Privacy policy

1. GENERAL


1.1 What does this policy cover?

This Privacy Policy ("Privacy Policy") governs the processing of personal data collected from individual users ("you" and "your") through the e-commerce website https://mockberg.com ("Website"). The Privacy Policy does not apply to any other websites, applications, or software that integrate with the Website, or to other third-party products and services (for example, social media providers linked to the Website).


1.2 What is personal data?

Personal data is any information that, directly or indirectly in combination with other data, can be linked to a living natural person. Some examples are listed below:


  • Name
  • National identification number
  • Delivery address
  • Phone number
  • Email address
  • Order history
  • User data

1.2 What does processing of personal data mean?

Processing of personal data includes any action taken with personal data, whether or not it's carried out by automated means. This means that, among other things, the following actions are covered:


  • Collection
  • Registration
  • Combination
  • Transfer
  • Deletion

1.3 Who is responsible for your personal data?

The Website is owned and operated by:


Mockberg AB
Registration number: 556989-7159
Address: c/o KIVRA KIVRA: 556989-7159, 106 31 Stockholm
VAT number: SE556989715901
Email: contact@mockberg.com


Mockberg AB is responsible for the processing of your personal data on the Website and is therefore defined as the data controller.


1.4 Why are we allowed to process personal data?

For it to be permitted to process personal data, there must always be support in the GDPR, known as a legal basis. Such a legal basis includes:

  • Your consent
  • That the processing of personal data is necessary to fulfill an agreement (in this case, the Website's terms of use and your purchase of products)
  • Fulfilling a legal obligation, for example, regarding the retention of data due to accounting requirements
  • That, after weighing the interests involved, we determine that Mockberg's interest in processing personal data outweighs your interest in having it protected.

2. PERSONAL DATA COLLECTED THROUGH THE WEBSITE


2.1 What personal data do we collect?

As a general rule, we only collect a minimal amount of personal data necessary for your use of the Website. We use your personal data for limited, specified, and legitimate purposes explicitly set out in this Privacy Policy. In general, your personal data is used to give you access to the Website, maintain and improve the Website, process your orders, enable customer service and respond to your inquiries, compile statistics on the use of the Website, and pursue our legitimate interests.

Below you'll find a more detailed summary of the types of personal data we collect, the purposes for which we use them, and the legal bases we rely on when processing them:


Orders
  • Type of personal data: When you place an order on the Website, we collect your first name, last name, address, email address, and phone number.
  • Purpose: We use this information to send you an order confirmation and receipt, deliver your orders, contact you when necessary, and maintain our customer service.
  • Legal basis: The legal basis we rely on is our agreement with you.
  • Retention period: We'll store this data for as long as required by applicable law (at least 7 years).

Payments
  • Type of personal data: When you make a payment, our payment service providers collect your personal data such as first name, last name, billing and delivery addresses, and payment details (e.g., credit card information).
  • Purpose: Your payment information is used to process payments and manage our bookkeeping.
  • Legal basis: The legal basis we rely on is our agreement with you.
  • Retention period: We'll store this data for as long as required by applicable law (at least 7 years).

Inquiries
  • Type of personal data: When you contact us by email, we collect your name, your email address, and any information you choose to include in your message. When you contact us through our contact form, we collect your first name, last name, email address, phone number, and any information you choose to include in your message. When you contact us through our chat function, we collect your first name, last name, email address, phone number, and any information you choose to include in your message.
  • Purpose: We use this data to respond to and handle your inquiries and provide you with the requested information.
  • Legal basis: The legal basis we rely on is our legitimate interest in treating our customers well and building/maintaining our reputation, your consent (for optional personal data you choose to share), or our agreement (if the inquiry concerns an item you've purchased from us).
  • Retention period: We'll store this data until you stop communicating with us and we determine that the inquiry in question has been resolved.

