Privacy Policy for Hälsinge Trä och Miljö AB

Your personal privacy is important to Hälsinge Trä och Miljö AB ("pizzaspade.com", or "we"). In this policy, we want to inform you about how we process your personal data and what rights you have. Personal data is information that can be linked to you as a private individual, such as your name and contact information.

In summary, we process your personal data:

To the extent required to manage and deliver your order.
To provide offers and inspiration to you. Both through newsletters, SMS, and targeted personalized marketing on social media, as well as online and offline.
To communicate with you and answer your questions.
To ask you about pizzaspade.com and your experience with us.
To remind you of an abandoned "shopping cart".
To create and maintain a customer account.
To comply with laws and regulations (such as consumer and accounting law).

You have a number of rights under the Data Protection Act. You always have the right to object to marketing, for instance. You can also find out about your rights, how you can influence our processing of your personal data. Would you like to find out more? Detailed explanations are provided below. Information is given on how we process your personal data, why and for how long.

Who is Responsible for Processing Your Personal Data?

Hälsinge Trä och Miljö AB, with organization number 556599-8803, is the data controller for the processing of your personal data. Please note that our payment solution providers process personal data that they obtain from our website when purchases are made, and they themselves are responsible for their own processing of personal data.

Contact information

If you want to contact us about the processing of your personal data, contact us at info@pizzaspade.com. Our address is Håstaholmen, 824 42 Hudiksvall.

From what sources do we obtain your personal data?

We process personal data that you have shared with us, or that we receive from you when you make a purchase or visit our website

Who is able to access your personal data?

Your personal data is primarily processed by us at pizzaspade.com. We will never sell your personal data. In some cases, we share your personal data. Below you will find more detailed information about when and why we share your personal data. For instance, we may need to share your personal data to fulfill our obligations to you in a good and efficient manner, for example:

To ensure that you pay us, our payment solution providers will have access to your personal data.
To deliver your products to your home address or pickup point and to handle returns, we will share your personal data with our shipping companies.
To collect and publish your reviews on our website, we share your personal data with the provider who supplies us with technical solutions for collecting and publishing reviews.
To market relevant products and to make our website as relevant as possible, we share your personal data with those who provide us with marketing services, such as Google and Facebook.
We will share your personal data with IT providers who process the personal data on our behalf to assist us with IT services.

Do we transfer your personal data outside the EU/EEA?

Pizzaspade.com generally processes your personal data within the EU/EEA but occasionally, we use suppliers from countries outside the EU/EEA. When we transfer your personal data outside the EU/EEA, we ensure that there is a sufficiently high level of protection to ensure that the transfer is in accordance with GDPR. Pizzaspade.com may transfer your personal data to the USA, to our newsletter provider, and our providers who supply services to market relevant products and make our website as relevant as possible. Contact us if you have any questions about how we share your personal data.

How Can you influence the processing of your personal data?

Under the Data Protection Act, you have several rights to influence our processing of your personal data. Below you will find more detailed information about your rights. If you have any questions about this or wish to exercise any of these rights, you are welcome to contact us.

Right to withdraw consent

In the parts where we base the processing of your personal data on consent, you have the right to withdraw your consent for the processing of your personal data at any time. Your withdrawal will apply from the time you withdraw your consent.

Right to object

You have the right to object at any time to the processing of your personal data that is based on legitimate interest, with reference to reasons related to your specific situation. You always have the right to object to direct marketing from us, such as newsletters. In some other cases, the right to object does not exist (e.g., when we are required by law to save your personal data).

Right of access

You have the right to receive confirmation as to whether we are processing personal data that concerns you. You can send your request to info@pizzaspade.com. If we process your personal data, you have the right to access a copy of the personal data we process and information about the processing.

Right to Rectification

You have the right to have incorrect personal data concerning you corrected and to request that incomplete personal data be completed.

Right to erasure (“Right to be Forgotten”) and Restriction of Processing

Under certain circumstances, you have the right to have your personal data erased. This applies, for example, if the personal data is no longer necessary for the purpose for which it was collected or processed, or if you withdraw your consent on which the processing is based and there is no other legal basis for continuing the processing. You also have the right to request that pizzaspade.com restricts the processing of your personal data. This applies, for example, when the accuracy of the personal data is contested by you or if the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of its use. It also applies during the time we are verifying a legitimate interest in the event you object to our processing of your personal data.

Right to lodge a complaint with a supervisory authority

You always have the right to lodge a complaint with a supervisory authority. You can do this in the particular EU/EEA member state where you have your residence, where you work, or where an alleged breach of applicable data protection laws has occurred. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (IMY).

How and why do we process your personal data?

Our goal is to be as transparent as possible about how and why we process your personal data. In the tables below, you can read more detailed information about why we process your personal data (purposes of processing), what personal data we process, our legal basis for processing your personal data, and how long we process your personal data for each purpose.

Processing required for the completion of purchases

We process your personal data to be able to complete your purchase and, for example, deliver the product. Please note that our payment solution providers also process your personal data to administer the payment for your order. Our payment solution providers are independent data controllers for such processing. Some of our payment solution providers allow you to choose a simpler way to complete purchases by automatically filling in your personal data or being remembered on your device.

Purpose of Processing	Personal Data Processed	Legal Basis for Processing	Storage Period
Your profile on pizzaspade.com and order history, communication, and service matters.	Name, contact details, personal ID number, order history, communication, and service matters.	Fulfillment of contract	Until you choose to delete your profile
Newsletters and targeted ads	Name, address, phone number, email, birth date, purchase history	Consent	Until you withdraw your consent (opt-out)
Interaction on pizzaspade.com	Name, contact details, reviews, questions, and answers	Legitimate interest	Until you choose to delete your information
To administer your purchase and deliver goods	Name, contact details, order information, delivery address, account details	Fulfillment of contract (B2C), Legitimate interest (B2B)	36 months + delivery time
Communication with customer service	Name, contact details, information disclosed in the customer service case	Legitimate interest	36 months
Accounting of transactions	Name, contact details, order and payment information	Legal obligation	From the time you make your purchase and seven to eight (7-8) years in accordance with Swedish accounting law and five to ten (5-10) years according to anti-money laundering legislation.