Data protection policy
Introduction
This data protection policy describes how Outnorth AB (org. no. 556709–7349) (hereinafter referred to as "Outnorth") processes your personal data when you order goods from us, or are otherwise in contact with us via our website or our social channels. Please read this data protection policy carefully to ensure that you understand how your personal data will be used. If you have any questions about our processing of your personal data, you are welcome to contact us via the contact details at the end of this policy.
Outnorth is part of the same group as Egmont Story House AB (org. no. 556046–9206). This data protection policy also describes how Egmont Story House AB processes your data.
This data protection policy may be updated from time to time. You can always find the latest version here on our website.
How we process your personal data
In this section, we describe how we process your personal data in different contexts. You have the right to know what personal data we process about you at any time and, if necessary, to request correction or deletion of these. You can read more about your rights at the end of this data protection policy.
Through contractual terms, we ensure that third parties comply with applicable data protection legislation and that the information shared with us by third parties has been collected in a lawful and accurate manner.
When you visit our website
What we do and why: |
The personal data we process: |
When you visit our website, we will use cookies to collect information about you and your use of our website.
We do this in order to be able to: · Make the basic functionality of the website work as intended, · Receive information and insights that help us improve the user experience on our website, and · present more relevant goods and articles to you.
To do this, we use cookies and similar technologies. In addition to the cookies that are required to deliver the website's basic functionality, you can choose which cookies to use when you visit us. You can read more about this in our cookie policy.
|
To provide and improve our website: · Information about your device, such as IP address and the type of device you are using (mobile, computer or tablet); · Your geographic location (to save your language and currency preferences), · Information about your choices on the site, such as which products you have added to your basket or marked as liked, or your consent choice, including information about when you responded to our consent, · Information about how you use our websites, such as what you click on, how long you stay on our websites, and information about how many times your device has visited our websites, which allows us to count the total number of visitors to our websites, · Which area of the country you are using our website from, · Information about your device/browser (for example, what screen resolution you have), · Other information Google holds about you, such as information about the page from which you found us
In order to present you with more relevant items and articles: · Demographic data such as purchase history and information about which products you have marked as "favourites" and which products you show interest in on our website. |
Our legal basis for the processing: |
|
Our legal basis for the processing is our legitimate interest in enabling optimization, improvement of our website and personalization for you and other users. When using cookies, we also ask for your consent before the information is collected. |
|
How We Share Your Personal Information: |
|
We will share your personal data with our IT service providers when it is necessary for them to deliver their services to us. We may also share information with Egmont Story House AB in accordance with the purposes set out below in this data protection policy. |
|
How long do we keep your personal data: |
|
We will anonymize your personal data as soon as possible, and in any case not store your personal data for a period longer than six (6) months. |
When you shop at Outnorth
What we do and why: |
The personal data we process: |
We process your personal data in order for you to be able to place an order with us, and for us to be able to handle your order and ensure that goods you have ordered can be delivered to you.
|
· Name · Telephone number · Address · Order information and history |
Our legal basis for the processing: |
|
Our legal basis for processing your personal data is the fulfilment of the contract you enter into with us when you order your goods. |
|
How We Share Your Personal Information: |
|
We will share your personal data with our IT service providers to the extent necessary for them to deliver services to us and with shipping companies that carry out the delivery of your goods. |
|
How long do we keep your personal data: |
|
We will store your personal data for three (3) years in order for you to be able to exercise your right of complaint. |
When you are a member of our customer club
What we do and why: |
The personal data we process: |
We have a customer club where you as a member get access to personal offers, priority to various campaigns and where you as a customer collect points when you buy goods from us. We process your personal data in order to manage your membership in the customer club, to ensure that you receive the benefits that follow from the membership and that these are adapted to you and your interests.
|
· Name · Telephone number · Address · Historical Order · Birthdate · Sex |
Our legal basis for the processing: |
|
Our legal basis for adding you as a member of the customer club is your consent. |
|
How We Share Your Personal Information: |
|
We will share your personal data with our IT and marketing service providers to the extent necessary for them to deliver services to us. |
|
How long do we keep your personal data: |
|
We will save your personal data for the period you choose to be a member of the customer club. We will continuously delete accounts and personal data of members who have been inactive for five (5) years. |
When we send you marketing and newsletters
What we do and why: |
The personal data we process: |
We will save your personal data for the period you choose to be a member of the customer club. We will continuously delete accounts and personal data of members who have been inactive for five (5) years.
