Privacy policy

1. General

1.1 We respect and value your personal privacy. We want you to feel secure in how we handle your personal information. This privacy policy ("Privacy Policy") is designed to demonstrate how we ensure that your personal data is processed in accordance with applicable legislation.

1.2 In order to provide our products and services to you as a user, we need to use your personal data. This Privacy Policy applies to you as a member and customer of ours.

2. Controller of Personal Data

2.1 DBL Studio AB, registration number 559290-1291 ("Sirap Collection"), is the controller of personal data for the use of your personal information and is responsible for ensuring that such use complies with applicable legislation. You can find our contact information at the bottom of this Privacy Policy.

3. Our Use of Personal Data

3.1 At Sirap Collection, we use your personal data to best provide the products and services we offer. Therefore, we use your personal data for the following purposes:

  • To provide and manage your user account.
  • To deliver goods and services in accordance with our agreements with you.
  • To handle and ensure the quality of customer service matters.
  • To provide customized information, benefits, and offers, and to offer a personally tailored experience of our service.
  • To provide information about and market our and third-party products and services.
  • To conduct and manage participation in contests and events.
  • To develop our services and systems and to conduct evaluations of our business model.
  • To prevent the misuse of our services or to prevent, detect, and investigate crimes.
  • To fulfill legal obligations (e.g., under accounting laws, product liability, product safety, and personal data protection in IT systems).

In the tables below, you will find more information about why we use your personal data, what personal data we store to achieve these purposes, and how long we retain your personal data.

4. Processing We Conduct

Sirap Collection carries out processing of personal data for the following purposes:

4.1 To provide and manage your user account

Personal Data:

  • User details and preferences
  • Contact information
  • Order and payment information, including order history
  • Messages and conversations between the member and customer service
  • Information on how you use our services, e.g., website visit history, IP address, and browser settings
  • Campaigns and offers that have been used

What We Do: We process your personal data to administer and manage your user account.
Legal Basis: Fulfillment of the agreement.
Storage Period: Data is retained throughout the contractual relationship and up to 12 months after the contract has been terminated or concluded.
Your Rights: You have the right to object to such use of your personal data, which we carry out based on a legitimate interest. See section 10 if you want to learn more about your rights.

4.2 To deliver goods and services in accordance with our agreements with you

Personal Data:

  • User details and preferences
  • Benefits and credits
  • Contact information
  • Order and payment information
  • Other delivery information

What We Do: We use your data to manage your orders and deliver our products and services to you in a smooth manner.
Legal Basis: We process your data to fulfill our agreement with you.
Storage Period: Data is retained throughout the contractual relationship and up to 12 months after the contract has ended.
Your Rights: See section 10 if you want to learn more about your rights.

4.3 To manage and ensure the quality of customer service matters

Personal Data:

  • User details and preferences
  • Benefits and credits
  • Contact information
  • Order and payment information, including order history
  • Messages and conversations between the member and customer service
  • Case history

What We Do: We use your data to provide the best possible customer service experience. We retain completed customer service matters with relevant information for some time to conduct quality work.
Legal Basis: We process your personal data based on a legitimate interest.
Storage Period: Data is retained throughout the contractual relationship and up to 12 months after the contract has been terminated or concluded.
Your Rights: You have the right to object to such use of your personal data which we carry out based on a legitimate interest. See section 10 if you want to learn more about your rights.

4.4 To Provide Customized Information, Benefits, and Offers and Deliver a Personalized Experience of Our Service

Personal Data:

  • User details and preferences
  • Contact information
  • Order and payment information, including order history
  • Data on how you use our services, such as visit history on the website, IP addresses, and browser settings
  • Demographic information
  • Previous contact history

What We Do: In order to offer you the best customer experience, we use your personal data to provide information via mail, email, SMS, and/or push notifications. We also customize your experience on our website.
Legal Basis: Our processing is necessary to fulfill our obligations in the Membership Terms. In order to provide these services, we conduct analyses of the data you've provided us and data generated through your use of our service (e.g., visit and purchase history).
Storage Period: Data is retained throughout the contractual relationship and up to 12 months after the contract has been terminated or concluded.
Your Rights: You always have the right to request that we stop using your personal data for direct marketing. Refer to section 10 for more information about your rights.

