Are you concerned about how your personal data is handled in this online store?

Then you've come to the right place! You can also contact us if you have any questions about our processing of your information. We are committed to safety and transparency in this area, and we take your inquiries seriously!

Why do we process personal data?

We collect and process personal data in order to be able to offer visitors to our websites the services and products they request. We also want to offer better and more relevant content to the individual customer, as well as create good and long-lasting relationships with our existing customers.

When do we process personal data?

Below you will find a list of when and how we process personal data in the individual cases. Note that all processing is based on consent, with the exception of the collection of data when purchasing, where certain information must be provided in order to complete the purchase. In this case, the processing basis is the conclusion of an agreement.

Newsletter

• Where: The online store's newsletter
• What is stored: Email address.
• Area of use for personal data: To send out newsletters.
• Storage period: Indefinitely. Until you unsubscribe from the newsletter or request deletion.
• Processing basis: Consent.
• Security: The information is stored on a secure server. Contact us for further information on security.
• Data processor (third party): Mailmojo

Buy in the online store

• Where: At the store's checkout/cash register
• What is stored: First name, last name, phone number, e-mail, street address, postcode, location, product name, number of products, shipping options selected, name of selected payment method (e.g. Klarna Invoice) and price are also stored. Birth and social security number is only required when using financing services, and is not stored in the online store. Birth and social security numbers are collected and processed only by payment providers. Company name, organization number and contact person are required for business purchases.
• Area of use for personal data: In order to complete a purchase in this online store, name, address and contact information are required for the completion of payment and dispatch of goods, as well as the sending of an invoice where this has been selected. The contact information can also be used to contact the buyer in connection with the purchase. Birth and social security numbers are used by financing providers to be able to carry out a credit check in connection with the use of invoices and financing services. The information will also be used for accounting purposes. Storage period: The personal information is stored in accordance with the Bookkeeping Act, and normally for 10 years after the end of the accounting year. If an agreement on an additional guarantee for the product has been entered into, the information will be stored for as long as the guarantee is valid, but not shorter than 10 years.
• Basis for processing: Necessary for entering into an agreement/purchase and for bookkeeping.
• Security: The information is stored on a secure server. Contact us for further information on security.
• Data processor (third party): Klarna, Vipps, Bring, Nettbutikk24, Google Analytics, Facebook and Mailmojo

Creation of a customer profile in the online store

• Where: Under "My account/create customer"
• What is stored: First name, last name, address, telephone number, password and e-mail address.
• Area of use for personal data: The information is used to create a customer profile for you. In your customer profile, you can see purchases you have entered in the store, as well as edit and adapt personal data you have provided to us. You can also sign up for the newsletter on your customer profile.
• Storage period: The information associated with your customer profile is stored until you request that it be deleted.
• Processing basis: Consent.
• Security: The information is stored on a secure server. Contact us for further information on security.

Processing of certain types of personal data outside the EU and EEA

Galleri Fint processes certain types of data outside the EU and EEA, with a third-party supplier of technical solutions. In the list of personal data that is processed (see "When do we process personal data?") there are details of which data is partially processed outside the EU/EEA.

Processing of information about EU and EEA citizens in the US has been approved by the European Commission, through an agreement on an adequate level of protection for personal data, called the EU-US Privacy Shield.

Third-party supplier outside the EU/EEA

Google, Facebook, Mailchimp
Where the data is processed: USA, Ireland

Access to own personal data

If you are registered in our systems, you have the right to access the data we hold about you, should you wish to do so. This is because you can have the data sent to you, or you can be informed about where you can find this data. In some cases, we may need to provide additional information about you in order to verify your identity before you are granted access.

Correction of own personal data

If you are registered in our systems, and perceive that we have registered incorrect information about you, you have the right to have this data corrected, or you can gain access to correct this yourself. In some cases, we may need to provide additional information about you in order to verify your identity before you are granted access. Contact the controller if correction is desired.

Deletion of own personal data

If you are registered in our systems, but want us to delete the information we have about you, you have the right to do so. If you wish to delete your data, please contact our customer service. We reserve the right that in some cases there may be reasons why data cannot be deleted immediately, if you have entered into a contract with us and this data is necessary for the other part of this contract. In some cases, we may need to provide additional information about you in order to verify your identity before you are granted access. Contact customer service if deletion is desired.

Restrict processing of own personal data

If you are registered in our systems and wish to limit the processing of your personal data, you have the right to be informed about this. You can agree that certain forms of treatment cease, or you can agree that we end all treatment. We reserve the right that in some cases there may be legal reasons which mean that such limitation of processing cannot be carried out. Deletion of data may then be an alternative, if general restriction is not possible according to the current regulations. In some cases, we may need to obtain additional information about you in order to verify your identity before we can make the changes. Contact customer service if restriction of processing is desired.

Information cookies

Read about cookies here .