We are committed to doing the right thing when it comes to how we collect, use and protect your personal data. Your privacy matters to us, so please do take the time to read this information which explains:
What types of personal data we collect and why we collect it. When and how we may share personal data with other organisations. The choices you have, including how to access and update your personal data. We have tried to keep this as simple as possible
To process your purchase, To market our services, To sign you up to receive newsletters and offers, To answer your questions about our services, To assess your application to join one of our teams. You have several rights according to data protection law. For example, you always have a right to object to marketing at any time. You can also read about how to affect our processing of your personal data – what rights you have.
Do you want to know more? Please read our detailed explanations below. Read more about how, why, and for how long a period we process your personal data.
WHAT DATA DOES LAPOINT STORE ON YOU?
In order to process your purchase, newsletter requests, applications to work, Lapoint may have your name, address, telephone number, birth date, email address, gender.
WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?
Lapoint Surfshop AB, Hamragårdsvägen 37, 439 51 Åsa VAT NR. SE 559 306 438 801), is responsible, in the capacity of controller, for the processing of your personal data when Lapoint processes your data for Lapoint’s own purposes, as further described below.
This policy explains how we process your personal data when you use our website.
If you have any questions regarding our processing of your personal data – or if you want to exercise any of your rights as described in the section of this policy called “How can you affect our processing of your personal data?” – please do not hesitate to contact us.
WHO PROVIDES US WITH YOUR PERSONAL DATA?
You or your parent or legal guardian have provided all the personal data that we process about you who use our website. We do not contact the 3rd party in order to gather information about you.
DO YOU HAVE TO PROVIDE YOUR PERSONAL DATA?
Generally, it is always you who decide what personal data you want to share with us. Nonetheless, some of your personal data is necessary for us to process to be able to carry out our purchase contract and fulfill our commitment to you. This includes information to be able to make an invoice, to deliver your purchase, and so on.
In the case when we act on your request, for instance, if you ask for a newsletter or buy something from us via our websites this applies. If you do not provide us with the necessary information, we will not be able to fulfill our commitments towards you according to your request.
WHO CAN GAIN ACCESS TO YOUR PERSONAL DATA?
Your personal data is only processed by Lapoint. However, your personal data will be shared with our suppliers when this is necessary in order to deliver the service you have requested or to execute your purchase contract with us, which you agree upon when confirming an order with us. We also use Klarna for payments, Mailchimp to send you newsletters, and Facebook and Instagram to answer your questions.
We use Klarna as the provider of our checkout. This means that we might transfer your personal data in the form of contact and order details to Klarna when the checkout is loaded, in order for Klarna to manage your purchase. Your personal data transferred is processed in line with Klarna’s own privacy notice.
HOW CAN YOU AFFECT OUR PROCESSING OF YOUR PERSONAL DATA?
According to data protection legislation, you are entitled to a variety of rights to affect our processing of your personal data. Read more below.
7.1 RIGHT TO WITHDRAW CONSENT AND TO OBJECT TO PROCESSING
You have a right to withdraw a given consent for the processing of your personal data. Your withdrawal will have an effect from the time of your withdrawal. Lapoint is given 30 days to process your request and deliver your data deletion confirmation (https://www.datatilsynet.no/rettigheter-og-plikter/virksomhetenes-plikter/legge-til-rette-for-rettigheter/).
7.1.1 YOUR RIGHTS OF DATA PROTECTION WITH LAPOINT
You have the right to object to our processing of your personal data. You have the right to object to marketing from us, such as newsletters. You have the right to ask for a full enclosure insight on what data we have on you The right to object generally is applicable when the processing is based on a balance of legitimate interests. Read more about what this means in the tables below.
7.1.2 WHEN DOES YOUR RIGHTS OF DATA PROTECTION NOT APPLY
The right to object does not exist if we must store your personal data to comply with other rules and regulations If we can show compelling legitimate reasons for the processing that weigh heavier than your interests and fundamental rights, such as a claim against you as a customer, criminal acts, insurance purposes, accident reports etc. If it is for the purpose of determining, practicing or defending legal claims you do not have a right to object to the processing.
7.2 RIGHT TO ACCESS
You have the right to obtain confirmation as to whether or not we are processing personal data concerning you.
We do not ask for or store any other sensitive information on you such as religious beliefs, sexual preference, political views, criminal record, and so on. You can gain access to the personal data and obtain a copy of the personal data processed by us at any given time.
7.3 RIGHT TO RECTIFICATION
You have a right to obtain rectification of any inaccurate personal data concerning you and to ask us to have incomplete personal data completed.
