PRIVACY POLICY

LAMPGALLERIAN VÄXJÖ AB RESPECTS YOUR PRIVACY

LampGallerian Växjö AB respects your privacy and is committed to processing your personal data with a high level of security and in accordance with applicable data protection legislation. This privacy policy describes how we process your personal data if you are a customer to us or a visitor of our website. If you have any questions about our privacy protection, you are always welcome to contact us. Our contact details are available under the section ”Contact Information” below.

LAMPGALLERIAN IS THE CONTROLLER

We are the controller of your personal data and are therefore responsible for ensuring that your personal data is processed correctly and securely in accordance with applicable legislation. We sell products under several different brands and through several different websites. We are the personal data controller for personal data collected on lampgallerian.se and lightshop.com.

OUR PROCESSING OF YOUR PERSONAL DATA

Information on from where we collect your personal data, what personal data we process, the purposes for which we intend to process your personal data, the legal basis for the respective processing activity and the applicable retention periods are stated in the table below. You are under no obligation to share your personal data with us. However, if you choose not to share any personal data with us we will not be able to sell or deliver products to you, provide any customer support to you, send you marketing or otherwise interact with you for the purpose of providing our services.

DATA RELATED TO OUR CUSTOMERS

From where we collect the personal data	Categories of personal data	Purpose	Legal basis
From you or the Swedish Population Register (at your request)	Name, email, address, phone number, personal identity number or coordination number	Administer your purchase, e.g. identification and age verification, receive the order and deliver the product	Performance of contract
From you	Name, email and any other personal data you choose to share with our customer support	Provide customer support	The processing is necessary for our legitimate interest in providing customer support at request (legitimate interest)
From you	Name, email, technical data, e.g. IP address, unique device ID, browser, other data from cookies or similar tracking technologies, online behavior, e.g. what products you have purchased	Analyse your online behavior, personalise and send marketing to you	The processing is necessary for our legitimate interest to market our products and services (legitimate interest)
From you	Name, email and any other information you provide in connection with the contest	Administer the contests you choose to participate in	The processing is necessary for our legitimate interest in providing customer contests (legitimate interest)
From you	Personal data you have provided in a review, e.g. name	Share reviews with other customers and customise our products and our offering	The processing is necessary for our legitimate interest in sharing reviews and adapt products based on such reviews (legitimate interest)
From you	Name, email, information regarding your purchase and use of the product	Administer returns	Performance of contract
From you, via camera surveillance or via cookies on our website	Purchase and order history, personal identity number or coordination number, video and audio recordings, technical data, such as IP address, unique device ID, browser, other data from cookies or similar tracking technologies, online behavior e.g. purchased or viewed products on our website or on one of our websites	Prevent misuse of our websites, services or products and to prevent crimes, such as fraud	The processing is necessary for our legitimate interest to ensure that our products and services are used in accordance with our terms and conditions and applicable law (legitimate interest)
From you	Name, email, information about your purchases	To fulfil legal requirements, e.g. legislation regarding returns, accounting, tax and product safety	The processing is necessary for compliance with our legal obligations
From you	Name, email, information about your purchases	Protect our legal interests, e.g. in case of non-payment	The processing is necessary for our legitimate interest in protecting our legal interests, e.g. to receive payment (legitimate interest)
From you	Information provided in connection with purchases in a physical store	Analyse purchasing behavior, customise and send marketing to you	Consent

DATA RELATED TO OUR WEBSITE VISITORS

From where we collect the personal data	Categories of personal data	Purpose	Legal basis
Via cookies on our websites	Technical data, such as IP address, unique device ID, browser, other data from cookies or similar tracking technologies, online behavior e.g. purchased or viewed products on our website or on one of our websites	Analyse your online behavior, personalise and send marketing to you	Consent
Via cookies on our websites	Technical data, such as IP address, unique device ID, browser, other data from cookies or similar tracking technologies	To ensure our website’s functionality	The processing is necessary for our legitimate interest in ensuring that our websites function as planned (legitimate interest)
Via cookies on our websites	Technical data, such as IP address, unique device ID, browser, other data from cookies or similar tracking technologies	To develop our websites, e.g. based on how the website is used	Consent

PROFILING

We may compile information about you from various sources to draw conclusions about your personal interests and your online behavior. This is called profiling. The profiling enables us to create a customer profile that includes, among other things, your previous purchases and which products you have shown an interest for on our websites. The purpose of our profiling is to ensure that the marketing we send to you, such as personalised offers or targeted ads, is relevant to you.