4.5 To Provide Information About and Promote Our and Third-Party Products and Services

Personal Data:

  • User details and preferences
  • Contact information
  • Order and payment information, including order history
  • Previous contact history

What We Do: We use your personal data to send you marketing communications, including personalized direct advertising, and to customize the content on our website.
Legal Basis: For general and segmented marketing, information, and offers, we base our processing on a legitimate interest where we assess that our interest outweighs your interest in protecting your personal data (for marketing via mail, phone, and social media - and for marketing via email, SMS, MMS, and other automated systems if the requirements in the Marketing Act are met). For marketing third-party products and services via email, SMS, MMS, and other automated systems, we base our processing on consent.
Storage Period: Data is retained throughout the contractual relationship and up to 12 months after the contract has been terminated or concluded.
Your Rights: You always have the right to demand that we stop using your personal data for direct marketing. You also have the right to withdraw your consent at any time when we need your consent to use your personal data. Refer to section 10 for more information about your rights.

4.6 To Develop Our Services and Systems and to Conduct Evaluations of Our Business Model

Personal Data:

  • User details and preferences
  • Contact information
  • Information on how you use our services, e.g., website visit history, IP addresses, and browser settings
  • Order and payment information, including order history
  • Previous contact history

What We Do: We use your personal data for our marketing and customer analysis, which includes information about your use of our services and products, statistics, data from completed market segmentations, and customer satisfaction evaluations. We use the results of our analysis as a basis for improving, replacing, or developing new services, processes, or work methods to meet the expectations and wishes of you and other members. For instance, we may want to use personal data to enhance our customer service, offer new package solutions, or tailor our website and/or app to the preferences of you and other members. However, we always strive to anonymize or pseudonymize your personal data as much as possible to achieve these goals. We may share information about you when our business model is being analyzed by third parties. Information is only shared with third parties under strictly regulated conditions and for a limited period. Furthermore, the processing occurs only at an aggregated level to the extent possible.
Legal Basis: Legitimate interest, as we assess that our interest in analyzing the use of our products and services to improve, replace, or develop new services, products, or business models outweighs your interest in protecting your personal data.
Storage Period: Data is retained throughout the contractual relationship and up to 12 months after the contract has been terminated or concluded.
Your Rights: You have the right to object to our use of your personal data when relying on a legitimate interest. If you object to such use, we will only continue to use your personal data if there are compelling reasons that outweigh your interests.

4.7 To Prevent Misuse of Our Services, or to Prevent, Detect, and Investigate Crimes

Personal Data: All personal data
What We Do: Within the framework of our service, we work to prevent misuse of your account and our services. Therefore, we process information about you and your use of our services to identify fraud, excessive use of discounts and promotions, and similar misuse of our services.
Legal Basis: We base our processing on a legitimate interest where we assess that our interest in preventing misuse outweighs your interest in not having your data processed.
Storage Period: Data is retained throughout the contractual relationship and up to 12 months after the contract has been terminated or concluded.
Your Rights: You have the right to object to such use of your personal data that we do under a legitimate interest. Refer to section 10 to learn more about your rights.

4.8 To Fulfil Legal Obligations (e.g., Regarding Requirements in Accounting Law, Product Liability, Product Safety, and Protection of Personal Data in IT Systems)

Personal Data:

  • User details and preferences
  • Contact details
  • Information about how you use our services, e.g., website visit history, IP addresses, and browser settings
  • Order and payment details, including order history
  • Previous contact history

What We Do: We process your personal data to comply with our legal obligations, according to requirements in laws, judgments, or regulatory decisions. Such requirements can include responsibilities regarding product liability and product safety, such as developing communication and information to the public and members about product recalls and product alerts, e.g., in the case of a defective or hazardous product, or to meet accounting law requirements related to an individual.
Legal Basis: Our legal obligations.
Storage Period: We only retain your personal data for as long as necessary to fulfill the respective legal obligation.
Your Rights: See section 10 for more details about your rights.

