Policy regarding privacy and personal data

1. General

This policy regarding privacy and personal data ("Privacy Policy") describes how Caldic Brew Nordic / Humlegårdens Ekolager AB, Swedish organization number 556563-5199, Bergkällavägen 28, SE-19279 Sollentuna, Sweden, email info@caldicbrew.com ("Caldic Brew Nordic","we") collects, uses, discloses and stores your personal data. This policy is valid from 2018-05-25.

1.1 This Privacy Policy applies to the processing of personal data when Caldic Brew Nordic provides services and products in connection with the purchase, service requests and other contact between you and Caldic Brew Nordic, such as visits to our website. This Privacy Policy applies to the processing of personal data carried out within the framework of the holding of an account at Caldic Brew Nordic's website (the "Account Holder") and the sending of newsletters and other marketing by email or mail.

1.2 You should always be able to feel safe when you provide your personal information to us. With this Privacy Policy, we want to show how we ensure that your personal information is treated in accordance with current data protection legislation (GDPR).

1. Data Controller

Caldic Brew Nordic is the Data Controller, i.e. responsible for the processing of your personal data, and ensures that such treatment is in accordance with applicable law.

1. When do we process your personal data?

3.1 For you to visit our website, buy our products or services or contact us for service or information we need to collect and process personal information about you.

3.2 Caldic Brew Nordic collects and processes personal information about you when you make a purchase on Caldic Brew Nordic’s website, use our support, visit our website or visit an event that we organize, or when you otherwise have contact with Caldic Brew Nordic. When you place an order, a sales contract with Caldic Brew Nordic is established, and in order for us  to be able to fulfil this contract and to deliver your goods and services, the information you provide at the time of placing an order is necessary.

3.3 If you are an Account Holder, Caldic Brew Nordic collects the personal information about you that you provide when you register an account on our site. We also collect information about your purchase history while you are the account holder. Caldic Brew Nordic also collects the data that you from time to time enter to your account through our site. As the Account Holder, you can at any time update your details by going to "My Pages".

3.4 We also collect and update your address information via third party services for address updating.

1. What personal information do we process?

4.1 If you are a customer of Caldic Brew Nordic

The personal data Caldic Brew Nordic collects and processes about you as a customer placing an order and using our support services are:

• Name
• Address
• Phone
• E-mail
• Personal Identity Number
• Customer Number
• Order / Invoice Number
• Items purchased (order lines)
• Payment Data
• IP address and information about your use of our site

4.2 if you are an Account Holder

The personal data Caldic Brew Nordic collects and processes about you as the account holder are:

• Name
• Address
• Phone
• E-mail
• Personal Identity Number
• Order / Invoice Number
• Payment details
• Account login information
• IP address and information about your use of Caldic Brew Nordic's website
• Details of your purchases (order history)

4.3 If you receive our newsletter

The personal data Caldic Brew Nordic collects and processes about you to get our newsletter are:

• Name
• Email
• How you interact with the newsletter

1. Why do we process information about you?

5.1 If you are a customer of Caldic Brew Nordic

Caldic Brew Nordic processes your personal data for different purposes. Mainly, we treat your personal information in order to:

• Fulfil our obligations to you, the customer, such as delivering goods purchased by you, and provision of support
• Enable general customer care and customer service, such as to answer questions and correct information
• Provide you with relevant information and marketing emails regarding Caldic Brew Nordic’s goods and services
• Assess the payment methods we can offer you, for example, through credit ratings
• Improve our customer offering, including the development of services, products and features
• Prevent fraud and perform risk management
• Comply with applicable laws, including accounting laws and customer protection laws
• Allow communication via mail and e-mail
• Enable personalized offers, marketing and event invitations via mail and e-mail
• The information may also serve as a basis for market and customer analysis, market research, statistics, business monitoring and business and method development related to the purchase of goods and services.

5.2 If you are an Account Holder

In addition to the above, for Account Holders we also process personal information in order to:

• Manage the account settings, for example to give you the opportunity to set a new password
• Allow you to see your purchase history
• Give you the opportunity to have pre-filled name and address data in the checkout when placing an order
• Give you the opportunity to manage multiple addresses

1. The lawful basis for our processing of your personal data

The processing of personal data by Caldic Brew Nordic is based on four of the six available lawful bases, in accordance with GDPR. These bases are described in this section.

