HOEP Archive Store - 70% off skate- and streetwear
Logo

PRIVACY POLICY

  • 1 Introduction

    This Privacy Policy (this “Privacy Policy”) explains how Spherio Group AB (publ) (“Spherio”, “our” or “we”) collects, uses, protects and shares the personal data that we have about you (the “Customer” or “you”) and others who access the Platforms and Services (as defined in Spherio’s general terms and conditions (the “Terms and Conditions”) which can be found on our website www.spheriosolutions.com (the“Website”), which enabling our Clients (as defined in the Terms and Conditions) to launch their own digital resale store offering second-hand, samples, outgoing stock and/or returns, within the Client’s own branding.
  • 2 When and how do we use and collect your personal data?

    2.1 General
    2.1.1 Spherio strives to ensure the security of your personal data. When Spherio collects personal data about you, Spherio also makes sure that your personal data is protected from unauthorized access, loss, manipulation, falsification, destruction and unauthorized disclosure. Spherio will not share, sell, convey or otherwise disclose personal data other than as stated in this Privacy Policy, unless it is required to do so by law or you have given your explicit consent to do so.
    2.1.2 Spherio is data controller in relation to the processing that Spherio fulfils in order to provide the Platform and the Services, i.e., administration of orders and payments, handling of customer support and processing of personal data that is generated through customers use of the Platform and the Services.
    2.1.3 You as a customer determine if you would like to use the Platform and the Services and thereby you to some extent also determine how this shall be done. This implies that you are data controller for the processing of personal data that occurs when using the Platform and the Services.
    2.1.4 Below is a description of when your personal data is processed.
    2.2 Purchases or sale
    2.2.2 We process the personal data in order to fulfil our commitments to you as a user of the Platform and the Services. The legal basis for the processing of personal data related to you is completion of agreement.
    2.2.1 When you complete a purchase or a sale through the Platform and the Services, you (i) agree that Spherio stores and uses the personal data, such as your name, phone number and email address, provided by you, and (ii) give your explicit consent for Spherio to share your personal data with Clients, partners and associates of Spherio. We also document all communications that we have with you via email. If you are or becomes a user and are using the Platform and the Services, we may obtain additional data about you from public registers.
    2.3 Payment
    When you choose to use a third party processing service (as further defined in the Terms and Conditions) for payment processing services, Spherio may collect the personal data that you share for such usage, such as your date of birth, personal identification number, home address and bank account number. The legal basis for the processing of personal data related to the payment is both completion of agreement and applicable law.
    2.4 Second Hand
    When you choose to use the Second Hand Services (as defined in the Terms and Conditions), Spherio may collect the personal data that you share for such usage, such as your name, personal identification number and home address. The legal basis for the processing of personal data related to your use of the Second Hand Services is completion of agreement.
    2.5 Customer support
    If you contact Spherio on support@spheriosolutions.com, Spherio collects personal data about you to help solve any issues you might be facing. Please note that if you contact Spherio via Facebook Messenger your personal data regarding such message will be collected and governed by Facebook and their terms of use and privacy policy. The legal basis for the processing of personal data related to support is completion of agreement.
    2.6 Newsletter and campaigns
    When you sign up for a campaign, you automatically consent to us or our Clients sending newsletters for marketing purposes. Furthermore, you consent that we and our Clients may share your personal data with our partners and associates for marketing purposes. We and our Clients may also analyse your personal data in order to send you interesting and personalized marketing. You may at any time withdraw your consent to Spherio processing your personal data for marketing purposes by sending an email to support@spheriosolutions.com or by clicking on the unsubscribe-link in any newsletter.
    2.7 For legal reasons
    2.7.1 In some cases, Spherio may have a legal obligation to process personal data related to our Customers. This applies, for example, to the processing of personal data that we carry out in order to meet the requirements of the Swedish Accounting Act, prevent fraud and carry out risk management.
    2.7.2 Spherio will share your personal data if required to do so by law, if subject to a legal proceeding or if Spherio reasonably believe that such action is necessary to meet any applicable law, regulation, legal process or enforceable governmental request. The legal basis for the processing of personal data related to legal reasons is the legal obligation to do so.
    2.8 Embedded content from other websites
    2.8.1 Articles on the Platform and the Services may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited such other website.
    2.8.2 The Website features plug-ins for easy sharing and following our social media pages, such as Facebook, LinkedIn, Twitter and Instagram. Being on the Website does not automatically result in sharing data on these social media platforms.
    2.8.3 Other websites and social media platforms may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to such website.
    2.9 Cookies
    Spherio uses web analytics services and cookies in order to improve the Platform and the Services, user experience and analyse how the Spherio Website is used. Spherio uses cookies and analytic services to remember your settings as well as for authentication and analytics. Aside from the approximate location (IP-address), the information collected by analytic service providers is anonymous traffic data including browser information and device information. The collected information is used to provide an overview of how people are accessing and using the Platform and the Services. It is not used for any additional purpose, such as to profile those who access the Platform and the Services. For the avoidance of doubt, Spherio will not use your IP-address to collect personal data.
  • 3 More about processing personal data through the Platform and the Services