5. Where Do Your Personal Data Come From?

5.1 The personal data we use about you come from various sources. Data either comes from you or is generated during the use of our services.

5.2 In order to enter into agreements with us at Sirap Collection and for us to provide you with our products and services, it is a requirement that you provide certain personal data to us. If you do not provide the data we need to operate our business, we, unfortunately, cannot enter into agreements with you or provide you with our products or services.

6. Automated Decision-Making

6.1 We do not use automated processes to make decisions that significantly affect you.

7. How Long Do We Retain Your Personal Data?

7.1 We only retain your personal data for as long as it is needed for the purposes we collected the data for, as outlined in this Privacy Policy. When we no longer need to retain your data, we will delete it from our systems, databases, and backups. In the tables provided in section 4 above, you can see how long we retain your personal data for different purposes.

7.2 We may also need to retain your personal data for other reasons, such as complying with legal requirements, protecting our legal interests, or fulfilling any other important public interest.

8. Who Do We Share Your Personal Data With?

8.1 Sirap Collection may disclose your personal data to third parties, such as other affiliated companies, as well as IT service providers and companies we collaborate with to provide our services, including those that assist us in manufacturing and delivering your order, and various payment intermediaries (e.g., Klarna) who assist us with your payment processing.

8.2 In some cases, we may also need to disclose information upon request from authorities or to other parties within the context of court or corporate acquisition processes, or similar situations.

8.3 We will never sell your personal data to anyone.

9. Where Do We Use Your Personal Data?

9.1 Sirap Collection aims to process your personal data within the EU/EEA. In some cases, we may transfer your personal data to a country outside the EU/EEA. If personal data is transferred to such a country, we will ensure that your personal data continues to be protected and that the transfer is carried out in a lawful manner.

9.2 For transfers to a country outside the EU/EEA that does not provide an adequate level of data protection, we use the European Commission's standard contractual clauses for the transfer of personal data to a country outside the EU/EEA.

9.3 For transfers to recipients in the USA covered by the Privacy Shield framework, we use this legal basis for the transfer of your personal data. You can find more information on this here: Link

10. Your Rights

10.1 Our Responsibility for Your Rights

10.1.1 Sirap Collection, as the data controller, is responsible for ensuring that your personal data is used in accordance with the law and that your rights are respected. You can contact us at any time if you wish to exercise your rights. You can find our contact information at the bottom of this Privacy Policy.

10.1.2 Sirap Collection is obliged to respond to your request to exercise your rights within one month from the time you contacted us. If your request is complex or if a large number of requests have been received, we have the right to extend the time by two months. If we believe that we cannot fulfill what you request, we are obliged to inform you within one month of receiving your request why we cannot fulfill your request and to inform you that you have the right to lodge a complaint with the supervisory authority.

10.1.3 All information, communication, and actions we take are free of charge for you. However, if what you request in relation to your rights is clearly unfounded or excessive, we have the right to charge an administrative fee to provide you with the information or perform the requested action, or to refuse to meet your request.

10.2 Your Right to Access, Rectify, Delete, and Restrict

**10.2.1 You have the right to request from Sirap Collection:

a) Access to your personal data. This means that you have the right to request a registry extract of our use of your personal data. You also have the right to receive a copy of the personal data we use free of charge. We reserve the right to charge an administrative fee for any additional copies. If you make a request in electronic format, such as via email, we will provide you with the information in a commonly used electronic format.

b) Rectification of your personal data. Upon your request or on our own initiative, we will correct, anonymize, delete, or supplement data that we discover is incorrect, incomplete, or misleading. You also have the right to supplement with additional information if anything relevant is missing.

