Privacy Policy
1 Introduction
Bernadotte & Kylberg AB, company reg. no 556856-7969 (“B&K”, “we”, “our” or “us”) values your privacy. We may process your personal data when you visit our website bernadottekylberg.com, when you place an order with us, or if you communicate with us through our customer support.
This privacy policy (“Privacy Policy”) sets out what personal data B&K, in our role as Controller, collect about you and for what intended purposes, the personal data is being processed. In this Privacy Policy the term “processing” is used for all processing activities that involves your personal data, including e.g., the collection, handling, storage, sharing, access, use, transfer, and erasure of personal data.
“Applicable data protection laws” means all laws and regulations, including such regulation that have been issued by the supervisory authority that is responsible for protecting the fundamental rights and freedoms of individuals, and especially their right to privacy with respect to the processing of their personal data. This includes Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”) and laws and regulations that complement the GDPR.
“Personal data” means any information relating to an identified or identifiable natural person. This includes for example name, social security number, address, email address, or phone number, but could also be different encrypted data or different types of electronic identities such as IP-number.
If you have any questions, please contact us at contact@bernadottekylberg.se.
2 Who is the Controller of the personal data?
Bernadotte&Kylberg AB, company reg. no 556856-7969, Västmannagatan 41, 113 25 Stockholm, Sweden, is the controller for the processing of your personal data as set out in this Privacy Policy.
3 Where do we collect your personal data from?
We process information about you that we collect in connection with your use of bernadottekylberg.com. We collect information about you that you submit to us when you for example fill out your information when placing an order at our website, or submit your name, email address or phone number, when you register for newsletters, send an email or message us through our website, or call or contact our customer support.
You can always refrain from voluntarily providing us information, e.g., when you contact us through our contact form on our website or via email. Some personal data is however necessary for us to process to be able to manage your order or providing you with some of our services. If you do not submit such personal data, it can prevent us from managing your order or providing you with some of our services or perform in accordance with your expectations of us.
4 Why do we process your personal data?
4.1 Managing your order
We process your personal data to manage your orders that you place through bernadottekylberg.com, including the retrieval of your customer shopping basket, sending out order or delivery confirmations, delivering your order, and managing returns and complaints.
|
Categories of personal data |
Storage period |
|
> Name > Email address > Phone number > Address > Information about your order > Payment information |
We store your information up to 36 months after the purchase have been made (including delivery and payment) to manage any complaints and guarantee claims. In the event of a dispute, we may store your data longer to the extent that it is required to protect our legal interests. |
|
Lawfulness of processing |
|
|
Performance of contract. The processing is necessary for the performance of a contract entered into with you. Compliance with a legal obligation. Some processing is necessary for us to to comply with our legal obligations towards you as a customer. Such obligations include sending out order and delivery confirmations and managing returns in accordance with applicable consumer laws. Legitimate interest. Managing the shopping basket is a necessary step in the purchase process, and it is not possible to enter a contract through bernadottekylberg.com without the processing of your personal data. Since you request that we process information by placing an order in the shopping basket, we consider that we have a legitimate interest of processing the data which is necessary to facilitate the purchase. The processing to manage returns and complaints is also necessary to pursue our legitimate interest to be able to defend ourselves against any legal claims. |
|
4.2 Administration of payment and bookkeeping
We process your personal data to manage the payment of your purchase and for bookkeeping purposes.
|
Categories of personal data |
Storage period |
|
> Name > Email address > Phone number > Address > Information about your order, including order number > Payment information > Payment history |
We store the information up to seven years or according to general bookkeeping principles and applicable bookkeeping laws. |
|
Lawfulness of processing |
|
|
Performance of contract. The processing is necessary for the performance of a contract entered into with you. Compliance with a legal obligation. Some processing is necessary for us to fulfil our legal obligations under applicable bookkeeping laws. |
|
4.3 Managing customer support
Your personal data may be used when you contact us with questions, opinions, or for complaints, to provide you with the customer service that you are entitled to according to the agreement that you have entered with us. Depending on your matter, we may also process your personal data to manage and investigate any complaints and/or other customer service cases.
