Last update: 2022-05-19
Privacy policy
1. General
We at Gion want you to feel safe when you leave your personal information to us. This privacy policy explains how we collect, use, disclose and store your personal information and how we otherwise ensure that your personal information is processed in accordance with applicable law. It is important to us that you read and understand this privacy policy and that you feel safe with how we process your personal data.
2. Who is responsible for personal data?
2.1 Gion Media AB (in this policy called “Gion”) is responsible for the processing of your personal data when Gion provides and markets products and services and in other contacts with Gion, such as visits to our website or service matters via e-mail and telephone. As the person responsible for personal data, it is Gion’s responsibility to ensure that your data is handled correctly and securely in accordance with applicable legislation.
2.2 The business transactions with our customers as well as associated personal data and databases covered by this infrastructure are handled and owned centrally by Gion. Gion thus has the controlling influence over your personal data.
3. What personal information about you do we process?
Gion collects and processes the following categories of personal information about you as a customer or potential customer in connection with you making purchases, using our services and in connection with us marketing and marketing our products and services.
- Contact information such as name, title and certification right, e-mail address, delivery address, invoice address and telephone number.
- Age
- Account information such as customer number, username, password and when the account was registered or changed.
- Customer choice regarding settings for marketing communication and personal offers
- Identification number, ie. social security number or organization number.
- Order information such as order number, ordered products or services, order date, price, possible discount and purchase history.
- Payment details such as payment method, card number, cardholder, transaction time, amount, IP address and payment history.
- Financial information such as credit information.
- Correspondence and other information about support matters such as audio recordings of calls, notes and e-mails when contacting customer service.
- User-generated data about your interaction with Gion’s marketing communications and websites, such as IP address, device information (technical information about computer, mobile phone and other devices you use such as browser settings, time zone, operating system), location information, survey responses and click and visitor history that shows, among other things, which of our products or offers you have been interested in, how you interact with our newsletters and which of our events you have signed up for and participated in, as well as results from customer satisfaction or market research.
- Behavior and / or preferences such as participation in events, reviews of the customer experience at Gion and activity patterns in stores to evaluate suspected crimes.
- If you have the right to use various offers or discounts through membership in various unions or organizations that have negotiated agreements with Gion for their members.
- Information provided in competition entries as well as registration for and evaluation of events or other marketing measures, including health data such as information on allergies.
4. From what sources do we collect information about you as a customer?
4.1 Gion collects your personal information directly from you when you place an order, visits Gion‘s website, participates in our events, clicks on links in digital marketing communications that we have sent to you, is in contact with our customer service and when you otherwise have contact Gion and provide information about you. Information about you is collected on these occasions so that you can enter into an agreement with Gion and so that Gion can provide its products and services to you.
4.2 If you are the holder of a Gion account, Gion also collects personal information about you when registering the account and during the time you are an account holder, e.g. your purchase history, your behavior on Gion’s website, your customer choices to receive marketing communications and which offers you have been interested in by visiting our online store and by reading or clicking on links in our digital mailings.
4.3 In addition to the information that Gion collects from you, we may also collect personal information from someone else, ie. from third parties. We collect information from public registers via third-party address update services, to check that we have the correct contact information for you. We collect credit rating information from credit rating agencies, information companies or banks. We also collect information for marketing purposes from social media.
4.4 Gion also collects certain personal information via cookies that log how you use our website and thus what content you prefer. You will find more information about how we use cookies in Gion‘s cookie policy.
5. Why do we process personal data about you?
Gion collects and processes information about you for various purposes. These purposes set the external framework for what we may use your personal data for. Below we explain the purposes of our treatment and give examples of which treatment activities take place under each purpose. Please note that some of your personal data may be processed for several purposes.
a) Manage orders and purchases
Processing of personal data for this purpose includes activities to, among other things, identify you, send order confirmation, handle payment for ordered products and goods and assess which payment methods we can offer you (based on contact information, ordered goods, payment history and financial information), deliver orders, notify of delivery and handle complaints and warranty matters regarding purchased products and services.
