Privacy and Marketing Policy
Privacy and Marketing Policy
1. General
This privacy and marketing policy ("Privacy Policy") describes how Drop Coffee Roasters AB, Org. No. 559030-8275, Wollmar Yxkullsgatan 10, 11850 Stockholm, e-mail: info@dropcoffee.se, (“Drop Coffee", "we") collects, uses, discloses and stores your personal information.
1.1 The privacy policy applies when Drop Coffee provides services and products related to purchase, service issues and other contacts with Drop Coffee, such as website visits. The Privacy Policy also applies to the processing of personal data made in the context of Drop Coffee Account Holdings ("Account Holder”).
1.2 You should always be able to feel safe when you submit your personal information to us. We want to demonstrate with this Privacy Policy how we ensure that your personal information is processed in accordance with applicable privacy laws.
2. Personal Data Responsible
Drop Coffee is the personally responsible person for Drop Coffee's processing of your personal data and is responsible for such treatment in accordance with applicable law. Drop Coffee is also personally responsible for the processing of personal data in the possession of Drop Coffee account.
3. When do we process your personal information?
3.1 In order for you to visit our website, buy our goods or services or contact us for service or information, we must collect and process personal information about you.
3.2 Drop Coffee collects and processes personal information about you when completing a purchase on Drop Coffee's website, using Drop Coffee support, visiting Drop Coffee's website, or an event organized by Drop Coffee, or when you otherwise contact Drop Coffee. The information collected from you at the time of booking and purchase is required for you to enter into an agreement with Drop Coffee and for Drop Coffee to be able to provide its services and offers.
3.3 If you are Account Holder, Drop Coffee collects personal information about you that you provide when registering account holdings. Drop Coffee also collects information about you while you are Account Holder in the context of your account holdings, such as your purchase history, how you interact with Drop Coffee's website, what deals you have been interested in by reading an email or clicking a link. Drop Coffee also handles data that Drop Coffee from time to time is given access through your Drop Coffee account. As Account Holder, you can update your information at any time by contacting us.
4. What personal data do we process about you?
4.1 For you who are Drop Coffee's customers
The personal data Drop Coffee collects and treats you as a customer who makes purchases and uses our support services are:
Name and identification number (social security number, national ID or organization number)
Address
Phone number and email
Payment details
Customer number
IP address and information about your use of Drop Coffee's website
4.2 For you who are Account Holder
The personal data Drop Coffee collects and processes about you who are Account Holders are:
Name and identification number (social security number, national ID or organization number)
Address
Phone number and email
Payment details
Account Information
IP address and information about your use of Drop Coffee's website
Information about which of our products or offers you have been interested in, how to interact with our newsletters and which of your events you have signed up for
Information about your purchases
Information about your account holdings
Title and attestation
5. Why do we treat information about you?
5.1 For you who are Drop Coffee's customers
Drop Coffee processes your personal information for different purposes. Mainly, Drop Coffee processes your personal information in order to:
Completing our obligations to you as a customer, such as execution of purchase, invoicing and provision of support;
Enable general customer care and customer service, such as answering questions and correcting incorrect information;
Provide information and direct marketing, by mail, email, SMS / MMS and telephone regarding Drop Coffee's and selected partner's goods and services;
Managing Customer Relationship and Providing Our Services;
Provide relevant information and custom offers in newsletters as well as on the web;
Assess which payment methods we can offer you, for example through credit assessments;
Improve our customer offerings, such as service development, products, and features;
Prevent fraud and carry out risk management; and
Follow applicable legislation, such as accounting laws.
The data can also provide basis for market and customer analyzes, market research, statistics, business tracking and business and method development related to the purchase of goods and services.
5.2 For you who are Account Holder
In addition to the above list, Drop Coffee processes personal information about Account Holder also in order to:
Manage Account Holdings;
Provide you with the opportunity to use Account Holder Benefits, such as the ability to save favorites, pre-filled tasks, more payment options, easier handling of cases and complaints and ability to manage multiple addresses;
Provide special offers;
Enable communication with you as Account Holder by mail, email, phone or SMS / MMS; and
Enable personalized offers, promotion and event invitations via phone, mail, email and SMS / MMS.
