Security & Privacy
This policy applies to the processing of personal data that Luxway Nordic AB collects about you, which may come, for example, from our websites (including social networks belonging to third parties), electronic mail, text messages, telephone, shop, registration forms, in other contacts with us, camera surveillance, from third parties and from publicly available information.
With reference to EU law, we refer below to the General Data Protection Regulation (GDPR) and other applicable Swedish data protection legislation.
What data do we collect about you?
"Personal data" means data that relates to you and can identify you.
In general, you can use our website without providing us with any non-technical information. On some pages, information will be requested from you, for example in connection with purchases and service requests or if you register to receive electronic newsletters. In addition, we may use information about you from other sources provided by third parties, such as marketing and sales activity companies.
The personal data collected about you may include:
Personal and contact data - such as your name, address, email address and telephone number, demographic data (such as date of birth, age, gender, geographical location, favorite products and hobbies) and, where clearly justified by the purpose of the processing or the importance of secure identification, also social security numbers.
Financial information - information needed to complete an order or that you use to make a purchase, such as payment or credit card details.
Technical data about your device or internet connection - such as IP address, cookies, geographical location and login details.
Information about your user behavior - such as your search patterns and activities on the website, your response time for pages and how you use our services.
User-generated information - content you voluntarily register, submit or publish, such as in connection with customer service calls (which may be recorded), competitions, newsletter sign-ups, and content you share with us by uploading to our website or social networks (which you allow the network to share with us), such as texts, videos and photographs.
Information from other sources - Publicly available information or information from our partners that we collect, for example, to keep our data about you up to date or to secure, for example, payment.
Purpose and legal basis
In order for our processing of your personal data to be legal, it is assumed that there is a legal basis for this, i.e. that it is necessary to fulfill a contract with you or a legal obligation incumbent on us, or that the processing is done after a balance of interests or that you have given your consent to a specific processing. Below are examples of the purposes for which we process your personal data and the legal basis on which this is done.
LUXWAY processes your personal data for various purposes. Mainly, LUXWAY processes your data for the following purposes and the following stated legal bases for the same:
One of our main purposes for collecting personal data is to fulfill our obligations to you as a customer, such as processing and delivering your orders, invoicing and providing customer service and other obligations related to the purchase of our products. For example, we may need to answer your questions via our customer service linked to the purchase and send out information to you for product safety purposes, e.g. if any of our products need to be recalled, and otherwise ensure compliance with legal requirements (e.g. the Accounting Act).
Legal basis: Performance of a contract (terms of sale) or legal obligation
Another main purpose is to offer you good products and services through customized services and to deliver better services with more relevant content. We use the data we collect to provide you with information on products you request, but also to better understand our customers. To achieve this, we conduct, among other things, customer surveys. Furthermore, we analyze information about our customers' demographic and geographic circumstances, interests and behavior based on the information we receive from our website or other services, known as profiling. Customer and market analysis and processing for statistical purposes are performed at an aggregated level and are not intended to identify individual customers.
Legal basis: Legitimate interest
We may use data about you to send you newsletters by post, email, SMS/MMS or telephone, to inform you about new products, promotions, offers, competitions and other information about our products and activities that we offer and that we believe may be of interest to you. We may thus use your data for direct marketing, including profiling, unless you have instructed us not to do so. However, insofar as you do not have a customer relationship with us or have not had one in the last 12 months, we will only use your data for electronic direct marketing if you have given your consent. Your personal data may also be used for interest-based online advertising through us or the digital advertising networks we work with, which in some cases may be customized to your interests based on information we have collected, known as profiling.
You may at any time object to our use of your personal data for direct marketing purposes by contacting us as described under the heading "Contact" below, or directly in our electronic mailings.
Legal basis: Legitimate interest or consent (unless explicitly stated otherwise at the time of collection of your personal data).
LUXWAY's legitimate interest in the above-mentioned personal data processing is to be able to offer you a better shopping and customer experience and to provide you with personalized offers and other relevant information.
Information about cookies
Who do we disclose your data to?