The collection of information that we do to be able to handle your orders and purchases is required for us to be able to fulfill our obligations according to Gion’s general terms of sale . If the information is not provided by you, our obligations can not be fulfilled and in that case we can deny you the order or purchase.
b) Provide and manage Gion account
We process personal data for this purpose in order to e.g. give you permission to log in to the account, secure your identity, create your personal pages, maintain correct contact information, manage your marketing communication settings and personalized offers, make it easier for you to shop in our online store through pre-filled information and saved digital shopping carts, make it easier for you to handle cases and complaints and make it possible for you to follow your order and payment history.
Read more about registering a Gion account in the Terms and Conditions for Gion account . The collection of information that we do to be able to provide and administer your Gion account is required for us to be able to fulfill our obligations according to the Terms for Gion account. If the information is not provided, our obligations can not be fulfilled and in that case we can deny you registration of account or close the Gion account.
c) Provide customized information, benefits and offers and give a personal experience of our online store to you who have a Gion account
We at Gion want you to have the best possible experience when you visit our website and when we communicate with you. Therefore, we process personal data for this purpose so we can improve your user experience in order to create, offer and provide you with personalized content in communication and marketing via mail, e-mail, sms / mms and telephone with individual benefits and offers, recommendations, invitations to events and other information that we believe is relevant to you and remind about abandoned digital shopping baskets. To enable this, analyzes are performed on the information that Gion collects such as age, place of residence, order history and user-generated data.
Read more about how we adapt our offers and communication to your personal characteristics and how to decline personal offers in the Terms for Gion Account . The collection of information that we do for the purpose is required for us to be able to fulfill our obligations under these conditions. If the information is not provided, our commitments can not be fulfilled and in that case we need to limit certain benefits and other benefits that are linked to your account.
d) Provide customized information, benefits and offers and provide a personal experience when we communicate with you who do not have a Gion account
We at Gion want you to have the best possible experience when you visit our website and when we communicate with you. Therefore, we process personal data for this purpose so we can improve your user experience in order to create, offer and provide you with personalized content in communication and marketing via mail, e-mail, sms / mms and telephone with individual benefits and offers, recommendations, invitations to events and other information that we believe is relevant to you. To enable this, analyzes are performed on the information that Gion collects such as age, place of residence, order history and user-generated data.
Read more about how we adapt our offers and communication to your personal characteristics and how to decline personal offers here . The collection of information that we do for the purpose is based on consent. Consent can be revoked at any time by contacting us at consent@gion.se.
e) Provide information about and market products and services
We process personal data for this purpose to inform you by post, e-mail, sms / mms and telephone and market the products, services and offers that Gion sells, show recommendations, remind about abandoned digital shopping baskets and invite to events, competitions and market and customer satisfaction surveys.
For you who are a holder of a Gion account, read more about our marketing communication in the Terms and Conditions for Gion account .
f) Implement and manage participation in events, competitions and other marketing activities
The processing of personal data for this purpose includes measures to e.g. identify participants, communicate with participants in a competition and nominate winners and mediate prizes, check participants’ age and communicate with participants before and after an event (such as confirmations of entries, reminders and evaluations). Please note that information that you have participated in events falls into the category of user-generated data that is processed for other purposes.
g) Manage matters received by Gion’s customer service or other support functions
The processing of personal data for this purpose includes Gion’s activities to e.g. communicate, ensure the customer’s identity, investigate complaints and support matters, answer questions that come in to customer service or other support functions via e-mail, telephone or digital channels, correct incorrect information, provide technical support and nurture the customer relationship.
h) Fulfill legal obligations required by the Gion
Personal data is processed for this purpose so that Gion can meet the requirements of laws, judgments or government decisions. Examples of such requirements are product liability and product safety such as the production of communication and information about product alarms and product recalls (eg in the event of a defective or hazardous product) and obligations to store certain information under the Accounting Act that can be attributed to an individual. If the information that Gion collects in the course of this purpose is not provided, our legal obligation can not be fulfilled and in that case we can deny you the order, purchase or the activity that gives rise to our legal obligations.
