Privacy Policy
Valid from and including 25/05/2018 (last updated 28/08/2024)
Privacy Policy for Morakniv AB
Morakniv AB (hereinafter referred to as “Morakniv,” “we,” “our,” and “us”) appreciate you reading our privacy policy. In this privacy policy, we inform you about how we process your personal data and your rights regarding our processing of your personal data.
If you have any questions regarding Morakniv’s processing of your personal data, wish to withdraw your consent or want to exercise any of your rights, you are welcome to contact us at info@morakniv.se.
For information on how we handle cookies, please visit our Cookie Policy.
Processing of personal data
Personal data refers to any information that relates to an identified or identifiable natural person, such as the person’s name, address, phone number or email address. Our processing of personal data is conducted in accordance with the regulations regarding Swedish privacy legislation and the General Data Protection Regulation (“GDPR”).
Data controller
Morakniv AB (registration number 556035-0935) is responsible as the data controller for the processing of your personal data when you visit, make purchases, and contact us on our website, interact with us on our social media platforms, or engage with us directly in any other manner.
Parties with access to your personal data
In addition to our own access to your personal data, we may share your personal data with the following parties:
- IT providers who process personal data on our behalf (as data processors). This is done to ensure we have an IT system that allows us to operate our business in a functional way for users;
- Payment service providers who process your personal data to manage your payment when making a purchase through our e-commerce platform;
- Transport service providers who process your personal data for shipments and returns after a purchase made through our e-commerce platform;
- Google, Meta (Facebook and Instagram), and Pinterest, which manage the digital media services we use to provide you with marketing as an actual or potential customer;
- Google, which performs analyses through Google Analytics on how our website is used and therefore gains access to your personal data when you use the website;
- Other potential external partners who assist us in our marketing efforts.
Sharing of personal data outside the EU/EEA
As a general rule, we and the parties with whom we share your personal data, as mentioned above, process your personal data only within the EU/EEA. Where possible, we have anonymized personal data to ensure that your personal data is not processed outside the EU/EEA.
However, exceptions apply in the following cases:
- When using our website, we utilize services from parties such as Google, Meta and payment service providers that are wholly or partially based in a third country (USA), and your personal data will therefore be shared outside the EU/EEA with these parties.
- On July 10, 2023, the European Commission decided that the US provides an adequate level of protection for the transfer of personal data under the so-called “EU-US Privacy Framework,” and your personal data will be processed by parties certified under this framework. The parties mentioned in the above point have also taken protective measures to ensure that your personal data receives a level of protection that is essentially equivalent to that within the EU/EEA.
Detailed description of processing of personal data
Below, we summarize the various situations where we may collect personal data about you, which personal data we process, the legal basis for the processing, and how long we store the data.
Communication as a customer via email, contact form on our website or social media
Personal data processed: Name, email address, and, if provided by you, phone number and address.
Legal basis for processing: Legitimate interest. Our processing of personal data is necessary to communicate with you.
Storage period: Personal data is stored as long as there is a need to manage the contact you have initiated with us. On social media, the data remains until you delete the comments and/or communication yourself (or they are removed for another reason).
Matters related to our E-commerce services – Purchases
Personal data processed: Name, email address, address, phone number, order information, payment information, and customer login details such as username if you have an account with us.
Legal basis for processing: Fulfillment of contract and legal obligation. The processing is necessary for us to fulfill the agreement regarding your purchase and to comply with consumer protection legislation.
Storage period: Personal data is stored as long as needed to complete and finalize the purchase process and to comply with applicable accounting legislation. If you have an account with us, the data is stored as long as your account is active, which is until you request us to close your account.
Matters related to our E-commerce services – Customer Service, complaints and similar matters
Personal data processed: Name, email address, phone number, order information, and any other personal data you provide during communication with us.
Legal basis for processing: Legal obligation, fulfillment of contract, and/or legitimate interest. The processing is necessary to fulfill our agreements with you, comply with consumer protection legislation, and to assist you satisfactorily with your inquiry (legitimate interest). In case of legal claims against us, we process personal data to manage and respond to such claims.
Storage period: Personal data related to customer service matters is stored as long as needed to assist you with your inquiry, but no longer than one year after the case is closed. Personal data related to claims is stored as long as the claim is or can be asserted against us.
