The protection of your personal data is important to Noro bathroom. The privacy policy describes how we process your personal data and what rights you have regarding personal data.
Data Controller
The data controller for the processing of your personal data is:
Hafa Brand Group AB
556005-1491
Box 525
301 80 Halmstad
SWEDEN
What personal data do we collect, and from where?
When you are in contact with us (e.g., when purchasing, filling in forms or visiting the website), we collect personal data about you. The data we collect is name, personal identity number, address, e-mail address and telephone number, purchase, order and usage history, IP address and information that you provide to our customer service.
We collect your address from the population register or you fill it in yourself on our website.
Why we collect your personal data
Personal data collection may occur for the following purposes and based on the following legal grounds:
Purchase
Personal data collection may occur for the handling of orders as well as for sending notifications about the delivery status.
Personal data collection is necessary for us to be able to fulfill our agreement with you.
Customer service cases
Personal data collection may occur to handle customer service matters such as questions, complaints, and warranty issues.
Personal data collection may occur be able to help you with your customer service matters, which is our legitimate interest, as well as to fulfill the obligation in law for complaints and warranty cases.
Marketing
Personal data collection may occur to be able to send offers and marketing via e-mail, post and SMS. We also recommend products on the website and send personalized offers and reminders about products that remain in your shopping cart. This treatment may include profiling.
Personal data collection may occur with your consent for direct marketing or for our legitimate interest to send direct marketing.
Competitions
Personal data collection may occur be able to carry out participation in competitions that we organize.
Personal data collection may occur for our legitimate interest to administer competitions that people participate in.
Improvement and development
Personal data collection may occur to be able improve and develop our service, our products, and our technical systems.
Personal data collection may occur for our legitimate interest to be able to update, improve and develop service, products, and technical systems.
Fulfillment of obligations under law
Personal data collection may occur to be able to comply with applicable laws, such as laws on accounting, tax or product safety.
Personal data collection may occur to be able to fulfill the obligation under law.
Prevention of abuse and crime
Personal data collection may occur to prevent misuse of our services and to prevent crime, such as fraud.
Personal data collection may occur for our legitimate interest to prevent and prevent abuse and unlawful use of our services.
With whom do we share your personal data?
We may share personal data with others but only when permitted by law. Those with whom personal data is shared can be, for example, authorities, companies in the Hafa Brand Group Group, logistics companies, marketing companies or other suppliers. We have signed data processing agreements with suppliers who handle personal data on our behalf.
Transfer of personal data to countries outside the EU/EEA
In some cases, we may transfer personal data to legal entities in countries outside the EU/EEA. In such cases, the transfer takes place either to countries in which the European Commission has decided that there is an adequate level of protection, when using standard contractual clauses approved by the EU Commission or other appropriate safeguards. Transfers to the United States may also be made in accordance with the Privacy Shield provisions.
How long your personal data is saved
We save personal data for as long as it is needed for the purposes for which it was collected, or as long as it is required by laws or regulations.
Purchases and order history are saved for as long as we are required to do so to be able to comply with legal requirements.
Customer service data related to purchases and complaints is saved for as long as we are obliged to do so to be able to comply with legal requirements. Communication with our service desk where we do not have to save to comply with legal requirements is deleted after six months.
Data for marketing is saved until you request to no longer receive marketing material or when you have been inactive for three years.
Data for the prevention of abuse and crime is saved for as long as we need it to prevent or report crimes (e.g., fraud).
Your rights
We will respond to your request regarding any of your rights as soon as possible but at the latest within one month.
Where permitted by applicable law, we may charge an administrative fee to fulfill a request as set out below.
Right of access
You have the right to receive information about how we process your personal data as well as a copy of the personal data.
Right to rectification
You can request that incorrect or incomplete data be corrected.
Right to be forgotten
You have the right to have your personal data deleted in the following cases:
The personal data is no longer necessary for the purposes for which they were processed;
You withdraw your consent and there is no other legal basis for the processing;
You have objected to the processing of your personal data for direct marketing purposes or to processing based on legitimate interest as legal basis and we cannot show definitive reasons for the processing which outweigh your interests, rights and freedoms;
The processing does not take place to establish, exercise or defend legal claims;
We have processed the personal dataon behalf of an unlawful act;
The personal data has been unlawfully processed or (vi) the personal data has to be erased for compliance with a legal obligation.
Right to restriction of processing
You have the right to request that the processing of your personal data be restricted in the following cases:
You consider that the personal data is not correct, and you are awaiting our verification of the accuracy of the personal data;
The processing is unlawful and you, instead of deleting the personal data, wish the processing to be restricted;
We no longer need the personal data for the purposes of the processing, but you need them to establish, exercise or defend legal claims;
When you have objected to processing based on a legitimate interest and you are waiting for a verification on whether our legitimate reasons outweigh yours.
Right to object
You have the right to object to such processing of your personal data that we collect on the basis of a legitimate interest. The processing will cease in such case if we do not have a legitimate interest that takes precedence over your interests, or if we have to continue the processing to safeguard legal claims.
Right to objection to direct marketing
You have the right to object to the processing of personal data for direct marketing. You can object to direct marketing by contacting customer service. If you have made such an objection, we will stop processing your personal data for direct marketing purposes.
Right to data portability
You have the right to receive the personal data that you have provided to us and that we process automatically due to a contract with you or due to your consent, in a structured, commonly used and machine-readable format.
Right to lodge complaints
If you are dissatisfied with how we process your personal data, you can contact us or lodge a complaint with a supervisory authority.
Cookies
We use so-called cookies on the website. The information collected and analyzed with the help of cookies is used to customize and streamline our services, the content of the website, offers and advertisements to the visitor, as well as to increase the security of the website.
Briefly described, it works like this: All information that should remain between loading between one page to another must somehow be tied to a specific user. This is done by storing a unique key in a user's browser. When the user loads a new page, the key is sent to the page, and we can thus find out if the user is logged in and if they have added something to the shopping cart and so on.
If you do not accept cookies in your browser, several of the functions on the websites will not work. This is because the site will find that there is a new visitor with each page load.
If you do not accept cookies, your browser may be set so that you automatically deny the storage of cookies or are informed each time a website requests to store a cookie. Through the browser, previously stored cookies can also be deleted. See your browser's help pages for more information.
We also use third-party services that in some cases use cookies. Among other things, we work with the following companies to improve our marketing: Google.
You can choose not to accept third-party cookies in your browser by following one of these links:
https://www.youronlinechoices.com/uk/your-ad-choices
http://www.networkadvertising.org/choices
This website uses Google Analytics provided by Google, Inc. Google Analytics uses cookies to analyze how users use the website.
Google will use this information for the purpose of evaluating your use of the website, compiling reports of activities on the website and providing other services in connection with activities on the website and use of the Internet.
If you do not want your visits to our website to appear in the statistics of Google Analytics, you can install an add-on in your browser by following this link: https://tools.google.com/dlpage/gaoptout
Contact information
- Mail: info@noro.se
-
- Main office:
- Svarvaregatan 5
- Box 525
- 301 80 Halmstad
- SWEDEN
Version 1.0 2022-07-05