In order for the content of the marketing and newsletters to be as relevant as possible to you, and for us to be able to present products and offers that you are interested in, we will process information about your previous orders and your browsing history, so-called profiling.
|
· Name · Telephone number · Address · Historical order · Browsing history · Sex · Image (if applicable) |
Our legal basis for the processing: |
|
Our legal basis for processing your personal data is your consent. Without your consent, we will only send you marketing about the same or similar products that you have purchased in accordance with marketing legislation. If you no longer wish to be contacted for marketing purposes, you can withdraw your consent at any time or unsubscribe from receiving marketing mailings and newsletters by following the instructions in the mailing. |
|
How We Share Your Personal Information: |
|
We will share your personal data with our IT and marketing service providers to the extent necessary for them to deliver services to us. |
|
How long do we keep your personal data: |
|
We will retain your personal data until you withdraw your consent, or you opt out of receiving marketing messages from us. We will delete your personal data on an ongoing basis if you have been inactive for five (5) years. If we send you marketing messages about the same or similar products that you have purchased in accordance with the Marketing Act, we will delete your personal data after two (2) years, or when you unsubscribe from receiving such mailings. |
When we promote our products using online advertisements
What we do and why: |
The personal data we process: |
We process personal data to market our products by showing you offers and new products that we think you will be interested in. We also show you personalized marketing on other websites and social media pages that you visit.
We may display offers using marketing services from Meta, Google and Microsoft. We do this with the help of cookies on our website and information that these companies already have about you, so-called profiling. You can read more about this in our cookie policy. |
· IP address · Information about your device, such as operating system, browser, and time zone · Interaction with the website · Demographic data such as purchase history and information about which products you have marked as "favorites" and which products you show interest in on our website.
|
Our legal basis for the processing: |
|
Our legal basis for processing your personal data is your consent. |
|
How we share your personal data: |
|
We will share your personal data with our IT and marketing service providers to the extent necessary for them to deliver services to us. You can read more about Microsoft's processing of your personal data here. You can read more about Google's processing of your personal data here. You can read more about Meta's processing of your personal data here. We may also share information with Egmont Story House AB in accordance with the purposes set out below in this data protection policy. |
|
How long do we keep your personal data: |
|
You will see marketing from us on other websites and social media channels for a maximum of two (2) years after you visited our website and consented to the processing. Our marketing service providers are independently responsible for their processing of your personal data. You can find information about how long they store your personal data in their respective privacy policies. |
When you participate in our competitions
What we do and why: |
The personal data we process: |
We organize competitions where you as a participant are given the opportunity to participate and win various prizes. We will process the participants' personal data in order for them to be able to participate in the competitions, and to be able to deliver prizes to the winners of the competitions.
|
· Name · Telephone number · Addresse · Photo (if applicable) |
Our legal basis for the processing: |
|
Our legal basis for processing your personal data in connection with competitions we organize is your consent. |
|
How we share your personal data: |
|
We will share your personal data with our IT and marketing service providers to the extent necessary for them to deliver services to us. |
|
How long do we keep your personal data: |
|
We will save your personal data for the duration of the competition. Your personal data will then be deleted or anonymized within six (6) months of the end of the competition.´ |
When you contact our customer service
What we do and why: |
The personal data we process: |
When you contact our customer service, your personal data is used to be able to answer your questions, take steps you want help within relation to your order or help you with any other questions. |
· Name · Telephone number · Case history · Historical order · Account details (if applicable) |
Our legal basis for the processing: |
|
Our legal basis for processing your personal data when you contact our customer service team for answers to questions and similar matters is our legitimate interest in being able to provide you with a good customer service experience. |
|
How we share your personal data: |
|
We will share your personal data with our IT service providers to the extent necessary for them to be able to deliver services to us. We will also share your personal data with our suppliers of products if it is necessary to assist you with your case. |
|
How long do we keep your personal data: |
|
We will store your personal data for one (1) year from the time you have been in contact with us in order to be able to follow up on any matters you have contacted us about. |
When you make a return or complaint
What we do and why: |
The personal data we process: |
When you initiate a case for a return or complaint, we use your personal data to handle this case. |
· Name · Address · Telephone number · Historical order · Account details (for example, in case of refunds) |
Our legal basis for the processing: |
|
Our legal basis for processing your personal data is our legal obligation to handle complaints about goods in accordance with the Consumer Sales Act. |
