Data Protection Policy

Your personal data and how we handle it

When you trust Duearity with your personal data, it is important to us that you feel safe. We care about your personal integrity. Your personal data is processed with the utmost respect and in accordance with applicable legislation. This policy describes how we collect and process your personal data when you visit our website and use the services offered there. When you place your order or create an account, you agree that we save and use your information to complete and provide the service you can expect from us.

All personal data processing takes place in accordance with the Data Protection Regulation. The data controller is Circius Pharma AB Södra Långebergsgatan 34-36 SE-436 32 ASKIM SWEDEN.

What is personal data?

Personal data is information and data that can be directly or indirectly attributed to a living person. Examples of personal data are name, social security number, address, e-mail address and telephone number. It can also apply to customer numbers, encrypted data and various types of electronic identities such as IP numbers.

What personal data do we collect and receive?

Information you provide when you become a customer of Duearity
When you become a customer of Duearity, we collect your contact information: name, address, e-mail address, telephone number and, where applicable, social security number. We also collect information about the delivery method, possible delivery point and IP address. The purchase agreement that we have with you constitutes the legal basis for the processing of your personal data and is necessary for us to be able to fulfill our legal obligations and fulfill this agreement to you regarding, for example, delivery and payment.

Information collected during personal contact
When you contact customer service via, for example, e-mail, telephone, or chat, we collect the personal data that you provide to us. We do this to be able to answer the questions you have and to handle your case. This can be, for example, information about name, e-mail address and order number. We also collect information that you choose to provide to us regarding, for example, health conditions or medicines. If your request concerns a complaint, we will process your data in order to fulfill our obligations under applicable consumer legislation. We do this considering the legal basis based on our purchase agreement with you.

How do we use your personal data?

Fulfilling your agreement
We process your data to identify you as a customer, manage and deliver your order and to handle invoicing and payment. We also process your personal data to be able to help you if you contact us with questions, comments or, for example, a complaint.

Information about products and services
We use your personal data for e-mails with information about our products and services. You can at any time withdraw your consent to the receipt of newsletters, promotions and offers by contacting customer service or using the unsubscribe link provided in each newsletter. We will never disclose your information to unauthorized parties or sell it on to external parties.

With whom do we share the personal data?

Payment solutions. Legal basis: To be able to fulfill the purchase agreement.
In order to be able to charge, handle invoices and payments, we share information with Klarna and PayEx. Klarna and PayEx will collect personal data about you in connection with payment. Klarna and PayEx are the sole data controllers for this information in accordance with the companies' terms and conditions. See Klarna's terms and conditions or PayEx's terms and conditions.

Transport company/Freight company. Legal basis: To be able to fulfill the purchase agreement.
Our shipping companies take part of the personal data required to be able to fulfill and deliver your order.

Cookies/Google/Facebook. Legal basis: Interest.
We share analytics data via third-party marketing and web analytics cookies to improve our services. We do not register any information about the visitor's IP address, as the information about you can never be linked to your identity. We use the analysis tool Google Analytics to improve the content, navigation and structure of the website. The analysis tool uses JavaScript and cookies and the information about your use is anonymized. To avoid having your information saved, you can choose not to accept cookies in your website.

Direct marketing. Legal basis: Consent from the customer.
In order to be able to send you information about our products and services, we use an external CRM system where we store your e-mail address. You can cancel your subscription at any time, either via the link in the newsletter or by contacting our customer service.

Inbox. Legal basis: Interest.

When you use our chat and/or FAQ, personal data such as telephone number,  name, address, e-mail, IP number and the information you provide may be stored.

Authorities. Legal basis: Exercise of public authority and task of general interest.
On  the merits, we may be required by law and authority decisions to disclose certain personal data, for example to the Police in connection with a criminal investigation. On the same basis, we may also provide information to other authorities in Sweden.

Other. Legal basis: Interest.
Where applicable, we may transfer your personal data to recipients other than those listed above if it is necessary for ourbusiness. In all handling of personal data, the security and confidentiality of the matter are observed. We may also share information with potential buyers if we were to sell all or part of the business or in the event of a merger.

This is how we save your personal data

We save personal data if there is a legal basis, a documented purpose for the processing or a user relationship. We have ongoing routines  that ensure that we do not store unnecessary personal data and we minimize the storage time as much as possible. Normally, we save your customer information for a maximum of three years from your last customer contact. However, we save information needed under the Accounting Act, up to a maximum of time.

How we protect your personal data

We have put in place appropriate security measures to protect your personal data against loss, misuse and unnecessary. The number of people who have access to your personal data is limited. Only people with us who need to process your personal data have access to them. The suppliers with whom we share personal data will only process it on our behalf and do so in accordance with our instructions. We use industry standards to store, process and communicate sensitive information securely e.g. SSL/TLS, PGP and one-way hash algorithms.

You can access your personal data

You have the right to take part of which of your personal data is held by Duearity and request to have these deleted. Inorder to access  that information or delete your information, your application must be  in writing, contain your social security number and be signed by you. Send your application to Circius Pharma AB, Data Protection Officer, Södra Långebergsgatan 34-36 SE-436 32 ASKIM SWEDEN. The information or confirmation of deletion will be sent without undue delay to your registered address.

You can always use the unsubscribe link provided in all promotions, offers and newsletters we send to you. If your data is incomplete, incorrect or irrelevant, you have the right to request that it be corrected or deleted. You also have the right to request damages if the processing of your personal data has not complied with the law. Among the things that cannot be deleted are, among other things, data required by the Accounting Act and data required for Duearity to be able to fulfill its commitmentsin the event of e.g. complaints.

Cookies

Duearity uses cookies. Cookies contain information that we use to improve the website and to be able to provide our visitors with as good a service and experience as possible.

There are different types of cookies. Permanent cookies save a file on your computer to be able to adapt the website to your choices and will remember that you have visited us before and can therefore e.g. pre-fill your e-mail and postal code. These cookies are stored on your device for a certain period of time or until you choose to delete them. Session cookies are used while you are accessing the website and disappear when you visit your website. They are needed to be able to offer our basic services, which do not work without these cookies.  Duearity also uses cookies from third parties, such as Google Analytics and Facebook. The data collected by these cookies, including any personal data, is used for interest-based advertising and analytics. The respective third parties are responsible for the collection and processing of personal data from thecookies used. Duearity does not have access to the data collected.

Cookies are stored on your computer or mobile and can only be read by the website they come from. You can in your web browser to not accept cookies, but then the website will not work optimally. You do this in the settings. You can normally choose to completely block cookies, block third-party cookies, or ask the browser to delete all cookies when you close it.

Other
If you still believe that we are processing your personal data incorrectly, you should contact us. You also can submit a complaint to the Swedish Authority for Privacy Protection, which is the authority that supervises the processing of personal data.

Duearity entrusts the right to make changes to this Privacy Policy at any time, to the extent necessary to prevent disruptions or meet new legal and technical requirements. Any changes to this Privacy Policy will be posted on the Website. For further information onour personal data management, please refer to mathias.holmgren@circiuspharma.com.