Privacy Policy
1 Introduction
1.1 Data controller
Maya Delorez AB, corporate identity number 559141–7620. (“MD”/“We”), is data controller in accordance with the EU’s General Data Protection Regulation (“GDPR”) for any processing of personal data for which we have determined a purpose and means. According to GDPR, we are required to provide information on how we process personal data as data controller in our operations.
1.2 Contact
If you have any questions about our processing of your personal data, please address them to us at: privacy@mayadelorez.com. or via our postal address:
Maya Delorez AB
Att: Privacy
Sidenvävargatan 11
753 19 Uppsala
1.3 When do we process your personal data?
In order to make it easier for you to find information on how we process your personal data, we have compiled all the situations (purpose) in which this occurs in section 3 below. If you are a member of our MD VIP Community loyalty program, we also process your personal data in accordance with section 4. For every purpose, there is a table that describes all relevant information that we are obligated to provide you with in accordance with GDPR.
We recommend that you read section 2 before seeking specific information about our processing of personal data, as it explains basic concepts and gives you a deeper understanding. We have tried to make the information as concise as possible, but if you have any questions, please contact us.
1.4 Overview of how we process your personal data
We process your personal data for the following purposes:
To manage your orders and purchases
To manage and follow up customer service enquiries
To run, manage participation and evaluate events
To run, manage participation and evaluate competitions
To develop and improve our website and our systems
To fulfil the company’s legal obligations
To market our products and services through our newsletters
To run our social media platforms
To conduct marketing on digital channels such as search engine marketing
To publish customer reviews after a completed purchase
If you are a member of the MD VIP Community, we also process your personal data for the following purposes:
For the purpose of administrating your membership and creating your profile
For the purpose of being able to manage your discounts, membership level and personalized offers
For the purpose of being able to manage your benefits and offers, and delivering a personalized experience of our services
For the purpose of providing information about and marketing products and services
2 General information about processing of personal data
2.1 What is personal data?
Personal data is information (such as a name or personal identity number) that can be attributed, whether directly or indirectly, to a living natural person. Examples of indirect personal data include behavioral data, IP addresses, or audio recordings that are processed without naming the person. Information about which categories of personal data we process can be found in each purpose description under the heading “Categories of personal data”.
2.2 What constitutes the processing of personal data?
Every action taken with personal data constitutes an instance of processing. Examples of common types of processing include collection, registration, organization, structuring, utilization, storage, data processing, transfer and erasure. Information about what processing we carry out can be found in each purpose description under the heading “Processing”.
2.3 Legal basis
According to GDPR, all processing of personal data must have a legal basis. We process your personal data primarily based on the following legal bases in order to:
· Fulfil an agreement, such as when you purchase goods from us.
· Satisfy any needs arising from our legitimate interests, such as the mailing of marketing material.
· Fulfil our legal requirements, such as the fulfilment of our obligations under applicable accounting or tax regulations.
· When you have given your voluntary and informed consent, which can be withdrawn at any time.
Information about which legal basis we apply to process your personal data can be found in each purpose description under the heading “Legal basis”.
Withdrawal of consent
If our processing of your personal data is based on your consent, you can withdraw it at any time, for example by changing your cookie settings or as explained in the information you got when you granted your consent. The withdrawal does not affect the legality of the processing prior to the withdrawal. For information on how to withdraw your consent, see section6.5 below.
2.4 Storage period
According to GDPR, we must not store your personal data longer than necessary for the purposes for which they were processed. Information about how long your personal data is stored can be found in each purpose description under the heading “Storage period”.
2.5 Sharing of your personal data
It may sometimes be necessary to share your personal data with other trusted individuals and companies. Information about which categories of such Third-Party recipients we share your personal data with can be found in each purpose description under the heading “Third-Party recipients”. For full information on which Third-Party recipients we share your personal data with, please visit: List of Third-Party recipients.
Personal data processors
In order for us to be able to offer our services, we share your personal data with companies acting as personal data processors on our behalf. A personal data processor processes information on our behalf and in accordance with our instructions. We have written agreements with all personal data processors, who guarantee the security of any personal data processed and who undertake to comply with our security requirements and with applicable legislation on the transfer of personal data outside the EU/EEA.
Independent data controllers
We also share your personal data with certain companies that are independent data controllers. This means that we do not control how these companies process the information, but their own privacy policies govern such processing. If you want to learn more about these categories of Third-Party recipients, please visit: List of Third-Party recipients.