6. The legal basics of our processing of your personal data
6.1 Drop Coffee bases the processing of your personal data on a number of legal bases. These are described in this section.
6.2 We treat your personal information in order to fulfill the agreement with you as a customer or as Account Holder, such as for making bookings, purchases and for fulfilling our obligations to you as Account Holder, such as simplified administration and order history. Based on this legal basis, we also treat you as Account Holder, such as your purchases, your behavior on our website, your interaction with Drop Coffee, and your interest in our offers and products in order to fulfill our commitment to providing you with personalized offers.
6.3 Part of the processing of personal data we carry out is based on a so-called interest-rate balance. This applies, for example, to the treatment we take to send you offers about our goods and services and to make a limited segmentation of customers, such as based on total purchase sums. Drop Coffee does not process sensitive personal data based on a balance of interest and does not perform any treatment constituting profiling based on a balance of interest.
6.4 In some cases, Drop Coffee may have a legal obligation to process your personal information. This applies, for example, to the processing of personal data we perform in order to meet the requirements of the Accounting Act.
Purpose | Legal basis | Categories of personal data | Retention period |
To administer, develop and deliver our goods and services as well as provide support | Completion of purchase agreement (terms of sale) | * Name, address, phone number and e-mail * Geographic information * IP address, device information, log information |
Two years after you last been active at Drop Coffee, for example by shopping with us or contacting our customer service |
To ensure that legal requirements are complied with, such as the Accounting Act | Legal obligation |
* Name, address, phone number and e-mail * Geographic information * IP address, device information, log information |
As long as we are required to store the data in accordance with applicable law |
To market Drop Coffee and our affiliates goods and services through mail, email, phone and SMS / MMS | Balancing of interests |
* Name, address, phone number and e-mail * Geographic information * IP address, device information, log information |
Two years after you last been active at Drop Coffee, for example by shopping with us or contacting our customer service |
To manage your account holdings, give you the opportunity to get personalized offers as well as enable targeted communication by mail, email, phone or SMS / MMS | Completion of the Drop Coffee Account Agreement | * Name, address, telephone number and e-mail * Geographical information * IP address, device information, log information * Payment Details * Customer number * Information about using our web, which of our offers you have been interested in, which of our newsletters you interacted with and which of your events you have signed up for * Information about your purchases * Information about your account holdings |
As long as you have a Drop Coffee account |
8. Profiling
8.1 Drop Coffee can process your personal information through profiling if you are Account Holder. If you are Account Holder, you will find information about using our web, which of our products, services and offers you have been interested in, which of our newsletters you interacted with and which of your events you signed up with, information about your purchases and information about your account holding to provide you with offers that we think fit you and to invite you to events we think you would like to go on.
8.2 You may object to the processing of personal data by profiling. You can do this by contacting info@dropcoffe.se. Once Drop Coffee has received your notification, Drop Coffee will cease processing your personal information for this purpose.
9. How long do we save data about you?
9.1 Your personal information will only be stored as long as there is a need to save them to fulfill the purposes for which the data was collected in accordance with this Privacy Policy. Drop Coffee may save the data longer if necessary to comply with legal requirements or to monitor Drop Coffee's legal interests, such as if there is a legal process going on.
9.2 Drop Coffee saves customer information for a maximum of 24 months after the customer last completed a purchase or otherwise integrated with Drop Coffee.
9.3 Drop Coffee saves information about Account Holder as long as the Account Holder has a Drop Coffee Account.
10. Who do we provide personal information to?
10.1 Drop Coffee may disclose your information to third parties, such as other parts of Drop Coffee Roasters AB and other partners, as well as card and communications service providers. Drop Coffee may also provide your information to companies that provide address updates services to ensure that we have the right address information for you.
10.2 Third party to whom Drop Coffee discloses information to or otherwise provides information about a customer or Account Holder may use the information only for the purpose of selling and marketing Drop Coffee's and Drop Coffee's affiliates and group companies' services and products or for the purpose of delivering services related to Drop Coffee's agreement with you as a customer or account holder. If you apply for a credit when purchasing a product or service, your information may be disclosed to credit reporting companies.
10.3 Personal data may also be disclosed by Drop Coffee if it is necessary to comply with applicable legal requirements or governmental requirements, to safeguard Drop Coffee's legal interests or to detect, prevent or pay attention to fraud and other security or technical issues.
