Privacy Policy

1. GENERAL


1.1 What does this policy cover?

This Privacy Policy (“the Privacy Policy”) governs the processing of personal data collected from individual users (“you” and “your”) through the e-commerce website https://mockberg.com (“the Website”). The Privacy Policy does not apply to any other websites, applications, or software integrated with the Website, or to other third-party products and services (for example, social media providers linked to the Website).


1.2 What is personal data?

Personal data is all information that can be linked, directly or indirectly together with other data, to a living natural person. The following are some examples:


  • Name
  • Personal identity number
  • Delivery address
  • Phone number
  • Email address
  • Order history
  • User data

1.2 What does processing personal data mean?

Processing of personal data includes every action taken with personal data, regardless of whether it is performed automatically or not. This means that the following actions, among others, are covered:


  • Collection
  • Registration
  • Merging
  • Transfer
  • Deletion

1.3 Who is responsible for your personal data?

The Website is owned and operated by:


Mockberg AB
Organization number: 556989-7159
Address: c/o KIVRA KIVRA: 556989-7159, 106 31 Stockholm
VAT number: SE556989715901
Email: contact@mockberg.com


Mockberg AB is responsible for processing your personal data on the Website and is therefore defined as the data controller.


1.4 Why are we allowed to process personal data?

For the processing of personal data to be permitted, there must always be a legal basis under the GDPR, known as a legal basis. Such a legal basis includes:

  • Your consent
  • That processing of personal data is necessary to fulfill a contract (in this case, the Website's terms of use and your purchase of products)
  • To fulfill a legal obligation, such as retaining data due to accounting obligations
  • To determine, following a balancing of interests, that Mockberg's interest in processing personal data outweighs your interest in protecting it.

2. PERSONAL DATA COLLECTED THROUGH THE WEBSITE


2.1 What personal data do we collect?

As a general rule, we only collect the minimum amount of personal data necessary for your use of the Website. We use your personal data for limited, specified, and legitimate purposes expressly set out in this Privacy Policy. In general, your personal data is used to provide you with access to the Website, maintain and improve the Website, process your orders, provide customer service and respond to your inquiries, compile statistics on the use of the Website, and pursue our legitimate interests.

Below you can find a more detailed summary of the types of personal data we collect, the purposes for which we use it, and the legal bases we rely on when processing it:


Orders
  • Type of personal data: When you place an order on the Website, we collect your first name, last name, address, email address, and telephone number.
  • Purpose: We use this information to send you an order confirmation and receipt, deliver your orders, contact you when necessary, and maintain our customer service.
  • Legal basis: The legal basis we rely on is our contract with you.
  • Retention period: We will store this information for as long as required by applicable law (at least 7 years).

Payments
  • Type of personal data: When you make a payment, our payment service providers collect your personal data, such as your first name, last name, billing and delivery addresses, and payment information (e.g., credit card details).
  • Purpose: Your payment information is used to process payments and manage our accounting.
  • Legal basis: The legal basis we rely on is our contract with you.
  • Retention period: We will store this information for as long as required by applicable law (at least 7 years).

Requests
  • Type of personal data: When you contact us by email, we collect your name, email address, and any information you choose to include in your message. When you contact us via our contact form, we collect your first name, last name, email address, telephone number, and any information you choose to include in your message. When you contact us via our chat function, we collect your first name, last name, email address, telephone number, and any information you choose to include in your message.
  • Purpose: We use this information to respond to and handle your requests and provide you with the requested information.
  • Legal basis: The legal basis we rely on is our legitimate interest in treating our customers well and strengthening/maintaining our reputation, your consent (for optional personal data shared), or our contract (if the request concerns an item you purchased from us).
  • Retention period: We will store this information until you stop communicating with us and we determine that the relevant request has been handled.

