This Privacy Policy explains how we collect and use your personal information. It also describes your rights and how you update them. It is important that you read and understand the privacy policy and feel comfortable with our use of your personal information. You are always welcome to contact us with any questions or concerns.

What is personal data and what is personal data usage?

Personal data is all information that is directly or indirectly attributed to a living person. For example, images and sound recordings that are processed via computer can contain personal data even if no names are mentioned. Encrypted data and other types of electronic identities (eg. IP-number) are personal data that can connect to a physical person. Every action taken with personal data constitutes a usage, independent of if it is done automatically or not. An example of a normal usage is collecting, registering, organizing, formatting, storage, processing and deleting of information.

Who is responsible for the personal data we collect?

Leoni Group AB, org. Nr 5594864034, adress: Strindbergsgatan 44, 115 31 Stockholm, is personally responsible for the businesses usage of personal data.

How does Leoni Group AB use your personal data?

In order to manage your order, which includes:

• Shipping (including notification and contact concerning shipment)
• Identification and age verification
• Managing payment (including analysis of possible payment solutions, which can include a check over payment history and gathering of credit information from Klarna). Management of complaints and warranty cases

We collect the following information:

• Name
  
• Personal number
  
• Contact information (eg. Address, email and telephone number)
  
• Payment history
  
• Payment information
  
• Credit information from credit bureaus
  
• Order history (eg. - which products have been ordered or products that will be shipped to another address)
  
• User information for My Account (if you have an account)

Legal grounds

Completion of the purchase agreement. This collection of your personal information is needed so that we can fulfill our obligations under the purchase agreement. If information is not given, our commitment cannot be fulfilled and we are forced to deny your purchase.

Storage period:  Until your order is completed (including shipping and payment) and then for 36 months thereafter, for the purpose of handling any complaints or warranty matters.

In order to fulfill the legal obligations of the company

Necessary handling for compliance with the company's legal obligations under legal requirements, judgments or government decisions (eg the Accounting Act, the Money Laundering Act or the Product Liability Rules.)

We use for this purpose:

• Name
  
• Personal number
  
• Contact information (eg. Address, email and telephone number)
  
• Payment history
  
• Payment information
  
• Your correspondence
  
• Details of purchase (date, place of purchase, possible error / complaint)
  User information for My Account (If you have an account)

Legal grounds: Legal Obligation. This collection of your personal information is required by law. If information is not given, our commitment cannot be fulfilled and we are forced to deny your purchase.

Storage period: Until your order is completed (including shipping and payment) and then for 36 months thereafter, for the purpose of handling any complaints or warranty matters.

In order to manage customers service errands

Which include:

• Communication and answering of any questions to customer service (via telephone or digital channels, including social media).
  
• Identification and questions concerning user accounts
  
• Investigation of any complaints and support claims (including technical support)
  
• Questions and concerns of and before purchase, questions of products, returns, changes to orders and similar errands. 

We use for this purpose:

• Name
• Personal number
• Contact information (eg. Address, email and telephone number)
• Your correspondence
• Details of purchase (date, place of purchase, possible error / complaint)
• User information for My Account (If you have an account)

Legal basis: Balancing of Interest. The processing is necessary to meet our and your legitimate interest in handling customer service matters

Storage period: 36 months after the customer service case has been completed.

In order to prevent misuse of service or the prevention and investigation of crime against the business or customers

• Prevention and investigation of any fraud or any other offences.
• Prevention of junk mail, harassment, unauthorized login to user accounts or other prohibited actions by law or our terms of purchase, membership or service

For this purpose, we use:

• Personal number
  
• Purchase and user generated data (eg. click and search history)
  
• Technical data involving devices used and their settings (eg. Language setting, IP-address, we browser settings, time zone, operating system, screen resolution and platform)
  Information on how our digital services are used

Legal grounds: Compliance with legal obligation (if any) or justified interest. If no legal obligation exists, treatment is necessary to meet our legitimate interest in preventing abuse of a service or preventing, avoiding and investigating violations of the company

Storage period: From the collection and for a period of 36 months thereafter.

