Privacy Policy

Last modified 24 May 2018

This is our privacy policy. It explains what personal data we collect from you, how we use it and how we protect it. We also explain how you can control what information you share with us while interacting with us. Personal data is information about you which could be used to identify you.

Our company name is Elodie Details AB, but to keep things simple we call our company “Elodie”, and use “our” or “we” in this policy.

The policy covers information we collect when you visit and interact with our website elodiedetails.com (and subpages) and mobile versions (“Website”), and when you make a purchase on our website.

1. INFORMATION COLLECTED BY US

A. Website

When you visit our website, we collect basic analytical information about how you use our site.

We also process your personal data if you choose to give it to us by taking an action (such as completing a contact form, subscribing to our newsletter, or sending us an e-mail).

Source	WEBSITE, FORMS AND EMAILS
Description	Analytical data about visitors to our website Information provided by you in forms, e-mails, etc.
Processed data	IP address Geographical location Use of the website (pages visited, length of visit, referring sites, etc.) Technical data (unique device ID, network, browser, language and operating system) Viewed products Contact details as provided by you in contact forms, e-mails to us and newsletter subscriptions (name, e-mail, address, etc.) Other information which you submit in free text when sending us e-mails
Purpose of processing	To analyse how our website is used so that we can improve it To manage our relationship with you (such as evaluating and responding to your questions) To send you newsletters
Control	At any time, you may contact us to have your data corrected, erased or sent to you. For more information on how we store and process data, see 2. Cookies.
Retention	We store your data for 3 years after your latest activity. Purchase, engagement, communication or visiting our website are examples of “activity”.

B. Order

When you place an order on our website, we collect your personal data in order to be able to deliver the products you have purchased.

Source	CHECK-OUT
Description	Information required when you place an order on our website
Processed data	Name E-mail address Physical address Alternative delivery address Telephone number Products bought Date and time of purchase
Purpose of processing	To deliver the products to you - fulfilling our contract with you To communicate with you in relation to your order To communicate with you as a customer in relation to other products of interest to you
Control	To process your order, we need to collect and process your data for delivery and accounting.
Retention	We store your personal data in accordance with the General Data Protection Regulation (GDPR) and other data-related legislation.

2. COOKIES

This section specifically describes how we use cookies on our website. A “cookie” is a small text file that a website saves on your computer or mobile device when you visit the site. It enables the website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period of time, so that you do not have to keep re-entering them whenever you come back to the site or browse from one page to another. It can also track your behaviour on a website in order to optimise the advertising seen by you while you browse the Internet.

COOKIES
Description	We use cookies from the following third parties: Google Facebook Nosto Solutions Jetshop Mailchimp Adtraction Adroll AddThis Visma Klarna Ve Interactive Hotjar Pubmatic Snapwidget New Relic We also place our own, first party, cookies through our e-commerce system. These are explained in 1. A. and 1. B.
Processed data	IP address Geographical location Use of the website (pages visited, length of visit, referring sites, etc.) Technical data (unique device ID, network, browser, language and operating system) Viewed products Products in shopping cart/abandoned shopping carts Products purchased Date and time of purchase
Purpose of processing	Simplify the shopping process Identify which pages you visit Analyse data about traffic on our website Improve our website Online marketing of our products
Control	You can change your browser settings to stop accepting cookies and to clear existing cookies (including persistent cookies with a specific lifetime). Follow your browser’s instructions.
Retention	Session cookies are deleted from your computer when you log off and then close your browser. Permanent cookies have various different expiry periods. You can delete cookies yourself (see “Control”). For more detailed control, see 4. Service Providers.

3. REASONS FOR PROCESSING (LEGAL GROUNDS)

We process your personal data on the following grounds:

Consent. When you visit our website, subscribe to our newsletter, submit a form or place an order, we ask you to consent to the processing of the personal data that we describe in this policy, by ticking a confirmation box or clicking on a confirmation button (“OK”, “Yes Please”, “Submit Order”, etc.)

Contract. Our processing of personal data when you buy our products is required to fulfil our agreement with you.

Legitimate interest. Processing of your personal data is also based on our legitimate interest in being able to advertise our products efficiently online and in developing and improving our website, products and customer relationships.

4. SHARING YOUR PERSONAL DATA

We may share your personal data in the following ways:

Service Providers. WWe use third-party companies and individuals to help with our service and to help us analyse how our website is used. These third parties may have access to your personal data solely to perform these tasks on our behalf and are subject to an obligation not to disclose this data or use it for any other purpose.

In the table below, we list the service providers we share your data with.