2.6 Where do we process your personal data?
We always strive to ensure that your personal data is processed within the EU/EEA. Sometimes, especially when collaborating with larger international sub-contractors or partners, this may mean that your personal data is transferred to countries outside the EU/EEA. In each purpose description under the heading “Third-country transfer”, we have explained whether the processing of your personal data involves a transfer of your personal data outside the EU/EEA. To make it even clearer when such a transfer of your personal data occurs, we have specified in the List of Third-Party Recipients whether our collaboration with a specific third-party recipient involves a third-country transfer.
Irrespective of where your personal data is processed, we undertake any necessary legal, technical and organizational measures to ensure that the level of protection is similar to that within the EU/EEA. If personal data is processed outside the EU/EEA, the level of protection is guaranteed either by a decision of the EU Commission to the effect that the country in question ensures an adequate level of protection, or through the application of what are referred to as appropriate safeguards.
2.7 Automated decisions and profiling
Profiling means that we analyze information about you to assess personal characteristics, which allows us to understand you as a customer and create the best possible offers for you. Whether processing of your personal data involves profiling is stated in the applicable purpose description under the heading “Automated decision-making (incl. profiling)”. In summary, we carry out the following profiling activities:
- Analyze and understand your purchase behavior based on previous purchases, demography and geographic location, as well as your interaction with us and our communication, in order to predict which offers may be most interesting for you or for people with similar profiles or interests.
- Analyze and draw conclusions about our customers and their purchasing behaviors (both as a whole and on an individual level) in order to develop our business as well as our products and services.
2.8 Cookies and other tracking technologies
We use cookies on our website to enhance your user experience and to collect information about how our visitors and customers use our website. Cookies are small text files that are stored on your device when you visit a website. They are used to track your navigation on the website and to, among other things, recognize you when you return. You can choose to reject certain types of cookies, but this may affect the functionality of the website. For complete information on how we use cookies and other tracking technologies, please see Maya Delorez’ cookie policy: Cookie Policy.
3 We process your personal data for the following purposes:
3.1 For the purpose of managing your orders and purchases
Categories of personal data:
· Contact details such as first and last name, address, e-mail address and telephone number.
· Purchase information, such as order number, ordered product and delivery address.
· Payment history and payment information.
· For MD VIP Community members - user information (see section3.10 below).
Processing:
Administration and registration of your order. Administration and coordination of deliveries (incl. delivery options, notifications and contact persons concerning deliveries), digital identification. Payment handling and payment preferences such as in the case of choosing Klarna (and retrieval of credit reports from payment service providers). Management of complaints and returns.
Legal basis:
Execution of the agreement.
Storage period:
Until your purchase has been completed (including delivery and payment) and for a period of 36 months thereafter.
The data is collected from:
Directly from you when you make a purchase. Your details may also be collected from an external source in connection with the verification of your address (such as when choosing Klarna as a payment preference).
Third-party recipients:
· E-commerce platform providers.
· Payment service providers (such as Klarna).
· Providers of management systems for delivery options.
· Freight forwarders (such as Postnord).
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No.
Necessary to submit personal data to enter into an agreement?
Yes, since if we cannot process your personal data, it is not possible to enter into a purchase agreement.
3.2 For the purpose of being able to manage and follow up customer service enquiries
Categories of personal data:
· Contact details such as first and last name, address, e-mail address and telephone number.
· Purchase information, such as order number, ordered product and delivery address.
· Details about your customer enquiry such as complaints, claims, incorrect information and delivery delays.
· Communication data such as your feedback to us and other correspondence in the enquiry.
· Technical details about your equipment.
Processing:
Communication and the handling of any questions to our customer service is done by phone or through digital channels, including social media and our questionnaire on the website. Investigating any complaints and support cases, including technical support. Follow-up of your customer service enquiry.
Legal basis:
Processing is necessary in order to satisfy both our own and your legitimate interest in the handling, solution and follow up of customer service enquiries.
Storage period:
Until the customer service enquiry is closed and for a period of 36 months thereafter.
The data is collected from:
Directly from you when you make a purchase or when contacting Maya Delorez’ customer service.
Third-party recipients:
E-commerce platform providers.
Providers of customer service forms and solutions for customer communication.
Payment service providers (such as Klarna).
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No, but if we cannot process your personal data, we cannot handle your customer service enquiry.
Necessary to submit personal data to enter into an agreement?
No.
