Privacy policy Rabalder

Your privacy is important to us at Rabalder. Our policy for processing personal data describes, among other things, what information we collect, for what purpose they are collected, in what way you can have control over your own information and how you can contact us. We only collect the data needed to carry out our mission towards you as a customer. You can ask for information about you reported or deleted at any time.

Responsible for personal data
Rabalder AB is responsible for the processing of personal data at Rabalder. The data controller is responsible for ensuring that Rabalder's processing takes place in accordance with current legislation.

Rabalder AB

Box 53203
SE-400 16 GÖTEBORG
Sweden
Phone: + 46 322 66 94 90
Email: kundtjanst@rabalder.se
VAT no: SE556716255601

What personal information is collected about you as a customer and why?
The following text describes the purposes for which we process personal data, which categories of personal data are processed and on what legal basis the processing is performed for you as our customer.

1. To be able to handle orders and purchases

Personal data is processed to:

• Deliver an ordered / purchased product or service (including delivery notification or contacts regarding delivery).
• Be able to do an identification and age check on you as a customer.
• Manage payments (including to analyze which payment solutions are to be offered).
• Verification of address against external sources, such as SwedBank Pay.
• Manage returns, exchange, complaint and warranty issues.

The categories of personal data processed are:

• Name.
• Contact details (e.g. home address, e-mail, telephone number).
• Payment information (e.g. card number, transaction time and card holder).
• Personal ID number (e.g. Social Security number).
• Customer number.
• Payment history.
• Order information, e.g. which item has been ordered.

Legal basis: The purchase agreement with the customer.
Storage period: Until the purchase has been completed (including delivery and payment) and for a period of 3 years thereafter in order to be able to handle any complaints and warranty cases.

2. To be able to market products and services

Personal data is processed to:

• View relevant product recommendations, reminiscent of forgotten / abandoned digital shopping baskets or similar actions.
• Send direct marketing via e-mail, text messages, social media or other similar electronic channels for communication as well as by regular mail, including offers from partners to existing customers even outside the Rabalder Customer Club.
• Carry out campaigns or send event invitations and invitations to: all customers, a specific customer segment (e.g., residents within a certain zip code area) or an individual customer.

The categories of personal data processed are:

• Name.
• Contact details (e.g. home address, e-mail, telephone number).
• Age.
• Residence.
• Information on how the customer uses the company's website, and other digital channels.
• Information on completed purchases.
• User-generated data, e.g. how web pages and other digital channels are used (such as which pages and sections of pages are visited and what searches have been made).

In order to understand what type of marketing or direct marketing to use, analyzes are conducted on:

• How web pages at Rabalder and other digital channels are used (e.g. which pages and sections of pages are visited and what searches have been made).
• Purchase history.
• Age and place of residence.
• Results from customer satisfaction or market surveys.

Legal basis: A legitimate interest in being able to market our products and services.
Storage period: No later than 3 years from your most recent activity (e.g. when you last made a purchase). We will only send out marketing if you have registered for our mailings. You may at any time unsubscribe from our direct marketing lists by contacting us.

Are you a member of our customer club? Then the information in paragraphs 6-8 applies instead.

3. To be able to conduct and manage participation in competitions and events

Personal data is processed to:

• Communicate with participants participating in a competition organized by Rabalder.
• Communicate with participants before and after an event (e.g. confirmation of notifications, questions or evaluations).
• Identify the participant and check the participant's age.
• Appoint winners and mediate winnings.

The categories of personal data processed are:

• Name.
• Personal ID number (e.g. Social Security number).
• Contact details (e.g. home address, e-mail, telephone number).
• Information submitted in competition entries.
• Information provided in event evaluations.

Legal basis: Justified interest. The treatment is necessary to be able to look after your and our interest in the conduct of the competition or event.
Storage period: Not later than 3 months after the competition / event (including any evaluation). Please note that contest entries that you submit may be saved for an unlimited period of time according to specified competition terms. We can also save your evaluation of the competition for a longer period of time if we have ensured that we can no longer link the evaluation to you as a person (i.e. in these cases we anonymize / pseudonymize your information).

4. In order to handle booking and carry out our service "Personal Styling"

Personal data is processed to:

• Manage bookings, re-bookings and cancellations.
• Be able to send communication about the booking and remind you of the service.

The categories of personal data processed are:

• Name.
• Contact details (e.g. home address, e-mail, telephone number).
• Information you choose to submit that enables us to prepare and perform the service.

