When you shop with us, we primarily process your personal data for the purpose of completing your purchase and fulfilling the obligations that ensue from our contract with you as our customer. When you are a member of our customer club, we process your personal data primarily for the purpose of fulfilling our obligations towards you in accordance with the member terms & conditions, e.g. to reward you for your purchases, as well as to send personalised special offers and information to you and your social channels.
Below we describe in more detail how and why we process your personal data, as well as how you can influence our processing of your personal data. We also describe whether you are obliged to provide us with the data, where the data comes from, and to whom and where we transfer your data.
Table of contents
- Who is the controller of your personal data?
- Detailed description of how we process your personal data
- From whom do we collect personal data about you?
- Who has access to your personal data?
- Do we share your personal data outside the EU/EES?
- What rights do you have to influence how we process your personal data?
- How do we balance interests when the lawful basis is our legitimate interest?
NK Retail AB, with Company Registration Number 559268-4103, is the personal data controller when we process your personal data for our own purposes.
If you have any questions concerning our processing of your personal data, or if you want to exercise any of your rights that we describe under the heading “What rights do you have to influence how we process your personal data?”, you are welcome to contact us via our email address [email protected] or by calling +46(0)8 410 520 20. Our postal address is Drottninggatan 33, Box 161 42, SE-111 51 Stockholm, Sweden.
Please note that our Terms of Purchase apply to your purchase and that our member terms & conditions apply to your membership of our customer club.
Here you can read in more detail about why we process your personal data, which categories of personal data we process and what the lawful basis for processing is. You can also read about our retention periods for storing your personal data.
We need to process information about you in order to complete your purchase. If you do not specify your information, we will not be able to complete your purchase from us. We also need to process your information in order to comply with statutory or other requirements, such as the Swedish Bookkeeping Act’s requirement to keep records.
In addition to the above, your personal data is also processed by payment service supplier Klarna in order to complete your payment. Klarna is an independent personal data controller for your processing and informs you separately about how your data is processed.
In order to create and fulfil what ensues from your membership in our customer club, we need to process your personal data. If you do not provide your personal data to us, we will not be able to create or administer your membership. This means that if you do not want to specify this information, you cannot be a member of our club.
On the basis of your member profile, we will also market our products to you in your digital channels (known as “profiling”). If you do not want marketing from us, you always have the right to opt out of it. Read more about your rights below.
To be able to communicate with you, we must process certain information about you. If you do not want to provide us with this information, it will not be possible for us to manage your case and answer your questions.
We process certain personal data so that you as a customer feel an enhanced sense of security when you shop with us, both on our e-commerce sites and in our stores. We also do this in order to fulfil our legal obligations and manage claims, as well as prevent crimes against our customers, our employees and our company.
The personal data that we process about you is primarily information that you yourself have chosen to provide to us.
When you become a member, we also obtain information from a third party in order to acquire your population register address.
When you get in-store assistance to place an order for items currently out of stock in that store, we obtain information about your name, your contact details and your population register address from an external party, on the basis of your postcode and the email address that you specify, to enable us to deliver items to your nearest collection point.
You can choose to provide your Swedish Personal Identity Number to enable us to obtain the information that is necessary to complete the purchase from our payment service supplier, i.e. your name, your contact details and your population register address.
Our payment service supplier assesses which payment options will be offered to you when you buy online, based on personal data previously provided to our payment service supplier.
When you become a member of the Man of a kind customer club, we will obtain information from your Facebook profile if you choose to create your membership using your Facebook profile.
Your personal data is processed primarily by us at Man of a kind but we also share your personal data with our external IT suppliers, so that we are able to manage our obligations to you and run our business. Our IT suppliers only process your personal data on our behalf and only have access to the data in order to fulfil their obligations towards us.
In addition to this, we share your personal data with certain categories of receivers in order to fulfil our obligations towards you in a good and effective way, read more below. If you would like more detailed information about with whom we share your data, you are welcome to contact us.