i) Prevent abuse of Gion accounts and prevent, deter and investigate crimes within the framework of our activities and to establish, defend or assert legal claims
The processing of personal data for this purpose takes place, among other things, to prevent misuse of Gion accounts and to prevent and investigate suspicions of theft and fraud. In our physical stores we therefore have camera surveillance and when you want to pay for goods on invoice, we therefore carry out a fraud check where we analyze which products you want to buy, delivery address, value of the products, etc. We flag action patterns that often occur in connection with fraud and thereafter. a manual test is carried out to examine the risk that there may be an attempt at fraud. Suspected crimes and attempted crimes may be reported to the police.
j) Evaluate, develop and improve Gion’s services, products and systems for our customers in general
In order to fulfill this purpose, Gion performs general analyzes in aggregate form, ie. not at the individual level, regarding, among other things, click and visit behavior, device information, order history, payment history, geographical location and individual customer feedback.
6. What are the legal grounds for our processing of your personal data?
In order for Gion to have the right to collect and process your personal data, there must be a legal basis for each purpose for which the data is processed. The legal bases on which we base our treatment are described in this section. Please note that several legal grounds may apply to the same treatment.
a) Legal obligation
This basis means that our processing is necessary to fulfill a legal obligation required of Gion, for example to document payment information to meet the requirements of the Accounting Act.
b) Contractual obligations
This basis means that the processing is necessary to fulfill an agreement with you as a customer or to be able to enter into an agreement at a later stage. For you who are the holder of a Gion account, you have, by accepting the Terms of Gion account, entered into an agreement with Gion which sets the framework for the processing of your personal data that can take place to provide, manage and administer our services that are linked to the Gion account, e.g. analysis of your personal qualities to give you personalized benefits and offers. When ordering or purchasing, we process your information to fulfill obligations in accordance with Gion’s general terms of sale. Then it can e.g. It may be necessary for Gion to register your contact information so that we can fulfill our obligation to deliver the product or service and that we make a credit report if you choose invoice as payment method so we can ensure your ability to pay.
c) Legitimate interest
This basis means that our treatment is based on a so-called balancing of interests of legitimate interest. This means that the processing takes place because Gion assesses that we have a legitimate interest in processing your personal data that outweighs your interest in not having the personal data processed. On this basis, we process, among other things, your personal data to prevent misuse of Gion account and to prevent, prevent and investigate crimes within the framework of our activities. If we judge that a crime or attempted crime has been committed and we make a police report, Gion will also continue to process your personal data so that we can establish, defend or make a valid legal claim.
d) Consent
This basis means that we process your personal data when you have given your express consent to our processing. For example, Gion obtains your consent to process personal data about allergies when ordering food before events. You have the right to withdraw your consent at any time. The revocation of the consent shall not affect the legality of treatment based on consent, before this is revoked.
7. How long do we store your personal information?
Gion will retain your personal data for as long as is necessary to fulfill the purposes for which the data is processed. The length of the storage period thus depends on the purpose for which the data is processed. In addition, Gion may save the data longer if necessary to establish, defend or assert a legal claim, e.g. if there is a dispute or if a report of a crime has been submitted to the Police Authority. We regularly perform thinnings and delete personal data that is no longer necessary.
8. Overview of our personal data processing
Below we have made a general summary of our processing of personal data to clearly explain which categories of personal data we process for our various purposes, which legal basis is the basis for our processing and how long we store the data.