Legal basis: Compliance with the service agreement. The handling is necessary in order to fulfill our commitment to the customer.
Storage period: No later than 3 years from the completion of the service.

5. To be able to handle customer service matters

Personal data is processed to:

• Communicate with the customer and answer inquiries that come in to customer service via phone, mail or in digital channels (including social media).
• Be able to secure the customer's identity.
• Investigate complaints and support matters (including technical support).

The categories of personal data processed are:

• Name.
• Contact details (e.g. home address, e-mail, telephone number).
• Customer correspondence.
• Information on the time of purchase, place of purchase, the error / complaint on the product.
• Technical information about your equipment that is necessary for support matters.
• Personal ID number (e.g. Social Security number).

Legal basis: Justified interest. The handling is necessary to meet your and our interest in being able to handle customer service issues towards you as a customer.
Storage period: No later than 6 months after the end of the customer service case.

6. To be able to manage reward programs according to the conditions for membership in the Rabalder Customer Club

Personal data is processed to:

• Register and calculate rewards based on customer purchase.
• Manage reward payouts and transfer the rewards to reward checks.
• Send out reward status message to customer.

The categories of personal data processed are:

• Name.
• Customer number.
• Personal ID number (e.g. Social Security number).
• Contact details (e.g. home address, e-mail, telephone number).
• Purchase history.
• Specified customer choices regarding products and services.

Legal basis: Execution of the loyalty program membership agreement. The handling is necessary to fulfill our obligations towards the member under the loyalty program membership agreement.
Storage period: Until membership ends (at the request of a member or if you have not made a purchase for a period of 36 months).

7. To be able to provide benefits and offers to the member in accordance with the terms of membership of our loyalty program, Rabalder Customer Club

Personal data is processed to:

• Offer benefits, discounts, general and personal offers, invitations to events or gifts or other direct marketing.
• Perform analyzes of the data that the company collects for the same purpose, for example how the member uses the company's web pages and other digital channels (e.g. which pages and parts of pages the member visited and what searches the member made), purchase history, age, place of residence, stated preferences (e.g. about assortment) and other settings in the company's digital services and results from customer satisfaction or market surveys.

Based on analyzes, our members can be divided into different customer groups to give different groups (segments) different offers, benefits and discounts based on purchase history, preferences, age, place of residence, market research. In order to be able to submit personal offers, benefits and communication, the analysis is carried out at the individual level.

The categories of personal data processed are:

• Name.
• Customer number.
• Personal ID number (e.g. Social Security number).
• Contact details (e.g. home address, e-mail, telephone number).
• Purchase history.
• User-generated data, e.g. how web pages and other digital channels are used (such as which pages and sections of pages are visited and what searches have been made).
• Specified customer choices regarding products and services.
• Technical information about the computer, mobile phone and other devices you use and its settings, such as language setting.
• Location information from mobile devices, such as a mobile phone or tablet.

Legal basis: Compliance with the loyalty program membership agreement. The handling is necessary for us to fulfill our obligations under the loyalty program membership agreement.
Storage period: Until membership ends (at the request of a member or if you have not made a purchase for a period of 36 months).

8. To be able to deliver a personalized experience of Rabalder's services and offers

Personal data is processed to:

• Give the customer personalized content, for example, by showing relevant product recommendations or other similar measures aimed at simplifying for you.
• Simplify your use of the company's services, for example, by saving shopping lists or selected payment methods in order to facilitate future purchases or remind you of forgotten or abandoned digital shopping baskets.
• To be able to submit personal offers, benefits and communications. For this purpose, we carry out analyzes of the information we collect to be able to divide our members into different customer groups to give different customer groups different offers, benefits and discounts based on purchase history, preferences, age, place of residence, market research.

The categories of personal data processed are:

• Name.
• Age.
• Residence.
• Purchase history.
• User-generated data, e.g. how web pages and other digital channels are used (such as which pages and sections of pages are visited and what searches have been made).
• Specified customer choices regarding products and services.
• Technical information about computer, mobile phone and other devices used by the member and its settings, such as language setting.
• Location information from the member's mobile devices, such as a mobile phone or tablet.

In order to fulfill our obligations, the company conducts certain analyzes with regard to ex.

• Results from customer satisfaction or market surveys.

Legal basis: Members of Rabalder Customer Club - Completion of the agreement on membership in loyalty programs.
Storage period: Until membership ends (at the request of a member or if you have not made a purchase for a period of 36 months).