c) Deletion of your personal data. From May 25, 2018, you have the right to request that we delete your personal data if there is no longer an acceptable reason for us to use them. Deletion must therefore occur when:

(i) the personal data are no longer necessary for the purpose for which they were collected,

(ii) we use your data with your consent, and you withdraw this consent,

(iii) you object to our use of your data that occurs after a balancing of interests, and we do not have overriding interests that outweigh your interests and rights,

(iv) we have used the personal data in an unauthorized manner,

(v) we have a legal obligation to delete the personal data, or

(vi) you are a child, and we have collected the personal data in connection with the offering of information society services. However, there may be legal requirements or other compelling reasons that prevent us from immediately deleting your personal data. We will then cease using your personal data for purposes other than compliance with the law or where there is another compelling reason.

d) Restriction of use. This means that we temporarily restrict the use of your data. From May 25, 2018, you have the right to request a restriction when:

(i) you believe your data is incorrect and you have requested rectification under section 10.2.1 b), while we investigate the correctness of the information,

(ii) the use is unlawful, and you do not want the data to be deleted,

(iii) we, as data controllers, no longer need the personal data for our purposes with their use, but you need them to establish, assert, or defend a legal claim, or

(iv) you have objected to use under section 10.3.1, pending an assessment of whether our overriding interests outweigh yours.

10.2.2 At Sirap Collection, we will take all reasonable steps we can to notify all recipients of personal data as per section 7 above if we have corrected, deleted, or restricted access to your personal data after you requested us to do so. Upon your request, we will inform you of those to whom we have disclosed personal data.

10.3 Your Right to Object to Usage

10.3.1 You have the right to object to the use of your personal data that we conduct based on a balance of interests or a matter of public interest (see section 3 above). If you object to such use, we will only continue using the data if we have significant reasons that outweigh your interests.

10.3.2 If you do not want Sirap Collection to use your personal data for direct marketing, you always have the right to object to such use by contacting us. Once we have received your objection, we will cease using the personal data for this marketing purpose.

10.4 Your Right to Withdraw Consent

For the usage where we rely on your consent as the legal basis (see section 3 above), you can withdraw your consent at any time by contacting us. You can find our contact information at the bottom of this Privacy Policy. If you withdraw your consent, it may affect your ability to use our services as intended.

10.5 Your Right to Data Portability

You have the right to data portability. This means you have the right to obtain some of your personal data in a structured, commonly used, and machine-readable format and to transfer this data to another data controller. You have this right only when the use of your personal data is automated, and we base our use on your consent or on a contract between you and us. This means you have the right to obtain and transfer all the personal data you provided to create your user account with us.

10.6 Your Right to Lodge a Complaint with the Supervisory Authority

You have the right to file any complaints about our use of your personal data with the Data Protection Authority.

11. We Protect Your Personal Data

You should always feel safe when you provide your personal data to us. Sirap Collection has therefore implemented appropriate security measures to protect your personal data from unauthorized access, alteration, and deletion. If security incidents occur that may significantly affect you or your personal data, for example, when there is a risk of fraud or identity theft, we will contact you and inform you about what you can do to minimize the risk.

12. Cookies

We at Sirap Collection use cookies on our website and in our services to enhance your experience with us. We use cookies, among other things, to simplify and customize our web and app services.

13. Changes to this Privacy Policy

Sirap Collection reserves the right to change this Privacy Policy at any time. When we make changes that are not solely linguistic or editorial, you will receive clear information about the changes and what they mean for you before they take effect. If we require your consent to fulfill our obligations to you, and you do not accept the changed terms, you have the right to terminate the agreement with us before the terms come into effect.

14. Contact Information

If you have any questions about our privacy policy, cookie policy, or our use of your personal information, you can contact us as follows:

Sirap Collection
Attn: Data Protection Officer
DBL Studio AB, reg. no. 559290-1291
Email: hello@sirapcollection.com
Mailing Address: DBL Studio AB, Backen 202, 836 95 Ås