Privacy policy
Valid from 2018-05-25 (last updated 2024-08-28)
Privacy Policy Morakniv AB
Morakniv AB (hereinafter "Morakniv", "we", "our" and "us") appreciates that you take note of our privacy policy. In this privacy policy, we inform you about how we process your personal data and the rights you have regarding our processing of your personal data.
If you have any questions regarding Morakniv's processing of your personal data, wish to withdraw your consent or wish to exercise any of your rights, please contact us at morakniv
For information on how we handle cookies, please visit our Cookie Policy.
Processing of personal data
Personal data is any information relating to an identified or identifiable natural person, such as that person's name, address, telephone number or e-mail address. Our processing of personal data is carried out in accordance with the provisions of the Swedish Privacy Protection Act and the General Data Protection Regulation ("GDPR").
Data controller
Morakniv AB (org. no. 556035-0935) is responsible as a data controller for the processing of your personal data when visiting, purchasing and contacting us on our website, when interacting with us on our social media and when direct contact is made with us in any other way.
Parties who have access to your personal data
In addition to accessing your personal data, we share your personal data with:
- IT suppliers who process personal data for us (as data processors). This is done so that we can have an IT system that allows us to run our business in a functional way for users;
- Payment service providers that process your personal data so that they can process your payment for a purchase via our e-commerce;
- Carriers, who process your personal data for shipments and returns following a purchase via our e-commerce;
- Google, Meta (Facebook and Instagram) and Pinterest, which are the digital media we use to provide you as a customer with marketing;
- Google, which performs analysis through Google Analytics of how our website is used and therefore has access to your personal data when you use the website;
- Any other external partners that assist us in our marketing.
Sharing of personal data outside the EU/EEA
We and the parties with whom we share your personal data mentioned above generally only process your personal data within the EU/EEA. To the extent possible, we have anonymized personal data so that your personal data is not processed outside the EU/EEA.
However, exceptions apply in the following cases:
- When using our website, we use services from the parties Google, Meta and payment service providers that are wholly or partly based in a third country (USA) and your personal data will thus be shared outside the EU/EEA to these parties.
- On July 10, 2023, the European Commission decided that the United States achieves an adequate level of protection for the transfer of personal data through the so-called "EU-US Privacy Framework" and your personal data will be processed by parties certified under the said framework. The parties mentioned in the paragraph above have also taken safeguards to provide, as far as possible, a substantially equivalent level of protection for your personal data as in the EU/EEA.
Personal data processing in detail
Below we summarize the different situations in which we may collect personal data about you, what personal data we then process, what legal basis we have for the processing, and how long we store the data.
Communicate with us as a customer by email, via contact forms on our website or via our social media channels.
Personal data processed: Name, e-mail address. Also telephone number and address if you provide this yourself.
Legal basis for processing: legitimate interests. Our processing of personal data is necessary in order to communicate with you.
Storage period: Personal data is stored for as long as there is a need to manage the contact you have made with us. On social media, the personal data remains until you delete the comments and/or communications yourself (or they are deleted for another reason).
Matters related to our e-commerce - Buy
Personal data processed: Name, e-mail address, address, telephone number, order information, payment information, as well as customer login information in the form of username if you have an account with us.
Legal basis for processing: Performance of contract and legal obligation. The processing is necessary for the performance of the contract relating to your purchase and to comply with the requirements of consumer law.
Retention period: Personal data will be retained for as long as we need to carry out and complete the purchase process and to comply with applicable accounting legislation. If you have an account with us, the data is stored for as long as your account is active with us, which is until you ask us to close your account.
Matters related to our e-commerce - Customer service, complaints and similar
Personal data processed: Name, e-mail address, telephone number, order information. Also any other personal data that you provide in your communication with us.
Legal basis for the processing: Legal obligation, performance of contract and/or balancing of interests. The processing is necessary for us to be able to fulfill our agreements with you, fulfill requirements under consumer law and to be able to help you with your case in a satisfactory manner (balance of interests). In the event of a legal claim against us, we process the personal data to be able to handle and respond to this legal claim.
Retention period: Personal data related to customer service cases are stored for as long as we need to be able to help you with your case, but for a maximum of one year after the case is closed. Personal data related to claims is stored for as long as the claim is made or can be enforced against us.
Account on our website
Personal data processed: Name, email address, address, phone number, historical order information, payment information, customer login details.
