Privacy Policy

We at Dirty Peach Design AB (company registration number: 559339-3357), protect your personal privacy and we always strive to protect your data in accordance with legal requirements. In this privacy policy, you can read about how we collect and use your personal data.

This privacy policy describes the information Dirty Peach Design AB  processes and uses to support the website and other products and features offered by Dirty Peach Design AB (“DPD” or “we”, “us”, “our”). DPD processes personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. General Data Protection Regulation (“GDPR”) and any other Swedish laws and regulations applicable in the field of data protection. This privacy policy explains how we use the personal data that we collect from you (“Customer” or “you”) when you use our services as stated in our Terms and Conditions of Purchase [link to Purchasing terms]. It also describes your rights toward us and how you can exercise your rights.

This privacy policy and cookie policy apply to the purchase of new furniture on the website as well as any purchase of the rental of office furniture and equipment and the purchase of used office equipment and equipment.

DPD is acting as a data processor when it processes personal data on behalf of you. When DPD uses personal data for improvement of its own services and marketing, it is acting as a data controller. DPD hereby informs you of our use of your personal data in accordance with GDPR and the Swedish data protection law.

1.     Why do we collect your data?

We process your personal data to fulfill our obligations to you as a Customer of our service – such as purchases, rental of furniture and equipment, customer service, your account with us and invoicing.

2.     What data do we collect?

To ensure that the Customer has the opportunity to register its personal data securely on DPD's website, we collect the following data:

• Content and information that you provide including when you make an order, sign up for newsletters and fill in a form. This includes information in or about the content you provide (like metadata), such as the location or the date a file was created. That includes:
  
  a) your personal identification information such as name, phone number, address, e-mail and payment information,
  
  b) your usage of the website. We collect information about how you use our website and the frequency of your ; it includes features you use, the actions you take and the content you view.
  
• Device information: Dirty Peach Design AB collects information from your computers and phones that you use to interact with our products. This information includes:
  
  a) device attributes - that is, information such as the operating system, hardware and software versions, and file names and types,
  
  b) device operations - that is, information about operations and behaviors performed while using the website.
  

3. How do we collect your data?
   
   
   • You provide Dirty Peach Design AB with the data we collect when you:

1. a) view our website via your browser’s cookies,
   
   b) provide feedback on our website.
   

4. How will we use your data?
   
   
   • We use the data you provide us with in the following ways:
     
     a) to improve our products. By understanding how you interact with our products we can improve our features within the app and on our website,
     
     b) if you grant us permission to use your location when creating content, we can enhance your credibility by associating your geographical location with the experiences you share. Tracking your location serves to verify your identity, establishing a transparent link between the information you ,
     
     c) DPD does not sell your information for ad purposes or partner with for profit companies to sell services.
     
5. What legal grounds do we have for storing your personal data?
   
   
   • Dirty Peach Design AB will only process data if we have a lawful basis for doing so. We adhere to a stringent policy on the processing of personal data, ensuring that such processing aligns with a lawful basis. Our privacy policy is designed in accordance with the General Data Protection Regulation (GDPR), the European legal framework, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
     
   • Consent - In the event that Dirty Peach Design AB sees the need to process your personal data for a purpose that is in accordance with applicable laws and regulations (based on Art. 6(1)(a) GDPR), this shall be based on your consent. We will then contact you to inform you of the processing for which your consent is required before the consent is collected. You can withdraw your consent at any time.
     
     
     • The legal ground for our use of cookie files, which are not necessary but can be classified as , to provide the services, on your explicit consent, cf. (Art 6(1)(a) GDPR). Please read more under the section of “What are ”.
       
   • Fulfilment of contract - To fulfill our contract with you such as to provide our services, to respond to your inquiries or a customer service request. The legal basis for this is that the processing is necessary to fulfill a contract to which the data subject is a party or to take measures at the request of the data subject before entering into a contract (Art. 6(1)(b) GDPR).
     
   • Complying with legal obligations - Complying with legal obligations to report to authorities and third parties means that the legal basis for the processing is necessary to fulfill a legal obligation to which the data processor and the personal data controller are subject (Art. 6.1(c) GDPR). DPD may process personal data in connection with claims management, debt collection and legal processes. We may also process personal data to prevent fraud, misuse of our services and for data, system and network security.
     
   • Legitimate interest - DPD processes your personal data primarily to pursue our legitimate interest in operating, maintaining and developing our website. We may contact you by email, letter or newsletter to inform you about our offers and services. The legal basis for this is that the processing is necessary and that DPD has a legitimate interest (Art. 6(1)(f) GDPR) which is not overridden by the data subjects' fundamental interests and freedoms.
     
   • Improving our products and services - DPD is a data controller when we process personal data for the purpose of improving our services. We may send you 'customer satisfaction surveys' where we will ask you to complete and send to us. Where possible, we use aggregated, non-personally identifiable data.
     