3.3 For the purpose of running, managing participation, and evaluating events
Categories of personal data:
· Contact information such as first and last name, address, e-mail address and telephone number.
· Details provided when registering for an event.
· Details provided in event evaluations.
· Details provided as part of your event participation.
· Details about any allergies or dietary preferences.
Processing:
Communication before and after participation in an event, evaluation of information provided after event participation. Collection of statistics concerning participation.
Legal basis:
· Processing is necessary in order to satisfy both our own and your legitimate interest in the handling, running and evaluation of our events.
· Consent. Details about any dietary preferences and allergies are processed with your consent. You can withdraw your consent at any time. For information on how to withdraw your consent, see section6.5 below.
Storage period:
During the time that the event and/or event evaluation is ongoing.
The data is collected from:
Directly from you when you sign up for the event.
Third-party recipients:
· E-commerce platform providers.
· Providers of customer management systems.
· Providers of solutions for mailing of digital marketing.
· Partners who participate in or organize an event with us.
· Providers of tools for advertising on the e-commerce platform.
· Payment service providers.
· Providers of IT productivity tools.
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No, but if we cannot process your personal data, you may not be able to participate in the event.
Necessary to submit personal data to enter into an agreement?
No.
3.4 For the purpose of running, managing participation and evaluating competitions
Categories of personal data:
· Contact information such as first and last name, address, e-mail address and telephone number.
· Details provided when registering for a competition.
· Details provided as part of a competition entry.
· Details provided in the evaluation of a competition.
Processing:
Communication before and after participation in a competition, evaluation of information provided in connection with the competition, as well as collection of competition participation statistics.
Legal basis:
Processing is necessary in order to satisfy our legitimate interest in the running, implementation and evaluation of our competitions.
Storage period:
During the time that the competition and/or competition evaluation is ongoing.
The data is collected from:
Directly from you when you sign up for a competition and/or submit a competition entry.
Third-party recipients:
· E-commerce platform providers.
· Providers of customer management systems.
· Partners who organize competitions with us.
· Providers of tools for advertising on the e-commerce platform.
· Providers of social media platforms.
· Providers of a platform for creating and managing online forms and surveys.
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No, but if we cannot process your personal data, you may not be able to take part in the competition.
Necessary to submit personal data to enter into an agreement?
No.
3.5 For the purpose of being able to develop and improve our website and systems
Categories of personal data:
· Technical data such as cookie data, location data, information about the devices you use and their settings, as well as IP addresses.
· User interaction information, such as how you interact with our system, including how you use our services, login methods, where and for how long you visit different pages, response times, download errors, and how and when you leave the website.
· Purchase and user-generated data (such as click and visit history).
Processing:
Customization of services to make them more user-friendly such as simplification of the information flow and to highlight popular features in our digital channels. Monitoring of user behavior in order to adapt services and strengthen security. Personal customization of content for a better user experience.
Legal basis:
Processing is necessary in order to satisfy our legitimate interest in evaluating, developing and improving our website, product presentation and systems.
Storage period:
From the time of collection and for a period of 36 months thereafter.
The data is collected from:
Directly from you when you visit our website and make choices for the storage and reading of cookies. For more information, please see our Cookie Policy.
Third-party recipients:
E-commerce platform providers.
· Providers of solutions for targeted digital marketing.
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No.
Necessary to submit personal data to enter into an agreement?
No.
Automated decision making (incl. profiling):
Yes, read more under the heading “Automated decisions and profiling”.
3.6 For the purpose of fulfilling the company’s legal obligations
Categories of personal data:
· Contact details such as first and last name, address, e-mail address and telephone number.
· Purchase information, such as order number, ordered product and delivery address.
· Payment history and payment information.
· Your correspondence that is relevant for Maya Delorez in fulfilling the legal duty in question.
· Details regarding purchase date and any defect/complaint.
Processing:
Necessary processing according to legal requirements, judgments or public authority decisions such as the Swedish Bookkeeping Act, the Anti-Money Laundering Act, and regulations on product safety.
Legal basis:
Processing is necessary in order to fulfil our legal obligations.
Storage period:
Until your purchase has been completed and for a period of 36 months thereafter, provided that our legal obligations do not require that the data is stored longer.
The data is collected from:
Directly from you when making a purchase or contacting Maya Delorez.
Third-party recipients:
· E-commerce platform providers.
· Payment service providers.
· Providers of tools for automated accounting processes.
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No.