7.4 RIGHT TO ERASURE (“THE RIGHT TO BE FORGOTTEN”) AND RESTRICTION OF PROCESSING
Under certain circumstances, you have a right to request the erasure of your personal data. This is the case for example where the personal data is no longer necessary for the purposes for which they were collected or otherwise processed, or you withdraw your consent on which the processing is based on and where there is no other legal ground for continuance of the processing.
You also have a right to request that Lapoint restrict its processing of your personal data. That is the case for example when the accuracy of the personal data is contested by you, or the processing is unlawful, and you oppose the erasure of the personal data and instead request the restriction of its use.
7.5 RIGHT TO LODGE A COMPLAINT TO A SUPERVISORY AUTHORITY
You always have the right to lodge a complaint with a supervisory authority. You may do this in the EU/EEA member state of your habitual residence, place of work, or of an alleged infringement of the applicable data protection laws.
7.6 RIGHT TO DATA PORTABILITY
You have a right to ask us to transfer certain parts of your personal data we have about you to another company (data portability) in a structured commonly used, machine-readable and interoperable format.
This right applies to personal data that you have provided us if:
The processing is based on consent or on a contract, and The processing is carried out by automated means. In exercising your right to data portability, you have the right to have personal data transmitted directly from Lapoint to another controller, where technically feasible.
WHAT DATA, WHY WE PROCESS IT, AND THE LEGAL BASIS BEHIND IT
All processing of your personal data is done for the purpose of processing your purchase, sending you newsletters, as well as answering your questions and applications. Furthermore, our purpose is to market our services to you. You can read the details of how we process your personal data in the tables below. We do not collect any excess data that we don’t need to deliver our services and obligations towards you and your Lapoint purchase.
We never save data longer than we need to and only use your personal data for the purposes set out in this policy. After this time, we will safely remove your personal data. The same personal data may be stored in several different places for different purposes. This means that we may delete data from one system when it is no longer needed there, while the same data may continue to be stored in a different system where its purpose is still valid for that specific system. If data is needed after this period for analytical, historical, or other legitimate commercial purposes, we will take appropriate steps to anonymize the data so that it no longer constitutes personal data.
The personal data we collect via a purchase is stored in our customer database for five years. If you make a new purchase within five years of your return purchase date from the first purchase in question, information about previous products will be saved for another five years. Personal data is stored as a basis for market and customer analysis, for statistical purposes, and in order to provide you with a better purchase offer and better customer service.
The personal data is also stored in order to enable us to comply with the legal requirements with respect to the supervision in place for your purchases and in order to ensure that there is documentation of your purchase in the event of a complaint. In the event of complaints, some data may be saved for ten years in order for us to be able to defend ourselves against legal claims.
We do not share data with any 3rd party publishing tool. We do not resell your data for marketing purposes.
8.1 WHEN YOU USE OUR WEBPAGE
8.1.1 FOR WHICH PURPOSE TO WE PROCESS YOUR PERSONAL DATA?
8.1.2 WHAT PERSONAL DATA DO WE PROCESS?
When you use any of our websites, we collect data about your use of the service in question. Some of this data may be personal data, for example, your IP address if it can be linked to individuals. We also collect information about how you navigate in the relevant service, what searches you make and which products you are interested in. For more information about the type of data collected in connection with the use of our digital services.
8.1.3 WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
8.1.4 FOR HOW LONG WILL WE STORE YOUR PERSONAL DATA?
Until you delete your cookies in your browser
8.2 WHEN WE SEND YOU MARKETING INFO ABOUT OUR SERVICES
8.2.1 FOR WHICH PURPOSE TO WE PROCESS YOUR PERSONAL DATA?
To send you newsletters that you have signed up to To market our services to you.
8.2.2 WHAT PERSONAL DATA DO WE PROCESS?
Your name, phone number and email address. In order to determine which marketing that is relevant for you, we process information that you have shared with us or that we collect from you when using our website.