| Purpose | Legal reason | Categories of personal data | Storage time |
|---|---|---|---|
|
To be able to handle your orders and purchases |
Contractual obligations under Gion's general terms of sale |
· Contact information |
Five years after your order has been paid for and delivered, or as long as a complaint about a defective product has not been completed. If the warranty period for the purchased product or service is longer, after that period has expired or as long as a warranty claim is ongoing. |
|
To provide and manage your Gion account |
Contractual obligations according to the Terms of Gion account |
· Contact information |
As long as you have a Gion account or as long as there is a legal claim. |
|
Provide customized information, benefits and offers and provide a personal experience when we communicate with you who do not have a Gion account |
Consent |
· Contact information |
Two years after you last clicked on a link in our communication to you. |
|
To provide information about and market products and services |
Legitimate interest |
· Contact information |
Two years after you last clicked on a link in our communication to you or as long as there is a legal claim. |
|
To implement and manage participation in events, competitions and other marketing measures |
Legitimate interest Consent (regarding allergy when ordering food) |
· Contact information |
One year after the event or competition has ended or as long as there is a legal claim. |
|
To handle matters that come in to customer service and other support functions |
Contractual obligation according to the Terms and Conditions for Gion account for you who are an account holder Justified interest for you who are not a holder of a Gion account |
· Contact information |
Five years after the last contact in the case, alternatively as long as a complaint of a defective product has not been completed. If the warranty period for the product or service to which the case relates is longer than five years, after the warranty period has expired or as long as a warranty claim is ongoing. Audio recordings of customer service calls and other support features are deleted after 20 days. |
|
To fulfill legal obligations such as requirements in the Accounting Act, product liability and protection of your personal data in our systems |
Legal obligation |
· Contact information |
As long as we are obliged to save the information in accordance with applicable law or government decision or as long as there is a legal claim. |
|
To prevent abuse of Gion accounts and to prevent, deter and investigate crimes within the framework of our activities and to establish, defend or assert legal claims |
Legitimate interest |
· Contact information |
Meanwhile, the necessary checks are performed. If the processing leads to a police report, the information will be stored for as long as is necessary to complete the report and establish, defend or assert the legal claim. Video recordings from our stores are saved for 8 weeks. |
|
To evaluate, develop and improve Gion's services, products and systems for our customers in general |
Legitimate interest |
· Contact information |
As long as you have a Gion account for you who are an account holder. Five years after you last interacted with Gion if you are not a holder of a Gion account, e.g. visited our website, logged in to a previous Gion account or clicked on a link in our communication to you or as long as there is a legal claim. |
9. Who do we share your personal information with?
9.1 Gion may disclose your information to other companies in order for you to take advantage of our offers, products and services. The recipients of your personal data can either be personal data assistants to Gion, ie. companies that process your data on our behalf and according to our instructions, or independent data controllers, ie. companies that are independently responsible for the processing of your data as they have a direct relationship with you as a customer such as Klarna.
9.2 Gion may also disclose your information to authorities if it is necessary to comply with law, regulation or government decision or for Gion to be able to establish, defend or assert legal claims.
9.3 Depending on what contacts you have had with Gion, e.g. if you are a holder of a Gion account or receive marketing communications, Gion may disclose your personal information to the following recipients:
- Other companies within the Gion Group that act as personal data assistants to Gion in order for us to be able to fulfill the various purposes stated in this policy. The legal grounds for the transfer to our Group companies are the same as for our own processing.
- Companies that provide information from the population register or other public registers to ensure that we have the right contact information for you so we can handle your orders and purchases as well as your Gion account and the services linked to your account holdings. The information provided is identification number and contact information based on our contractual obligations to you as a legal basis.
- Analysis and marketing companies that provide services such as automated marketing tools, analytics, communications, printing and distribution. These recipients help Gion analyze your information and inform and market the products and services that Gion sells. The information provided is contact information, account information, customer selection, order information and user-generated data based on legitimate interest as well as our contractual obligations to you as the holder of Gion account as legal grounds.
- Government agencies, such as the Police Authority or the Swedish Tax Agency, to which we are obliged to disclose your personal data in accordance with law or authority decisions or to which we disclose personal data due to suspicion of crime or attempted crime. The categories of information provided are contact information, identification numbers, account information, order information, payment information, user-generated data and video recordings based on legal obligation incumbent on Gion or for us to be able to establish, defend or assert legal claims.