For recruitment

Use of job application and eventual employment. Termination of employment. Administration of any rehabilitation and discrimination cases.

• Resume
  
• Name
  
• Telephone number
  
• Email
  
• Address
  
• Photo of applicant, self-given (optional)
  
• Personal number
• Cover letter
• Personal letter, where there may be a history of illness or similar
• Mail exchange between HR and applicant
• Notes from HR overseen interview
• Test results from work samples linked to the service 
• Contact information of references

Legal grounds: A legitimate interest in completing or terminating recruitment processes and, as appropriate, retaining information as security in case of discrimination cases or the like. Expressive consent in cases where sensitive information may occur.

Storage period: 24 months from completion of collection or recruitment process.

In order to fulfill references from recruitment

If someone, during the recruitment process, leaves the contact information of a reference, then we will only save name, telephone number and email to them. We keep this contact information until the end of the recruitment process.

Which sources does Nathalie Schuterman gather your personal information from?

Other than the information you give us yourself, or that we collect from you about your order and how you use our services, we can collect your personal information from another sources (a third party). The information we collect from third parties are as follows:

• Address information from public registers in order to ensure that we have the right address for you
  
• Information about credit rating from credit bureaus, banks or information businesses

Who will share your personal information?

Personal Data Administrations. In cases where it is necessary for us to offer our services, we share your personal data with businesses that are called Personal Data Administrations for us.  A Personal Data Administration is a company that processes the information on our behalf and only according to our instructions. We have personal information assistants who help us with:

• Transportation (logistic company and shippers)
• Payment Solutions (short term companies, banks and other payment service providers)
• Marketing (print, social media, media bureau or advertising agencies)
• IT services (companies that handle necessary operations, technical support and maintenance of our IT solutions)

When your personal information is shared with Personal Data Administrations, it is only for purposes that are consistent with the purposes for which we have collected the information (for example, to fulfill our obligations under the Purchase Agreement). We check all Personal Data Administrators to ensure that they can provide sufficient safeguards regarding the security and confidentiality of personal data. We have written agreements with all personal information officers through which they guarantee the security of the personal data processed and undertake to comply with our security requirements, as well as restrictions and requirements regarding the international transfer of personal data.

We also share your personal information with some companies that are independent personal data administrators. The fact that the company is an independent personally responsible means that we are not controlling how the information submitted to the company will be treated. Independent personal data officers with whom we share your personal information are:

1. Government authorities (police, tax authorities or other authorities) if we are required to do so by law or in suspicion of crime
2. Companies that deal with general freight transport (logistics companies and freight forwarders)
3. Companies offering payment solutions (short term companies, banks and other payment service providers)

When your personal information is shared with a company that is an independently personally responsible, it applies to the company's privacy policy and personal data management.

Where do we process your personal information?


We always strive for your personal data to be processed within the EU / EEA and all our own IT systems are located within the EU / EEA.

How long do we save you personal data?


We will never save your personal information longer than is necessary for each purpose. See more about the specific storage periods for each purpose.

What do you have for right as a registered person?

Right of access (eg. register extract): We are always open and transparent about how we treat your personal information and if you want a deeper insight into what personal data we are dealing with, you may request access to the data. The information is provided in the form of a register extract with the statement of purpose, categories of personal data, categories of recipients, storage periods, information about where the information has been collected and the existence of automated decision making.

Right to rectification

You may request that your personal information be corrected if the information is incorrect. Within the stated purpose, you also have the right to supplement any incomplete personal data. You may at any time withdraw a consent you have given us. For example, consent to send newsletters.

