2 When and how do we use and collect your personal data?
2.1.2 Spherio is data controller in relation to the processing that Spherio fulfils in order to provide the Platform and the Services, i.e., administration of orders and payments, handling of customer support and processing of personal data that is generated through customers use of the Platform and the Services.
2.1.3 You as a customer determine if you would like to use the Platform and the Services and thereby you to some extent also determine how this shall be done. This implies that you are data controller for the processing of personal data that occurs when using the Platform and the Services.
2.1.4 Below is a description of when your personal data is processed.
2.2 Purchases or sale
2.2.2 We process the personal data in order to fulfil our commitments to you as a user of the Platform and the Services. The legal basis for the processing of personal data related to you is completion of agreement.
2.2.1 When you complete a purchase or a sale through the Platform and the Services, you (i) agree that Spherio stores and uses the personal data, such as your name, phone number and email address, provided by you, and (ii) give your explicit consent for Spherio to share your personal data with Clients, partners and associates of Spherio. We also document all communications that we have with you via email. If you are or becomes a user and are using the Platform and the Services, we may obtain additional data about you from public registers.
When you choose to use a third party processing service (as further defined in the Terms and Conditions) for payment processing services, Spherio may collect the personal data that you share for such usage, such as your date of birth, personal identification number, home address and bank account number. The legal basis for the processing of personal data related to the payment is both completion of agreement and applicable law.
2.4 Second Hand
When you choose to use the Second Hand Services (as defined in the Terms and Conditions), Spherio may collect the personal data that you share for such usage, such as your name, personal identification number and home address. The legal basis for the processing of personal data related to your use of the Second Hand Services is completion of agreement.
2.5 Customer support
2.6 Newsletter and campaigns
When you sign up for a campaign, you automatically consent to us or our Clients sending newsletters for marketing purposes. Furthermore, you consent that we and our Clients may share your personal data with our partners and associates for marketing purposes. We and our Clients may also analyse your personal data in order to send you interesting and personalized marketing. You may at any time withdraw your consent to Spherio processing your personal data for marketing purposes by sending an email to email@example.com or by clicking on the unsubscribe-link in any newsletter.
2.7 For legal reasons
2.7.1 In some cases, Spherio may have a legal obligation to process personal data related to our Customers. This applies, for example, to the processing of personal data that we carry out in order to meet the requirements of the Swedish Accounting Act, prevent fraud and carry out risk management.
2.7.2 Spherio will share your personal data if required to do so by law, if subject to a legal proceeding or if Spherio reasonably believe that such action is necessary to meet any applicable law, regulation, legal process or enforceable governmental request. The legal basis for the processing of personal data related to legal reasons is the legal obligation to do so.
2.8 Embedded content from other websites
2.8.1 Articles on the Platform and the Services may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited such other website.
2.8.2 The Website features plug-ins for easy sharing and following our social media pages, such as Facebook, LinkedIn, Twitter and Instagram. Being on the Website does not automatically result in sharing data on these social media platforms.
3 More about processing personal data through the Platform and the Services
3.1 More about processing personal data
3.1.1 The Platform and the Services are not directed to children under the age of 18, and Spherio does not knowingly collect personal data from children under the age of 18 without obtaining parental consent. If Spherio learns that personal data has been collected on the Platform and the Services from persons under 18 years of age and without verifiable parental consent, Spherio will take the appropriate steps to delete this personal data. If you are a parent or guardian and discover that your child under 18 years of age has used the Platform or the Services, you may alert Spherio at firstname.lastname@example.org and request that we delete such child’s personal data from our systems.
3.2 More about how long we save your personal data
3.2.1 If you contact Spherio through email@example.com, your personal data will be processed and stored for nine (9) months, so that it is possible for Spherio to contact and respond to your request, and/or allow you access to the Platform and the Services.
3.2.2 Personal Data processed to fulfil our legal obligations will be deleted within seven (7) years after we have fulfilled all of our obligations under the applicable agreement.
3.3 Access to your personal data
3.3.1 The personal data is available in its entirety for our Clients and selected parts of our staff. Only certain employees have access to personal data.
3.3.2 We use third party service for help with payments, web development, storage services, inventory management and similar services to which we disclose personal data or we provide limited access of personal data to (“Third-Party Service”). Cooperation between Spherio and Third-Party Service is regulated in accordance with the GDPR through personal data assistance and processing agreements.
3.3.3 Your personal data is mainly processed within EU/EEA, but for certain processes personal data may be processed in a country outside of EU/EEA, e.g., when one of our sub-suppliers conducts its business from a country outside of EU/EEA. We will in relation to such transfers take all reasonable technical and legal actions in order to secure the integrity for transferred personal data and that security for the processing of this data fulfils an adequate level of protection in accordance with the GDPR. For example, we are using standard agreement clauses that have been approved by the EU commission in our agreements with such sub-suppliers. Click here
to see these clauses. In other cases, we only transfer data to countries that are included in a decision on adequate level of protection.
6 Your rights
You always have the right to:
(a) access your personal data. You can request a copy of the personal data and verify the personal data that we have about you. A copy is free to request. When requesting access to your personal data, you can send an email to firstname.lastname@example.org;
(b) get your personal data deleted if your personal data is no longer necessary for the purposes for which they were collected or if you wish us to delete your personal data. To delete your personal data, send an email to email@example.com;
(c) at any time withdraw your consent to Spherio processing or sharing your personal data for marketing purposes by sending an email to firstname.lastname@example.org or by clicking on the unsubscribe-link in any newsletter;
(d) receive and transfer personal data to another person or entity responsible for personal information in some cases (data portability). In order to receive and transfer your personal data, please send an email to email@example.com;
(e) object to the processing of your personal data based on a balance of interests. Continued processing of your personal data requires, in such a case, that we may display mandatory justifications that outweigh your interests, rights and freedoms or whether it is for the purposes of the determination, exercise or defence of legal claims; or
(f) present a complaint regarding the processing of your personal data by Spherio to the Swedish Data Protection Authority or other competent supervisory authority.