FRI FRAKT PÅ ALLA ORDRAR!

Du har inga varor i din varukorg

Delsumma: 0 SEK

Privacy Policy/Integrity Policy Powerwoman.com 


25 May 2018



At Powerwoman, we value your privacy and always strive for a high level of protection of personal data (e.g. we would never sell your personal information to another company). This privacy policy explains how we collect and use your personal information. It also describes your rights and how you can exercise them.

It is important that you read and understand the privacy policy and feel safe in our treatment of your personal data. You are always welcome to contact us if you have any questions.

What is personal data and what is processing of personal data?

Personal data is any information that directly or indirectly can be attributed to a natural person who is in life.  Encrypted data and various kinds of electronic identities (e.g. IP address) are personal data if they can be linked to individuals.

The processing of personal data is all that is done with personal information. Any action taken with personal data constitutes processing, regardless of whether it is automated or manually. Examples of common treatments is the collection, recording, organization, structuring, storage, processing, transfer and deletion.

Who is responsible for the personal information we collect?

AMKW Design & Training AB 556926-3774 is the personal data representative responsible for the company's processing of personal data.

Valid from 25 May 2018



What personal information do we collect about you as a customer and for what purpose (why)?

PURPOSE PROCESSING WHICH IS CARRIED OUT CATEGORIES OF PERSONAL DATA
To be able to manage orders/purchases.

Delivery (including notification and contact related to the delivery).

Identification and age verification. Handling of payment (including analysis of possible payment solutions which may include a check against the payment history and collection of credit reports from Klarna).

Address validation in SPAR. Handling of complaints and warranty issues.

Name.
Personal identification number. Contact information (e.g. address, e-mail and phone number). Payment history. Payment information. Credit reports from credit reporting agencies. Purchase information (e.g. whichitem that has been ordered or if the item is to be delivered to another address).
Legal basis: Fulfillment of the purchase agreement. This collection of your personal information is required in order to fulfil our obligations under the purchase agreement. If the information is not provided, our commitments cannot be fulfilled and we are therefore forced to refuse your purchase.
Retention period: Until the purchase has been completed (including the shipment and payment) and for a period of 36 months thereafter in order to be able to handle any complaints and warranty claims.
     
PURPOSE PROCESSING WHICH IS CARRIED OUT CATEGORIES OF PERSONAL DATA
In order to fulfil the company's legal obligations Necessary management for compliance with the legal obligations in accordance with legal requirements, or the compulsive decision (e.g. the Accounting Act, the Money Laundering Act or the rules of product liability and product safety, which may require the development of communication and information to the public and customers about product alerts and product recalls regarding, for example, a defect or health hazard).

Name. 

Personal identification number. Contact information (e.g. address, e-mail and phone number). Payment history. Payment information page. 

Your correspondence.

Details of purchase date, place of purchase, possible error/complaint.

Legal basis: Legal obligation. This collection of your personal information is required by law. If the information is not provided, our legal obligation cannot be fulfilled and we are therefore forced to refuse your purchase.
Retention period: Until the purchase has been completed (including shipment and payment) and for a period of 36 months thereafter.
     
PURPOSE PROCESSING WHICH IS CARRIED OUT CATEGORIES OF PERSONAL DATA
In order to be able to take care of customer service issues.

Communication and the answer of any customer service queries (via telephone or in digital channels, including social media).

Identification.
Investigation of complaints and support issues.

Name.
Personal identification number. Contact information (e.g. address, e-mail and phone number).

Your correspondence. 

Information regarding the time, place of purchase, any errors/complaints.

Technical details of your equipment.

User data for My Pages

(members only).

Legal basis: Legitimate interest. Processing is necessary to meet your and our legitimate interest in dealing with customer service issues.
Retention period: Until the customer service issue has been resolved.
     
PURPOSE PROCESSING WHICH IS CARRIED OUT CATEGORIES OF PERSONAL DATA
In order to implement and manage participation in competitions and/or events.

Communication before and after participation in a contest or an event (e.g. confirmation of reporting, questions or evaluations).

