Privacy Policy
We, at Simmer Style AB (”Simmer Style”, “we”, ”our” and ”us”) care about your privacy and want you to feel safe when we process your personal data.
With this privacy policy, we want to provide information of our processing of personal data to you when you:
- communicate with us,
- visit our website or social media,
- purchase our products or make a subscription on our products, or
- subscribe to our newsletter.
Below you can find information on how and why we process your personal data, the lawful basis for our processing and the storage period for which we keep your personal data. The information also describes your rights, such as the right to lodge a complaint with a supervisory authority, the right to withdraw your consent and object to processing.
In this Policy, you can read more about the following:
- Simmer Style is responsible for the processing of your personal data
- Which personal data do you need to share with us?
- How do we process your personal data?
- Who can gain access to your personal data and why?
- Where are your personal data being processed?
- What are your rights when we process your personal data?
- Balancing of interests assessments when processing personal data based on the lawful basis “legitimate interests”
Simmer Style is responsible for processing of your personal data
Simmer Style AB, a Swedish company with company registration number 556229-8520, is responsible for the processing of your personal data as controller when you share your personal data with us.
Should you have any questions regarding our processing of your personal data, or if you wish to exercise any of your rights under data protection legislation, please contact us via our e-mail address [email protected]. Our postal address is c/o Tomas Persson, Glasbruksvägen 15, 305 72 Steninge, Sweden.
Which personal data do you need to share with us?
In general, you are not required to provide any of your personal data to us. However, if you want to purchase or make a subscription to our products, we need some of your personal data in order to administrate your purchase or subscription and to comply with legislation or other statutory requirements.
You will find a description of the scenarios when you need to provide your personal data to us and what personal data you need to provide in the tables below where the lawful basis is ”Performance of contract” or ”Legal obligation”. If you do not provide your personal data to us in such scenarios, you will for example not be able to make a purchase.
What are your rights when we process your personal data?
You have certain rights that you can exercise to affect how we process your personal data. You can read about what those rights are below.
If you want to know more about your rights or if you want to exercise any of your rights, please contact us and we will help you. Our contact information can be found at the beginning of this privacy policy.
Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
You have the right to lodge a complaint with a supervisory authority. The supervisory authority in Sweden is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, the IMY).
In detail: Your right to complain exists without prejudice to any other administrative or judicial remedy. You have the right to lodge a complaint with a supervisory authority, in particular, in the EU/EEA member state of your habitual residence, place of work or place where the alleged infringement of applicable data protection laws has allegedly occurred.
The supervisory authority has an obligation of informing you on the progress and the outcome of the complaint, including the possibility of a judicial remedy.
Right to withdraw consent (Article 7.3 GDPR)
You have the right to withdraw your consent at any time by contacting us.
In detail. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right of access (Article 15 GDPR)
You have the right to obtain confirmation as to whether we are processing personal data concerning you or not. You can make a request by contacting us. If we process your personal data, you also have a right to obtain a copy of the personal data processed by us as well as information about our processing of your personal data.
In detail. The information we provide includes the following:
- the purposes of the processing,
- the categories of personal data concerned,
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations,
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period,
- the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing,
- the right to lodge a complaint with a supervisory authority,
- if the personal data are not collected from you, we provide you with available information about the source of the personal data,
- the existence of automated decision-making, including profiling and meaningful information about the logic involved, as well as the significance and the predicted consequences of such processing, and
- where your personal data are transferred to a third country or to an international organization, you have the right to information regarding the appropriate safeguards, pursuant to Article 46 GDPR, put in place for the transfer.
For any further copies of the personal data undergoing processing requested by you, we may charge a reasonable fee based on administrative costs. If you have made the request by electronic means the information will be provided to you in a commonly used electronic form, unless otherwise requested by you.
Your right to obtain a copy referred to above shall not adversely affect the rights and freedoms of others.
Right to object (Article 21 GDPR)
You have the right to object to our processing of your personal data at any time.
In detail: Your right to object applies as follows:
- relating to your situation, you have the right to at any time object to processing of your personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or for the purposes of our legitimate interest, including any profiling (Article 21.1). We shall in such case no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims,
- where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, including any profiling (Article 21.2). If you make such objection, you have an unconditional right to have the processing of your personal data for such purposes ceased.