9.4 If you place an order or make a purchase from Gion, we may also disclose your personal information to the following recipients within the framework of handling your orders and purchases based on our contractual obligations to you as a legal basis:
- Suppliers, manufacturers, distributors and subcontractors of products and services that Gion sells who, among other things, provide the products and services and help us with support services such as maintenance, repair and disposal of returned products. The information provided is contact information and order information.
- Logistics companies and freight forwarders who help us with goods transport so we can deliver our products and services to you. We provide contact information and order information to these recipients.
- Insurers that provide insurance for some of our products and services. The information provided when you have chosen to take out insurance is contact information and order information.
- Partners and providers of payment solutions, e.g. card-redeeming companies, banks, credit institutions and other financial actors, who ensure that you can make payments and offer you various financing solutions. The information provided is contact information, identification number and payment information.
- Credit rating agencies, credit reporting companies or banks that provide us with data so that we can ensure your ability to pay, e.g. credit information, when you apply for credit within the framework of handling your orders and purchases. The information provided is the identification number.
- Companies that provide financial services such as ledgers and debt collection operations that ensure that Gion is paid for delivered products and services within the framework of handling your orders and purchases. The information provided is contact information, identification number, order information and payment information.
9.5 Gion will not sell your personal information to third parties unless we have your permission to do so.
10. Where do we store your personal information?
Gion will mainly handle your personal data within the EU / EEA. However, we may also transfer your personal data to a country outside the EU / EEA if we need to share your data with Gion‘s suppliers or partners who are outside or store personal data in a country outside the EU / EEA. If your personal data is transferred to any country outside the EU / EEA, Gion will take the necessary steps to legally transfer the personal data by ensuring that your personal data is handled securely and with an adequate level of protection comparable to the protection offered within the EU. / EEA, for example by entering into an agreement with the recipient that includes the European Commission’s standard agreement clauses.
11. What are your rights as a registered customer?
11.1 Gion is responsible for ensuring that your personal data is processed in accordance with applicable law. This section describes your rights related to our processing of your personal data. We will, at your request or on your own initiative, correct, de-identify, delete or supplement information that is found to be incorrect, incomplete or misleading. If you have any questions about this or want to exercise any right, please contact us at the information provided at the bottom of this policy.
a) The right to access your personal data
We at Gion want to be open about how we process your personal data. If you want to gain insight into the processing that we do about you, you have the right to request information about the processing, including a copy of your personal data that is being processed, a so-called register extract. This includes information on purposes, categories of personal data, categories of recipients of personal data, storage period or the criteria for determining storage period, information on where data has been collected and the existence of automated decision making including information on the logic behind and meaning of processing. Please note that in the event of a request for access, we may ask for additional information about you to ensure that we disclose the information to the right person and what information you want to receive.
b) The right to correct your personal data
Gion is committed to having accurate and up-to-date personal information. If the information we have about you is incorrect, you have the right to request that it be corrected. You also have the right to supplement any incomplete personal information, e.g. if we have the correct street address but no street number. At your request, we will as soon as possible correct the incorrect or incomplete information we process about you.
c) The right to delete your personal data
We respect that the personal data we process about you is borrowed from you. You therefore have the right to request that Gion delete your personal data when the data has been processed illegally, must be deleted in order to fulfill a legal obligation to which Gion is subject, are no longer necessary for the purposes for which they have been processed or when you object to a balance of interests of legitimate interest that Gion has made and there is no legitimate interest for Gion or a third party that weighs heavier (see section f below) for information on the right to object). However, we can not always meet your request as there may be reasons that give us the right to continue the treatment, e.g.
d) Right to data portability
You have the right to receive a copy of the personal data that concerns you in a structured format and in some cases to have the data transferred to another personal data controller. However, this right only covers information that you yourself have provided to Gion and which we process with the support of consent or contractual obligation towards you as a legal basis.
