, and your objection overrides our or another party’s legitimate interest of the processing;
- The processed personal data is unlawfully processed;
- The processed personal data has to be erased for our compliance with one or more legal obligations.
7.4 Right to restriction
You have the right to request that we restrict the processing of your personal data in the following circumstances:
- You contest the accuracy of the personal data during a period enabling us to verify the accuracy of such data;
- The processing is unlawful and you oppose erasure of the personal data and request restriction instead;
- The personal data is no longer needed for the purposes of the processing, but is necessary to you for the establishment, exercise or defense of legal claims;
- You have objected to the processing of the personal data which we carry out based on a legitimate interest, pending the verification whether your objection overrides our or another party’s legitimate interest to continue with the processing.
7.5 Right to object
You have a right to object to our processing of your personal data when it is based on our or another party’s legitimate interest. If you object, we must demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms in order to be allowed to continue with our processing.
7.6 Right to data portability
If our processing of your personal data is based on the performance of a contract with you or your consent, you have the right to receive the personal data you have provided us relating to you in an electronic format. You also have the right to have the personal data transferred from us directly to another data controller, where technically feasible.
We ask you to observe that this right to so called data portability does not cover personal data which we process manually.
7.7 Right to withdraw consent
If our processing of your personal data is based on your consent, you always have the right to withdraw your consent at any time. A withdrawal of your consent does not affect the lawfulness of the processing that took place based on the consent before your withdrawal.
8. Complaints with the supervisory authority
In Sweden, the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten) is the authority responsible for supervising the application of current data protection legislation. If you believe that we process your personal data in a wrongful manner, we encourage you to contact us so that we can review your concerns. However, you may file a complaint with the Swedish Authority for Privacy Protection at any time.
__________