Privacy Policy for Wera Welltech's Customers

1. Information about the handling of personal data

Fredrik Westergaard, our CEO and founder, is the data controller for the personal data collected and processed by Wera Welltech. If you provide information to one of our partners, for example via a link published on our web pages, the partner is responsible for your personal data.

Address: Wera Welltech, Mejerigatan 11, 621 45 Visby. Organization number: 559329-8622.

2. Responsibility for your personal data

See point 1 above for information about data controller responsibility.

3. What personal data does Wera Welltech collect?

We collect your personal data when you, for example, buy products, use services, contact customer service or sign up for our newsletter. Examples of personal data include full name, address, email address, phone number, personal identity number, payment information, purchase, order and usage history, IP address, and other case-related information, for example information you provide when contacting our customer service.

4. Why does Wera Welltech process your personal data?

• To handle your order: our purchase agreement with you is the legal basis, necessary for us to deliver, charge and refund.
• To handle customer service matters: our legitimate interest in helping you with questions or complaints, as well as with claims under applicable consumer legislation.
• To send marketing via email, SMS, post or social media: based on your consent when signing up for the newsletter, as well as our legitimate interest as an existing customer.
• To administer competitions and events: our legitimate interest in being able to follow up on entries and inform winners.
• To improve services, products and technical functionality: our legitimate interest in developing our website, app and webshop.
• To prevent misuse of our services: our legitimate interest in secure services.
• To respect requests not to receive unaddressed marketing.
• To fulfil legal obligations, for example product safety, government decisions or accounting requirements.

Wera Welltech only processes personal identity numbers when we need to ensure correct information about our customers.

5. Updating name and address information

You can log in to your user account yourself and correct incorrect information, or contact us for help with updates.

6. When we may share your information

We only share your personal data when it is a legal requirement or otherwise permitted by law, for example with data processors that help us with marketing or handle agreements and orders, such as freight and logistics companies, bank and credit card companies or marketing suppliers. We always have agreements with these processors that ensure protection of your data.

Transfer of personal data to countries outside the EU/EEA is minimized and occurs, when needed for example for system support, in accordance with particularly high requirements and agreements. We also share information with independent data controllers, for example authorities or payment solutions. If you register for a webinar co-organized with other suppliers, your information may be shared with them for follow-up on the event.

7. Storage and retention period

We keep your information for as long as necessary for the purposes for which it was collected, or as long as required by applicable law.

• Purchase and customer service matters: purchase, order and usage history is deleted 10 years after the transaction date. Customer service matters are kept until closed, or deleted no later than 8 years after the purchase transaction. Purchase history is used for marketing for 1 year, and you can always unsubscribe.
• Information collected after consent: kept for as long as relevant, but deleted continuously, no later than 5 years after collection. You can withdraw your consent at any time, and the data will then be deleted as soon as possible, no later than within 6 months.

8. Security of your personal data

Wera Welltech ensures that your personal data is handled in accordance with specific security measures that protect against unlawful or unauthorized access. Only the information and people needed to provide the best possible service have access to the data.

9. Your rights

You have the right to request a register extract to gain insight into the processing of your personal data; such a request must be submitted in writing and signed. You also have the right to request correction, deletion (to the extent permitted by law and agreement) and to object to our processing. Your personal data may not be processed for direct marketing or profiling if you object to it, and you can withdraw a given consent at any time.

10. Complaints and supervisory authority

If you believe we have handled your personal data incorrectly, you can always contact us. The Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten) is responsible for supervision under data protection legislation, and you can file a complaint there.

11. Contact us – privacy policy

If you have questions about how we use your personal data, you're welcome to contact our CEO via the contact form, email or phone.