e) Right to limitation of treatment
You have the right to request that our processing of your personal data be restricted in certain situations, which means that the data may only be processed for certain purposes. You can e.g. request limitation of incorrect information once you have requested correction. While Gion investigates the accuracy of the information, its processing will be restricted. When processing is restricted, personal data shall only be processed, with the exception of storage, when the following are available:
A. The data subject has given consent to processing
B. Gion needs to exercise or protect himself against legal claims
C. To protect the rights and freedoms of another registered or legal person
D. For reasons of general importance to the European Union or Member State
f) The right to object to a particular type of treatment
When Gion processes your personal data based on a balance of interests of legitimate interest as a legal basis or for direct marketing, you have the right to object to our processing. An objection to Gion’s balance of interests can be made when you have personal reasons concerning the situation. In the event of such an objection, Gion assesses whether we have legitimate reasons for the treatment that outweigh your interest in protecting your privacy. If this is the case, Gion may continue to process your personal data even though you have opposed the processing. You can object to direct marketing and analyzes performed for direct marketing purposes without stating any reasons. You control this yourself through the settings on My pages, where you choose whether you want to receive marketing communication and personalized offers. In addition, you are given the opportunity to object to marketing for each individual digital mailing. If you object to direct marketing, we will stop processing your personal data for that purpose as well as all types of direct marketing measures such as sending newsletters and offers. If you only object to personalized offers, the marketing communication to you will be general, as we have difficulty assessing which marketing is relevant to you if we are not allowed to analyze your personal characteristics. Read more about how we adapt our offers and communication to your personal characteristics and how you oppose such treatment during If you object to direct marketing, we will stop processing your personal data for that purpose as well as all types of direct marketing measures such as sending newsletters and offers. If you only object to personalized offers, the marketing communication to you will be general, as we have difficulty assessing which marketing is relevant to you if we are not allowed to analyze your personal characteristics. Read more about how we adapt our offers and communication to your personal characteristics and how you oppose such treatment during If you object to direct marketing, we will stop processing your personal data for that purpose as well as all types of direct marketing measures such as sending newsletters and offers. If you only object to personalized offers, the marketing communication to you will be general, as we have difficulty assessing which marketing is relevant to you if we are not allowed to analyze your personal characteristics. Read more about how we adapt our offers and communication to your personal characteristics and how you oppose such treatment during as we have a hard time judging which marketing is relevant to you if we are not allowed to analyze your personal qualities. Read more about how we adapt our offers and communication to your personal characteristics and how you oppose such treatment during as we find it difficult to assess which marketing is relevant to you if we are not allowed to analyze your personal qualities. Read more about how we adapt our offers and communication to your personal characteristics and how you oppose such treatment duringTerms of Gion account .
11.2 If you think that we handle your personal information incorrectly, you are welcome to contact us. Contact information can be found at the bottom of this policy. You also have the right to submit any complaints regarding the processing of your personal data to the Privacy Protection Authority , which is the responsible supervisory authority for the processing of personal data in Sweden.
12. How do we protect your personal information?
You should always be able to feel safe when you submit your personal information to us. Gion has therefore taken appropriate technical and organizational security measures to protect your personal data against inappropriate or involuntary disclosure, use, unauthorized access, deletion, alteration or damage to your personal data. For example, all customer information is stored in a database that is protected by a firewall and access control, so only employees within Gion who need access to your information to perform specific tasks have such access.
13. Application and amendment of the privacy policy
13.1 The latest updated version of Gion’s Privacy Policy is always available on our website. Our privacy policy applies at all times in the form and to the content published on the website.
13.2 Gion reserves the right to update the Privacy Policy at any time. If the privacy policy changes, the updated policy will be published on Gion’s website. In addition, we may also inform you via e-mail if there are major changes to the privacy policy. If you do not want to accept the changed policy, you can terminate your Gion account by contacting customer service, see the contact information at the bottom of this policy.
14. Contact information
Do not hesitate to contact us if you have any questions about this privacy policy or if you want more information about our processing of your personal data or if any information would be incorrect and you want us to correct it.
- Are you a consumer? Please contact customer service on 08-525 66 02 or send an e-mail to legal@gion.se.
- Do you represent a company? Please contact customer service on 08-525 66 02 or send an e-mail to legal@gion.se.
- You can also reach our special employees who work with the processing of personal data via e-mail at dataprivacy@gion.se.