Right to erasure

• You may request the deletion of personal data we are dealing with if you feel the data is no longer necessary for the purposes for which they have been collected or processed
• You object to an interest weighing we have made based on legitimate interest and your objection weighs heavier than our legitimate interest
• You oppose processing for direct marketing purposes
• Personal data is used illegally
• Personal data must be erased to comply with a legal obligation we are subject to
• Personal data that has been collected for a child (under 13 years) for which you have parental responsibility and collection has been made in connection with the provision of information society services (eg. social media)

Right to restriction

You are entitled to request that our processing of your personal data be limited. If you disagree that the personal information we process is correct, you may request limited treatment during the time we need to check whether your personal information is correct. If we no longer need your personal information for the stated purposes, but you need them to determine, enforce or defend legal claims, you may request limited processing of our data. This means that you can request that we do not delete your information. If you object to a balance of interest of legitimate interest that we have made as a legal ground for a purpose, you may request limited treatment for the time we need to check whether our legitimate interests outweigh your interests in getting the data deleted.
If the treatment has been limited in accordance with any of the above situations, we may, in addition to the actual storage, process the data to determine, enforce or defend legal claims, to protect someone else's rights or if you have given your consent.

Right to object to certain types of treatment

You are always entitled to avoid direct marketing and to object to all processing of personal data based on a balance of interest.

• Fair interest: In cases where we use an interest balance as a legal basis for a purpose, you have the opportunity to object to the treatment. In order to continue processing your personal information after such objection, we need to display a legitimate reason for the current treatment that weighs heavier than your interests, rights or freedoms. Otherwise, we may only process the data to determine, exercise or defend legal claims.
• Direct marketing: (including analysis performed for direct marketing purposes): You are able to object to your personal data being processed for direct marketing purposes. The objection also includes the analysis of personal data (so-called profiling) performed for direct marketing purposes. Direct marketing refers to all types of outreach promotional actions (for example, by mail, email and text message). Marketing actions where you as a customer actively chose to use one of our services or else sought us to know more about our services do not count as direct marketing (such as product recommendations or other features and offers in My Account).
  
• If you oppose direct marketing, we will discontinue the processing of your personal information for that purpose, as well as discontinue any direct marketing action. You can change this by changing the settings in My Account, unsubscribe link in marketing mail, or contact customer service.
• Right to data portability: If our right to process your personal information is based on your consent or performance of an agreement with you, you are entitled to request the data relating to you and which you have submitted to us to another personally responsible person (so-called data portability). A prerequisite for data portability is that the transmission is technically possible and can be automated.

How do we handle personal numbers?


We will only process your personal identification number when it is clearly motivated for the purpose, necessary for secure identification, or if there is any other reasonable reason. We will always minimize the use of your personal number, by using, if it is enough, your birth number instead.

How are your personal data protected?

We use IT systems to protect the privacy, integrity and access to information. Only people that actually need to handle your personal information to fulfill our stated purposes have access to them.

What are Cookies and how do we use it?


Cookies are a small text file consisting of letters and numbers sent from our web server and stored on your browser or device. At nathalieschuterman.com, we use the following cookies: 

1. Session cookies (a temporary cookie that expires when you close your browser or device)
2. Durable cookies (cookies remaining on your computer until you delete them or they expire)
3. Step-by-step cookies (cookies set by the site you visit)
4. Third-party cookies (cookies set by third-party site. These are primarily used for analysis, such as Google Analytics)
5. Similar techniques (techniques that store information in your browser or in your device in a manner similar to cookies) 

The cookies we use usually improve the services we offer. Some of our services need cookies to work properly, while others improve the services for you. We use cookies for overall analytical information regarding your use of our services and to save functional settings such as languages and other tasks. We also use cookies to target relevant marketing to you.

What does it include that the Data Inspection board is the regulator?

The Data Inspection board is responsible for monitoring the application of the law, and the person who considers if a company handles personal data incorrectly is able to file a complaint with the Data Inspection Board.

Do you have any questions about our privacy policy?

You can always direct your questions to info@leoni-studio.com.