Privacy Policy for FLOWING DEMO STORE

Your personal privacy is important to xxx ("xxx", or "we"). In this policy we want to inform you about how we process your personal data and what rights you have. Personal data is information that can be linked to you as a private individual, for example your name and your contact information.

To summarize, we process your personal data:

To the extent required to be able to manage and deliver your order.
To provide you with offers and inspiration. Both through newsletters, SMS and targeted personalized marketing in social media, as well as otherwise online and offline.
To communicate with you and answer your questions.
To ask you about xxx and your experience of us.
To remind you of an abandoned “shopping cart”.
To create and maintain a customer account.
To comply with laws and regulations (e.g. consumer and accounting law).

You have several rights under data protection law. For example, you always have the right to object to marketing. You can also read about how you can influence our processing of your personal data – what rights you have. Want to know more? Please read our detailed explanations below. You can read about how, why and for what period of time we process your personal data.

Who is responsible for the processing of your personal data?

xxx, with company registration number xxxxxx-xxxx, is the data controller for the processing of your personal data. Note that our payment solution providers process personal data that they collect from our website when purchases are made and are themselves responsible for their processing.

Contact details

If you want to contact us about the processing of your personal data, contact us at info@xxx.com. Our address is testvägen 1 12345 Testort.

From whom or where do we collect your personal data?

We process personal data that you have shared with us, or that we receive from you in connection with your purchase and when you visit our website.

Who can gain access to your personal data?

Your personal data is mainly processed by us at xxx. We will never sell your personal data. In some cases we share your personal data. Below you will find more detailed information about for what purpose we share which personal data. Among other things, we may need to share your personal data in order to fulfil our obligations to you in a good and efficient way, for example:

To ensure that you pay us, our payment solution providers will gain access to your personal data.
To be able to deliver your products to your home address or collection point and to handle returns, we will share your personal data with our shipping companies.
To collect and publish your reviews on our website, we share your personal data with the provider that supplies us with technical solutions to collect and publish the reviews.
To market relevant products and to make our website as relevant as possible, we share your personal data with those who provide us with marketing services. For example Google and Facebook.
We will share your personal data with IT providers who process the personal data on our behalf as processors to help us with IT services.

Do we transfer your personal data outside the EU/EEA?

xxx generally processes your personal data within the EU/EEA but in individual cases we use providers from countries outside the EU/EEA. When we transfer your personal data outside the EU/EEA, we ensure that there is a sufficiently high level of protection to ensure that the transfer takes place in accordance with the GDPR. xxx may transfer your personal data to the USA, to our newsletter provider and our providers that supply services to market relevant products and to make our website as relevant as possible. Contact us if you have any questions about how we share your personal data.

How can you influence the processing of your personal data?

Under the Data Protection Act you have several rights to influence our processing of your personal data. Below you will find more detailed information about your rights. If you have any questions about this or want to exercise any of these rights, you are welcome to contact us.

Right to withdraw consent

In those parts where we base the processing of your personal data on consent, you have the right to withdraw your consent to the processing of your personal data at any time. Your withdrawal will apply from the time you withdraw the consent.

Right to object

You have the right at any time to object to the processing of your personal data that is based on legitimate interest with reference to reasons relating to your specific situation. Read more about what balancing of interests means below. You always have the right to object to direct marketing from us, such as newsletters. In some other cases the right to object does not exist (e.g. when we are required by law to retain your personal data).

Right of access

You have the right to obtain confirmation as to whether we process personal data concerning you. You can send your request to info@xxx.com. If we process your personal data, you have the right to access a copy of the personal data that we process as well as information about the processing.

Right to rectification

You have the right to obtain the rectification of inaccurate personal data concerning you and to ask us to have incomplete personal data completed.

Right to erasure (“the right to be forgotten”) and restriction of processing

Under certain circumstances you have the right to the erasure of your personal data. This applies for example if the personal data is no longer necessary for the purpose for which it was collected or processed or when you withdraw your consent on which the processing is based and there is no other legal basis for continuing the processing. You also have the right to request that xxx restricts the processing of your personal data. This applies for example when the accuracy of the personal data is contested by you or if the processing is unlawful and you oppose the erasure of the personal data and instead request that the use be restricted. It also applies during the time we are verifying a balancing of interests in cases where you object to our processing of your personal data.

Right to lodge a complaint with a supervisory authority

You always have the right to lodge a complaint with a supervisory authority. You can do this in the particular EU/EEA Member State where you have your residence, where you work or where an alleged infringement of applicable data protection legislation has occurred. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (IMY).

How and why do we process your personal data?

Our aim is to be as transparent as possible regarding how and why we process your personal data. In the tables below you can read more detailed information about why we process your personal data (purposes of the processing), which personal data we process, our legal basis for processing your personal data and for how long we process your personal data for each purpose.

Processing required for completing purchases

We process your personal data so that we can complete your purchase and for example deliver the product. Please note that our payment solution providers also process your personal data in order to administer the payment for your order. Our payment solution providers are independent data controllers for such processing. Some of our payment solution providers allow you to choose an easier way to make purchases by automatically filling in your personal data or being remembered on your device.

Purpose of the processing	Personal data processed	Legal basis for the processing	How long do we store the data?
Your profile on xxx and history of orders, communication and service matters.	Name, contact details, personal identity number, information about history of orders, communication and service matters	Performance of contract	Until you choose to delete your profile
Newsletters and targeted ads	Name, address, phone number, email, date of birth, purchase history	Consent	Until you withdraw your consent (opt-out)
Interaction with xxx	Name, contact details, reviews, questions and answers	Legitimate interest	Until you choose to delete your information
To administer your purchase and deliver goods	Name, contact details, information about order, delivery address, account details	Performance of contract (B2C), Legitimate interest (B2B)	36 months + delivery time
Communication with customer service	Name, contact details, information provided in the customer service matter.	Legitimate interest	36 months
Accounting of transactions	Name, contact details, information about orders and payments	Legal obligation	From when you make your purchase and seven to eight (7–8) years in accordance with the Swedish Accounting Act and five to ten (5–10) years in accordance with anti-money laundering legislation.

Amendment of this privacy policy

xxx reserves the right to amend this privacy policy. The policy applicable at any given time is available on our website.

This privacy policy was updated by xxx on 31 March 2025.