|
Categories of personal data |
Storage period |
|
> Name > Email address > Phone number > Address > Information about your order, including order number > Payment information |
We store the information up to twelve months after the customer service matter has been closed. In the event of a dispute, we may store the data longer to the extent that it is required to protect our legal interests. |
|
Lawfulness of processing |
|
|
Legitimate interest. The processing is necessary to pursue our legitimate interest of providing customer service, including by answering your questions and communicate with you in a correct and complete way. |
|
4.4 Sending out newsletters and providing information
When you choose to subscribe to our newsletter, we will process your personal data to be able to send out newsletters and other information to you. You can at any time unsubscribe. Information regarding how you can do this is provided for in the newsletters.
|
Categories of personal data |
Storage period |
|
> Name > Email address |
We process your personal data until you inform us that you no longer wish to receive newsletters or send outs from us. |
|
Lawfulness of processing |
|
|
Legitimate interest. The processing is necessary to pursue our legitimate interest of marketing our products. Our legitimate interest is strengthened by your approval for us to send out newsletters to you and that you later do not unsubscribe from this service. If you choose to unsubscribe from our newsletters, we will no longer process your personal data for such purposes. |
|
4.5 Evaluate and improve your experience on our website
We use cookies on bernadottekylberg.com to better understand how visitors use the website. Cookies are used to determine the length and number of site visits on the website, to track how visitors found the website and to identify unique visitors.
The information that is created by the cookies through your use of the website is used for the purpose of evaluating how the website is used to improve content, navigation, and structure.
|
Categories of personal data |
Storage period |
|
> IP-address > Information about IT-equipment > Log data |
We store the information up to 24 months. For more detailed information, please refer to our Cookie Policy. |
|
Lawfulness of processing |
|
|
Consent. We collect information through the use of cookies based on your consent. For more information about our use of cookies, please read our Cookie Policy. |
|
5 Recipients of personal data
5.1 Other data controllers
We may share your personal data with others if necessary. The recipient is the data controller for the processing of your personal data unless we have stated otherwise. All processing and transfers are done to comply with the purposes of the processing of your personal data in accordance with the content of this Privacy Policy. We take all reasonable legal, technical, and organisational measures to ensure that your personal data is being handled in a secure way and with an adequate level of protection when transferred to or shared with such selected third parties.
5.2 Service providers
To comply with the purposes of the processing of your personal data, we transfer personal data to external parties, such as service providers that we have engaged. These service providers deliver services within, inter alia, the following areas: IT (e.g., data storage) and support (e.g., support of IT-infrastructure). These external parties act as data processors for B&K and may only process your personal data in accordance with our instructions and not for their own purposes. B&K is the data controller for the processing of personal data that the service providers carry out for us.
5.3 Appropriate safeguards for the transfer of personal data outside of the EU/EES
Our service providers process as a main rule your personal data within the EU/EEA. In certain cases, e.g., in connection with support, some data may be processed in countries outside of the EU/EEA, such as the U.S. Transfer of personal data to service providers that process personal data outside of the EU/EES are handled in accordance with applicable data protection laws, including the GDPR. The protection of personal data in connection with transfers outside of the EU/EEA are ensured either through (i) the European Commission’s adequacy decisions, (ii) the procedural safeguards that the European Commission’s Standard Contractual Clauses (SCC) offers, or (ii) the provider’s adherence to the EU-U.S. Data Privacy Framework. The protection is further supplemented with technical and organisational security measures, including encryption and anonymisation/pseudonymisation.
If you have any questions regarding B&K’s transfer of personal data to countries outside of the EU/EEA, please contact us by using our contact information under Section 8 below. You have a right to obtain a copy of all the documentation that show that appropriate safeguards have been implemented to protect your personal data when transferred to a third country.
Click here to read more about third country transfers.
6 Security measures
It is important for B&K that your personal data is handled in a secure way. We use adequate physical, technical, and administrative measures when processing the data that we collect. We also take measure to prevent and detect if data have been disseminated to a third party or if it has been lost. Access to personal data is only given to persons who need it to carry out their work tasks.