Legal basis for processing: Performance of contract. In order for us to create an account for you, we need to process your personal data.
Retention period: Personal data is stored for as long as you have an active account with us.
Marketing - Personalized offers and invitations to events
Personal data processed: Name, e-mail address, address, telephone number.
Legal basis for processing: Balancing of interests.
Retention period: Personal data is stored for one year from the collection of the data. You can opt out of receiving marketing from us at any time (see "Marketing - Request not to receive marketing").
Marketing - Personalized offers from us displayed on other websites
Personal data processed: IP address, geographical location, name, telephone number, address, date of birth, email.
Legal basis for processing: Consent. We obtain your consent in order to provide you as a customer or potential customer with customized marketing from us on pages provided by Google, Meta (Facebook and Instagram). You can withdraw this consent at any time.
Storage period: 12 months.
Marketing - Newsletter
Personal data processed: E-mail address.
Legal basis for processing: legitimate interests. The processing of your personal data is necessary to enable you to receive our newsletters.
Retention period: Until you unsubscribe from our newsletters or otherwise notify us that you do not wish to receive newsletters.
Marketing - Request not to receive marketing
Personal data processed: E-mail address.
Legal basis for processing: Legal obligation. We are required by the Marketing Act to ensure that we do not send you marketing that you do not want from us.
Retention period: Until further notice in a separate marketing deregistration register.
Communicating as a supplier, reseller or partner (and potential ones) with us via email, via contact forms on our website or via our social media
Personal data processed: Name, e-mail address. Also telephone number, professional title, address and other personal data about you if you provide it yourself.
Legal basis for processing: Balancing of interests. The processing is necessary in order to
conclude and negotiate contracts and communicate with you as a representative of your company
Retention period: If we do not enter into a contract with you/your company, we will keep your personal data up to a maximum of three years after our last contact. If we enter into a contract with you/your company, we will store your personal data until the contract ends.
Analytics on our website through Google Analytics
Personal data processed: IP address, geographical location, information held by Google about the websites you visited before visiting our website.
Legal basis for processing: Consent. We ask for your consent for Google Analytics to collect data about you when you visit the website. You can withdraw this consent at any time.
Storage period: The personal data is stored by us for 12 months. Google continues to process your personal data as an independent data controller.
Your rights in relation to the processing of personal data
You always have certain rights when processing personal data, which we list below. You can also visit the Swedish Authority for Privacy Protection to read more about your rights here. If you wish to exercise any of your rights, you are welcome to contact us at morakniv
- Right to erasure
You have the right to contact us and ask us to delete your personal data. Provided that no permitted exception for personal data processing exists, we will then delete your data.
- Right of rectification
You have the right to contact us and ask us to rectify inaccurate personal data concerning you. You also have the right to have relevant personal data that we do not hold completed.
- Right of access
You have the right to obtain confirmation as to whether or not we are processing your personal data. If we are processing your personal data, you also have the right to receive a copy of the personal data and information about this processing and how the data is used by us.
- The right to restriction
You have the right to request that the processing of your personal data be restricted in certain cases. An example of such a situation is if you have objected to a particular processing operation we are carrying out. While we are investigating whether our interest outweighs your interest in not having your personal data processed, you may also have the right to have the processing restricted.
- Right to transfer your personal data
If you have consented to provide your personal data to us or if you have provided the data in the context of a contract with us, you can request the data. In addition to requesting the data, you may also request that your personal data be transferred to another controller to the extent that this is technically feasible for us.
- The right to object
You have the right to object to our processing of your personal data where that personal data is processed by us on the basis of a balance of interests. For example, you may wish to object to direct marketing that we carry out in relation to you, which you always have the right to refuse.
- Right to information
The right to information means that you should be informed about the personal data processing we carry out both when the data is collected and if you request it. If something happens to your personal data that could adversely affect you, you also have the right to receive information about this from us.
- The right to complain to the Data Protection Authority
You have the right to lodge a complaint with the competent supervisory authority if you find that our processing of your personal data is in breach of applicable law (GDPR). The Swedish Authority for Privacy Protection is the competent supervisory authority in Sweden and can be reached via their website https://www.imy.se/.
Changes to the privacy policy
Morakniv reserves the right to change the privacy policy at any time. The date of the latest version is shown at the top of the privacy policy.
Contact us
If you have any questions about our privacy policy, please contact us at morakniv