- in the context of the use of information society services, and regardless of Directive 2002/58/EC (ePrivacy Directive, or ePD), you may exercise your right to object by automated means using technical specifications.
- where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89.1, you have the right to object to, on grounds relating to your particular situation, processing of your personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Right to erasure (“the right to be forgotten”) (Article 17 GDPR)
You have the right to ask us to erase your personal data.
In detail: We have the obligation to erase your personal data without undue delay where one of the following grounds applies:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
- you withdraw your consent on which the processing is based, and there is no other legal ground for the processing,
- you object to the processing pursuant to Article 21.1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21.2 GDPR,
- the personal data have been unlawfully processed, or
- the personal data have to be erased for compliance with a legal obligation in Union or Member State law that applies to us.
Where we have made the personal data public and are obliged in accordance with the rights stated above to erase the personal data, we shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
We will notify any erasure of personal data carried out in accordance with your rights stated above to each recipient whom the personal data have been provided to, unless this proves impossible or involves disproportionate effort. If you want information about those recipients, you are more than welcome to contact us.
- Please note that our obligation to erase and inform according to above shall not apply to the extent processing is necessary according to the following reasons:
for exercising the right of freedom of expression and information, - for compliance with a legal obligation which requires processing by Union or Member State law which applies to us, or
- for the establishment, exercise or defence of legal claims.
Right to rectification of processing (Article 16 GDPR)
You have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you.
In detail: Considering the purposes of the processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement.
We will communicate any rectification of personal data to each recipient whom the personal data have been provided to, unless this proves impossible or involves disproportionate effort. If you want information about those recipients, you are more than welcome to contact us.
Right to restriction of processing (Article 18 GDPR)
You have the right to obtain from us restriction of the processing of your personal data.
In detail: Your right applies if:
- the accuracy of the personal data is contested by you, during a period enabling us to verify the accuracy of the personal data,
- you have objected to processing pursuant to Article 21.1 GDPR pending the verification whether our legitimate grounds override yours,
- the processing is unlawful, and you oppose the erasure of the personal data and instead request the restriction of their use, or
- you need the personal data for the establishment, exercise or defence of legal claims even though we no longer need the personal data for the purposes of the processing.
Where the processing has been restricted according to above, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
We will notify each recipient whom the personal data have been provided to about any restriction of processing according to above, if this do not occur to be impossible or entails a disproportionate effort. If you want more information about these recipients, you are welcome to contact us.
Right to data portability (Article 20 GDPR)
You have the right to receive your personal data (that you have provided to us) from us in a structured, commonly used and machine-readable format and, where technically feasible, have your personal data transferred to another data controller (“data portability”).
In detail: The right applies if:
- the processing is based on the lawful basis consent or on a contract, and
- the processing is carried out by automated means.
The exercise of the right to data portability shall be without prejudice to the right to erasure, i.e. Article 17.
Your right to data portability shall not adversely affect the rights and freedoms of others.
Balancing of interests assessments when processing personal data based on the lawful basis “legitimate interests”
As we state above, for some purposes, we process your personal data based on our “legitimate interest”. By carrying out a balancing of interests assessment concerning our processing of your personal data, we have concluded that our legitimate interest for the processing outweighs your interests or rights which require the protection of your personal data.
If you want more information in relation to our balancing of interests assessments, please do not hesitate to contact us. Our contact information can be found at the beginning of this privacy policy.
Detailed description about how we process your personal data
How do we process your personal data?
You can read more about how we process your personal data in the below. As we are legally required to provide some of the information to you, the text is extensive and may be perceived as difficult to understand. If you have any questions regarding the information set out herein, do not hesitate to contact us.
The below tables describe in detail (i) when we process your personal data (ii), what kind of data we process, (iii) why we process your personal data, (iv) how long we will process your personal data and (v) the lawful basis for the processing. The lawful basis is the basis for processing your personal data according to the GDPR.
If you interact with us without making a purchase, e.g. our social media
If you are in contact with us before you make a purchase or agree to a subscription, e.g. by sending us an e-mail or sending us a message via our social media, we will process your personal data as described in the tables below. We process the personal data that you provide to us and information from your social media account (if you use such account to communicate with us).