We treat your personal data with the utmost care and your data is only used by us and selected third parties.
Third parties that we engage to help us run our business (such as for customer surveys and mailings) are only allowed to use your personal data on our behalf and for the specific tasks they have to perform on our instructions and act as data processors for us. They are obliged to keep your personal data confidential and secure. If required by law, you have the right to receive a list of any processors who process your personal data on our behalf.
In order to offer better services and for marketing purposes, we may also forward your personal data to third parties, usually as independent data controllers, in order for them to perform a service for us or you, for example for address updates, a postal or shipping service company to deliver products, insurance companies, banks/credit information companies or to digital advertising networks with which we cooperate.
We may also disclose personal data in other specific cases, such as when we have reason to believe that the information is necessary to identify, contact or bring legal action against someone who may have infringed the website, or who otherwise infringes or violates our rights or property or the rights of our customers or other visitors.
The transfer of personal data to countries outside the EU/EEA requires that the country in question has an agreement with the EU/EEA, that the country is considered to have adequate data protection legislation, or that we have concluded an agreement with the relevant third party that they are obliged to apply clauses approved by the European Commission regarding the protection of personal integrity. You can find a list of approved third countries and standard clauses on the European Commission's website and on the Swedish Data Protection Authority's website on the transfer of data to third countries.
In accordance with the law, you have the right to request information about the personal data we hold about you after you have identified yourself and clearly indicated what information you wish to receive. Such a request must be in writing and signed by yourself and sent to the address given below under the heading Contact below. We will respond to your request as soon as possible and within one month. In cases where we are unable to comply with your request, we will notify you and explain why.
If you believe that your data is inaccurate or incomplete, you have the right, in the manner and to the extent provided by law, to contact us with a request for rectification. We will correct or update your data as soon as reasonably possible.
You also have the right, as provided by law, to request the deletion of your data or to request that we restrict the processing of your personal data and to withdraw any consent. You also have a legal right to have the personal data you have provided to us transferred (ported).
Please note that we may be required to retain necessary personal data in connection with deletion, withdrawal of consent or porting to fulfill our legal or contractual obligations. We may also be permitted by law to retain certain personal data to meet our business needs.
You have the right to object to such processing of your personal data by us on the basis of legitimate interests, including profiling. We must then, after you have specified the processing to which you object, demonstrate that there are overriding interests. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.
How long do we keep your personal data?
We keep your personal data only for as long as it is necessary for the purposes of this personal data policy or as long as it is required by law or contract. Your personal data is deleted or anonymized when it is no longer relevant for the purposes for which it was collected or no longer required by law or contract.
What do we do to protect your data?
To prevent unauthorized access, use, alteration, destruction or disclosure, we have put in place appropriate and reasonable standards to protect and secure the information about you that we process. These measures are designed to prevent unauthorized or unlawful processing of your data and accidental loss or destruction of, or damage to, that data. Among other things, LUXWAY uses SSL (Secure Socket Layer) which means that the orders you place are encrypted.
Should a personal data breach be discovered, this will be reported to the Data Inspectorate and to you in the manner prescribed by law.
Links to other websites
Please note that this website may contain links to other websites. In the event that you follow such a link, this may result in you visiting other websites that contain other rules for privacy protection than those stated in this personal data policy.
Amendment of the personal data policy
Complaints and compensation
If you believe that the processing of your personal data has been handled incorrectly, please notify us as soon as possible. You also have the opportunity to submit a complaint to the Swedish Data Protection Authority regarding our processing of personal data.
If you believe that you have suffered damage due to our processing of your personal data in violation of the law, you may be entitled to damages. You can then request damages from us or take legal action in court.
LUXWAY with organization number: SE015567170302, is responsible for the processing of your personal data as described above, unless otherwise expressly stated in connection with the collection of your data. LUXWAY complies with Swedish data protection legislation. If you have questions about the policy or our personal data processing, please contact us as below.
Address: Datavägen 43 A. 436 32 Askim
Phone: +46 31 899080