Account on our website
Personal data processed: Name, email address, address, phone number, historical order information, payment information, customer login details.
Legal basis for processing: Fulfillment of contract. We need to process your personal data to create an account for you.
Storage period: Personal data is stored as long as you have an active account with us.
Marketing – personalized offers and event invitations
Personal data processed: Name, email address, address, phone number.
Legal basis for processing: Legitimate interest.
Storage period: Personal data is stored for one year from the collection of the data. You can opt-out of marketing from us at any time (see “Marketing – Request to Opt-Out of Marketing”).
Marketing – customized offers displayed on other websites
Personal data processed: IP address, geographic location, name, phone number, address, date of birth, email address.
Legal basis for processing: Consent. We obtain your consent to provide you with customized marketing on pages provided by Google, Meta (Facebook and Instagram). You can withdraw this consent at any time.
Storage period: 12 months.
Marketing – newsletters
Personal data processed: Email address.
Legal basis for processing: Legitimate interest. The processing of your personal data is necessary for you to receive our newsletters.
Storage period: Until you unsubscribe from our newsletters or otherwise notify us that you no longer wish to receive them.
Marketing – request to opt-out of marketing
Personal data processed: Email address.
Legal basis for processing: Legal obligation. We must, according to marketing laws, ensure that we do not direct marketing to you that you do not wish to receive.
Storage period: Indefinitely in a separate register for marketing opt-out.
Communication as a supplier, reseller or partner (including potential ones) via email, contact form on our website or social media
Personal data processed: Name, email address, and, if provided by you, phone number, professional title, address, and other personal data.
Legal basis for processing: Legitimate interest. The processing is necessary to
enter into and negotiate agreements and communicate with you as a representative of your company.
Storage period: If we do not enter into an agreement with you/your company, your personal data will be stored for up to three years after our last contact. If we enter into an agreement, your personal data will be stored until the agreement is terminated.
Analysis on our website via Google Analytics
Personal data processed: IP address, geographic location, and information Google has about which websites you visited before visiting our website.
Legal basis for processing: Consent. We ask for your consent for Google Analytics to collect data about you when you visit our website. You can withdraw this consent at any time.
Storage period: Personal data is stored by us for 12 months. Google continues to process your personal data as an independent data controller.
Your rights regarding personal data processing
You always have certain rights regarding your personal data processing, which we list below. You can also visit the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten) to learn more about your rights here. If you wish to exercise any of your rights, please contact us at info@morakniv.se.
- Right to erasure
You have the right to request that we delete your personal data. Provided that no lawful exception for data processing applies, we will remove your data.
- Right to rectification
You have the right to request that we correct any inaccurate personal data concerning yourself. You also have the right to complete any relevant personal data that we may be missing.
- Right of access
You have the right to receive confirmation on whether we are processing your personal data or not. If we are processing your personal data, you also have the right to receive a copy of the data and information about this processing and how the data is being used by us.
- Right to restriction
You have the right to request that the processing of your personal data be restricted in certain situations. An example of such a situation is if you have objected to a particular processing activity we perform. While we investigate whether our interest outweighs your interest in having the data not be processed, you may also have the right to have the processing restricted.
- Right to data portability
If you have consented to provide your personal data to us or if you have provided the data due to an agreement with us, you can request to receive the data. In addition to requesting to receive the data, you can also request that your personal data be transferred to another data controller, to the extent that it is technically feasible for us.
- Right to object
You have the right to object to our processing of your personal data when this data is processed based on a legitimate interest. For example, this may involve objecting to direct marketing activities we carry out in relation to you, which you always have the right to refuse.
- Right to information
The right to information means that you should receive information about the personal data processing we perform both when the data is collected and upon your request. If anything happens to your personal data that could negatively impact you, you also have the right to be informed about this by us.
- Right to complain to the Swedish Authority for Privacy Protection
You have the right to lodge a complaint with the relevant supervisory authority if you find that our processing of your personal data violates applicable law (GDPR). The Swedish Authority for Privacy Protection is the relevant supervisory authority in Sweden and can be reached via their website https://www.imy.se/.
Changes to the privacy policy
Morakniv reserves the right to amend the privacy policy at any time. The date of the latest version is indicated at the top of the privacy policy.
Contact us
If you have any questions regarding our privacy policy, please feel free to contact us at info@morakniv.se.