We are open and transparent about how we process your personal data and if you would like to gain deeper insight into what personal data we process about you, you can request access to the data.

Please note that if we receive a request for access, we may ask for additional information to ensure efficient handling of your request and that the information is provided to the correct person.

Right to rectification. You can request that your personal data be corrected if the data is incorrect.

Right to erasure. You may request the erasure of personal data we process about you if: The data is no longer necessary for the purposes for which it was collected or processed. You object to processing for direct marketing purposes. The personal data is being processed unlawfully. The personal data must be erased to comply with a legal obligation to which we are subject.

Please note that we may have the right to refuse your request if there are legal obligations that prevent us from immediately deleting certain personal data. These obligations arise from accounting and tax legislation, banking and money laundering legislation, but also from consumer law.

Right to object to certain types of processing. You always have the right to opt out of direct marketing and to object to all processing of personal data based on a balancing of interests. YOU have the opportunity to object to your personal data being processed for direct marketing. The objection also includes the analyses of personal data (so-called profiling) that are carried out for direct marketing purposes. Direct marketing refers to all types of outreach marketing measures (e.g. via post, email and SMS).

Marketing measures where you as a customer have actively chosen to use one of our services or have otherwise sought us out to find out more about our services are not considered direct marketing (e.g. product recommendations or other features).

If you object to direct marketing, we will stop processing your personal data for that purpose and will cease all types of direct marketing activities. Please contact us at kundtjanst@geggamoja.com.

Remember that you always have the opportunity to influence which channels we use for mailings and personal offers - by opting out of the service. Contact kundtjanst@geggamoja.com

Right to data portability. If our right to process your personal data is based either on your consent or the performance of a contract with you, you have the right to request that the data concerning you that you have provided to us be transferred to another data controller (so-called data portability).

A prerequisite for data portability is that the transfer is technically possible and can be automated.

How do we handle your personal identification number? In cases where it is necessary for us to be able to offer our services, we share your personal identification number with personal data processors for payment solutions (card acquiring companies, banks and other payment service providers).

We never store your personal data for longer than necessary, a maximum of 5 years.

We always strive to process your personal data within the EU/EEA and all of our own IT systems are located within the EU/EEA. However, in the case of system support and maintenance, we may be required to transfer the information to a country outside the EU/EEA, e.g. if we share your personal data with a data processor who, either itself or through a subcontractor, is established or stores information in a country outside the EU/EEA. In these cases, the processor may only access the information that is relevant for the purpose (e.g. log files). Regardless of the country in which your personal data is processed, we take all reasonable legal, technical and organizational measures to ensure that the level of protection is the same as within the EU/EEA. In cases where personal data is processed outside the EU/EEA, the level of protection is guaranteed either by a decision from the EU Commission that the country in question ensures an adequate level of protection or by the use of so-called appropriate safeguards.

In addition to the information you provide to us, or that we collect from you based on your purchases and how you use our services, we may also collect personal information from someone else. The information we collect from third parties is as follows: 1) Address information from public records to ensure that we have the correct address information for you. 2) Creditworthiness information from credit rating agencies, banks or information companies.

Who may we share your personal data with? Data processors. In cases where it is necessary for us to be able to offer our services, we share your personal data with companies that are so-called data processors for us. A data processor is a company that processes the information on our behalf and according to our instructions. We have data processors who help us with: 1) Transport (logistics companies and freight forwarders). 2) Payment solutions (card acquiring companies, banks and other payment service providers). 3) Marketing (print and distribution, social media, newsletter providers). 4) IT services (companies that handle the necessary operation, technical support and maintenance of our IT solutions).

When your personal data is shared with data processors, it is only for purposes that are compatible with the purposes for which we have collected the information. We check all data processors to ensure that they can provide sufficient guarantees regarding the security and confidentiality of personal data.

We have agreements with all data processors through which they guarantee the security of the personal data processed and undertake to comply with our security requirements.

Companies that are independent data controllers. We also share your personal data with certain companies that are independent data controllers. The fact that the company is an independent data controller means that we do not control how the information provided to the company is processed. Independent data controllers with whom we share your personal data are: 1) Government authorities (the police, the tax authorities or other authorities) if we are obliged to do so by law or in the event of suspicion of a crime. 2) Companies that provide public goods transport (logistics companies and freight forwarders). 3) Companies that offer payment solutions (card acquiring companies, banks and other payment service providers). When your personal data is shared with a company that is an independent data controller, the company's privacy policy and personal data processing apply.

Geggamoja AB, corporate ID no. 556761-4671, is the data controller for the company's processing of personal data.