Your privacy is important to Sweets Family AB ("Sweets Family" or "we"). When you interact with us in any way, it may involve the processing of your personal data by us. Examples of this include when you visit our website or use our mobile application. This privacy policy aims to describe why we need to process your personal data, when it occurs, and how we handle it.This privacy policy may be updated, and you can find the latest version on sweetsbycamilla.com. In the event of significant changes, Sweets Family AB will communicate the updated privacy policy to the email address you have provided.
Who is responsible for your personal data?
Sweets Family AB, organization number 559446-1732, ODELBERGS VÄG 9 B, 134 40 Gustavsberg, Stockholm, is responsible for the processing of your personal data. Sweets Family does not take responsibility for the processing of personal data performed by its partner(s), unless they act on behalf of Sweets Family for the provision of a specific process. During these processes, Sweets Family and its partners may be joint controllers for their respective parts, which means that this privacy policy only applies to the part of the process where Sweets Family is considered responsible for the processing of personal data. Below, we describe the purposes and processes for which Sweets Family may process your personal data in one way or another.
From whom or where do we collect your personal data?
Sweets Family only processes personal data that you voluntarily share directly with Sweets Family.You can always choose not to provide voluntary information to us. However, some personal data is necessary for us to provide you with certain services.
What personal data do we process?
We collect personal data when you (i) sign up for news and offers, (ii) place an order via the website, QR code, or mobile application, (iii) create a user account in our mobile application, (iv) join our customer club, (v) use our website or mobile application, (vi) make a reservation through our reservation system, or (vii) request support.Such data includes identity (first and last name), email address, phone number, geographical data, payment information, date of birth, IP address, website usage, and any other information that you voluntarily provide to us.Purposes, legal basis, and storage periodWe will only use your personal data for the purposes, and on the legal bases, stated below. Your personal data will only be used for the period specified under "Storage Period" – after this period, your personal data will be deleted. Generally, we save your personal data for as long as the personal data is necessary to fulfill the purposes for which we collected them. The personal data may also be retained for the period required by applicable law.
Direct Marketing
Purpose of the processing: When you sign up for our newsletter and offers (direct marketing), we process your personal data to provide the services you request.Categories of personal data: Identity (first and last name), email address, and phone number.Legal basis for the processing: The processing is necessary for our legitimate interest in maintaining good customer relations.Storage period: If you decline or unsubscribe from our marketing, we will no longer process your personal data for the stated purpose. We will also delete your personal data if there is no other legal basis for retaining them. We will also delete your personal data if you have not actively interacted with any of our direct marketing communications for twenty-four (24) months.
Order Processing
Purpose of the processing: When you place an order with us via the website, QR code, or mobile application, we need certain information to process and complete the order. To deliver your order, contact you with information about your order, and administer your payment, we process certain types of personal data.Categories of personal data: Identity (first and last name), email address, phone number, geographical data, and payment information.Legal basis for the processing: The processing is necessary for us to fulfill our contract with you.Storage period: Your personal data is stored until your order is completed by us.
User Account in the Mobile Application
Purpose of the processing: To administer your user account for the mobile application, and thereby fulfill our obligations, we need to process some of your personal data.When you, as a guest, use the mobile application, your personal data is processed by three (3) separate data controllers, each responsible for their respective part of the process. Sweets Family is the data controller for the processing of personal data required to receive, administer, and fulfill an order via the mobile application. The mobile application is provided by Caspeco AB, which, for this processing, acts as our data processor. This means that Caspeco AB, with regard to a food order, only processes your personal data according to Sweets Family's instructions. Reepay A/S is responsible for the payment solution provided through the mobile application and is therefore data controller for the processing of personal data required to handle a payment through the mobile application.Categories of personal data: Identity (first and last name), email address, phone number, geographical data, and payment information.Legal basis for the processing: We process your personal data to fulfill our contractual obligations towards you.Storage period: Your personal data is stored as long as you hold a user account and for twelve (12) months thereafter, to securely delete your account information. Upon request, the storage period can be shortened.Reports and statistics on an aggregated level, i.e., data that is not considered personal data, are retained indefinitely.