Service Provider	Description	More information
Google Inc. (Google Analytics)	Website analytics. Google may process personal data in the US, but will always make sure that the security measures required by law are applied.	Privacy Policy: https://policies.google.com/privacy You can prevent the data collection (including your IP address) by Google generated by the cookie and related to your use of the website, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. As an alternative to the browser plug-in, you can click on this link to prevent data collection by Google Analytics on this website in the future. An opt-out cookie is stored on your device. If you delete your cookies, you must click on the link again.
Google, Inc. (Google Adwords)	Online marketing. Target groups are created based on behaviour on the website. Google may process personal data in the US, but will always make sure that the security measures required by law are applied. We use the Google AdWords remarketing service to advertise on third-party websites (including Google) to previous visitors to our site. This could mean that we advertise to previous visitors who have not completed a task on our site, for example by abandoning a shopping cart. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network.	Privacy Policy: https://policies.google.com/privacy Opt-Out: https://www.google.com/settings/ads
Nosto Solutions	Website analytics. Nosto may process personal data in the US, but will always make sure that the security measures required by law are applied.	Privacy Policy: http://www.nosto.com/privacy-policy/ The basis for processing personal data is the legitimate interests of the company, based on a customer relationship or other appropriate connection. The purpose of the processing of personal data is: Delivery and development of our products and services (to offer the user more relevant content and a better experience with our products), fulfilment of contractual obligations and other undertakings of the company, management of customer relations, organisation of events, analysis and profiling of customers or other data subjects, electronic direct marketing, and targeted marketing within the networks of the company and other parties. Nosto uses profiling to identify the data subjects’ personal profiles, online behaviour, age and consumer habits. Nosto uses this information to target marketing and to develop services. For more information, see Nostos´ separate Cookie Policy. To opt-out, contact privacy@elodiedetails.se
Jetshop	E-commerce platform. Stores personal data after a purchase.	To opt-out or have your data removed, contact privacy@elodiedetails.se
MailChimp	Newsletter distribution system. Stores personal data after a purchase.	Privacy Policy: https://mailchimp.com/legal/privacy/ Opt out: http://preferences-mgr.truste.com/ Opt out (EU): http://www.youronlinechoices.eu/
Facebook, Inc	Online marketing. Target groups are created based on behavior on the website.	Privacy Policy: https://www.facebook.com/policy
Adtraction	Online marketing. Target groups are created based on behavior on the website.	Privacy Policy: https://adtraction.com/sv/privacy
Adroll	Online marketing. Target groups are created based on behavior on the website.	Privacy Policy: http://www.adrollgroup.com/privacy Opt out: https://app.adroll.com/optout/safari
Addthis	Online marketing and sharing platform. AddThis tools provide website owners with the capability to enable users to instantly share webpages, blogs, news, photos, videos and other content to the most popular social networks and other destinations via a browser plug-in or website plug-in.	Privacy Policy: http://www.addthis.com/privacy/privacy-policy Opt-out: http://www.addthis.com/privacy/opt-out
Visma	Accounting services. Visma will have access to your customer information for bookkeeping purposes.
Klarna	Payment solution. Klarna will independently process your data for their own purposes. You will be asked to accept their own privacy policy when using their payment solution on our website.	Privacy Policy: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/sv_se/privacy
Ve Interactive	Online marketing. Target groups are created based on behaviour on the website. Ve Interactive will independently process your data for their own purposes. Ve Interactive receives Behavioural Data from, and may share it with, third-party partners (through “cookie synching” or similar matching technologies). Ve Interactive do not share Contact Details or Profile Data relating to you with third parties outside the Ve Group for commercial purposes	Privacy Policy: https://www.ve.com/privacy-policy Opt-Out: https://www.ve.com/sv/integritetspolicy#opting-out
Hotjar	Website Analytics. Hotjar tracks user activity (e.g. how much time they spend on which pages, which links they choose to click on, and what users do and do not like, etc.).	Hotjar tracks our website visitors’ activity, enabling us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices (the device’s IP address (captured and stored only in anonymised form), device screen size, device type (unique device identifiers), browser information, geographical location (country only), and preferred language used to display our website). Hotjar stores this information in a pseudonymised user profile. Neither Hotjar nor we ourselves will ever use this information to identify individual users, or to match it with additional data concerning an individual user. For further details, please view Hotjar’s privacy policy by clicking on this link. Opt-Out: https://www.hotjar.com/legal/compliance/opt-out
New Relic	Website Analytics.	To learn more about New Relic or to opt-out please visit their privacy policy: https://newrelic.com/termsandconditions/privacy Opt-out: for cookies that track activity in connection with targeted advertising, you can opt out of thirdparty targeting cookies on the Digital Advertising Alliance’s consumer choice page (http://optout.aboutads.info), the Network Advertising Initiative’s consumer choice page (http://optout.networkadvertising.org) or the European Interactive Digital Advertising Alliance consumer choice page ( http://youronlinechoices.eu).
Rubicon Project	Ad Exchange.	Privacy Policy: https://rubiconproject.com/privacy-policy/ Opt-out: https://rubiconproject.com/privacy/consumer-online-profile-and-opt-out/
AppNexus	Ad Exchange. AppNexus is a digital advertising technology platform. AppNexus uses cookies to distinguish between unique web browsers, and to store data for advertising purposes, including interest-based advertising. AppNexus uses cookies to store ad delivery and reporting data for clients, such as, for example, which ad was shown, the number of times a particular ad was shown, and how recently an ad was shown on a particular web browser. AppNexus uses cookies to enable ad buyers to track users' responses (clicks and conversions) to ads purchased on AppNexus. AppNexus uses cookies with non-unique values for server load balancing and similar technical purposes. AppNexus uses non-unique cookies to store users' optout choices. AppNexus may also use some Non-Cookie Technologies for these purposes (as defined above and as detailed below). Cookies play a role in crossdevice linking in that cookies from different browsers or devices might be associated with each other.	Privacy Policy: https://www.appnexus.com/en/company/privacy-policy Cookie-Policy: https://www.appnexus.com/en/company/cookie-policy Opt-out: https://www.appnexus.com/en/company/platform-privacy-policy#choices
Snapwidget	Social Media Feed Platform.	Privacy Policy: https://snapwidget.com/privacy
Outbrain	Native Advertising Platform.	Privacy Policy: https://www.outbrain.com/legal/privacy#privacy-policy Opt-Out: https://www.outbrain.com/legal/privacy#advertising_behavioral_targeting
Taboola	Native Advertising & Content Discovery Platform.	Privacy Policy: https://www.taboola.com/privacy-policy Opt-out: You can opt-out on the Digital Advertising Alliance’s consumer choice page ( http://optout.aboutads.info), the Network Advertising Initiative’s consumer choice page ( http://optout.networkadvertising.org) or the European Interactive Digital Advertising Alliance consumer choice page ( http://youronlinechoices.eu).
Casalemedia	Online Advertising Exchange.	Privacy Policy & Opt-Out: http://casalemedia.com/
Advertising.com / Oath	Online Advertising Exchange.	Privacy Policy: https://policies.oath.com/xw/en/oath/privacy/intl/index.html