9. In order to fulfill legal obligations (eg regarding requirements in the Accounting Act, product liability and product security and protection of personal data in IT systems)

Personal data is processed to:

• Be able to fulfill legal obligations, as required by laws, judgments or government decisions. Such requirements may relate, for example, to product liability and product safety requirements such as the preparation of communications and information to the public and customers about product alarms and product recalls, for example in the event of a defective or health-threatening item or to the extent required by the Accounting Act or the Money Laundering Act and may be attributed to an individual.

The categories of personal data that can be processed are:

• Name.
• Contact details (e.g. home address, e-mail, telephone number).
• Customer correspondence.
• Information on the time of purchase, place of purchase, the error / complaint on the product.
• Personal ID number (e.g. Social Security number).
• Payment history.

Legal basis: Legal obligation.
Storage period: For the period necessary to fulfill the relevant legal obligation or in accordance with applicable legal requirements. For example, the Accounting Act requires that the above information must be stored for 7 years.

10. To be able to evaluate, develop and improve our services, products and systems for the customer community in general

Personal data is processed to:

• Make services more user-friendly, such as changing the user interface to simplify the flow of information or to highlight features commonly used in our digital channels.
• Develop documentation with a view to improving goods and logistics flows, for example by being able to forecast purchases, warehouses and deliveries.
• Develop a basis for developing and improving our range.
• Develop documentation with a view to developing and improving our resource efficiency from an environmental and sustainability perspective, for example by streamlining procurement and planning of deliveries.
• Develop documentation for planning new stores and warehouses.
• Give customers an opportunity to influence the range we provide.
• Develop documentation to improve IT systems to improve the security of our visitors and customers in general.

The categories of personal data processed are:

• Purchase history.
• User-generated data, e.g. how web pages and other digital channels are used (such as which pages and sections of pages are visited and what searches have been made).
• Age.
• Residence.
• Your correspondence and feedback regarding our services and products.
• Technical data on devices used and settings, such as language setting, IP address, browser settings, time zone, operating system, screen resolution and platform.
• Information on how you interacted with the company, i.e. how services were used, where and how long different pages were visited, response times, download errors, how services can be accessed and when leaving the service etc.

In order to fulfill the purpose, we perform general analyzes in aggregate form, i.e. not at individual level, regarding:

• How our web pages and other digital channels are used (e.g. which pages or parts of pages are visited and what searches are done).
• Purchase history.
• Age.
• Geographic and / or demographic.
• Feedback on our services and products and results from customer satisfaction or market surveys.
• Data from customer units and technical settings.

Legal basis: Justified interest. The handling is necessary to meet our and your legitimate interest in evaluating, developing and improving our services, products and systems.
Storage period: For this purpose, it is difficult for us to specify in advance how long your personal data will be stored. Instead, we have put in place routines to continuously check if your personal information is still necessary for this purpose. We will delete personal data that we have not used for a period of 24 months because we will no longer consider your personal data to be necessary. Of course, we take steps to protect your privacy. When we perform analyzes based on your personal data, our employee who performs the analysis will not know that the personal data belongs to you. Although we could make the connection to you based on the information we have in another system.

   11. To prevent abuse of a service or to prevent, prevent and investigate crimes

Personal data is processed to:

• Investigate or prevent fraud or other law violations through, for example, incident reporting in stores.
• Prevent spamming, phishing, harassment, illegal user login attempts, or other prohibited actions.
• Protect and improve our IT environment against attacks and intrusions.

The categories of personal data processed are:

• Purchase history.
• User-generated data, e.g. how web pages and other digital channels are used (such as which pages and sections of pages are visited and what searches have been made).
• Personal ID number (e.g. Social Security number).
• Data on devices used by the customer and settings, such as language setting, IP address, browser settings, time zone, operating system, screen resolution and platform.
• Information on how the customer uses our digital services.

Legal basis: Fulfill a legal obligation if there is, alternatively, a legitimate interest in being able to prevent abuse of a service or to prevent, prevent and investigate crimes.
Storage period: From collection and for a period of 36 months thereafter. If we suspect abuse of a service or that a crime has been committed, we will retain the information for the time necessary to establish, enforce or defend our (or third party) legal claims.

Your rights

Right of access:
We want to be open about how we handle your information. If you want to gain insight into the personal data processing we do in relation to you, you have the right to request information about the processing. You also have the right to receive an electronic copy of your personal data processed by us if you make the application electronically. If we receive an access request, we may ask for additional information to ensure which information you would like to access and that we disclose the information to the right person.

