Privacy Policy

Privacy is very important for us at Wilma & Louise and we want to be open and transparent about our handling of your personal information. We therefore have a policy that determines how your personal data is processed and protected.

Who is responsible?

The swedish company, Wilma Cotton AB ("Wilma & Louise") is the data controller for the data you send to us and is responsible for your data according to current legislation and data protection regulations.

Wilma Cotton AB
Hustegavägen 1
181 90 Lidingö
Sweden

Company register: Bolagsverket
Organizational id: 559125-3793
Authorized representative: Louise Härntoft
VAT-NO: SE559125379301

Which personal data do we process?

We collect personal data when you (i) purchase products, (ii) sign up for news, invites and offers, (iii) request support and (iv) are browsing our website. Such personal data will include your name, e-mail address, telephone, delivery address, payment details, IP address, behavior on the website and other information that you voluntarily provide us.

Purpose, legal ground och storage period

We will only use your personal data for the purposes, and on the legal grounds, as set out below. We will not use your personal data for any purpose that is incompatible with the below purposes. Further, we will only use your personal data during the period as set out under "Storage period", after such which period your personal data will be erased.

Purchases

Purpose of processing: When you purchase products, we will process your personal data to fulfill our contractual obligations towards you (see Terms of Service).Our purchase form identifies what information you must provide to us, in order for us to complete your purchase.

Legal ground for processing: The processing is necessary for our performance of the contract with you (i.e. Terms of Service).

Storage period: We will process your personal data during the term of our contract (including two-year warranty period), we will thereafter erase your personal data. The storage period applies also to any unsuccessful purchase due to lack of funds on your account.

Direct marketing

Purpose of processing: When you sign up for news, invites and offers (direct marketing), we will process your personal data to provide the services as requested by you. Our direct marketing is based on profiling, which means that we will customize the information that you receive from us based on certain factors. We use the following types of personal data to compile a profile: your location, your previous purchases, your behavior on our website, and/or your previous behavior when receiving direct marketing from us.

Legal ground for processing: The processing is necessary for our legitimate interests to maintain good customer relations.

Storage period: If you opt-opt or unsubscribe from our marketing (including profiling), we will no longer process your personal data for this purpose. We will also erase your personal data, unless there is another legal ground for keeping your data (such as a valid purchase contract).

Support

Purpose of processing: When you request support through our live chat or our other support channels, we will process your personal data to be able to assist you with the relevant matter.

Legal ground for processing: The processing is necessary for our performance of the contract with you (i.e. Terms of Service).

Storage period: We will erase your data, within six months after the relevant matter has been finally resolved.

Checkout reminder

Purpose of processing: If you have initiated a purchase at our website and if you have provided your email address in connection therewith but have not completed the final step of your purchase, we will send you an e-mail with a link to your shopping cart for the purposes of reminding you of your uncompleted purchase.

Legal ground for processing: The processing is necessary for our and your legitimate interest to remind you of your uncompleted purchase.

Storage period: We will erase your data, within one month after checkout reminder, unless there is another legal ground for keeping your data (such as a valid purchase contract)

Using the website

Purpose of processing: When browsing our website, we will process your personal data to improve our website and for marketing purposes.

Legal ground for processing: The processing is necessary for our legitimate interests to improve our website and for retargeting. Please see more in our Cookie policy.

Storage period: Please see more in our Cookie policy.

Fraud prevention

Purpose of processing: We will process your personal data for the purposes of carrying out risk analysis, fraud prevention and risk management.

Legal ground for processing: The processing is necessary for our legitimate interests to prevent fraud and to handle risks.

Storage period: We will erase any personal data used for this purpose on a six-month basis, unless there is another legitimate interest for keeping your data. Upon a purchase that has been cancelled due to fraud prevention, we will delete your personal data two years after the unsuccessful purchase.

Analysis of data

Purpose of processing: We will analyze your personal data, in order to compile aggregated tracking data (including to analyze visitors’ use of our sites by tracking information such as page views, traffic flows, search terms and click throughs).

Legal ground for processing: The processing is necessary for our legitimate interest to create statistics over time.

Storage period: We will anonymize all tracking data where this is technically possible. When your personal data has been anonymized, it will no longer be considered personal data under applicable data protection laws. 

Please note that the above storage periods do not apply to the extent Wilma & Louise is required to retain your personal data (partly or in full) under applicable mandatory law (e.g. accounting laws).

Who do we share your personal data with?

Only the people who need to process personal data for the purposes mentioned above have access to your personal data. We may need to allow our suppliers access to your personal data when they perform services on our behalf, mainly to deliver your products and provide support and maintenance of IT systems, storage services and marketing.

The personal data we collect are stored within the EU/EEA, but can also be transfered to and processed in countries outside EU/EEA. Any transfer of data outside the EU/EEA is made in line with data protection laws. 

When transfering data outside EU/EEA Wilma & Louise use contractual clauses of standard and privacy protection as protection in countries where the European regulation does not provide protection.

 

Your rights

You are entitled to the following rights under applicable laws:

  • The right to access: You may at any time request to access your personal data. Upon request, we will provide a copy of your personal data in a commonly used electronic form.

  • The right to rectification: You are entitled to obtain rectification of inaccurate personal data and to have incomplete personal data completed.

  • The right to erasure (“right to be forgotten”): Under certain circumstances (including processing on the basis of your consent), you may request us to delete your User Data. Please note that this right is not unconditional. Therefore, an attempt to invoke the right might not lead to an action from us.

  • The right to object: To certain processing activities conducted by the us in relation to your personal data, such as our processing of your personal data based on our legitimate interest. The right to object also applies to processing of your personal data for direct marketing purposes.

  • The right to restriction of processing: You may under certain circumstances request from us to restrict the processing of your personal data. Please note that this right is not unconditional. Therefore, an attempt to invoke the right might not lead to an action from us.

  • The right to data portability: You are entitled to receive your personal data (or have your personal data directly transmitted to another data controller) in a structured, commonly used and machine-readable format.

Finally, you also have the right to lodge a complaint with the supervisory authority in Sweden, which currently is Datainspektionen.

Data security

We employ appropriate technical and organizational security measures to help protect your personal data against loss and to guard against access by unauthorized persons. Appropriate security measures we have taken include implementing secure private connections, traceability, disaster recovery and access limitations. We regularly review our security policies and procedures to ensure our systems are secure and protected.

Contact information

If you have any questions relating to our handling of your personal data or our use of cookies or if you would like to invoke any of your rights under applicable privacy legislation, please contact us at:  hello@wilmalouise.com .

Changes to this privacy policy

If we change how we handle your personal data or how we use cookies, we will promptly update this website privacy policy and publish it on this website.

These terms was updated at July 1 2018