7 Your rights
According to applicable data protection laws, you have certain rights in relation to the processing of your personal data. We process your personal data to the extent necessary to fulfil your rights. You may send in requests about the exercising of your rights by contacting us through our contact information that is provided under Section 8 below.
You have under certain circumstances a right to exercise the following rights:
|
Access |
You may request that we confirm whether we process personal data concerning you or not. If that is the case, you can access the personal data and other information that concerns the processing (e.g., the purposes of the processing). You also have a right to obtain a copy of the personal data that is being processed. |
|
Object to certain processing |
You have the right to object to the processing of your personal data based on a legitimate interest for reasons which concern your particular situation. In such a situation, we will stop processing your personal data where the processing is based on a legitimate interest, unless we can show that our legitimate interest overrides your privacy interest or that the use of your personal data is necessary to manage or defend legal claims. |
|
Rectification |
You have the right to request that we rectify inaccurate personal data concerning you. |
|
Erasure |
You may have your personal data erased under certain circumstances, e.g., when the personal data is no longer needed to comply with the purposes for which they were collected, or if the personal data is being unlawfully processed. |
|
Restriction of processing |
You have under certain circumstances a right to restrict the processing of your personal data to only include storage. This applies e.g., if the processing is unlawful but you do not wish to have your personal data erased. |
|
Withdraw consent |
You have the right to at any time withdraw your consent to the processing of personal data. This applies to the extent the processing is based on your consent. |
|
Data portability |
You have the right to receive personal data concerning you which you have provided to us, in a structured, commonly used, and machine-readable format. You may also request that for the information is transferred to another data controller (where possible), if a) the processing is based on your consent or fulfilment of a contract with you, and b) the processing is carried out by automated means. |
Click here to read more about your rights in connection with the processing of your personal data.
Lodge a complaint with a supervisory authority
If you have any complaints regarding B&K’s processing of personal data, you have a right to lodge a complaint with the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten, IMY). You can read more about how you can lodge a complaint with IMY here.
8 Contact information
If you want to exercise your rights or if you have any questions relating to this Privacy Policy or the processing of your personal data, please contact us by sending an email to contact@bernadottekylberg.se.
9 Cookie declaration
| Strictly Required Cookies | ||||
| Name | Description | Category | Provider | Duration |
| _orig_referrer | This cookie is generally provided by Shopify and is used to track landing pages. | Strictly Required Cookies | Shopify | 2 weeks |
| _landing_page | This cookie is generally provided by Shopify and is used to track landing pages. | Strictly Required Cookies | Shopify | 2 weeks |
| _ab | This cookie is generally provided by Shopify and is used in connection with access to the admin view of an online store platform. | Strictly Required Cookies | Shopify | 2 weeks |
| _secure_session_id | This cookie is generally provided by Shopify and is used to track a user's session through the multi-step checkout process and keep their order, payment and shipping details connected. | Strictly Required Cookies | Shopify | 1 day |
| cart | This cookie is generally provided by Shopify and is used in connection with a shopping cart. | Strictly Required Cookies | Shopify | 2 weeks |
| cart_sig | This cookie is generally provided by Shopify and is used in connection with checkout. It is used to verify the integrity of the cart and to ensure performance of some cart operations. | Strictly Required Cookies | Shopify | 2 weeks |
| cart_ts | This cookie is generally provided by Shopify and is used in connection with checkout. | Strictly Required Cookies | Shopify | 2 weeks |
| cart_ver | This cookie is generally provided by Shopify and is used in connection with the shopping cart. | Strictly Required Cookies | Shopify | 2 weeks |