To communicate with you:
What processing we perform
- Communicate, e.g. via e-mail or our website
- Communicate via social media, e.g. if you make a comment on our site or posts
- Answer your questions and give you the best possible service
What personal data we process
- Information you provide to us (e.g. name and contact information)
If you interact with us via our social media sites (e.g. our Instagram) we also process:
- Information from your profile on the social media in question (user name and any picture you have chosen for your account)
- Other information regarding the matter for which you contact us
Our lawful basis for the processing
Legitimate interest
The personal data will be processed based on our legitimate interest to communicate with you who have contacted us.
Storage period: We will delete your personal data [for Simmer Style to insert after how long period of time data is deleted].
- If you chat with us via Instagram Direct Messenger or via Facebook Messenger, your personal data will be deleted after on year, unless you choose to continue to communicate with us by e.g. entering your e-mail address.
- If you contact us via e-mail, your personal data will be stored for a period of 2 years after the matter has been solved, in order for us to give you the best possible service.
Your communication with us on social media (e.g. comments) can be deleted by you at any time. We will remove posts or comments which are in breach of the rules of the platform or in conflict with applicable legislation as soon as possible.
To share your posts on social media
What processing we perform
- Share posts you have uploaded on social media where you have tagged us
What personal data we process
- Information from your profile on the social media in question (user name and any picture you have chosen for your account)
- Other information in your post
Our lawful basis for the processing
- Consent
- The personal data will be processed based on your consent. You can withdraw such consent at any time.
Storage period: Your posts will be shared on our social media until we delete the post or you ask us to remove it.
If you visit our website or social media
We analyse how our website is used and provide you with relevant marketing on other websites you visit based on such analysis. This means that your personal data is processed when you visit our website. To protect your privacy, we have taken measures to avoid identifying you when you visit our website. For instance, we only process an encrypted version of your IP-address.
When you visit our website, we will gather your personal data from the device you are using to visit our website and from the companies we collaborate with (see below). Such companies will also use previous information they have about you to show you interesting offers from us.
When you use our website, we will gather personal data by using cookies. If you would like to know how we do this, it is described in our Cookie Policy which you find here.
To analyse how our website is used
What processing we perform
- Analyse how you use our website to improve our website, products and services. To do this we use the analytic service from Google Analytics.
- The analytic service means that we place a random ID on your device to distinguish your device from other visitors and to acknowledge patterns in how our website is used. We will however not know who you are.
- The personal data we gather will be used e.g. to optimize functions and to adapt the website to suit our visitors.
What personal data we process
- An encrypted version of your IP address which we at Simmer Style cannot connect to you as an individual
- Information about your device/browser (which area in the country you use our website from and which screen resolution you have)
- Information about your activities on the website, e.g. what you click on and how many times you have visited our website
- Other information Google have about you, e.g. information about from which site you found us
Our lawful basis for the processing
- Consent
- The personal data will be processed based on your consent. You can withdraw such consent at any time.
- You can prevent Google Analytics from using your personal data by downloading and installing this browser add on.
Storage period:
Google will continue to store your personal data for their own purposes and Google will inform you separately about such storing.
To show you relevant marketing online from us
What processing we perform
- Market our products by showing you offers and marketing online that we believe you are interested in
- We show you such marketing on other websites you visit and on You see marketing based on information that these companies have about you beforehand (so called profiling*)
- Share information about you with our marketing services so that these marketing services get information about which type of visitors that are interested in us
What personal data we process
An encrypted version of your IP- address which we at Simmer Style cannot connect to you as an individual:
- Name
- Phone number
- E-mail address
You will see search results and ads based on:
- An analyse of how you use our website, e.g. what products you put in your shopping cart
- Information that the marketing services we use have about you since before, e.g. information about from which site you found us
Our lawful basis for the processing
Consent
The personal data will be processed based on your consent. You can withdraw such consent at any time.
Here you can make choices about the marketing you see from Google and here on Facebook under the heading ad settings you can choose which marketing you want to see on Facebook.
Storage period: You will see marketing from us for a period of at the latest two years after your visit to our website.
Google (including YouTube) and Facebook (including Instagram) will continue to process your personal data as independent controllers. Information on how long they store your personal data can be found in their respective privacy information.