    3.1 More about processing personal data
    3.1.1 The Platform and the Services are not directed to children under the age of 18, and Spherio does not knowingly collect personal data from children under the age of 18 without obtaining parental consent. If Spherio learns that personal data has been collected on the Platform and the Services from persons under 18 years of age and without verifiable parental consent, Spherio will take the appropriate steps to delete this personal data. If you are a parent or guardian and discover that your child under 18 years of age has used the Platform or the Services, you may alert Spherio at support@spheriosolutions.com and request that we delete such child’s personal data from our systems.
    3.1.2 Spherio reserves the right to change this Privacy Policy from time to time. Spherio constantly review this Privacy Policy and strive towards making it better. If Spherio modifies the Privacy Policy, Spherio will post it and make it available through the Platform and indicate the date of the latest revision. If the changes are significant, Spherio will provide a more prominent notice (including email notification of privacy policy changes).
    3.1.3 If Spherio is involved in a merger, acquisition or asset sale, Spherio will continue to ensure the confidentiality of any personal data and affected users notice before personal data is transferred or becomes subject to a different privacy policy.
    3.2 More about how long we save your personal data
    3.2.1 If you contact Spherio through support@spheriosolutions.com, your personal data will be processed and stored for nine (9) months, so that it is possible for Spherio to contact and respond to your request, and/or allow you access to the Platform and the Services.
    3.2.2 Personal Data processed to fulfil our legal obligations will be deleted within seven (7) years after we have fulfilled all of our obligations under the applicable agreement.
    3.3 Access to your personal data
    3.3.1 The personal data is available in its entirety for our Clients and selected parts of our staff. Only certain employees have access to personal data.
    3.3.2 We use third party service for help with payments, web development, storage services, inventory management and similar services to which we disclose personal data or we provide limited access of personal data to (“Third-Party Service”). Cooperation between Spherio and Third-Party Service is regulated in accordance with the GDPR through personal data assistance and processing agreements.
    3.3.3 Your personal data is mainly processed within EU/EEA, but for certain processes personal data may be processed in a country outside of EU/EEA, e.g., when one of our sub-suppliers conducts its business from a country outside of EU/EEA. We will in relation to such transfers take all reasonable technical and legal actions in order to secure the integrity for transferred personal data and that security for the processing of this data fulfils an adequate level of protection in accordance with the GDPR. For example, we are using standard agreement clauses that have been approved by the EU commission in our agreements with such sub-suppliers. Click here to see these clauses. In other cases, we only transfer data to countries that are included in a decision on adequate level of protection.
  • 4 Transfer of personal data

    In order for the Services to work, we may need to share certain personal data with others. In some cases, we are still responsible and the recipient of such personal data is our personal data processor. In other cases, the recipient is independently responsible data controller for the processing. A recipient may also be independently data controller for a certain process but data processor for another.
    4.1 Recipients that are independently data controller
    When data is provided to an independently data controller, such data controller will thereafter decide how the data shall be processed and is also data controller for such processing. For example, Klarna is such independent data controller.
    4.2 Recipients as data processor
    Data may be processed by so called data processors, i.e., companies that Spherio is collaborating with in relation to IT operations, analysis, distribution and marketing. These companies may however not use data of you for other purposes than for providing services that they have been engaged for and only on the terms stated by Spherio. We have entered into written agreements (so called data processing agreements) with all that are processing personal data for our account.
  • 5 Personal data incident

    If there is a personal data incident, which means that personal data for which we are responsible comes in wrong hands, we will immediately report this to the Swedish Data Protection Authority. We will decide in each case whether we will notify the Customer.
  • 6 Your rights

    You always have the right to:
    (a) access your personal data. You can request a copy of the personal data and verify the personal data that we have about you. A copy is free to request. When requesting access to your personal data, you can send an email to support@spheriosolutions.com;
    (b) get your personal data deleted if your personal data is no longer necessary for the purposes for which they were collected or if you wish us to delete your personal data. To delete your personal data, send an email to support@spheriosolutions.com;
    (c) at any time withdraw your consent to Spherio processing or sharing your personal data for marketing purposes by sending an email to support@spheriosolutions.com or by clicking on the unsubscribe-link in any newsletter;
    (d) receive and transfer personal data to another person or entity responsible for personal information in some cases (data portability). In order to receive and transfer your personal data, please send an email to support@spheriosolutions.com;
    (e) object to the processing of your personal data based on a balance of interests. Continued processing of your personal data requires, in such a case, that we may display mandatory justifications that outweigh your interests, rights and freedoms or whether it is for the purposes of the determination, exercise or defence of legal claims; or
    (f) present a complaint regarding the processing of your personal data by Spherio to the Swedish Data Protection Authority or other competent supervisory authority.