Privacy Policy

1. Data controller

Bronett Production AB is the controller for the processing of personal data on cirkusscott.se.

Strandvägen 57, 115 23 Stockholm, Sweden

Company registration number 556866-2935

Contact for data protection matters: info@cirkusscott.se

2. What data we process

We process the data you provide yourself and the data generated when you use the site:

• Contact details you provide when emailing us — name, email address and the content of your message.
• When ordering: name, delivery and billing address, email address, telephone number, order details and payment status.
• Technical information sent by your browser when you visit the site, such as IP address and browser type.

3. Purposes and legal bases

• Performing the purchase contract — handling your order, delivery, payment, returns and complaints. Legal basis: performance of a contract.
• Meeting legal obligations — principally bookkeeping obligations under the Swedish Accounting Act. Legal basis: legal obligation.
• Answering questions you put to us. Legal basis: legitimate interest in being able to reply to those who contact us.
• Security and operation of the website. Legal basis: legitimate interest in a functioning and secure site.

4. Who we share data with

We never sell your personal data. We share it only with suppliers who need it in order for us to fulfil our obligations to you, and who process it on our behalf as processors:

• Our e-commerce and checkout provider, in order to receive and handle orders.
• Our payment provider, in order to process payment.
• The carrier (PostNord), in order to deliver your parcel.
• Our hosting and operations provider, which stores and serves the website.
• Our accounting firm and accounting system, in order to meet bookkeeping obligations.

5. Transfers outside the EU

Some of our suppliers may process data outside the EU/EEA. Where that happens we ensure the transfer is protected, principally through the European Commission’s standard contractual clauses or an adequacy decision.

6. How long we keep data

• Order data and records constituting accounting information are kept for seven years after the end of the calendar year in which the financial year ended, as required by the Swedish Accounting Act.
• Email correspondence is kept for as long as it is relevant to the matter and is then deleted.
• Data processed for security and operations is kept briefly and cleared on an ongoing basis.

7. Your rights

Under the GDPR you have the right to:

• Request a copy of the personal data we process about you.
• Have inaccurate data corrected.
• Request erasure, to the extent we are not required by law to retain the data.
• Request restriction of processing.
• Object to processing carried out on the basis of legitimate interest.
• Receive the data you have provided in a machine-readable format and transfer it to another party (data portability).

8. Complaints and contact

To exercise any of your rights, contact us at info@cirkusscott.se. We will respond without undue delay and at the latest within one month.

If you believe we are processing your personal data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, Sweden, imy.se.

9. Cookies

Information about our use of cookies is available on our cookies page.