If you make a purchase or agree to a subscription
When you make a purchase or agree to a subscription, we will process your personal data as described below. Such personal data is collected directly from you. We use Stripe, Klarna and Paypal as a provider of payment providers. We will share your personal data with the payment provider that you have chosen. The payment provider you have chosen will also process your personal data for its own account. [If you have chosen to pay by Stripe your personal data will be shared with Stripe that will be responsible (controller) for your personal data. You can find Stripe’s privacy policy here.
To administrate and enable your purchase
What processing we perform
- Administrate your purchase
- Provide you with a payment solution offered by Stripe
- Send you an order confirmation
- Deliver the item you have purchased through our delivery partner as chosen by you
What personal data we process
- Name
- E-mail address
- Phone number
- Address
Our lawful basis for the processing
- Performance of contract
- The processing is necessary for us to be able to administrate your purchase
Storage period: We will store the personal data during the purchase process and thereafter for a period of 24 months after the purchase in question. In case of a claim, dispute or similar we need to store some of your personal data for a longer period according to what is stated below.
Your order and payment information will be stored for a longer period to comply with bookkeeping legislation.
To provide customer service and track your order
What processing we perform
- Provide customer service and answer any questions you may have regarding your purchase, e.g. via e-mail or our website
- Track your order and provide you with tracking information if you have asked us to
What personal data we process
- Name
- E-mail address
- Phone number
- Information about your purchase and other information you provide to us
If you ask us to track your order, we will process:
- E-mail address
- Postal code
Our lawful basis for the processing
Legitimate interest
The personal data will be processed based on our legitimate interest to provide customer service.
Storage period: We will delete your personal data 1 year after your customer service matter has been solved.
To publish customer reviews
What processing we perform
- Send you a request via e-mail to submit a review of the product you have purchased
- Publish reviews of our products that you have chosen to submit
What personal data we process
- Name (your first name and first letter of your surname) which we already have from your purchase
- E-mail address
- Information that you submit in your review of the product
Our lawful basis for the processing
Consent
The personal data will be processed based on your consent. You can withdraw such consent at any time.
Storage period: We will send a request for you to submit a customer review after your purchase. We will stop sending requests if you object to receiving such e-mails. If you choose to submit a review, we will remove your review from our website and delete your personal data 24 months after your review was published.
To comply with bookkeeping and accounting legislation
What processing we perform
- Store information for bookkeeping and accounting purposes
What personal data we process
- Name
- History regarding payments made
- Other information that constitutes accounting records
Our lawful basis for the processing
Legal obligation
The processing is necessary to comply with legal obligations to which we are subject, i.e. bookkeeping and accounting legislation.
Storage period: We will store any document constituting bookkeeping material and personal data included until the end of the seventh (7) financial year according to Swedish bookkeeping and accounting legislation. The regulation means that we store bookkeeping material until and including the seventh year after the end of the calendar year for the fiscal year to which the personal data relates.
If you subscribe to our newsletters
The points below describes how we process your personal data if you subscribe to our newsletters. We gather your personal data directly from you and provide some personal data ourselves by analysing how you use our newsletters.
To send newsletters
What processing we perform
- Send information via e-mail about news, marketing, offers, discounts and invitations (“newsletters”) to you who have chosen to subscribe to our newsletters
- If you subscribe to our newsletters to receive a discount on your first purchase, we will also process information about what type of products you are interested in to give you a customized content in the newsletter
- Improve and develop our newsletters by analysing how you open them and what you click on in the newsletters. We also use information about your birth date to analyse our marketing
What personal data we process
- E-mail address
- Phone number
- Information about what type of products you are interested in (if you have chosen to provide this)
- Information about how you open our newsletters and what you click on
- IP-address
Our lawful basis for the processing
Consent
The personal data will be processed based on your consent. You can withdraw such consent at any time.
If you make a complaint or withdraw your purchase/subscription or we have a discussion regarding your purchase
We do everything we can to please our customers and as a result rarely receive complaints, but should you want to make a complaint, withdraw your purchase or discuss your purchase, we will process your personal data as described below. We will collect your personal data from you or provide the information ourselves.
Note that the ongoing claim or right may mean that we cannot delete all your personal data after your request.