Necessary to submit personal data to enter into an agreement?
No.
3.7 For the purpose of marketing our products and services through our newsletters
Categories of personal data:
· E-mail address.
· Personal data that can be inferred from your e-mail address, such as first and last name and/or year of birth.
Processing:
Mailing of e-mail messages, analysis of how e-mail communications are opened and which links recipients click on by means of tracking codes. Collection of statistics on number of opened e-mails, click frequency, and which links are most popular. Analysis and development of our mailings to improve our communication strategies.
Legal basis:
Our legitimate interest in communicating news, offers and invitations to you.
Storage period:
From the time when you subscribed to our news letter in connection with a purchase until you request us to stop. You can do this by clicking the unsubscribe link in the mailing’s footer.
The data is collected from:
Directly from you when you subscribed to our newsletter, such as in connection with the making of a purchase.
Third-party recipients:
· E-commerce platform providers.
· Providers of customer management systems.
· Providers of solutions for mailing of digital marketing.
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No.
Necessary to submit personal data to enter into an agreement?
No.
3.8 For the purpose of running our social media platforms
Categories of personal data:
· Profile information such as name, e-mail, age, gender, country, profile picture and other generally available information, provided that you have published this information on your social media profile.
· Communication data such as comments or likes for our posts and images, or messages that you send to us via any social media platform.
Processing:
Provide information about our products by publishing content on our social media platforms. Interact and communicate with users on social media by responding to comments and messages.
Legal basis:
Processing is necessary in order to satisfy our legitimate interest in marketing our products and communicating with our customers on social media platforms.
Storage period:
If you comment or send messages to us on any social media platform, the information is saved there until you remove it. Other information is saved in accordance with the social media platform rules. See the respective platform’s privacy policy for more information.
The data is collected from:
Directly from you when you interact with us on our social media platforms. Your profile information is collected from the social media platform, but this is most often information that you have personally provided to the social media platform.
Third-party recipients:
Providers of social media platforms.
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No.
Necessary to submit personal data to enter into an agreement?
No.
3.9 For the purpose of conducting marketing on digital channels such as search engine marketing, social media and banner advertising
Categories of personal data:
· Technical data such as cookie data, location data, information about the devices you use and their settings, as well as IP addresses.
· User interaction information, such as how you interact with our system, including how you use our services, login methods, where and for how long you visit different pages, response times, download errors, and how and when you leave the website.
· Preference information such as details about purchase history, marketing preferences, and publicly available profile information on social media.
· For MD VIP Community members – see section 4 below.
Processing:
Collection, combination, and analysis of personal data to understand your interests and behavior, as well as creating profiles to segment our users and target groups. Analysis and data processing to show you personalized ads that are relevant to your interests, both on our own platforms and through our marketing partners. Analysis and evaluation of advertising campaigns.
Legal basis:
· Consent obtained via a cookie banner when you visit our website for the storage and reading of cookies. For more information, please see our Cookie Policy.
· Processing is necessary in order to satisfy our legitimate interest in providing attractive and relevant offers.
Storage period:
For more information about the storage period, please see our Cookie Policy.
The data is collected from:
Providers of third-party cookies and IT systems that are used to manage our e-commerce, website and MD VIP Community.
Third-party recipients:
· Providers of social media platforms.
· Providers of solutions for targeted digital marketing.
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No.
Necessary to submit personal data to enter into an agreement?
No.
Automated decision making (incl. profiling):
Yes, read more under the heading “Automated decisions and profiling”.
3.10 For the purpose of publishing customer reviews after a completed purchase
Categories of personal data:
· Contact details such as first and last name, address, e-mail address and telephone number.
· Information that appears in your review.
· Profile information such as name, e-mail, age, gender, country, profile picture and other generally available information, provided that you have published this information on your social media profile.
Processing:
Collection and reviewing of the review. Obtaining your consent for publication. Publication of the review on social media platforms and/or our website.
Legal basis:
Consent obtained after a purchase and before publication of the review. You can withdraw your consent at any time. For information on how to withdraw your consent, see section 6.5 below.
Storage period:
Information concerning your review will be visible until we choose to erase it or until you ask us to remove the review.
The data is collected from:
Providers of third-party cookies and IT systems that are used to manage our e-commerce, website and MD VIP Community.
Third-party recipients:
· E-commerce platform providers.
· Providers of social media platforms.
· Marketing partners.
· Providers of solutions for mailing of digital marketing.