Identification and control of age. The selection of the winners and brokering of any winnings.

Name.
Personal identification number or age. Contact information (e.g. address,

e-mail and phone number). Information submitted as part of a contest

entry.
Information submitted in the

evaluations of events.

Legal basis: Legitimate interest. The processing is necessary to meet our and your legitimate interest of managing your participation in contests and/or events.
Retention period: During the time the contest/event (including the eventual evaluation) is in progress.
     
PURPOSE PROCESSING WHICH IS CARRIED OUT CATEGORIES OF PERSONAL DATA
To be able to evaluate, develop and improve our services, products and systems for the customer community at large. Adaptation of services to be more user-friendly (e.g. changing the user interface to simplify information flow or highlight features often used by customers in our digital channels). The production of material in order to improve the supply and logistics flow (e.g. by being able to forecast purchasing, inventory and supplies). The production of material in order to develop and improve our product range. The production of material for developing and improving our resource efficiency from an environmental and sustainability perspective (e.g. by streamlining the purchasing and planning of deliveries). Provide our customers with the ability to influence our range. The development of material for improving IT systems in order to increase the safety of the company and our visitors/customers. Analyses of the data we collect for these. purposes. Based on the data we collect (e.g. purchase history, age and gender) you are sorted into a group (so-called segments) for which the analyses are then made, without any connection to you as an individual. The insights from the analysis are the basis for which products are purchased and how we develop our services/products.

Age. Gender. Place of residence. Correspondence and feedback regarding our products and services.

Purchase and user-generated data (e.g. click and visitor history). Technical data concerning units used and its settings (e.g. language settings, IP address, browser settings, time zone, operating system, screen resolution and platform). Information about how you have interacted with us, i.e. how you have used the service, check the logging method, where and how long different pages visited, response times, download errors, how to reach and leave the service, etc.

Legal basis: Legitimate interest. Processing is necessary in order to meet our and our customers' legitimate interest to evaluate, develop and improve our services, products and systems.
Retention period: From the collection and for a period of 36 months thereafter.
     
PURPOSE PROCESSING WHICH IS CARRIED OUT CATEGORIES OF PERSONAL DATA
In order to prevent abuse of a service, or to prevent, forestall and investigate offences against the company. Prevention and investigation of potential fraud or other violations of law. Prevention of spam, phishing scams, harassment, attempts at illegal logging into user accounts or other actions that are prohibited by law or our purchase, member or terms of service. Protection and improvement of our IT environment from attacks and intrusions. Personal identification number. Purchase and user-generated data (e.g. click-and visitor-history). Technical data concerning units used and its settings (e.g. language setting, IP address, browser settings, time zone, operating system, screen resolution and platform). Information on how our digital services are used.
Legal basis: fulfilment of the legal obligation (if such exists) or legitimate interest. If no legal obligation exists, processing is necessary in order to satisfy our legitimate interest to prevent misuse of a service, or to prevent, forestall and investigate offences against the company.
Retention period: From the collection and for a period of 36 months thereafter.



Which personal information do we collect about you as a member of our loyalty program--and for what purpose?

PURPOSE PROCESSING WHICH IS CARRIED OUT CATEGORIES OF PERSONAL DATA
To administer your membership and to be able to create My Pages.

The creation of a login function. Ensuring your identity and age. The maintenance of accurate and updated data.

The possibility for you to track your purchase and payment history. The ability for you to save favourites and similar facilitation measures.

Management of your customer choices and preferences.

Name.
Personal identification number. Contact information (e.g. address, e-mail and phone number).

My Pages: Purchase history. Payment history. Payment information. User name and password. Settings regarding your profile, and your personal choice. 

Legal basis: Fulfilment of the agreement for membership in the loyalty program. This collection of your personal information is required in order for us to fulfil our commitments under the agreement on the membership in the loyalty program. If the data is not provided, we cannot fulfil our commitments and we are therefore forced to deny your membership.
Retention period: Until the membership is cancelled (can be done manually or automatically due to inactivity for a period of 24 months).
     