To handle any withdrawals, complaints or claims
What processing we perform
- Handle any withdrawals, complaints or claims
- Initiate possible claims or defend ourselves against a possible complaint or claim
What personal data we process
- Name
- Contact details you have chosen to use, e.g. e-mail address and/or phone number
- Information from our communication with you in relation to the claim, e.g. order number and other information about your purchase
Our lawful basis for the processing
Legal obligation
The processing is necessary to comply with legal obligations to which we are subject, i.e. consumer law.
In these cases, you need to provide your personal data to us since we otherwise will not be able to comply with your consumer rights.
Legitimate interest
We also have a legitimate interest to process your personal data to defend ourselves against a possible complaint or claim.
Storage period: We will store your personal data from the time the complaint or claim was initiated and for the duration of such complaint or claim.
Who can gain access to your personal data and why?
Your personal data is initially collected and processed by us and we do not sell your personal data. This means that your personal data will be handled by our employees, but only personnel who need such access to conduct their work.
To conduct our business, we need to work with suppliers and partners who will process your personal data. We are responsible for any sharing of your personal data and to make sure your personal data is safe when shared with third parties as set out below.
We will share your personal data with our data processor. A processor processes data only on our behalf, which means that we are still responsible for the data they are processing. We share your personal data with the following categories of processors:
- We will share your personal data with the third party that provides a system for and helps us administrate our performance, e-commerce and email marketing.
- We will share your personal data with our IT suppliers, e.g. for web development and hosting, who will process the personal data on our behalf and on our instructions to ensure good and secure IT operations. We only share your personal data with our IT suppliers if it is necessary for them to fulfil their obligations towards us according to the contract that we have with them. If you only use our social media platforms or visit our website, we will not share your personal data with our IT suppliers.
- We will share your personal data with our email provider, mailchimp.
- If you choose to submit a review of the product that you have purchased from us, we will share your personal data with the company that provides a service to administrate customer reviews.
We also share your data with other controllers, who are responsible for processing your data.
The other controllers are:
- If you interact with us or visit our social media accounts, the social media platform that you use will process personal data about you as a user.
- When you use our website and consent to us doing so, we will also share your personal data with:
- When you make a purchase or agree to a subscription, Stripe, Paypal and Klarna’s payment suppliers, will process your personal data to carry out your payment. Stripe, Paypal and Klarna’s payment suppliers acts as controller in relation to all such processing and will inform you separately about how Stripe, Klarna and Paypal’s payment suppliers processes your personal data. If you choose to pay by invoice, your personal data may be shared with a company assessing your financial situation. The payment suppliers are:
- Klarna
- Stripe
- Paypal
- If you make a purchase or agree to a subscription of a product that we deliver to you, the company that transports your product will process your personal data to make the delivery.
If you have any questions regarding how we share your personal data or want to know more about who we share your personal data with, please feel free to contact us at [email protected]
Where are your personal data processed?
Your personal data will in most cases be processed outside of the EU/EEA if the suppliers we use are based outside of the EU/EEA. Your personal data will be transferred outside the EU/EEA in the following cases:
- To our IT-suppliers that are based outside of the EU/EEA. However, we have tried to protect your personal data and reduce the risk of it being transferred outside the EU/EEA by only storing your personal data on the IT-supplier’s servers within the EU/EEA.
- If you use our website and have consented to us using Google and other marketing tools your personal data may be transferred to the United States since these companies are based there.
- If you receive newsletters or surveys, transfer can be made to the United States since our suppliers are based there.
- If you visit and communicate with us on our social media channels (e.g. Facebook and Instagram (Meta)), your personal data will be transferred outside the EU/EEA. One reason being that many of these companies are based in the United States.
We also rely on an adequacy decision regarding most transfers to the US, when our American suppliers are certified under the EU-US Data Privacy Framework. You can find the adequacy decision for the US here. Google and Meta are certified under the EU-US Data Privacy Framework. By clicking on their names, you will be taken to the certificate of the respective company.
In the absence of an adequacy decision, or when our transfer is not protected under an adequacy decision, we and our suppliers will instead rely on Standard Contractual Clauses (Article 46.2 c GDPR) module 1 and module 2, and supplementary security measures for the transfer of personal data outside of the EU/EEA. The use of Standard Contractual Clauses is an effort to provide a safe transfer of your personal data. You can find the Standard Contractual Clauses here.
If you want to know more about where your personal data will be processed, please feel free to contact us at [email protected]
