Caparica Invest AB, org. no. 556998-1755, Stormgatan 3, 504 64 Borås, Sweden ("Lenoites") processes personal data in accordance with applicable law, including the EU's data protection regulation.

The terms "we, our, our and us" below refer to Lenoites.

1. DATA PROTECTION OFFICER
Lenoites has appointed a data protection officer. The data protection officer has, among other things, to the task of monitoring that Lenoite's processing of personal data takes place in accordance with current legislation. To share contact information, email lenoites@lenoites.com

2. PERSONAL DATA PROCESSED
The data that is processed is personal data that you provide to us, that we collect from you and that we receive about you from others. Personal data that you provide to us When you complete a purchase, register for our newsletter, register a user account, take out insurance, use the services on our site, our social media or claim your rights under consumer law, you will provide personal data to us. Personal data that you provide to us and that we process can e.g. be your name, address, social security number, mobile and telephone number and e-mail address.

Personal data that we collect from you
When you make a purchase at Lenoites, when you contact us and when you use our site, your user account or social media (Facebook, Instagram), we will collect personal data about you. Such information is your name, date of birth, gender, contact information, customer information, IP address, operating system, information about the hardware and software you use, browser settings, time zone, data collected from cookies, information related to your contacts with us such as other recorded audio files, information about your browsing habits (such as geographical location, session time, which external pages you have previously visited, which pages and social networks you visit with us, your interests and information about your other use of our services and products), search - and purchase history, order number, which items you have visited or placed in our shopping cart, payment method and account balance and if you have purchased your item on credit, payment information, as well as your activity on our pages, social networks and on our site. Personal data about you that we receive from other Lenoites may receive e-mail and other correspondence that contains personal data about third parties and Lenoites therefore processes such personal data. If required, Lenoites will inform you as a third party about the processing.

3. WHY AND ACCORDING TO WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?
For customer service and customer relationship administration
We process name, address, social security number, mobile and telephone number, e-mail address, purchase history, order number, payment information and recorded audio files from your contact with us in order to provide you with good customer service and to administer our customer relationship with you. We will process your social security number in case you choose to use this to retrieve your address details. The legal basis for our processing of your personal data is that it is necessary for us to be able to fulfill our contract with you or to take steps before entering into such a contract, alternatively our legitimate interest in providing good service in the event that you are not a customer at our place. Our interest in processing your personal data for this purpose takes precedence over your possible interest in protecting your personal privacy.

If you do not provide the above-mentioned personal data, we will not be able to deliver our products to you or otherwise fulfill our obligations towards you.

For granting credit
We process information about you and your purchase to enable you to make purchases on credit. We will therefore process your customer number, your purchase history, credit information such as e.g. your granted credit and your social security number. The legal basis for our processing of your personal data is that it is necessary for us to fulfill our contract with you.

For marketing
We process name, mobile and telephone number, e-mail address, your activity on our pages, your purchase history, order number, data collected from cookies and information about your use of social media to send newsletters and promotional offers as well as reminders about goods that are left in your shopping cart to you via e-mail, SMS, "push messages" or post. The legal basis for our processing of your personal data when we send you newsletters is your consent, which we either obtain in connection with your registration as a user at Lenoites or in connection with your purchase of product(s) from our range. You give your consent by actively ticking one or more checkboxes on our site. You can similarly withdraw your consent by ticking off the checkboxes on our site. When we process your personal data to send you "push messages" with marketing, the legal basis is consent. You give your consent e by activating "push notifications" in your mobile phone and revoke your consent by disabling "push notifications" in your mobile phone. The legal basis for our processing of your personal data when we send you promotional offers and reminders about items remaining in your shopping cart is balance of interests. The processing is necessary for our legitimate interest in being able to market our products. Our interest in processing your personal data for the current purpose takes precedence over your possible interest in protecting your personal integrity.

For automated decision-making or profiling
In order to be able to develop our products, services and offers for you, we may automatically collect and analyze information about you. Such information is your name, date of birth, gender, contact information, customer information, IP address, operating system, information about the hardware and software you use, browser settings, time zone, information related to your contacts with us, information about your browsing habits, search and purchase history, order number, which items you visited or placed in our shopping cart, payment method and account balance and if you have purchased your item on credit as well as your other activity on our pages, data collected from cookies, social networks and our site. Based on the results of this analysis of your user behavior (so-called profiling), we then automatically provide you with customized information in the form of advertisements and offers that we believe you will perceive as interesting and relevant to you. There is currently no automated decision-making or profiling that would significantly affect you legally or otherwise. The legal basis for our processing of your personal data is balance of interests. The processing is necessary for our legitimate interest in being able to develop our business and, as far as possible, not to disturb you unnecessarily and to provide you with materials, invitations and offers that match your wishes and needs. Our interest in processing your personal data for the current purpose takes precedence over your possible interest in protecting your personal integrity.

For statistics
We process your customer number and other reference numbers for the purpose of making statistical compilations. The legal basis for our processing of your personal data is our legitimate interest in keeping statistics and thereby developing our business. Our interest in processing your personal data for this purpose therefore takes precedence over your possible interest in protecting your personal integrity.