· Providers of tools for management and generation of product reviews.
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No.
Necessary to submit personal data to enter into an agreement?
No.
4 We processes personal data about MD VIP Community members for the following purposes:
4.1 For the purpose of administrating your membership and creating your profile
Categories of personal data:
· Contact details such as first and last name, address, e-mail address and telephone number.
· Details about you as a person: age, gender, date of birth and personal identity number.
· Purchase information, such as order number, ordered product and delivery address.
· Payment history and payment information.
· Username and password.
· Settings for your profile and your personal preferences.
Processing:
Creation of login, updating of information and saving of purchase and payment history. Management of customer preferences, including profile information and settings such as saved favorites.
Legal basis:
Fulfilment of the agreement on membership of the MD VIP Community.
Storage period:
Until membership ends (may be manually or automatically on account of inactivity for a period of 24 months).
The data is collected from:
Directly from you in connection with you becoming a member and/or making a purchase.
Third-party recipients:
· E-commerce platform providers.
· Providers of solutions for administration and running of loyalty program (MD VIP Community).
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No.
Necessary to submit personal data to enter into an agreement?
Yes, since if we cannot process your personal data, it is not possible to enter into an agreement for membership of the MD VIP Community.
4.2 For the purpose of being able to manage your discounts, membership level and personalized offers
Categories of personal data:
· Contact details such as first and last name, address, e-mail address and telephone number.
· Purchase information, such as order number, ordered product and delivery address.
· Member details such as member number and membership duration.
Processing:
Creation of login, updating of information and saving of purchase and payment history. Management of customer preferences, including profile information and settings such as saved favorites.
Legal basis:
Fulfilment of the agreement on membership of the MD VIP Community.
Storage period:
Until membership ends (may be manually or automatically on account of inactivity for a period of 24 months).
The data is collected from:
Directly from you in connection with you becoming a member and/or making a purchase.
Third-party recipients:
· E-commerce platform providers.
· Providers of solutions for administration and running of loyalty program (MD VIP Community).
· Providers of tools for advertising on the e-commerce platform.
· Providers of tools for digital marketing (standardized and customized).
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No.
Necessary to submit personal data to enter into an agreement?
No, but if we cannot process your personal data, we cannot fulfil the agreement on membership of the MD VIP Community.
4.3 For the purpose of being able to manage your benefits and offers, and delivering a personalized experience of our services
Categories of personal data:
· Contact information such as first and last name, address, e-mail address and telephone number.
· Purchase information, such as order number, ordered product and delivery address.
· Personal data such as age, gender, and place of residence.
· Member details such as member number and membership duration.
· Preference information such as details about purchase history, preferences for marketing
· Technical data such as cookie data, location data, information about the devices you use and their settings, as well as IP addresses.
· User interaction information, such as how you interact with our system, including how you use our services, login methods, where and for how long you visit different pages, response times, download errors, and how and when you leave the website.
Processing:
Customization of your personal and general membership offers, including personalized content, relevant news and product recommendations. Saving previously reviewed products to facilitate future purchases and to remind you about abandoned digital shopping carts. Granting of benefits and offers based on membership, as well as invitations to events and personalized communication tailored to member behavior.
Legal basis:
· Fulfilment of the agreement on membership of the MD VIP Community.
· Consent obtained via a cookie banner when you visit our website for the storage and reading of cookies. For more information, please see our Cookie Policy.
Storage period:
Until membership ends (may be manually or automatically on account of inactivity for a period of 24 months).
The data is collected from:
Directly from you in connection with you becoming a member and/or making a purchase. Directly from you when you interact with us as an MD VIP Community member. The data is also collected from cookies to the extent that you have approved them.
Third-party recipients:
· E-commerce platform providers.
· Providers of solutions for administration and running of loyalty program (MD VIP Community).
· Providers of tools for advertising on the e-commerce platform.
· Providers of tools for digital marketing (standardized and customized).
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No.
Necessary to submit personal data to enter into an agreement?
No, but if we cannot process your personal data, we cannot fulfil the agreement on membership of the MD VIP Community.
Automated decision making (incl. profiling):
Yes, read more under the heading “Automated decisions and profiling”.
4.4 For the purpose of providing information about and marketing products and services
Categories of personal data:
· Contact information such as first and last name, address, e-mail address and telephone number.
· Details about you as a person: age, gender and date of birth.
· Purchase history.
· Payment history and payment information.
· Username and password.
· Settings for your profile and your personal preferences.