|
How we share your personal data: |
|
We will share your personal data with our IT service providers and shipping companies to the extent necessary for them to deliver services to us. We may also share your personal data with suppliers of goods that you have purchased in order to handle any service or complaint matters. |
|
How long do we keep your personal data: |
|
We will store your personal data for three (3) years in order for you to be able to exercise your right of complaint. Information related to complaints and service cases will be stored for the duration of the case, and up to one (1) year after the case has been closed. |
When you leave a review about us
What we do and why: |
The personal data we process: |
When you leave a review of our products via our website or email, we may occasionally publish these on our website, or on other websites of companies within our group that sell the same product. We do this to make the reviews available to a wider audience so that you as a customer can form an opinion about a product you are interested in. |
· Name · Historical order · Review |
Our legal basis for the processing: |
|
Our legal basis for processing your personal data is your consent. |
|
How we share your personal data: |
|
We will share your personal data with our IT service providers to the extent necessary for them to be able to deliver services to us. We will also share personal data with other companies within the Egmont Story House group. |
|
How long do we keep your personal data: |
|
We will store your personal data for the period you consent to the processing, and for a maximum of five (5) years. |
When you pay by invoice
What we do and why: |
The personal data we process: |
When we repair an item for you and this is not covered by your warranty, we will send you an invoice for payment of the repair. We will then process your personal data to collect payment and to fulfil our accounting obligations under applicable law.
|
· Name · Telephone number · Address · Payment information |
Our legal basis for the processing: |
|
Our legal basis for the processing of your personal data is our legal obligation under the Accounting Act. |
|
How we share your personal data: |
|
We will share your personal data with our IT service providers to the extent necessary for them to be able to deliver services to us. We will also share your personal data with financial service providers, and if we are asked to do so by the competent authority. |
|
How long do we keep your personal data: |
|
Your personal data will be stored for seven (7) years in accordance with the Accounting Act. |
When you visit our stores (camera surveillance)
What we do and why: |
The personal data we process: |
In our physical stores, we use cameras to increase security and to prevent theft. When you visit our stores, your personal data may be processed through such camera surveillance. |
· Pictorial material |
Our legal basis for the processing: |
|
Our legal basis for processing your personal data is our organization’s legitimate interest in keeping our stores safe and preventing theft. |
|
How we share your personal data: |
|
We will share your personal data with our providers of monitoring services in our physical stores. |
|
How long do we keep your personal data: |
|
The moving image material will be stored for two (2) weeks before it is deleted. We may store the material for a longer period if it is necessary to support an ongoing investigation or is otherwise used to investigate crimes. |
Processing of personal data by Egmont Story House AB
In the table below, we provide information on behalf of Egmont Story House AB about the personal data processing they perform. Egmont Story House AB (hereinafter referred to as "Egmont") and Outnorth are part of the same group of companies. Egmont is responsible for the processing of personal data described in this table (data controller).
What Egmont does and why: |
The personal data Egmont processes: |
Egmont processes information about how you have used their website and your purchases in order to be able to share the most relevant offers with you in newsletters and advertising. For this purpose, Egmont also uses information from other companies in the Story House Egmont Group, including Outnorth. Egmont has decided that this processing of data is more secure than the data being processed by an external third party, and instead Egmont retains the personal data internally within the Story House Egmont Group. They have taken a number of technical and organizational measures to further protect your personal data, including, and most importantly, your personal data from Outnorth is processed separately from personal data that Egmont Story House AB receives from other companies in the Story House Egmont Group. Other companies within the Story House Egmont Group will not receive your personal data that is not anonymized. The personal data is only used to develop offers that you are likely to be interested in. |
· Information about your interests, such as browsing history, purchase history, products you have saved as favourites and which products you have shown interest in on our website · Demographic information · Selected delivery address · Purchase history from other companies in the Story House Egmont Group |
Egmont's legal basis for the processing: |
|
The processing is based on Egmont Story House AB's legitimate interest in determining which offers are relevant to you. |
|
How long does Egmont store your personal data: |
|
Egmont regularly deletes personal data. |
Processing for additional purposes
In addition to personal data processing for the purposes described above, we may need to process your personal data for additional purposes. We may retain personal data for a longer period, for example to establish, exercise and/or defend against legal claims. We may also store your personal data for a longer period in order to comply with our legal obligations, or if we are compelled to save and/or make available the personal data at the request of a court or authority.