Reviews
  • Type of personal data: When you leave a review of the products you have purchased, we collect your name and any information you choose to include in your review.
  • Purpose: We use this information to display your review on the Website and provide other customers/potential customers with an objective opinion of our products.
  • Legal basis: The legal basis we rely on is your consent.
  • Retention period: We will store this data until you ask us to delete your review or until we determine that it is no longer relevant (for example, if the reviewed product has been discontinued from our range).

2.2 Commercial communications

We only send commercial communications if (i) you sign up for our newsletter, (ii) you subscribe to a newsletter by providing us with your email address, or (iii) you purchase something from us and we want to inform you about our similar products. In such cases, you will receive information about our new products, Website features, and special offers. The legal bases we rely on are your consent or our legitimate interests in promoting our company’s business and sales. You can opt out of receiving our commercial communications at any time by clicking the “Unsubscribe” link or equivalent in our newsletters or by contacting us directly.


2.3 Transactional messages

If we consider it necessary, we may send you important informational messages by email or SMS, such as order updates, payment receipts, invoices, shipping information, and other technical or administrative emails. Please note that such messages are sent on an “as needed” basis unless they constitute commercial communications, which may require your prior consent. You cannot opt out of receiving transactional messages.


2.4 Feedback and questions

If you contact us, we may record any questions, responses, complaints, recommendations, or compliments from you. Where possible, we will anonymize your personal data (i.e., remove all personal data that is not necessary to maintain such records). If your personal data is anonymized in such a way that it can no longer be associated with an identified or identifiable natural person, it will no longer be considered personal data and may therefore be used for any legitimate purposes.


2.5 Sensitive personal data

Certain personal data is particularly sensitive by nature and therefore has stronger protection. This is called sensitive personal data. This includes information about health, genetic and biometric information, religious or philosophical beliefs, political opinions, ethnic origin, sexual orientation and sex life, and trade union membership. We do not collect sensitive personal data.


2.6 Where we collect your personal data

We collect your personal data from the following sources:

  • Directly from you: for example, if you provide your personal data when you purchase something from us or contact us.
  • Directly or indirectly through your activity on the Website: when you use the Website, we automatically collect technical information about your use of the Website.
  • From third parties: we may receive information about you from third parties to whom you have previously provided your personal data, if those third parties have a legal basis for disclosing your personal data to us (for example, for payment purposes).

2.7 Consequences of not providing personal data

If you decide not to provide us with your personal data when we request it, we may not be able to carry out certain requested processes (for example, process your order), and you may not be able to use all of the Website's features, receive the requested information, or receive our response. Please notify us immediately if you believe that any personal data we collect is excessive or unnecessary for the intended purpose.


3. RETENTION OF PERSONAL DATA


3.1 Retention period (personal data)

We retain your personal data only for as long as such data is required for the purposes described in this Privacy Policy or until you ask us to update or delete your personal data, whichever occurs first. The specific retention period for different types of personal data is set out in section 2.1 above. Once your personal data is no longer necessary for its purposes and we have no other legal basis for retaining it, we will immediately and securely delete your personal data from our systems. As a general rule, we do not retain personal data longer than absolutely necessary.


3.2 Retention period (data)

We retain anonymous data (i.e., data that is not considered personal data) relating to you for as long as necessary for the purposes described in this Privacy Policy. This means retaining data for the period needed for us to manage our business operations, fulfill our contractual obligations, pursue our legitimate interests, conduct audits, comply with laws and regulations, and resolve any disputes.


3.3 Retention period required by law

When we are legally required to retain your personal data for a certain period (e.g., for accounting and business records), we will retain your personal data for the period prescribed by applicable law (in most cases, seven years) and securely delete the personal data as soon as the required retention period expires.


4. PROTECTION AND SHARING OF PERSONAL DATA


4.1 How we protect your personal data

We implement appropriate technical and organizational security measures that protect your personal data from, among other things, loss, misuse, unauthorized access, and disclosure. The security measures we take include secure networks, strong passwords, restricted access to your personal data by our personnel, multi-factor authentication, anonymization of personal data (where possible), regular updates, security updates, and careful vetting of our data processors.