For handling complaints, returns, etc.
We process name, address, mobile and telephone numbers, e-mail address and purchase history in order to be able to handle your possible request to return products or assert your rights as a consumer to assert liability for errors and delays against us. The legal basis for our processing of your personal data is that it is necessary to fulfill legal obligations incumbent on us under consumer legislation.

For accounting
We process information about the transaction that took place between you and Lenoites for accounting purposes. We process information about the purchase, name, address, mobile and telephone number and e-mail address. The legal basis for our processing of your personal data is that it is necessary to fulfill a legal obligation incumbent upon us.

4. TO WHOM DO WE PROVIDE THE PERSONAL DATA AND WHERE DO WE PROCESS THEM GEOGRAPHICALLY?
Your personal data may be disclosed to and processed by companies that are part of the Lenoites Group.

Lenoites may also disclose your personal data to third parties. Examples of third parties to whom we may disclose your personal data include freight forwarders in connection with the delivery of goods, media agencies for the distribution of newsletters, marketing partners, credit reference or collection agencies for credit information checks and law firms for handling legal issues in our Operation. If you make a purchase on credit, we may also disclose your personal data to Resurs Bank AB. If you purchase a product covered by insurance, we will disclose your personal data to the relevant insurer. All of these actors are independently responsible for their processing of your personal data.

Lenoites may disclose your personal data to service providers and partners who process personal data on our behalf, so-called personal data processors. We have agreements with our personal data processors which ensure that they process your personal data in accordance with this personal data policy and our instructions.

Lenoites may disclose your personal data to authorities that require Lenoites to disclose such personal data. Lenoites may also disclose your personal data to allow a merger, one for acquisition or sale of all or part of Lenoite's assets.

As a general rule, Lenoites processes your personal data only within the EU and EEA. Should personal data be processed outside the EU and EEA, we ensure that your data is protected in an equivalent way as if it had been processed within the EU/EEA through standard contractual clauses that we have entered into with these actors or other appropriate security measures. A copy of the standard contractual clauses can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

5. HOW LONG DO WE PROCESS PERSONAL DATA?
We only process personal data for as long as is necessary for the purposes for which the data was provided or collected. The same personal data can be stored in several different places for different purposes. This may mean that data that has been removed from a system because it is no longer necessary for that purpose, may remain in another system for another purpose where the personal data is still needed.

Personal data that we process for customer service and to administer your customer relationship is processed for the time it is necessary for us to be able to fulfill our agreement with you or as long as we have a legitimate interest in processing the data. Recorded conversations with you are processed for three months.

Personal data that we process to enable credit is processed for the time it is necessary for us to be able to fulfill our agreement with you.

Personal data that we process for marketing in the form of newsletters and "push messages" is processed until you withdraw your consent, deregister or otherwise ask us to stop contacting you. In connection with this, we will also, to the extent possible, delete the personal data that we process about you related to automated decision-making and/or profiling. Personal data that we process for marketing purposes other than newsletters and "push messages" are processed during the customer relationship and one year thereafter.

Personal data that we process to keep statistics is processed until relevant accounting material has been deleted, more specifically for seven years.

Personal data that we process to fulfill our legal obligations towards you, e.g. fulfill guarantee, complaint or right of withdrawal commitments, are processed during the time that we have these legal obligations according to law.

Personal data that we process for accounting purposes is processed for seven years in accordance with current accounting legislation. Your personal data may be saved longer than stated above if it is necessary to comply with legal requirements, regulations or authority decisions.

6. YOUR RIGHTS
When we process your personal data, you have certain rights according to law. Please note that the exercise of these rights is subject to certain requirements and conditions which are further specified in law (EU Data Protection Regulation). Right to information, access, correction, deletion, restriction, etc. You have the right, free of charge, to request in writing information about which personal data we process about you. You can request corrections of incorrect information at any time and you can also have the right to ask us to delete the personal data we have registered about you and request that we give you a copy of your personal data. You may also have the right to request that processing be restricted. You may have the right to restriction, for example, if you have objected to our processing of your personal data or if you have requested correction and you want to limit our use while we check whether the personal data is correct. If you have no basis for your request or if your request is unreasonable, e.g. if you request extracts or deletions frequently and at short intervals in between, we have the right to refuse to comply with your request or to charge a fee that covers the administrative costs your request entails.

Right to data portability
You may have the right to obtain the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format and have the right to transfer this personal data to another personal data controller. Right to object to direct marketing You can object at any time to your personal data being processed for direct marketing or profiling for such purposes. If you do not want us to process your personal data for this/these purposes, please let us know by contacting us at our contact details listed below, see point 7. We will then cease processing your personal data for this/these purpose and delete the personal data, provided that we do not need to continue processing it for any other purpose in accordance with this personal data policy. Right to file a complaint If you are dissatisfied with how we have processed your personal data, you can also contact us on our contact details according to point 7 below . You also have the right to submit a complaint regarding our personal data processing to:

The Privacy Protection Authority Box 8114
104 20 Stockholm
imy@imy.se

If your complaint only relates to a company in another EU member state, you have the right to submit your complaint to the relevant data authority in this country. Here is a list of data protection authorities in other countries: https://edpb.europa.eu/about-edpb/about-edpb/members_en

7. CONTACT US
You can contact us in the following ways:
- by email: lenoites@lenoites.com
- by writing to Lenoites, Stormgatan 3, 504 64 Borås, Sweden