PRIVACY POLICY

Privacy Policy

Your privacy is important to Schiacciata AB (hereinafter "us" or "we"). When you use our mobile application and/or e-commerce site Bar Schiacciate (hereinafter "platform"), your personal data may be processed by us. We want to ensure that your personal data is processed in a legal, secure, and transparent manner.
This privacy policy aims to describe why we process your data, when it occurs, and how we process it. In the policy, you can also read about our obligations and your rights.

Who is responsible for your personal data

We are the data controller for the personal data processing required to receive, administer, and fulfill an order via the platform, and to administer any user account on our platform. We are also responsible for the personal data processing aimed at collecting statistics on how many individual users we have on our platform and how often these individual users visit the platform.

Our platform is provided via Caspeco AB, which in this regard acts as our
data processor. This means that Caspeco AB only processes your data in accordance with our instructions.

To offer a loyalty program, we collaborate with Piggy Netherlands B.V., who acts as our data processor. This means that Piggy Netherlands B.V. only processes your data in accordance with our instructions.
In cases where payment is required to complete an order, customary information for online payments is collected. Data storage occurs in a PCI-certified environment, and the data cannot be viewed by us or our data processors in plain text.

What personal data we process

When you place an order via our platform, create a user account on the platform, and/or join our loyalty program, we need certain information about you to fulfill your request, administer your user account on the platform, and/or connect you to the loyalty program.
This information includes first and last name, email address, phone number, geographical information, and payment information. We only process personal data that you voluntarily choose to share with us.

Purpose and legal basis for processing

We use your personal data to manage and complete your order via our platform, and to administer your payment. If you have chosen to create a user account on our platform, we use your data to administer your user account. This processing is required for us to fulfill our agreement with you.

We also use your personal data to compile statistics on how many
individual users we have on our platform and how often these individual users visit the platform. This statistical processing is based on a legitimate interest in being able to provide you with an improved version of our platform.
If you have chosen to join our loyalty program, we also use your data to administer your membership. The loyalty program is provided in collaboration with Piggy Netherlands B.V. This processing is required for us to fulfill our agreement with you.

How long your personal data is stored

Once you have placed an order via our platform, we store your personal data until your request is completed by us.
If you have chosen to create a user account on our platform, we store your personal data as long as you have a user account and for a maximum of twelve (12) months thereafter. If you request it, this storage period can be shortened.

We also store your personal data for statistical purposes for a maximum of twelve (12) months from the actual use of our platform. Statistics containing data that is not considered personal data are stored indefinitely.

If you have chosen to join our loyalty program, we store your personal data as long as you choose to be a member of the loyalty program and for a maximum of twelve (12) months thereafter. If you request it, this storage period can be shortened.
Your personal data may also be stored for the period required by applicable law.

Who has access to your personal data

We share your personal data with Caspeco AB and Piggy Netherlands B.V., who act as data processors. This means that they only process your data in accordance with our instructions.

We may also share your personal data with third parties, provided that we are required to do so by law. Please note, however, that we do not sell your personal information to third parties.

Transfer of personal data outside the EU/EEA

As a general rule, we and our partner(s) process personal data only within the EU/EEA.
If processing takes place outside the EU/EEA, there is either a decision from the EU Commission that the country has an adequate level of protection, or appropriate safeguards, such as the EU Commission's standardized data protection clauses or binding corporate rules, apply to ensure that personal data is protected.

Your rights

Right of access: You have the right to contact the data controller and request access to the personal data processed about you, as well as request information (so-called register extract) about, among other things, the purposes of the processing, who received the personal data, etc. The data controller will provide you with a free copy of the personal data processed. For any additional copies, an administration fee may be charged.

Right to rectification and restriction: You have the right to have your personal data rectified without undue delay or, under certain circumstances, restricted. If you believe that the data controller is processing personal data about you that is incorrect or incomplete, you can demand that it be rectified or completed.

Right to erasure: Under certain circumstances, you have the right to have your personal data erased (the right to be forgotten). This applies, among other things, if the personal data is no longer necessary for the purpose or if the processing is based on consent and this has been withdrawn. However, there may be legal requirements or contractual relationships that prevent the data controller from erasing your personal data.

Right to object and withdraw consent: You have the right to withdraw given consent with validity from the time of withdrawal. You also have the right to object at any time to the processing of your personal data if the legal basis for the processing is a balancing of interests. As a data subject, you also have the right to object at any time to the processing of your personal data if it is processed for marketing purposes, and it will then no longer be processed for that purpose.

Right to data portability: You have the right to receive assistance in transferring the personal data you have provided to the data controller in a structured, commonly used, and machine-readable format to another data controller. However, this applies provided that it is technically possible and that the processing was necessary for the fulfillment of a contract or that you have given your consent.

Right to lodge a complaint: If you are dissatisfied with the processing of your personal data, we ask you to contact the data controller, see under the contact information heading below. You also have the right to lodge a complaint with the supervisory authority, the Swedish Authority for Privacy Protection (www.imy.se).

Changes to this privacy policy

We reserve the right to change and update this privacy policy. In the event of extensive changes or if existing personal data is to be processed in a way other than specified in this policy, we will inform you of this in an appropriate manner.

Contact details

Company: Schiacciata AB
Email: info@barschiacciate.se
Address: Rörstrandsgatan 6, 113 40 Stockholm