Transfer of personal data outside the European Union
We will not transfer your personal data to a country located outside the European Union ("EU") or the European Economic Area ("EEA"). However, our IT service providers use subcontractors
belonging to groups headquartered in the United States. Entities located in the United States may thus have access to your personal data in connection with, for example, providing technical support.
We always require our IT service providers to ensure that transfers of personal data to countries located outside the EU/EEA are carried out in accordance with requirements set out in applicable law. In cases where an adequacy decision has not been issued by the European Commission, other measures are required to ensure the lawful transfer of personal data. Such measures include the use of the European Commission's Standard Contractual Clauses ("SCCs") when entering into contracts with subcontractors.
Here you will find the standard contractual clauses applicable to the transfer of personal data to a recipient located outside the EU/EEA.
Your rights
In this section, we describe what rights you as a data subject have in relation to the processing of your personal data. You can exercise your rights by contacting us using the contact information provided at the end of this policy. Please note that not all of the rights we list below are absolute, and there are cases where we may deny your request to exercise your rights. Your rights are as follows:
Right of access
You have the right to request a copy of your personal data that we process as well as access further information related to our processing of your personal data.
Right to rectification
You have the right to have your personal data corrected and/or supplemented with additional information if your personal data is incorrect and/or incomplete.
Right to erasure (right to be forgotten)
You have the right to request that we erase your personal data without delay in the following cases: (i) the processing of the personal data is no longer necessary for the fulfilment of the purposes for which the personal data was collected or processed; (ii) you withdraw your consent, and there is no other legal basis for the processing; (iii) you object to us processing your personal data, and we have no opposing legitimate grounds for the processing that override your interests; (iv) the processing of your personal data is unlawful; or (v) the personal data processed must be erased in order to comply with a legal obligation.
Right to restrict
You have the right to restrict the processing of your personal data in the following cases: (i) you object to the accuracy of the personal data for a period that enables us to ensure the accuracy of such personal data; (ii) the processing of the personal data is unlawful, and you oppose the erasure of the personal data and request that the processing be restricted instead; (iii) the processing of the personal data is no longer necessary for the fulfilment of the purposes for which the personal data was collected or processed, but you need access to the personal data for the establishment, exercise or defence of legal claims; or (iv) you have objected to the processing of your personal data and are awaiting confirmation as to whether we have the contrary legitimate grounds for the processing which outweigh your interests, rights and freedoms.
Right to move your personal data
If your personal data has been collected directly from you and our legal basis for the processing of the personal data is your consent or for the performance of a contract with you, you have the right to have your personal data sent to you in a structured, well-established and machine-readable format. The personal data may be forwarded to another supplier to the extent that it is technically possible and possible to do so by automated means.
Right to object
You have the right to object to us processing your personal data if the legal basis for the processing is legitimate interest, and where we have carried out a balancing of interests before we commenced the processing of your personal data. If you object to the processing of your personal data and we believe that we are allowed to continue to process your personal data, we must be able to demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms. We may also claim that we need to process your personal data in order to establish, exercise or defend against legal claims.
Right to object to direct marketing
You always have the right to object to the processing of your personal data for purposes related to direct marketing. If you object to such processing, we will no longer process your personal data for such purposes.
Right to withdraw consent
Where we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time.
Regulator
The supervisory authority in Sweden is the "Swedish Authority for Privacy Protection". If you suspect that our processing of personal data violates applicable data protection legislation, we encourage you to contact us in the first instance so that we can investigate the matter. You can turn to the supervisory authority at any time with any complaints.
Contact
If you have any questions regarding the processing of your personal data or if you wish to exercise any of your rights, please contact our Data Protection Officer at the email below, or our customer service at the telephone number below:
E-post: [email protected]
Telephone: 0480 – 940 00 (customer service)