When you shop online
For the purpose of managing your purchase, we will share your personal data with the payment service supplier we use in order to manage the payment;
For payment by invoice (credit), the payment service supplier may run a credit check;
To be able to deliver your items to your home or to a collection point, as well as to be able to manage any returns, we will share your personal data with the carrier that you have selected at the checkout.
When you are a member of the Man of a kind customer club
To be able to market our products to you in your digital channels, we share your personal data with the digital marketers that provide the marketing services; and
To be able to pay out remuneration to the partners that have marketed the product(s) that you then have bought.
Man of a kind uses IT suppliers who, on our behalf and according to our instructions, process and therefore transfer your personal data outside the EU/EES. We only transfer your personal data outside the EU/EES if we have support for this transfer under the EU’s General Data Protection Regulation (GDPR).
When we transfer your personal data outside the EU/EES, we will make sure that this is done in compliance with the relevant statutory and regulatory requirements for data protection. This means that the transfer can be based on e.g. EU Commission decisions, standard contract clauses or Privacy Shield.
If you have any questions about how we share your personal data or if you would like a copy of the appropriate safety precautions that we have taken, you are welcome to contact us.
Withdrawing your consent
If you have consented to allow us to process your personal data, you have the right at any time to withdraw all or part of the consent that you have given. The withdrawal of your consent, however, will have no effect on our processing of your personal data for the period before the withdrawal occurred.
Right of access
Right to rectification
You also have the right to get inaccurate personal data rectified without unnecessary delay, as well as to have incomplete personal data completed by providing that information. If you have a Man of a kind membership, you also have the option of changing your personal data by logging in to My Pages.
Right to erasure (the right to be forgotten)
In certain circumstances, you have the right to request erasure of your personal data. These circumstances exist if:
the personal data is no longer necessary for the purposes for which it was originally collected or processed;
if you withdraw your consent on which the processing is based and there is no other lawful basis for the processing;
if you object to processing and there is no legitimate reason to continue the processing that overrides your legitimate reason to not continue;
when personal data has been processed unlawfully; or
if the personal data must be erased in order to fulfil a legal obligation with which Man of a kind must comply.
Man of a kind erases your personal data on your request, on condition that Man of a kind is under no legal obligation to store the personal data to comply with relevant statutory and regulatory requirements.
If you are a member of our customer club, we will erase your personal data without your request if you have not made a club purchase for 24 months.
Right to restrict processing
In certain circumstances, you have the right to request that the processing of your personal data be restricted. These circumstances exist if:
you contest the accuracy of the data (but only during a period that gives us a chance to verify the data);
if the processing is unlawful and you oppose erasure and request a restriction on the use of the personal data instead;
you need the personal data in order to exercise or defend a legal claim, despite the fact that we no longer need the personal data for our processing purposes; or
if you have objected to our processing and we have not yet verified whether our legitimate interest in processing your personal data overrides your legitimate reason for restricting the processing of your personal data.
Right to object to processing
You have the right to object to the processing of your personal data at any time, based on a balance of interests. But this will not apply if we can show compelling legitimate reasons for processing that override your interests, rights and freedoms, or if processing is carried out in order to establish, exercise or defend legal claims.
You also have the right to object to processing of your personal data for marketing purposes. This means that you have the right to say no to newsletters and other marketing mailshots from us. If you object to marketing, your personal data will no longer be processed for such purposes.
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority (without prejudice to any other administrative or judicial remedy). A complaint of this kind is best made to the supervisory authority in the EU/EES Member State where you have your habitual residence, where you work or where the infringement of the relevant statutory and regulatory requirements for data protection is alleged to have occurred. The supervisory authority in Sweden is the Swedish Data Protection Authority.
Right to data portability
In certain circumstances, you have the right to receive the personal data that you have provided to us in a structured, commonly used and machine readable format; you also have the right to transfer these to another personal data controller (data portability). The right to data portability exists when:
processing is based on your consent or on a contract; and
the processing is carried out by automated means.
You have the right to transfer personal data directly from us to another personal data controller when this is technically possible.