Right to correction:
You have the right to request that your personal data be corrected if the information is incorrect. Within the scope of the stated purpose, you also have the right to supplement any incomplete personal data.

Right to delete:
You have the right to request the deletion of your personal data that we process:

• The data is no longer necessary for the purposes for which it has been collected or processed.
• You have revoked a consent on which the treatment is based and there is no other legal basis for the treatment.
• You object to a balance of interest of legitimate interest made by Rabalder and there is no legitimate interest in Rabalder that weighs heavier.
• You object to treatment for direct marketing purposes.
• Personal data was processed illegally.
• Personal data must be deleted in order to fulfill a legal obligation to which we are subject.
• Personal data was collected from you when you were under 13 years in connection with more information society services, such as social media.

If you request deletion of personal data, we may not always respond to your request including:

• The treatment is needed to exercise someone's right to freedom of expression and information.
• To fulfill a legal obligation to which we are subject.
• To be able to establish, enforce or defend legal claims.

Right of restriction:
You have the right to request that our processing of your personal data be restricted.

Right to object to certain type of treatment:
Legitimate interest: You have the right to object to treatments based on a legitimate interest that we have if you have personal reasons related to the situation. However, we may continue to process your information, even though you have opposed the processing, if we have compelling justifiable reasons for the processing that considers your privacy interest

Direct marketing (including analyzes performed for direct marketing purposes)

You have the opportunity to object to your personal data being processed for direct marketing. The right to object also includes the analysis of personal data (so-called profiling) that is performed for direct marketing purposes. If you object to direct marketing, we will stop processing your personal data for that purpose as well as discontinue all types of direct marketing measures. Of course, you have the opportunity to refuse mailings and personal offers in certain channels, for example, you can choose to only receive offers from us via e-mail, but not text-message. In this case, you should not object to the processing of personal data, as we will then have difficulty assessing which marketing is relevant to you.

Right to data portability
You have the right to receive a copy of the personal data that concerns you in a structured format (data portability) and in some cases have this data transferred to another personal data controller. The right to data portability only applies to information that you yourself have provided to us and that we process with support for certain legal reasons, such as an agreement with you.

Withdrawal of consent
You have the right to withdraw your consent at any time. If there is no other legal basis that requires us to save the data, we will delete it. If you wish to withdraw your consent, you are welcome to contact Rabalder either via e-mail, telephone or via contact with the store.

Complaints to the supervisory authority
If you believe that we are handling your personal information incorrectly, please contact us. You also have the right to file a complaint with the supervisory authority ( in Sweden it is called “Datainspektionen“).

Personal data collected from another source
In addition to personal data that you yourself provide to us or that we have collected based on how you use our services or based on your purchases, we can also collect personal data from other sources. You can see the personal data we collect from you and from which source we have collected the data in the table below.

Source of collection                                                        Type of personal data
Public address registers or information companies                Your registered address

How we disclose your personal information
Rabalder AB is responsible the personal data you send to us and we use the personal data to fulfill our obligation to you as a customer.

Personal Data Assistants
Sometimes we may disclose your personal information when we take help from other companies that process your personal data on our behalf and according to our instructions. This applies, for example, to companies that provide IT services and companies that help us with mailing.

Other personal data managers
In addition, we may also disclose your personal data to other companies that will be independently responsible for their processing of your personal data, e.g. to service providers we use such as Facebook or Google, freight forwarders and logistics companies and our payment solution partners.

Retention period
We will never store your personal data for longer than is necessary for each purpose. See more about the specific storage periods for each purpose

Handling of social security numbers
We will only process your personal ID number (e.g. social security number) when it is clearly justified for the purpose, necessary for secure identification or if there is some other justifiable reason. In cases where this is sufficient, we use your customer number instead to minimize the use of personal ID numbers.

Third Country Transfers
Sometimes we may need to transfer your personal information to the United States. This may be when we disclose your information to other companies that are independently responsible for personal data. We only disclose your personal data to a country outside the EU / EEA if there are sufficient guarantees that your personal data will be handled properly.

Therefore, in order to protect your personal information when we transmit it, we have verified that the recipient is certified to comply with the Privacy Shield principles. You can get a copy of the protective measures by contacting us.

Changes
The latest updated version of Rabalder’s privacy policy is always available on the website.
In case of significant updates you will receive information about this via e-mail or at rabalder.se.

Contact Us
Still have questions about how we handle your personal information? Then you are welcome to contact us via e-mail:
kundtjanst@rabalder.se