Policy on the processing of personal data
Last updated on March 6, 2025
The La Seniora Order App hereinafter referred to as the ”Application”, is provided by:
La Seniora AB, 559239-5031
Exportgatan 33
422 46 Hisings Backa
Sweden
- Introduction
La Seniora AB (hereinafter referred to as “we”, “us”, or the “Company”) is committed to protecting your privacy and ensuring that your personal data is processed in accordance with applicable Swedish data protection laws, including the General Data Protection Regulation (GDPR). This policy describes how we collect, use and protect your personal data as a data controller in connection with your use of the Application.
- Whose personal data do we use?
We process personal data of customers and employees who use the Application.
- How do we obtain your personal data?
Your personal data, which you have previously entered when registering on our website, is transferred to the Application from our ERP system.
- Why do we collect your data?
We will only use your personal data when authorised by law.
In accordance with GDPR, we will use your personal data in one or more of the following situations:
- When it is necessary to fulfil our contractual obligations with you;
- To manage your order and any complaints.
- For the delivery of our services.
- When necessary for our legitimate interests, provided that your interests and fundamental rights do not conflict with those interests;
- To enable communication with you as a user of the Application and to answer enquiries you may have about your order or about features of the Application.
- To provide, implement and improve our services, personal data also needs to be processed in certain other cases, e.g. we may need to analyse customers’ ordering habits for the purpose of providing customers with relevant information and perform marketing activities as well as for statistical purposes.
- To enable measurement of interest and improvement of services.
- Consent;
- To send newsletters, direct marketing, push notifications and special offers that you have opted in to receive.
- It is always possible to withdraw your permission by contacting us or by following the instructions embedded in such marketing.
Please note that we do not use automated decision-making (including profiling).
- What data do we collect?
In order to provide our services, we process the following personal data:
- Name
- Telephone number
- Email address
- Billing address
- Delivery address
- How long do we keep your personal data?
Your personal data will be retained by us for as long as necessary for the purposes for which it was collected and in accordance with applicable laws and regulations. It follows from the above that we will keep your personal data for as long as necessary to fulfil the purposes described in section 4 above, or as long as necessary to comply with our legal obligations.
When your personal data is no longer necessary for the purposes for which it was collected, we will take appropriate steps to ensure that it is deleted or anonymised in accordance with applicable data protection law. Anonymising your personal data means that we remove information that allows us or others to identify you.
- Who do we share your personal data with?
We have contracts with third parties that perform services on our behalf. These services include, but are not limited to, IT services such as cloud services, communication and storage services, payment and accounting services. Your personal data will hence be shared with such third-party service providers, all of which operate in the EU.
- Where do we store your personal data?
Your personal data will be processed and stored within the European Economic Area (EEA).
- How securely is your personal data stored with us?
We strive to ensure that your personal data is as secure as possible, both organizationally and technically. Our systems and various means of communication are secured to ensure that your personal data does not end up in the hands of others. Your personal data is secure with us. We also ensure that your personal data will only be used by employees who have received permission to do so. If you have any questions about the specific method of security, please contact us.
- What are your rights?
Under the GDPR, you as an individual have several important rights regarding your personal data. These rights give you more control over how your data is collected, stored and used. Below is a detailed explanation of your rights:
- Right of access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed. This allows you to be aware of what data we hold and how it is used.
- Right to rectification: If you discover that the personal data we hold about you is inaccurate, incomplete or out of date, you have the right to request that we rectify it.
- Right to erasure: You can request that we delete your personal data if there is no longer a legitimate reason to continue processing it. However, this right is not absolute and may be subject to certain exceptions.
- Right to restriction of processing: If you consider that the processing of your personal data is inaccurate, unlawful or no longer necessary, you can request a restriction of processing for a certain period of time. During the period of restriction and the investigation of the accuracy of the processing, we will keep your data, but not use it.
- Right to object: You have the right to object to the processing of your personal data if you believe there is a legitimate reason to do so. If you object, we will cease processing your data unless there are overriding compelling legitimate grounds for the processing which override your interests, rights and freedoms.
- Right to data portability: If you have provided us with your personal data with your consent or in the context of a contract and the processing is carried out by automated means, you have the right to request that we transfer your data to you or to another service provider in a structured and machine-readable format.
- Right not to be subject to automated decision-making: You have the right not to be subject to decisions based solely on automated processing, including profiling, unless it is necessary for the conclusion or performance of a contract, or unless there is a legitimate reason that overrides your interests.
To exercise these rights or if you have any questions or concerns about your personal data and how it is processed, please contact us using the contact details in section 11 of this policy.
It is important to note that your rights under the GDPR are designed to protect your privacy and give you more control over your personal data. We are here to help you understand and exercise these rights in accordance with applicable law.
You also have the right to lodge a complaint with the Data Protection Authority if you consider that our processing of your personal data does not comply with applicable law. You can find more information regarding this at www.imy.se.
- How can you contact us?
If you have any questions, comments or requests regarding our privacy policy or how we process your personal data, you are welcome to contact us at: [email protected]
- Changes to our GDPR policy
This policy may be amended and clarified over time. The, at each time, applicable version is always available on our website.