4.2 When we share your personal data

As a general rule, we do not share your personal data. However, if this is necessary for the intended purpose of your personal data, we will disclose your personal data to companies that provide services on our behalf or support us in our operations (our so-called data processors). In this context, your personal data may be shared with companies that provide us with technical support services such as hosting, payment processing, shipping and email distribution services. The disclosure of your personal data is limited to situations where it is required for the following purposes:


  • Ensure that the Website functions properly;
  • Deliver the products you have ordered;
  • Process your payments;
  • Respond to your inquiries;
  • Pursue our legitimate interests;
  • Maintain our rights and security and prevent fraud;
  • Fulfill our contractual obligations; and
  • For law enforcement purposes.

4.3 How we share your personal data

Although our company and most of our partners are based in Sweden, i.e. within the European Economic Area (EEA), some of our data processors are based outside the EEA. We may therefore need to transfer your personal data outside the EEA. If such a transfer is necessary, we will ensure that the country where our data processor is located guarantees an adequate level of protection for your personal data, or we will enter into an agreement with data processors that ensures such protection (e.g. a data processing agreement based on pre-approved standard contractual clauses).


5. YOUR RIGHTS


5.1 Checking processing

You always have the right to check how we process your personal data. Except for any limitations under applicable law, you have the following rights:


  • Right of access – you can obtain a copy of the personal data we store in our systems, as well as a list of the purposes for which your personal data is processed;
  • Right to rectification – you can ask us to correct inaccurate or incomplete data we process about you;
  • Right to erasure – you can ask us to delete your personal data from our systems;
  • Right to restriction – you can ask us to restrict the processing of your personal data;
  • Right to data portability – you can ask us to provide you with a copy of your personal data in a structured, commonly used and machine-readable format and transfer this personal data to another controller;
  • Right to object – you may ask us to stop processing your personal data;
  • Right to withdraw consent – you have the right to withdraw your consent if you have provided it; or
  • Right to lodge a complaint – you may submit a complaint regarding our processing of your personal data.

5.2 Exercising Rights

If you wish to exercise any of your rights as described above, please contact us by email (contact@mockberg.com) state the subject line “GDPR – request” and explain your request in detail. To verify the legitimacy of your request, we may ask you to provide identifying information so that we can identify you in our system. We will respond to your inquiry as soon as possible and always within a reasonable period of no more than 30 days. If you are not satisfied with how we process your personal data, you also have the option of reporting our processing of your personal data to the Swedish Authority for Privacy Protection. For smooth and efficient handling, however, we recommend that you contact us first so that we can help you with any questions or concerns.


6. MISCELLANEOUS


6.1 Validity

This Privacy Policy enters into force on the date stated at the top of the Privacy Policy (“Last updated”) and remains in force until terminated or updated by us.


6.2 Changes and Updates

We reserve the right to revise this Privacy Policy from time to time. The date of the latest amendment is stated at the end of the Privacy Policy. If we make any changes to the Privacy Policy, we will publish those changes on the Website. You are therefore advised to read this Privacy Policy regularly to stay informed of any changes. If we change the Privacy Policy in a way that materially differs from what was stated when any consent was collected, we will notify you of these changes and, where necessary, ask you to provide renewed consent to our processing of personal data.


6.3 Personal Data of Minors

The Website is not intended for use by persons under 18 years of age. Therefore, we do not knowingly collect personal data from children. If you become aware that a child has provided us with their personal data and you are the child's parent or guardian, please contact us immediately so that we can remove the child's personal data from our systems.


6.4 Contact

Please do not hesitate to contact us if you have any questions about this Privacy Policy, the processing of your personal data, or if you wish to request a data register extract. You can find our contact information below.


Mockberg AB
Organization number: 556989-7159
Address: c/o KIVRA KIVRA: 556989-7159, 106 31 Stockholm
Email: contact@mockberg.com