8.2.3 WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
8.2.4 FOR HOW LONG WILL WE STORE YOUR PERSONAL DATA?
Until you withdraw your consent or unsubscribe from our newsletters and marketing
8.3 WHEN WE ANSWER YOUR QUESTIONS ON ANY OF OUR CUSTOMER CHANNELS
8.3.1 FOR WHICH PURPOSE TO WE PROCESS YOUR PERSONAL DATA?
To answer the questions that you have asked us by email, chat, phone, whatsapp, facebook or instagram, or when filling in any of our forms
8.3.2 WHAT PERSONAL DATA DO WE PROCESS?
Information that you provide to us when asking questions, such as your name and your question. If you ask us to call you, we will process your name and phone number. If you send us an email with your questions, we will process your email address. When you Whatsapp us we will also be able to see your phone number. If you send us a chat we will only see your alias name given to you by the chat system, your location (city, country), and other information you choose to share with us in the chat
8.3.3 WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
Processing is necessary for the performance of our contract, i.e. in order for us to be able to answer your questions as requested and process your order as requested by you
8.3.4 FOR HOW LONG WILL WE STORE YOUR PERSONAL DATA?
For 12 months after we have answered your questions by mail, so that you can get back to us with further questions or wanting to move forward with an application. For 6 months if you have contacted us by phone, chat, whatsapp, instagram or Facebook.
8.4 WHEN YOU PLACE A PURCHASE ON OUR WEBSITE
8.4.1 FOR WHICH PURPOSE TO WE PROCESS YOUR PERSONAL DATA?
In order to be able to process your purchase, create an invoice.
8.4.2 WHAT PERSONAL DATA DO WE PROCESS?
Name, address, tlf.nr, country of residence, email, birth date, gender.
8.4.3 WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
Purchase contract To be able to deliver your services requested.
8.4.4 FOR HOW LONG WILL WE STORE YOUR PERSONAL DATA?
All data involved in a purchase and safe delivery we keep for 5 years for accounting reasons.
8.6 WHEN YOU SEND US AN APPLICATION TO BECOME PART OF OUR STAFF TEAMS 8.6.1 FOR WHICH PURPOSE TO WE PROCESS YOUR PERSONAL DATA?
To process your interest application to become one of our staff team we need to check your CV with work and study history
8.6.2 WHAT PERSONAL DATA DO WE PROCESS?
Your name, phone number and email address as well as any information you share with us in your application
8.6.3 WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
Your consent Processing is necessary in order to take steps, at your request, prior to entering into a legal work contract
8.6.4 FOR HOW LONG WILL WE STORE YOUR PERSONAL DATA?
Until we have processed your interest application or until 6 months
8.14 WHEN YOU CONTACT US VIA SOCIAL MEDIA 8.14.1 FOR WHICH PURPOSE TO WE PROCESS YOUR PERSONAL DATA?
WE ARE REPRESENTED ON SOCIAL MEDIA PLATFORMS SUCH AS INSTAGRAM AND FACEBOOK AND YOU HAVE THE OPTION TO COMMUNICATE WITH US ON THESE CHANNELS. WE USE THIS DATA ONLY TO PROCESS YOUR QUESTIONS SENT TO US VIA THESE PLATFORMS. WE STRONGLY RECOMMEND YOU TO CONTACT OUR CUSTOMER SERVICE LINE FOR ANY QUESTIONS AND/REQUESTS AS OUR SOCIAL MEDIA PLATFORMS ARE NOT SECURED.
8.14.2 WHAT PERSONAL DATA DO WE PROCESS?
PUBLIC SOCIAL MEDIA ACCOUNT INFORMATION FROM FACEBOOK PUBLIC SOCIAL MEDIA ACCOUNT INFORMATION ON INSTAGRAM
8.14.3 WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
YOUR CONSENT BASED ON YOUR CHOICE OF CONTACT MEDIA
8.14.4 FOR HOW LONG WILL WE STORE YOUR PERSONAL DATA ON SOCIAL MEDIA?
YOU ARE RESPONSIBLE FOR WHAT INFORMATION YOU CHOOSE TO SHARE ON OUR SOCIAL MEDIA PLATFORMS, INCLUDING FOR MESSAGES SENT TO OUR STAFF MEMBERS. IF YOU WISH TO DELETE YOUR ACTIVITY LOG ON SOCIAL MEDIA, PLEASE CONTACT US.
8.15 WHEN YOU ARE CONTRACTED AS AN INFLUENCER 8.15.1 FOR WHICH PURPOSE DO WE PROCESS YOUR PERSONAL DATA
For the purpose of writing contracts, planning and executing our part of the contract, and being able to contact the influencer again for new potential collaborations.
8.15.2 WHAT PERSONAL DATA DO WE PROCESS?
Name, date of birth, passport information, contact details.
8.15.3 WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
Agreed on by the Influencer in a contract.
8.15.4 FOR HOW LONG WILL WE STORE YOUR PERSONAL DATA?
Contracts saved for 10 years. Contact information for potentially more collaborations is saved for 10 years.