10.4 Drop Coffee may transfer your personal data to countries outside the EU / EEA, if any of Drop Coffee's suppliers or partners are located there. If personal data are transferred to any non-EU / EEA country, Drop Coffee will take steps to ensure that personal data remain protected and also take the necessary steps to legally transfer personal data to non-EU / EEA countries.
10.5 We will not sell your personal information to third parties unless we have your permission.
11. Change of Privacy Policy
11.1 Drop Coffee has the right to change the Privacy Policy at any time. Drop Coffee will promptly notify you of any changes to the Privacy Policy. If you do not accept the changes, you are entitled to terminate the agreement with Drop Coffee before the amended Privacy Policy enters into force. You can terminate the agreement by contacting Drop Coffee.
12. The protection of your personal data
You should always be able to feel confident when you submit your personal information to us. Drop Coffee has therefore taken the security measures needed to protect your personal data from unauthorized access, change and deletion. For example, all information about customers and Account Holder is stored in a database that is protected by permission management and firewall.
13. Your rights
13.1 Drop Coffee is responsible for processing your personal data in accordance with applicable legislation.
13.2 Drop Coffee will, at your request or on its own initiative, rectify, disassociate, delete or supplement information that is found to be incorrect, incomplete or misleading.
13.3 You are entitled to request;
- Access to your personal information. This means that you are entitled to request a registry outline of the processing we conduct regarding your personal data. You are also entitled to receive a copy of the personal data being processed. You are entitled to once a calendar year, by written application, receive a registry extract from which personal data are registered about you, the purpose of the treatment and the recipients the information has been provided or to be disclosed. You also have the right to receive information on where the data has been retrieved if personal data have not been collected from you, the existence of automated decision making (including profiling) and the predicted period during which the data will be stored or the criteria used to determine this period. You also have the right to obtain information about your other rights listed in this paragraph in the registry extract.
- Correction of your personal data. We will prompt you to correct the incorrect or incomplete information we process about you as quickly as possible.
- Deletion of your personal information. This means that you are entitled to request that your personal data be removed if they are no longer necessary for the purpose for which they were collected. However, there may be legal requirements that we can not immediately delete your personal data in, for example, accounting and tax laws. We will then end the processing done for purposes other than complying with the legislation.
- Limitation of treatment. This means that your personal information is marked so that they can only be processed for certain delimited purposes. You may, for example, request a restriction when you consider your information incorrect and you have requested a correction under item 13.3 b). Meanwhile, the accuracy of the data is investigated, their treatment will be limited.
13.4 Drop Coffee will notify each recipient of the personal data disclosed in paragraph 10 above about any corrections or deletion of data, as well as limitation of processing of data.
13.5 You are entitled to data portability. It implies the right to, under certain conditions, extract and transfer your personal data in a structured, widely used and machine-readable format to another personal data controller.
13.6 You are entitled to object to personal data processing performed on the basis of a balance of interest. If you object to such treatment, we will only continue treatment if there are legitimate reasons for treatment that weigh heavier than your interests.
13.7 If you do not wish to process your personal data for direct marketing, you are always entitled to object to such treatment by sending an email to info@dropcoffee.se. Once we have received your objection, we will cease processing your personal data for such marketing purposes.
13.8 You may submit any complaints regarding the processing of your personal data to the Data Inspectorate.
14. Cookies
When you visit our website, we use cookies, you will find more information about how we treat cookies in our cookie policy.
15. Contact information
15.1 Do not hesitate to contact us if you have any questions about this Privacy Policy, the processing of your personal information or if you wish to request a registry extract. Our contact information can be found below.
DROP COFFEE ROASTERS AB
Wollmar Yxkullsgatan 10
118 50 Stockholm
info@dropcoffee.se
16. Accessing personal data
If you have any questions or comments, or if you want to update, delete, or change any Personal Information we hold, or you have a concern about the way in which we have handled any privacy matter, please contact us by email (details below).
Conversio has a “Data Protection Officer” who is responsible for matters relating to privacy and data protection. The Data Protection Officer can be reached via this email address:
Drop Coffee Roasters
Attn. Data Protection Officer - Stephen Leighton
stephen@dropcoffee.se