PURPOSE PROCESSING WHICH IS CARRIED OUT CATEGORIES OF PERSONAL DATA
To be able to manage your points and rewards.

Registration and calculation of bonus points based on your purchases.

Communication regarding your bonuses. Automatic transfer of bonuses to your profile so you can use them for purchases.

Name.
Personal identification number. Membership number. Membership level. Contact information (e.g. address, e-mail and phone number). Purchase history.
Legal basis: Fulfilment of the agreement for membership in the loyalty program. This collection of your personal information is required in order for us to fulfil our commitments under the agreement on the membership in the loyalty program. If the data is not provided, we cannot fulfil our commitments and we are therefore forced to deny your membership.
Retention period: Until the membership is cancelled (can be done manually or automatically due to inactivity for a period of 24 months).
     
PURPOSE PROCESSING WHICH IS CARRIED OUT CATEGORIES OF PERSONAL DATA
To be able to manage your benefits and offers.

Creation of your personalised offers and general member offers, personalised news, product recommendations, inspiration, benefits associated with your membership level and invitations to events. Analyses of the data we collect for the purpose. We look, for example, at your purchase history, age, gender, place of residence, given preference (on products and communication channels) as well as results from customer satisfaction or market research surveys.

Analyses of the data we collect for the purpose. Based on the data we collect (e.g. purchase history, age, gender and preferences), we make an analysis at the individual level that result in you being sorted into a group (so-called segments) or get a unique pro le. Insights from this analysis are the basis for your personal offers and customised benefits, etc. Therefore, different members can receive various benefits and offers.

Name.
Username. Membership number. Membership level. Date of birth. Gender. Contact information (e.g. address, e-mail and phone number). Place of residence. Purchase history. Purchase and user-generated data (e.g. click and visited history). Specified customer choice regarding products and services.
Legal basis: Fulfilment of the agreement for membership in the loyalty program. This collection of your personal information is required in order for us to fulfil our commitments under the agreement on membership in the loyalty program. If the data is not provided, we cannot fulfil our commitments and we are therefore forced to deny your membership.
Retention period: Until the membership is cancelled (can be done manually or automatically due to inactivity for a period of 24 months).



What personal information do we collect about you as a member of our TEAM POWERWOMAN ATHLETIC CLUB--and for what purpose?

PURPOSE PROCESSING WHICH IS CARRIED OUT CATEGORIES OF PERSONAL DATA
To administer your membership and to be able to send important information, marketing, competitions, trips, promotions, etc. to you as a member. Registration via our website with the collection of data to manage membership. Ensuring your identity and age. Maintenance of accurate and up-to-date data. Name. Contact information (e.g. address, e-mail and phone number).
Legal basis: Fulfilment of the agreement on the membership with the Team Powerwoman Athletic Club. This collection of your personal information is required for us to fulfil our commitments under the agreement on the membership. If the data is not provided, we cannot fulfil our commitments and we are therefore forced to deny your membership.
Retention period: Until the membership is cancelled (can be done manually or automatically due to inactivity for a period of 24 months).



From which sources do we collect your personal information?

In addition to the information you provide to us, or that we collect from you based on your purchase and how you use our services, we may also collect personal information from someone else (so-called third-party). The information we collect from third parties is as follows: 1) Address information from public records to be sure that we have the correct contact details for you. 2) Information on the credit rating from the credit rating agencies, banks or information providers.

With whom can we share your personal information?

Third party processors. In those cases where it is necessary for us to be able to offer our services, we will share your personal information with companies that are so-called third-party processors for us. A third-party data processor is a company that deals with this information on our behalf and under our instruction. We have third party personal data processors who assist us with:

1) Transport (logistics companies and freight forwarders). 2) Payment solutions (card-issuing companies, banks and other payment service providers). 3) Marketing (print and distribution, social media, media agencies or advertising agencies). 4) IT services (companies that handle the necessary operations, technical support and maintenance of our IT solutions).