Legal requests and preventing harm. We can disclose any information about you to government or law enforcement officials if we think it is necessary or appropriate to respond to claims and legal process, to protect the property and rights of Elodie or a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, unethical or legally actionable activity.

Business transfers. Elodie may take part in a transaction that involves some or all of our assets or shares, including any or all of the information described in this policy.

5. STORING YOUR INFORMATION

Information security. We use safeguards to preserve the integrity and security of your personal data. When you place orders or access account information, we offer the use of a secure server. The secure server software (SSL) encrypts all information that you enter before it is sent to us. We will inform you of any breach of the security, confidentiality or integrity of stored personal data, as required by law.

International transfer. If you are located outside Sweden and choose to give information to us, Elodie will transfer personal data to Sweden and processes it there. If we transfer your personal data outside the EU/EEA, we will always rely on a security mechanism in accordance with EU legislation. You can always contact us if you require more details about international transfers.

6. RETENTION

We store your personal data as described under section 1 and 2 of this policy and/or for as long as necessary in order to fulfil the purposes for which it was collected, in accordance with this policy or for as long as we have legal grounds to do so. We may also retain anonymous versions of your data and process it for statistical purposes indefinitely, as it will no longer constitute personal data.

7. CHILDREN’S INFORMATION

Our service is not directed at children under the age of 13. We do not knowingly collect personally identifiable information from children aged under 13. If a parent or guardian becomes aware that his or her child has provided us with personal information without their consent, he or she should contact us immediately. If we become aware that a child aged under 13 has provided us with personal data, we will delete such information from our files.

8. YOUR RIGHTS

Direct marketing. You have an absolute right to object to the processing of your personal data for direct marketing purposes. You also have the right to recall your prior given consent. The withdrawal of your consent does not affect the lawfulness of the processing based on the consent before its withdrawal, and we may continue to process your personal data on other legal grounds, except for direct marketing.

Information, correction, rectification, completion, erasure, restriction of processing. You have the right to request access to and further information concerning the processing of your personal data, or request that we correct, rectify, complete, erase or restrict the processing of your personal data. You have the right to obtain a copy of the personal data that we process relating to you free of charge once (1) every calendar year. For any additional copies requested by you, we may charge a reasonable fee based on administrative costs.

Portability. If the processing is based on the legal grounds for consent or fulfilment of contract, you have the right to data portability. Data portability means that you can receive the personal data that you have provided to us, in a structured, commonly used and machine-readable format, and have the right to transfer such data to another data controllers.

9. CONTACT INFORMATION

To exercise your right, or if you have any questions regarding our processing of your personal data, please contact us at privacy@elodiedetails.se or Elodie Details AB, attn.: Data Protection, Jakobsbergsgatan 16, SE-111 44 Stockholm, Sweden.

If you have any complaints regarding our processing of your personal data, you may file a complaint to the competent data protection authority. You can find out more about the local data protection authorities under the following link http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

10. CHANGES TO THE POLICY

Please note that this policy can be modified, so you should check back frequently. We will notify you of any changes to the policy by posting a new policy and updating the “last modified” date at the top of this page. If we collect any new personal data about you, or use your data in a new way, we will ask you to agree to this beforehand.

11. LINKS TO OTHER SITES AND SOCIAL PLUG-INS

Our website uses social plug-ins from social networks. If you click on one of the buttons, a new window will open in your browser, and the page of the respective social network will be opened. On that site, you can login, or press like or share buttons, etc. When you click on plug-in links or other links on our website or in newsletters, the collection of personal data will be outside our control. The policy of the other website will apply to the personal data obtained from you on that website.