Customer Club
Purpose of the processing: To administer your membership in our customer club, and thereby fulfill our obligations, we need to process some of your personal data.To enable the provision of a customer club, Sweets Family collaborates with Piggy Netherlands B.V., which, in this capacity, acts as a data processor to Sweets Family. If you choose to join our customer club, Sweets Family will share your personal data with Piggy Netherlands B.V.We process your personal data to fulfill our contractual obligations towards you.Categories of personal data: To offer offers tailored to you based on our commitments in the customer club, our customer club is based on profiling. This means that we customize the information you receive from us based on certain factors. We use the following types of personal data to compile a profile: Identity (first and last name), email address, phone number, geographical data, date of birth, IP address, payment information, previous purchases, your behavior in our mobile application, and/or your previous behavior when you have received direct marketing directly from us. In addition to this personal data, it is also voluntary to disclose additional personal data to enable a complete profiling in accordance with the above.Legal basis for the processing: The processing is necessary for us to fulfill our contract with you.Storage period: Your personal data is only stored as long as necessary to maintain the purposes stated in this policy. This means that we will at least process your personal data as long as you use your user account for the customer club to maintain our legal obligations to you as a guest.If you no longer wish to be a member of our customer club, you can unsubscribe. Sweets Family reserves the right to retain your personal data for up to twelve (12) months after you unsubscribe to ensure the secure deletion of your personal data. Upon request, the storage period can be shortened.
Evaluation and Improvement of Customer Experience
Purpose of the processing: We collect and store IP addresses, geographical data, and other types of information about your use of our website and mobile application. We do this to adapt to the needs of our visitors but also to analyze trends and track visitor activity. Our ambition is to provide an improved version of our website and mobile application that is in line with our visitors' preferences.To enable a complete evaluation of our visitors' customer experiences, we may send surveys to you who have placed an order via the website, QR code, or mobile application, joined our customer club, used our reservation system, or registered for our newsletter, to collect your opinions on our products and services. Participating in the surveys is voluntary.For statistical purposes, we store information about the number of individual users we have on our website and mobile application, as well as how often these individual users visit our website and mobile application.Categories of personal data: IP address, geographical data, user-generated information from our cookies (e.g., clicks, viewed pages, visited products, time spent, orders, and average order value), and voluntary communication.Legal basis for the processing: The processing is based on the consent you give us when you accept our cookies for personalization and marketing. With regard to necessary cookies, our processing is necessary for our legitimate interest in providing you with a better product and experience. For more information about our use of cookies, read our Cookie Policy.Storage period: Your personal data is stored for twelve (12) months from the current logging event, or from the response date recorded in the survey.
Support
Purpose of the processing: When you request support via our support email, we process your personal data to assist you with the current issue.For the provision and implementation of web bookings, we use a booking service that mediates information between booker (guest) and us. The booking service is provided by Caspeco AB, which in this capacity acts as our data processor.Categories of personal data: Your name and email address, as well as other personal data you choose to disclose during our communication.Legal basis for the processing: If we perform this service due to our agreement with you, we consider the processing of your personal data necessary to fulfill the agreement with you. In other cases, we consider the processing of your personal data in the above context to be based on our legitimate interest in providing you with the best possible customer service.Storage period: We delete your information within twelve (12) months after the relevant issue has been resolved. If sensitive information has been disclosed for any reason (such as allergic reactions or other health information that you provide to us), this information will be deleted immediately after your issue is resolved.
Who do we share your personal data with?
Your personal data is primarily processed by us at Sweets Family, but to enable parts of the services offered and provided by Sweets Family, personal data may also be shared with third parties. These external parties may only process your personal data as data processors, which means that the processing may only take place on Sweets Family's instructions and for specific purposes. Please note that we do not in any way sell personal information to third parties.We may also share your personal data with other data controllers. Such data controllers may be authorities, courts, and legal advisors if we are legally required to share the data according to law or if there is suspicion of a crime. The same applies to purposes and processes where Sweets Family and external partners are responsible for their respective parts of a specific process.For more detailed information about who we may share your personal data with, please contact info@sweetsfamily.com.
Are the personal data transferred outside the EU/EEA?
No, Sweets Family only processes your personal data within the EU/EEA.Right to withdraw consent and object to processingAccording to applicable data protection legislation, you have specific rights regarding the processing of your personal data. You always have the right to completely or partially withdraw your consent for the processing of your personal data. Your withdrawal will be effective from the time you withdraw your consent.