| cart_currency | This cookie is generally provided by Shopify and it is set after a checkout is completed to ensure that new carts are in the same currency as the last checkout. | Strictly Required Cookies | Shopify | 2 weeks |
| checkout_token | This cookie is generally provided by Shopify and is used in connection with a checkout service. | Strictly Required Cookies | Shopify | 1 year |
| storefront_digest | This cookie is generally provided by Shopify and it stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected. | Strictly Required Cookies | Shopify | 2 years |
| cookieconsent_status | This cookie is associated with the app Consentmo GDPR Compliance and is used for storing the customer's consent. | Strictly Required Cookies | GDPR/CCPA + Cookie management | 1 year |
| cookieconsent_preferences_disabled | This cookie is associated with the app Consentmo GDPR Compliance and is used for storing the customer's consent. | Strictly Required Cookies | GDPR/CCPA + Cookie management | 1 day |
| _shopify_m | This cookie is generally provided by Shopify and is used for managing customer privacy settings. | Strictly Required Cookies | Shopify | 1 year |
| _shopify_tm | This cookie is generally provided by Shopify and is used for managing customer privacy settings. | Strictly Required Cookies | Shopify | 30 minutes |
| _shopify_tw | This cookie is generally provided by Shopify and is used for managing customer privacy settings. | Strictly Required Cookies | Shopify | 2 weeks |
| _tracking_consent | This cookie is generally provided by Shopify and is used to store a user's preferences if a merchant has set up privacy rules in the visitor's region. | Strictly Required Cookies | Shopify | 1 year |
| tracked_start_checkout | This cookie is generally provided by Shopify and is used in connection with checkout. | Strictly Required Cookies | Shopify | 1 year |
| _customer_account_shop_sessions | Used in combination with the _secure_account_session_id cookie to track user sessions for new customer accounts. | Strictly Required Cookies | 30 day | |
| _secure_account_session_id | Used to track user sessions for new customer accounts. | Strictly Required Cookies | 30 day | |
| _shopify_country | For stores where the currency/price page is determined by GeoIP, this cookie stores the page we found. This cookie helps to avoid GeoIP verification after the first application. | Strictly Required Cookies | session | |
| _storefront_u | Used to facilitate updating customer account information. | Strictly Required Cookies | 1 minute | |
| _cmp_a | Used to manage customer privacy settings. | Strictly Required Cookies | 1 day | |
| c | No description available | Strictly Required Cookies | No duration available | |
| checkout | Used in connection with payments. | Strictly Required Cookies | 4 weeks | |
| customer_account_locale | Used in connection with new customer accounts. | Strictly Required Cookies | 1 year | |
| dynamic_checkout_shown_on_cart | Used in connection with payments. | Strictly Required Cookies | 30 minutes | |
| hide_shopify_pay_for_checkout | Used in connection with payments. | Strictly Required Cookies | session | |
| shopify_pay | Used in connection with payments. | Strictly Required Cookies | 1 year | |
| shopify_pay_redirect | Used in connection with payments. | Strictly Required Cookies | 60 minutes | |
| shop_pay_accelerated | Used in connection with payments. | Strictly Required Cookies | 1 year | |
| keep_alive | Used in conjunction with buyer localization. | Strictly Required Cookies | 2 weeks | |
| source_name | Used in combination with mobile apps to provide personalized checkout behavior when browsing a compatible mobile app store. | Strictly Required Cookies | session | |
| master_device_id | Used in conjunction with merchant login. | Strictly Required Cookies | 2 years | |
| previous_step | Used in connection with payments. | Strictly Required Cookies | 1 year | |
| discount_code | Used in connection with payments. | Strictly Required Cookies | session | |
| remember_me | Used in connection with payments. | Strictly Required Cookies | 1 year | |
| checkout_session_lookup | Used in connection with payments. | Strictly Required Cookies | 3 weeks | |
| checkout_prefill | Used in connection with payments. | Strictly Required Cookies | 5 minutes | |
| checkout_queue_token | Used in connection with payments. | Strictly Required Cookies | 1 year | |
| checkout_queue_checkout_token | Used in connection with payments. | Strictly Required Cookies | 1 year | |
| checkout_worker_session | Used in connection with payments. | Strictly Required Cookies | 3 day | |
| checkout_session_token | Used in connection with payments. | Strictly Required Cookies | 3 weeks | |
| cookietest | Use it to make sure our systems are working properly. | Strictly Required Cookies | 1 minute | |
