Privacy and Data Protection Policy (GDPR)

Processing of Personal Data

Vou You AB, 556998-1318, Åbäcksgatan 6, 431 67 Mölndal, Sweden (hereinafter referred to as SWEDISHFACE) is the data controller for the processing of your personal data. SWEDISHFACE commits to respecting and protecting your personal data and your personal privacy in accordance with applicable legislation (including the EU General Data Protection Regulation), industry rules, and other relevant standards.

What is personal data and what does processing of personal data mean?

Personal data is any kind of information that directly or indirectly can be linked to a living individual. For example, name, address, personal identification number, email address, and phone number. It can also be, for example, order number, shipment number, and IP address if they can be linked to individuals.

Processing of personal data means any type of handling of personal data, such as collection, registration, storage, transfer, and deletion.

Collection of Information

We collect and process personal data when/if you:

• register as a customer with us
• place an order with us
• start placing an order with us
• register for our newsletter
• contact us via email, contact form, or SMS

By registering as a customer or for our newsletter, or ordering goods from us, you consent to SWEDISHFACE  storing and using the information about your purchases as well as the contact details you provide.

When you order from us, we never get access to card details, bank account information, or your personal identification number. However, our payment partners may have access to such information when you provide it.

Security

SWEDISHFACE protects your personal data through several technical security measures. If you have your own account registered on SWEDISHFACE, a personal password is required to access it. To prevent unauthorized access to your password and account, we use salting and one-way encryption of passwords. You are also responsible for ensuring that no unauthorized person gains access to your password.

All our payment solution providers comply with the PCI-DSS security requirements (Payment Card Industry Data Security Standard), which is a security standard for handling card information developed by the payment card industry, including MasterCard, Visa, Amex, and Diners. The standard applies to all who handle payment transactions for payment and credit cards.

Use of Personal Data

For us to process your data, one of the following legal bases must be met:

• Requirement to fulfill the contract with you.
• Requirement to fulfill a legal obligation for SWEDISHFACE.
• The processing is in both your and SWEDISHFACE's interest.
• Consent from you for that specific processing.

Below you can read what we use your data for, as well as the legal basis for the processing.

Receiving and Fulfilling Orders

The data is stored and used so that we can fulfill our commitments to you, such as receiving payment, delivering the goods to your address, and, if necessary, contacting you regarding your order.

Legal basis: Performance of contract.

Communication and Support

We may use personal data from your orders with us as well as previous contact with us to better satisfy your needs as a customer and provide you with better service.

If you communicate with us over public channels that you choose, we have the right to disclose personal information from your order as well as communication from you that has occurred through private channels, to the extent necessary to assist you, or all information from your order and communication from you if it concerns responding to negative criticism or accusations.

If you have consented to receive our newsletter via email, the data will also be used for this purpose. You of course have the option to notify us at any time that you no longer wish to receive our newsletter.

Legal basis: Legitimate interest, consent, and performance of contract.

Marketing and Analysis

To be able to market relevant products to you according to your needs, we process data about which products you have previously purchased from us, as well as products you have added to the shopping cart but not completed the purchase of.

Legal basis: Legitimate interest and consent.

To Whom We Disclose Personal Data

Partners and Subcontractors

We process your personal data with the utmost care. We strive never to share more personal data than absolutely necessary with each partner. We guarantee that no information about you is sold or used for advertising mailings from third parties. We take appropriate protective measures to ensure that your personal data is handled in accordance with applicable laws regarding security and personal privacy. We impose the same requirements on our subcontractors. We may share certain data with the following partners and subcontractors for the purposes below.

Purpose: Marketing and Analysis

Partner: Google
Personal data shared and why: Analytical data via third-party cookies for marketing and analysis to offer our customers better services.
When data is shared: If you visit our website and accept cookies.

Partner: Onesignal
Personal data shared and why: An anonymous ID (linked to your browser) for marketing via push notifications.
When data is shared: Only if you have actively accepted push notifications

Partner: Mailjet
Personal data shared and why: Email address. We send transactional emails through their SMTP relay.
When data is shared: If you register as a customer or place an order with us.

Partner: Mailjet
Personal data shared and why: Email address, for general newsletters, and order data for personalized newsletters.
When data is shared: Email address you register for newsletters. Order data if you have placed an order and approved newsletters.

