Annex 1, Personal data processing
LA BOUTIQUE STOCKHOLM AB, reg. no. 559241-4063, processes personal data in connection with the trade on http://www.laboutiqueeyewear.com and is the controller of the processing. Personal data is processed in order for LA BOUTIQUE STOCKHOLM AB to provide its services, mainly for the following purposes (the "Purposes"):
- To create and maintain your personal account.
- To receive and process your orders and ship your goods to you.
- To handle any returns.
- To send you SMS notifications about the delivery status.
- To answer your questions and inform you about new or changed services.
- To send marketing offers such as newsletters and catalogs.
- To send you surveys that give you the opportunity to influence LA BOUTIQUE STOCKHOLM AB's offers and services.
The data processed is the data you provide, e.g. when you place orders, contact customer service or similar. The information you provide includes e.g. contact information, delivery address and ordered goods (the "Personal Data"). The Personal Data is necessary for LA BOUTIQUE STOCKHOLM AB to fulfill the Purposes. Some information may also be obtained from public records or other publicly available sources.
The main legal basis for the processing is that the processing is necessary for LA BOUTIQUE STOCKHOLM AB to fulfill its obligations to its customers. Some processing is also based on LA BOUTIQUE STOCKHOLM AB's legitimate interest to be able to conduct its business in an efficient and secure manner and on LA BOUTIQUE STOCKHOLM AB's obligation to comply with legal obligations. The personal data may be shared with authorities and other parties engaged by LA BOUTIQUE STOCKHOLM AB to fulfill the Purposes, e.g. for delivery. These parties may be based in countries outside the EU/EEA. If the European Commission does not consider that the country ensures an adequate level of protection, the transfer to the third party will be supported by the Commission's standard contractual clauses for the transfer of personal data to a country outside the EU/EEA, see Articles 45-46 of Regulation 2016/679 ("GDPR"). These standard contractual clauses can be accessed here: http://ec.europa.eu/justice/data-protection/international-transfers/transfer/. The processing of the Personal Data will continue for as long as it is necessary to fulfill the Purposes or as long as Test AB is obliged to do so. Thereafter, the Personal Data will be deleted.
If you have any questions about the processing of your Personal Data, you can contact LA BOUTIQUE STOCKHOLM AB via shop@laboutiqueeyewear.com. You can also use this address if you wish to exercise any of the rights you have as a data subject under the GDPR. Please note that the rights under the GDPR are not absolute and therefore invoking a right does not necessarily lead to an action. Your rights under the GDPR include the following:
- Right of access - Under Article 15 GDPR, you have the right to access the Personal Data and to be informed about the processing. That information is contained in this document.
- Right to rectification - Under Article 16 GDPR, you have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purpose of the processing, you also have the right to have incomplete personal data completed.
- Right to erasure ("right to be forgotten") - Under certain circumstances, you have the right under Article 17 GDPR to have Personal Data erased.
- Right to restriction of use - In certain circumstances, under Article 18 GDPR, you have the right to restrict the processing of your Personal Data.
- Right to data portability - According to Article 20 GDPR, you have the right to obtain the Personal Data in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller.
- Right to object - Under Article 21 GDPR, you have the right to object to certain processing of Personal Data, such as processing based on Test AB's legitimate interests.
Finally, you also have the right to lodge a complaint with the Data Protection Authority, which can be contacted via datainspektionen@datainspektionen.se or 08-657 61 00.
___________________