| order | Used in conjunction with the order status page. | Strictly Required Cookies | 3 weeks | |
| identity-state | It is used in connection with user identification. | Strictly Required Cookies | 1 day | |
| card_update_verification_id | Used in connection with payments. | Strictly Required Cookies | 1 day | |
| customer_account_new_login | It is used in connection with user identification. | Strictly Required Cookies | 20 minutes | |
| customer_account_preview | It is used in connection with user identification. | Strictly Required Cookies | 7 day | |
| customer_payment_method | Used in connection with payments. | Strictly Required Cookies | 60 minutes | |
| customer_shop_pay_agreement | Used in connection with payments. | Strictly Required Cookies | 1 minute | |
| pay_update_intent_id | Used in connection with payments. | Strictly Required Cookies | 20 minutes | |
| localization | Used in connection with payments. | Strictly Required Cookies | 2 weeks | |
| profile_preview_token | Used in connection with payments. | Strictly Required Cookies | 5 minutes | |
| login_with_shop_finalize | It is used in connection with user identification. | Strictly Required Cookies | 5 minutes | |
| preview_theme | It is used in conjunction with the theme editor. | Strictly Required Cookies | session | |
| shopify-editor-unconfirmed-settings | It is used in conjunction with the theme editor. | Strictly Required Cookies | 1 day | |
| wpm-test-cookie | Use it to make sure our systems are working properly | Strictly Required Cookies | session |
| Analytics and Statistics | ||||
| Name | Description | Category | Provider | Duration |
| _s | This cookie is associated with Shopify's analytics suite. | Analytics and Statistics | 30 minutes | |
| _shopify_fs | This cookie is associated with Shopify's analytics suite. | Analytics and Statistics | Shopify | 30 minutes |
| _shopify_s | This cookie is associated with Shopify's analytics suite. | Analytics and Statistics | Shopify | 30 minutes |
| _shopify_sa_t | This cookie is associated with Shopify's analytics suite concerning marketing and referrals. | Analytics and Statistics | Shopify | 30 minutes |
| _shopify_sa_p | This cookie is associated with Shopify's analytics suite concerning marketing and referrals. | Analytics and Statistics | Shopify | 30 minutes |
| _shopify_y | This cookie is associated with Shopify's analytics suite. | Analytics and Statistics | Shopify | 1 year |
| _y | This cookie is associated with Shopify's analytics suite. | Analytics and Statistics | 1 year | |
| _ga | This cookie name is associated with Google Universal Analytics | Analytics and Statistics | Google Analytics | 2 years |
| _gat | This cookie name is associated with Google Universal Analytics. | Analytics and Statistics | Google Analytics | 1 minute |
| _s | This cookie is associated with Shopify's analytics suite. | Analytics and Statistics | 30 minutes |
| Marketing and Retargeting | ||||
| Name | Description | Category | Provider | Duration |
| IDE | This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Googles real time bidding advertising exchange | Marketing and Retargeting | Google DoubleClick | 2 years |
| GPS | This cookie is associated with YouTube which collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites. | Marketing and Retargeting | Youtube | session |
| PREF | This cookie, which may be set by Google or Doubleclick, may be used by advertising partners to build a profile of interests to show relevant ads on other sites. | Marketing and Retargeting | Youtube | 8 months |
| BizoID | This is a Microsoft MSN 1st party cookie to enable user-based content. | Marketing and Retargeting | 1 month | |
| _fbp | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. | Marketing and Retargeting | Meta Platforms, Inc. | 3 months |
| __adroll | This cookie is associated with AdRoll | Marketing and Retargeting | Adroll Group | 1 year |
| __adroll_v4 | This cookie is associated with AdRoll | Marketing and Retargeting | Adroll Group | 1 year |
| __adroll_fpc | This cookie is associated with AdRoll | Marketing and Retargeting | Adroll Group | 1 year |
| __ar_v4 | This cookie is associated with AdRoll | Marketing and Retargeting | Adroll Group | 1 year |
| Functional Cookies | ||||
| Name | Description | Category | Provider | Duration |
| _gid | This cookie name is associated with Google Universal Analytics. | Functional Cookies | Google Analytics | 1 day |
10 Amendments to this Privacy Policy
This Privacy Policy may be updated from time to time. The latest version of the Privacy Policy is always available on bernadottekylberg.com, where we inform you of any essential changes.
This Privacy Policy was last updated on 11 June 2024.