Reviews
  • Type of personal data: When you leave a review of the products you've purchased, we collect your name and any information you choose to include in your review.
  • Purpose: We use this data to display your review on the Website and give other customers/potential customers an objective view of our products.
  • Legal basis: The legal basis we rely on is your consent.
  • Retention period: We'll store this data until you ask us to delete your review, or until we determine it's no longer relevant (for example, if the reviewed product has been discontinued).

2.2 Commercial communication

We only send commercial communications if (i) you sign up for our newsletter, (ii) you subscribe to a newsletter by giving us your email address, or (iii) you buy something from us and we want to tell you about similar products. In these cases, you'll receive information about our new products, Website features, and special offers. The legal bases we rely on are your consent or our legitimate interest in promoting our company's business and sales. You can opt out of our commercial communications at any time by clicking the "Unsubscribe" link or equivalent in our newsletters, or by contacting us directly.


2.3 Transactional messages

If we determine it's necessary, we may send you important informational messages by email or SMS, such as order updates, payment receipts, invoices, shipping information, and other technical or administrative emails. Please note that these messages are sent "as needed" when they fall outside the scope of commercial communication, which may otherwise require your prior consent. You can't opt out of transactional messages.


2.4 Feedback and questions

If you contact us, we may record any questions, responses, complaints, recommendations, or compliments from you. Where possible, we'll de-identify your personal data (i.e., remove any personal data that isn't necessary to keep such records). If your personal data is de-identified in a way that it can no longer be linked to an identified or identifiable natural person, it will no longer be considered personal data and may then be used for any legitimate purpose.


2.5 Sensitive personal data

Certain personal data is, by its nature, particularly sensitive and therefore has stronger protection. This is known as sensitive personal data. It includes data on health, genetic and biometric information, religious or philosophical beliefs, political opinions, ethnic origin, sexual orientation and sex life, and trade union membership. We don't collect sensitive personal data.


2.6 Where we obtain your personal data

We obtain your personal data from the following sources:

  • Directly from you: for example, when you provide your personal data while buying something from us or contacting us.
  • Directly or indirectly through your activity on the Website: when you use the Website, we automatically collect technical information about your use of the Website.
  • From third parties: we may receive information about you from third parties you've previously given your personal data to, if those third parties have a legal basis for disclosing your personal data to us (for example, for payment purposes).

2.7 Consequences of not providing personal data

If you decide not to provide us with your personal data when we ask for it, we may not be able to carry out certain requested processes (for example, processing your order), and you may not be able to use all of the Website's features, receive the requested information, or get a response from us. Please let us know right away if you feel that any personal data we collect is excessive or unnecessary for its intended purpose.


3. STORAGE OF PERSONAL DATA


3.1 Retention period (personal data)

We only store your personal data for as long as that data is needed for the purposes described in this Privacy Policy, or until you ask us to update or delete your personal data, whichever comes first. Specific retention periods for different types of personal data are set out in section 2.1 above. Once your personal data is no longer necessary for its purpose and we have no other legal basis for storing it, we'll promptly and securely delete it from our systems. As a general rule, we don't store personal data any longer than is absolutely necessary.


3.2 Retention period (data)

We store anonymous data (i.e., data that isn't considered personal data) related to you for as long as it's necessary for the purposes described in this Privacy Policy. This means storing data for the period needed to manage our business operations, fulfill our contractual obligations, pursue our legitimate interests, carry out audits, comply with laws and regulations, and resolve any disputes.


3.3 Retention period under law

When we're legally required to store your personal data for a certain period (for example, for accounting and business records), we'll store it for the period prescribed by applicable law (in most cases, seven years) and securely delete the personal data as soon as the required retention period expires.


4. PROTECTION AND SHARING OF PERSONAL DATA


4.1 How we protect your personal data

We implement adequate technical and organizational security measures that protect your personal data from, among other things, loss, misuse, unauthorized access, and disclosure. The security measures we take include secure networks, strong passwords, limited staff access to your personal data, multi-factor authentication, anonymization of personal data (where possible), regular updates, security patches, and careful vetting of our data processors.