6.1 Contract

We process your personal information in order to fulfil the sales contract which is automatically established between us as a seller and you as a customer when you place your order on our website. In order for payment and delivery of goods you buy on our website to work, we need to process information about you.

6.2 Consent

We process your personal information in order to fulfil our commitments to you as an Account Holder, such as simplified management and order history. This is done on the basis of consent, i.e. that by creating an account on our website and entering information about yourself, you agree that the information is stored and can be used to, for example, pre-populate the fields for your name and address when you place an order.

6.3 Legitimate interests

Some of the processing of personal data that we perform is based on legitimate interests. This applies, for example, to the processing we perform in order to send newsletters and offers to you about our products and services. Caldic Brew Nordic does not process any sensitive personal data on the basis of legitimate interests.

6.4 Legal obligation

In some cases Caldic Brew Nordic has a legal obligation to process your personal information. This applies for example to the processing of personal data that we perform in order to comply with the requirements from accounting legislation.

1. For how long do we keep information about you?

7.1 Your personal information is stored as long as there is a need in order to fulfil the purposes for which the data were collected in accordance with this Privacy Policy.

7.2 Caldic Brew Nordic saves data for the Account Holder as long as the Account Holder has an Account with Caldic Brew Nordic.

1. Summary of our personal data processing

1. Who do we share personal information with?

Caldic Brew Nordic may share your information with third party data processors, such as suppliers of payment and shipping services.

9.1 Any third party Caldic Brew Nordic provides personal information to may only use that information in order to achieve the above purposes. This includes providers of payment and shipping services. If you apply for a credit for your purchase, your information may also be disclosed to the credit bureau.

9.2 Personal information may also be disclosed by Caldic Brew Nordic if it is necessary in order to comply with applicable law or regulatory requirements or to detect, prevent, or pay attention to fraud and other security or technical issues.

9.3 We will never sell your personal information to third parties.

1. The protection of your personal data

You should always be able to feel safe when you provide your personal information to us. Caldic Brew Nordic has therefore taken security measures required to protect personal data against unauthorized access, modification and deletion.

1. Your rights

11.1 Caldic Brew Nordic is responsible for your personal data to be processed in accordance with applicable law.

11.2 Caldic Brew Nordic will at your request or on its own initiative correct, de-identify, delete or complement information that is found to be inaccurate, incomplete or misleading.

11.3 You have the right to request

1. access to your personal data.
   This means that you have the right to request a transcript of your personal data. You are also entitled to receive information about where the data is collected, and the anticipated period during which the data will be stored, or the criteria used to determine this period. You also have the right to know your other rights specified in this paragraph.
   
   
2. Correction of your personal information.
   We will at your request as quickly as possible correct any inaccurate or incomplete information we hold about you.
   
   
3. Deletion of your personal information.
   You have the right to request that your personal information will be removed if it is no longer necessary for the purpose it was collected for. There may however be a legal obligation which means that we cannot immediately erase your personal data.
   
   
4. Limitation of treatment.
   This means that your personal information is marked so that it is processed only for certain limited purposes.

11.4 Caldic Brew Nordic will inform each recipient with which the personal data is shared as above about any corrections or deletion of data and the limitation of processing.

11.5 You have the right to data portability. This means the right under certain conditions to have your data transferred  in a structured and machine readable format to another data controller. A prerequisite for data portability is that the transfer is technically possible and may be automated.

11.6 You have the right to object to the processing of personal data carried out on the lawful basis of legitimate interest.

11.7 If you do not want us to process your personal data for direct marketing, you always have the right to object to such treatment by sending an email to info@caldicbrew.com. Once we have received your complaint, we will cease to process personal data for such marketing purposes.

11.8 Those who believe that a company handles personal data in the wrong way can make a complaint to the Information Commissioner.

1. Cookies

Caldic Brew Nordic uses cookies. These cookies are deleted when you close your browser. If you open a new browser window new cookies will be created. We store information in a cookie as a random value that is used to create anonymous statistics in our webshop.

1. Contact

Please do not hesitate to contact us if you have any questions about this Privacy Policy, the processing of your personal data or to request a transcript. Our contact information can be found below.

Caldic Brew Nordic / Humlegårdens Ekolager AB

Bergkällavägen 28

SE-19279 Sollentuna

Sweden

info@caldicbrew.com