Processing:
Provide product recommendations and reminders of forgotten digital shopping carts, as well as saving displayed products to facilitate future purchases. Send direct marketing via our digital channels (e-mail and SMS). Conduct campaigns and send offers or invitations to events to all customers, specific customer groups, and individual customers. Collect and analyze the data to display targeted ads on social media and other digital platforms. Evaluate advertising campaigns and adjust them to optimize the results.
Legal basis:
· Fulfilment of the agreement on membership of the MD VIP Community.
· Consent obtained via a cookie banner when you visit our website for the storage and reading of cookies. For more information, please see our Cookie Policy.
· Consent to share personal data with our marketing partners on digital channels. You can withdraw your consent at any time. For information on how to withdraw your consent, see section 6.5 below.
· Processing is necessary in order to satisfy our legitimate interest in providing attractive and relevant offers.
Storage period:
Until membership ends (may be manually or automatically on account of inactivity for a period of 24 months).
The data is collected from:
Directly from you in connection with you becoming a member and/or making a purchase. Directly from you when you interact with us as an MD VIP Community member.
Consent obtained via a cookie banner when you visit our website for the storage and reading of cookies. For more information, please see our Cookie Policy.
Third-party recipients:
· E-commerce platform providers.
· Providers of solutions for administration and running of loyalty program (MD VIP Community).
· Providers of tools for advertising on the e-commerce platform.
· Providers of tools for digital marketing (standardized and customized).
· Providers of tools for mediation of user-generated content and related consent.
Third-country transfer:
Yes.
Obligation to submit personal data to us?
No.
Necessary to submit personal data to enter into an agreement?
No, but if we cannot process your personal data, we cannot fulfil the agreement on membership of the MD VIP Community.
Automated decision making (incl. profiling):
Yes, read more under the heading “Automated decisions and profiling”.
5 Risks and security measures
We use technical and organizational measures to protect your personal data against loss and unauthorized access. This includes, for example, secure and private connections (such as VPN), encryption and the fact that access to your personal data is always limited to employees that must have access to be able to perform their tasks and duties. We regularly evaluate our systems, procedures, and policies to ensure that they are secure and protected. For more information, please contact us. Use the contact details at the top of this data protection notice.
6 What rights do you have?
You have several rights according to GDPR. If you would like to exercise your rights or if you have any questions, please contact us. You can find our contact details at the top of this data protection notice.
4.1 Right to information
You have the right to be given information on how we process your personal data, which we provide to you in this data protection notice.
4.2 Right to access
You can request information about whether we process personal data concerning you and, if so, receive a copy of this - a so-called data register extract - along with certain additional information.
4.3 Right to rectification
We have a responsibility to ensure that any personal data that we process is correct, but if you consider that any information about you is incorrect or incomplete, you have the right to request that such information is rectified.
4.4 Right to object
When we process personal data based on our legitimate interest, you have the right to, at any moment, object to the processing. If we cannot demonstrate compelling legitimate reasons for the data needing to be processed, we have to cease the processing.
4.5 Right to withdraw consent
If our processing of your personal data is based on your consent, you can withdraw your consent by contacting: privacy@mayadelorez.com or our postal address:
Maya Delorez AB
Att: Privacy
Sidenvävargatan 11
753 19 Uppsala
Withdrawal of consent does not affect the legality of any processing of your personal data that has occurred prior to the withdrawal.
4.6 Right to limit processing
You have the right in certain cases to demand that the processing of personal data be limited. This is applicable for example if you have objected to the processing of your personal data. By demanding that the processing be limited, you have the possibility, during a certain time, to stop us from using your personal data for other purposes than, for example, defending legal claims. You can also prevent us from erasing personal data, for example, if needed for claiming damages.
4.7 Right to erasure
You can in certain cases request that your personal data be erased. We cannot erase your personal data needed to fulfil the purposes for which it was collected, if it is required to fulfil a legal obligation or when we need to exercise or defend legal claims.
4.8 Right to transfer your personal data (data portability)
If we process your personal data to fulfill an agreement, you have, in certain cases, the possibility to be given and use your personal data elsewhere, for example to transfer your personal data to another data controller.
4.9 Comments about our processing?
If you have any comments about our processing of your personal data, please contact us. You can find our contact details above.
If you have suffered prejudice due to your personal data being processed in violation of applicable law, you may be entitled to compensation. You can then request damages from us or take legal proceedings. You can find our contact details above.