4.2 When we share your personal data

As a general rule, we don't share your personal data. However, when it's necessary for the intended purpose of your personal data, we'll disclose it to companies that provide services on our behalf or support us in our operations (our so-called data processors). In this context, your personal data may be shared with companies that provide us with technical support services such as hosting, payment processing, shipping, and email distribution services. Disclosure of your personal data is limited to situations where it's required for the following purposes:


  • Making sure the Website works as it should;
  • Delivering the products you've ordered;
  • Processing your payments;
  • Responding to your inquiries;
  • Pursuing our legitimate interests;
  • Maintaining our rights and security and preventing/deterring fraud;
  • Fulfilling our contractual obligations; and
  • For law enforcement purposes.

4.3 How we share your personal data

Although our company and most of our partners are based in Sweden, i.e., within the European Economic Area (EEA), some of our data processors are based outside the EEA. We may therefore need to transfer your personal data outside the EEA. When such a transfer is necessary, we'll make sure the country where our data processor is located guarantees an adequate level of protection for your personal data, or we'll enter into an agreement with the data processor that ensures such protection (for example, a data processing agreement based on pre-approved standard contractual clauses).


5. YOUR RIGHTS


5.1 Control over processing

You always have the right to check how we process your personal data. Subject to any restrictions under law, you have the following rights:


  • Right of access – you can get a copy of the personal data we store in our systems, along with a list of the purposes for which your personal data is processed;
  • Right to rectification – you can ask us to correct inaccurate or incomplete data we process about you;
  • Right to erasure – you can ask us to delete your personal data from our systems;
  • Right to restriction – you can ask us to restrict the processing of your personal data;
  • Right to data portability – you can ask us to give you a copy of your personal data in a structured, commonly used, and machine-readable format, and to move that personal data to another controller;
  • Right to object – you can ask us to stop processing your personal data;
  • Right to withdraw consent – you have the right to withdraw your consent if you've given one; or
  • Right to complain – you can file a complaint about our processing of your personal data.

5.2 Exercising your rights

If you'd like to exercise any of the rights above, please contact us by email (contact@mockberg.com), using the subject line "GDPR – Request," and explain your request in detail. To verify that your request is legitimate, we may ask you to give us identifying information so we can find you in our system. We'll respond to your request as soon as possible, and always within a reasonable time frame of a maximum of 30 days. If you're not satisfied with how we handle your personal data, you also have the option of reporting our processing of your personal data to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten). For smooth and efficient handling, though, we recommend reaching out to us first so we can help with any questions or concerns.


6. OTHER


6.1 Validity

This Privacy Policy takes effect on the date shown at the top of the Privacy Policy ("Last updated") and remains in effect until it's terminated or updated by us.


6.2 Changes and updates

We reserve the right to revise this Privacy Policy from time to time. The date of the most recent change is shown at the end of the Privacy Policy. If we make any changes to the Privacy Policy, we'll post them on the Website. We recommend reading this Privacy Policy regularly so you're aware of any changes. If we change the Privacy Policy in a way that differs significantly from what was stated when any consent was collected, we'll notify you of these changes and, if necessary, ask you to consent again to our processing of your personal data.


6.3 Personal data of minors

The Website isn't intended for use by anyone under 18. We therefore don't knowingly collect personal data from children. If you become aware that a child has given us their personal data and you're a parent or guardian of that child, please contact us right away and we'll remove the child's personal data from our systems.


6.4 Contact

Don't hesitate to contact us if you have any questions about this Privacy Policy, our processing of your personal data, or if you'd like to request a copy of your records. Our contact information is below.


Mockberg AB
Registration number: 556989-7159
Address: c/o KIVRA KIVRA: 556989-7159, 106 31 Stockholm
Email: contact@mockberg.com