Partner: MO-SMS (Paytechsystem Europe AB)
Personal data shared and why: Mobile number as we send all transactional SMS and marketing SMS through MO-SMS.

Partner: Trustpilot
Personal data shared and why: Email address, name, address, and order data. To collect reviews.
When data is shared: After completed purchase.

Partner: OpenAI / Microsoft
Personal data shared and why: Email address, name, address, and order data. So that the chatbot based on OpenAI’s GPT can provide relevant and accurate answers.
When data is shared: If you share your email address and order ID when chatting with our chatbot, information about your address and order may be shared. Nothing you write is collected by OpenAI/Microsoft. Nothing you write is used to train GPT.

Purpose: To Fulfill Orders (Payment and Shipping)

Partner: Svea
Personal data shared and why: Order information and data (including address and contact details) required to complete purchase/payment.
When data is shared: If the order is completed in our standard checkout which uses Svea’s Checkout.

Partner: PayPal
Personal data shared and why: Order information and data (including address and contact details) required to complete payment.
When data is shared: If the order is paid in our alternative checkout with PayPal.

Partner: Stripe
Personal data shared and why: Order information and data required to complete payment.
When data is shared: If the order is paid in our alternative checkout, directly with card via Stripe.

Partner: PostNord
Personal data shared and why: Address and contact details to be able to ship the order.
When data is shared: If the order is shipped with PostNord.

Partner: UPS
Personal data shared and why: Address and contact details to be able to ship the order.
When data is shared: If the order is shipped with UPS.

Partner: DHL Freight
Personal data shared and why: Address and contact details to be able to ship the order.
When data is shared: If the order is shipped with DHL.

Partner: BudBee / InstaBee
Personal data shared and why: Address and contact details to be able to ship the order.
When data is shared: If the order is shipped with BudBee / InstaBee.

Purpose: Other

Partner: Oderland
Personal data shared and why: Manages the servers that run our e-commerce system, which is why order data and customer information are stored here.

Partner: Hjorten Revision
Personal data shared and why: For audit purposes, accounting records such as customer invoices may be shared.

If all or parts of SWEDISHFACE's business are sold or integrated with another business, your personal data may be disclosed to our advisors, potential buyers and their advisors, and passed on to the new owner of the business.

 

Authorities

Upon request, we may be legally obligated to disclose certain personal data to, for example, the Police or the Tax Agency.

 

How Long We Store Your Personal Data

We store personal data for as long as there is a purpose for the processing and for the time required for us as a provider to fulfill our commitments or for the time we are legally obliged to do so.

 

Your Rights Regarding Personal Data

When we process your personal data, you have certain rights under the law (EU General Data Protection Regulation). Please note that exercising these rights is subject to certain requirements and conditions as specified in the law.

You have the right to:

• access your personal data and information about how it is used;
• correct or complete your personal data;
• have your personal data deleted;
• restrict the use of your personal data;
• access your personal data in a manageable format;
• prohibit the use of your personal data;
• withdraw your consent to the use of your personal data.

If you want to exercise any of the above rights, please contact us.

We cannot delete personal data and information required by accounting law.

 

Policy Changes

This policy may be updated at any time by SWEDISHFACE. We encourage you to read this policy to stay informed about how SWEDISHFACE processes your personal data.

Last updated 2025-04-20

 

About Cookies

A cookie is a small text file that a website saves on the visitor’s computer (computer here refers to all types of devices with a web browser, including smartphones, tablets, smart TVs, etc.). A cookie stores various types of information about the visitor and settings and choices the visitor makes on the website. Cookies are absolutely necessary for an online store to function. Cookies are harmless and cannot damage your computer.

By visiting SWEDISHFACE with a browser set to accept cookies, you accept that your browser and computer receive and store cookies from SWEDISHFACE. In your browser (e.g., Chrome, Safari, Firefox, Edge, Opera), you can adjust the settings for how it should accept and store cookies. You should also be able to set it to not accept cookies at all. Please note that parts of SWEDISHFACE will not function fully if you disable cookies.

SWEDISHFACE uses cookies so that the online store functions and to improve visitors’ experience of the website. Cookies are required, among other things, to keep track of which items are added to the shopping cart, which shipping method is selected, and how products should be displayed (grid/list) and sorted. Information about which language and currency are selected and should be displayed to you as a visitor is also saved in our cookies. Cookies also help us collect statistics and traffic data about our visitors.