When your personal information is shared with third party personal data processors, it is only for purposes that are consistent with the purposes for which we collected the information (for example, to fulfil our obligations under the Purchase Agreement or the Loyalty Program Membership Terms). We check all third party personal data processors to ensure that they can provide sufficient guarantees on the security and confidentiality of personal data. We have written agreements with all third-party processors through which they guarantee the security of the personal data processed and undertake to comply with our security requirements as well as restrictions and requirements regarding the international transfer of personal data.

Companies which are independent data controllers. We also share your personal information with certain companies which are independent controllers. That the companies are independent third party personal data processors means that we do not control how information provided to the company is processed. Independent personal data officers with whom we share your personal information are:

1) Government agencies (police, tax authorities or other authorities) if we are required to do so by law or in suspicion of crimes. 2) Companies dealing with general freight transport (logistics companies and freight forwarders). 3) Companies offering payment solutions (card-issuing companies, banks and other payment service providers).

When your personal information is shared with a company that is a third-party data controller, that company's privacy policy and personal data management are followed.

Where do we process your personal data?

We always strive for your personal data to be processed within the EU/EEA and all our own IT systems within the EU/EEA. With systematic support and maintenance, we can, however, be obliged to transfer the information to a country outside the EU/EEA, for example. if we share your personal information with a third party personal data processor which, either itself or through a subcontractor, is established or stores information in a country outside the EU/EEA. The assistant may, in these cases, only take part of the information that is relevant for the purpose (e.g. log les).

Irrespective of the country in which your personal data is processed, we will take all reasonable legal, technical and organisational measures to ensure that the level of protection is the same as in the EU/EEA. In cases where personal data is processed outside the EU/EEA, the protection level is guaranteed protection either by a decision from the European Commission that the country in question ensures an adequate level of protection or by the use of so-called appropriate safeguards. Examples of appropriate safeguards are an approved code of conduct in the destination country, standard contractual clauses, binding corporate rules or Privacy Shield. If you would like to receive a copy of the security measures that have been taken or information on where these have been made available, please free to contact us.

How long do we keep your personal data?

We never store your personal information longer than is necessary for the respective purpose. Find out more about the specific retention periods under each purpose.

What are your rights as a data subject?

Right of access (so-called extract from the register). We are always open and transparent with how we treat your personal data. If you would like deeper insight into what personal information about you we process, you may request to receive access to the data (this information is provided in the form of a statement specifying the purposes, categories of personal data, categories of recipients, data retention periods, the information about where the information has been collected and the presence of automated decision-making).

Keep in mind that if we receive a request for access, we may ask for additional information in order to ensure the effective management of your request and that the information provided to the right person.

The right to rectification. You may request that your personal information be corrected if the data are incorrect. Within the framework of the stated purpose you also have the right to complete any incomplete personal data.

Please be aware that, as a member, you can change certain information directly through My Pages.

The right to erasure. You can request deletion of personal data we process about you if: the data is no longer necessary for the purposes for which they were collected or processed. You object to a balancing of interests we have made based on interest and your reasons for objection weigh heavier than our legitimate interests. You object to processing for direct marketing purposes. Personal data is processed in an unlawful manner. Personal data must be deleted in order to comply with a legal obligation, to which we are subject. Personal information collected about a child (under 13 years of age) for whom you have parental responsibility, and the collection has taken place in connection with the offering of information society services (e.g. social media).

Please be aware that we may have the right to refuse your request if there are legal obligations that prevent us from immediately deleting certain personal information. These obligations come from accounting and tax law, banking and money laundering laws, but also from the consumer rights legislation. It is also possible that the processing is necessary for the establishment, exercise or defence of legal claims. Should we be prevented from meeting a request for deletion, we will instead to block personal information from being used for purposes other than the purpose for which prevents the requested deletion.

The right to restriction. You have the right to request that our treatment of your personal data is restricted. If you dispute the accuracy of the personal information we process, you may request restricted processing during the time we need to verify the accuracy of the information. If we no longer require personal information for the identified purposes, but you need them in order to establish, exercise or defend legal claims, you may request restricted data processing from us. This means that you can request that we do not delete your information.

If you have objected to a balancing of the interest that we have made as a legal basis for a purpose you may request restricted processing during the time we need to verify whether our legitimate interests override your interest in having the data deleted.