OUR CHANNELS IN SOCIAL MEDIA

We process personal data accessed via our social media channels for the purposes of promoting us and our products, and to interact with existing customers, potential customers and partners. The processing is necessary for our legitimate interest in marketing ourselves and our products and interacting with existing customers, potential customers and partners (legitimate interest). The personal data is processed for as long as necessary to fulfil the purposes of the processing. For information on the platforms' processing of personal data in connection with your visit to our social media channels such as Facebook, Instagram, Youtube and Pinterest, please refer to the respective platform's privacy policy.

WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

We do not disclose personal data to third parties, except when necessary to fulfil a legal obligation or to fulfil the purposes for which we process your personal data. Situations when your personal data may be disclosed to third parties are listed in the table below.

Third party	Reason for third party disclosure	Personal data disclosed
Other companies within our company group	Personal data may need to be disclosed to other companies within our group as central functions such as analysis, marketing and finance are managed jointly within the company group we are part of.	Name, phone number, e-mail, address
Suppliers and partners	We may disclose your personal data to suppliers and/or partners, if the suppliers and/or partners need your personal data to fulfil their undertakings toward us, e.g. cloud service providers.	Name, phone number, e-mail, address
Authorities	Personal data may be disclosed to authorities when necessary for compliance with our legal obligations.	Name, address, social security number
Sale	If we intend to transfer all or part of our business, personal data may be disclosed to a potential buyer.

YOUR RIGHTS

A summary of the rights you have as a data subject under the GDPR follows below.

Right to withdraw your consent

When the processing of your personal data is based on your consent as a legal basis, you have the right to withdraw your consent at any time by contacting us via the contact information listed at the bottom of this privacy policy.

Right of access

You have the right to receive information about whether we process personal data about you and in such cases receive a copy of the personal data including information on the purposes of the processing, categories of personal data processed, categories of recipients of the personal data, retention periods, your rights regarding the processing, the existence of automated decision-making (including profiling), information on the appropriate safeguards relating to the transfer of your personal data to countries outside the EU/EEA and, if the personal data has not been collected from you, from where the data is collected.

Right to rectification

If the personal data we process about you is inaccurate, incomplete or outdated, you have the right to ask us to rectify or complete such personal data without undue delay.

Right to be forgotten

You often have the right to request deletion of your personal data without undue delay. Such is the case when (i) the personal data is no longer necessary for the purposes for which they were processed, (ii) you withdraw your consent and there is no other legal basis for the processing, (iii) you have objected to the processing of your personal data for direct marketing purposes or to processing based on legitimate interest as legal basis and we cannot show definitive reasons for the processing which outweigh your interests, rights and freedoms, (iv) the processing does not take place to establish, exercise or defend legal claims, (v) the personal data has been unlawfully processed or (vi) the personal data has to be erased for compliance with a legal obligation.

Right to object

You have the right to object at any time to the processing of personal data based on legitimate interest as legal basis, including e.g. profiling. In addition, you always have the right to object to the processing of your personal data for direct marketing purposes. We will then cease to process the personal data, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing takes place for the establishment, exercise or defense of legal claims.

Right to restriction of processing

Under certain circumstances you have the right to request that we restrict the processing of your personal data. Such is the case when (i) you consider that the personal data is not correct and you are awaiting our verification of the accuracy of the personal data, (ii) the processing is unlawful and you, instead of deleting the personal data, wish the processing to be restricted, (iii) we no longer need the personal data for the purposes of the processing but you need them to establish, exercise or defend legal claims or (iv) when you have objected to processing based on a legitimate interest and you are waiting for a verification on whether our legitimate reasons outweigh yours.

Right to data portability

When personal data you have provided to us is processed by automated means and based on your consent or on a contract with you as legal basis, you have the right to obtain your personal data in a commonly used and machine-readable format and request that such personal data is transmitted to another controller.

Right to lodge complaints

You have the right to file complaints regarding our processing of your personal data with the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten), Box 8114, SE-104 20 Stockholm.

COOKIES

We use cookies and other similar tracking technologies to help make our websites functional by enabling certain functions, to improve the website and send better and more personalised marketing. We use cookies in accordance with this privacy policy and our cookie policy, see link to cookie policy.

CHANGES TO THIS POLICY

We reserve the right to change this Privacy Policy at any time. In the event of changes to this Privacy Policy, we will publish the amended Privacy Policy on lightshop.com with information on when the changes will come into effect. Further, we may also notify amendments by other appropriate means.

CONTACT INFORMATION

Do not hesitate to contact us if you have any questions about this privacy policy, the processing of your personal data or if you wish to exercise your rights under this privacy policy or applicable legislation.

LampGallerian Växjö AB
Reg.no: SE559042258901
Postal address: Härlövsvägen 21, 352 50 Växjö, Sweden
Contact us here.

Data protection officer: Jacob Croona
Email: jc@lampgallerian.se