If processing has been restricted in accordance with any of the above scenarios, we are allowed to, in addition to the actual storage, process the data in order to establish, exercise or defend legal claims, to protect someone else's rights or if you have provided your consent.

The right to object to certain types of processing. You always have the right to discontinue direct marketing and to object to any processing of personal data which is based on a balancing of interests.

Interest: where we use a balancing of interests as the legal basis for a purpose, you have the opportunity to object to the processing. To be able to continue to process your personal data after such an objection, we need to be able to demonstrate some compelling legitimate grounds for the current processing which override your interests, rights or freedoms. In the other case, we only process the data in order to establish, exercise or defend legal claims.

Direct marketing (including analyses carried out for direct marketing purposes): you have the opportunity to object to your personal data being processed for direct marketing. The opposition also includes the analysis of personal data (so-called pro recirculation) carried out for direct marketing purposes. Direct marketing refers to all types of outreach marketing efforts (e.g. via postal mail, e-mail and SMS). In promotion where you as a customer actively opted to use one of our services, or otherwise sought out us to get to know more about our services, do not count as direct marketing (e.g. product recommendations or other features and promotions on My Pages).

If you object to direct marketing, we will cease the processing of your personal data for that purpose as well as stop all types of direct marketing actions.

Keep in mind that you always have the opportunity to influence which channels are used for mailings and personalised offers. For example, you can choose to only receive offers from us via e-mail, but not SMS. In this case, you should not object to the processing of personal data as such, but instead limit our communication channels (by changing the settings on My Pages or contact customer service).

The right to data portability. If our right to process your personal data is based on either your consent or completion of an agreement with you, you have the right to request to obtain the data relating to you and that you have provided to us or to have it transferred to another controller (known as data portability). A prerequisite for data portability is that the transfer is technically feasible and can be automated.

How do we handle personal identification numbers?

We will only process your personal identification number when clearly motivated for the purpose, if necessary for secure identification or if there is any other noteworthy reason. We always minimise the use of your personal identification number as much as possible, in cases where there is sufficient, instead use your date of birth.

What are cookies and how do we use them?

Cookies are a small text consisting of letters and numbers that is sent from our web server and stored on your browser or device. The cookies we use normally enhance the services we offer. Some of our services require cookies to function properly, while others improve services for you. We use cookies for comprehensive analytical information regarding your use of our services and to save functional settings, such as language and other data. We also use cookies to target relevant advertising to you. 

Can you control the use of cookies?

Yes! Your browser or device allows you to change settings for the use and scope of cookies. Go to the settings of your browser or device to learn how to adjust the settings for cookies. Examples of things you can adjust are the blocking of all cookies, accepting only first party cookies or deleting cookies when you close your browser. Keep in mind that some of our services may not function properly if you block or erase cookies. You can read more about cookies in general at the Post and Telecom agency's website, pts.se.

How do we protect your personal information?

We use IT systems to protect the confidentiality, integrity and availability of personal data. We have taken special security measures to protect your personal data against unlawful or unauthorised processing (such as illegal access, loss, destruction or damage). Only those persons who actually need to process your personal information in order for us to fulfil our stated purposes have access to it.

What meant by the Swedish Data Inspection Board being the supervisory authority?

The Swedish Data Inspection Board is responsible for monitoring the application of legislation, and anyone who believes that a business handles personal information in an incorrect manner can submit a complaint to the data Inspection board.

What is the easiest way to contact us if you have any questions about data protection?

We may make changes to our privacy policy. The latest version of the privacy policy is always available on this website. When the updates that are of vital importance to our processing of personal information (such as modification of the specified purposes or categories of personal information) or updates that are not crucial to processing but which can be of vital importance to you, you will receive information via e-mail (if you have provided an e-mail address) in good time before the updates go into effect. When we make available information on updates, we will also explain the meaning of the updates and how they may affect you.

The privacy policy was last updated 28 April 2018.

Nyhetsbrev

Subscribe to receive inspiration, ideas, and news in your inbox.