     
6. How will we store your data?
   
   
   • Access Controls - Access to user data is strictly controlled and limited to authorized personnel who require access for legitimate purposes related to the provision of our services.
     
   • Compliance with Legal Standards - DPD ensures that the storage of user data complies with applicable data protection laws and regulations, including GDPR and other relevant standards.
     
   • Data Minimization - DPD practises data minimization, storing only the necessary user data required for the websites functionalities and services.
     
   • Purpose Limitation - User data is used solely for the specified and legitimate purposes outlined in our privacy policy.
     
   • Data storage - DPD retains user data for the time necessary to fulfill the purposes for which it was collected, i.e. as long as you are a business contact to us.
     
   • Third-party service providers - DPD may engage third-party service providers for the management of data. These providers adhere to strict security and privacy standards to ensure safe storage of user data (see also below at clause 11).
     
7. Technical safeguards
   
   
   • In accordance with our privacy policy, DPD securely stores your data using Shopify. 
     
     
   • DPD, in accordance with GDPR, retains your data for the duration necessary to enhance. We follow principles of data minimization, ensuring we collect and keep information solely for its intended purpose. Once the purpose is fulfilled, and legal obligations are met, we commit to promptly deleting or anonymizing the data.
     
8. What are your data protection rights?
   
   
   • Dirty Peach Design AB would like to make sure that you are fully aware of all of your data protection rights. For further information about your rights you may visit the website of the Swedish data protection authority at imy.se. Every user is entitled to the following:
     
     a) the right to access - you have the right to request DPD for a summary of the personal data that we collect of you without any costs or fees for you  to ensure that you can check that they are correct. However the right to receive a copy of your personal data free of charge does not mean that you always have the right to obtain the actual document in which your personal data appears. It may be sufficient that you receive a comprehensible compilation of the personal data that appears in the document or is otherwise being processed so that you can check the accuracy and legality of the data. (https://www.imy.se)
     
     b) the right of rectification - you have the right to request that DPD corrects any information you believe to be inaccurate. You also have the right to request that we complete information you reasonably believe is incomplete,
     
     c) the right to erasure - you have the right to request that DPD erase your personal data, unless any of the legal exceptions are applicable,
     
     d) the right to restrict processing - you have the right to request that DPD restricts the processing of your personal data, unless any of the legal exceptions are applicable,
     
     e) the right to object to processing - you have the right to object to DPD processing of your personal data, unless any of the legal exceptions are applicable,
     
     f) the right to data portability - you have the right to request that DPD transfer the data that we have collected to another organization, or directly to you,
     
     g) the right to a withdrawal of the information collected about you and in which way the personal data is processed - you may do this by requesting a registry extract from DPD. Please note that we need only comply with this request if it is technically possible to perform. If you make a request, we have a calendar month to respond to you. If you would like to exercise any of these rights, please contact us via e-mail: hej@dirtypeachdesign.se
     
9. What are cookies?
   
   
   • Cookies are small pieces of text sent to your browser by a website you visit. They collect standard internet log information and visitor behavior information, which can make it easier for you to visit the site again and make the site more useful to you. We may collect information from you automatically through cookies or similar technology. As mentioned under the section “What legal grounds do we have for storing your personal data”, we base our use of cookie files, which are not necessary but can be classified as analytical, to provide the services, on your explicit consent, cf. (Art 6(1)(a) GDPR).
     
   • More specifically, cookies are small text files sent and saved on your device that allow us to identify visitors of our website and facilitate the use of the website and the services and to create aggregate information of our visitors. By sending the content of the cookie file back with each request to the website, the web server can keep track of the user’s identity or preferences. This helps us to improve the services and better serve our users. The cookie file can have several purposes, e.g. storing information about the users and their use of a website, user patterns, or enabling direct individualized advertising. The cookies will not harm your device or files.
     
   • We store cookie files on your computer, telephone (or other digital device which you may use to visit our website) for the purpose of identifying your browser and to recognize your search history, settings and preferences. You have the full right to refuse our processing of personal data using cookie files. However, please note that if you refuse “necessary cookies”, it is likely that our website may not work correctly to enable you to use it for browsing or purchasing our products. We use various technologies to collect and store analytics data and other information when you visit our website, including cookies, pixel tags and web beacons.
     
   • A web beacon is a technology that allows for identifying readers of websites and e-mails e.g. for identifying whether an e-mail has been read. For more information please visit https://allaboutcookies.org/
     
10. How to manage your cookies?
    
    
    • You can set your browser to not accept cookies. This website https://allaboutcookies.org/ walks you through how and tells you how to remove cookies from your browser. Please be mindful that our website may not function as a result if you remove all cookies.

11. Do we transfer personal data to others or third countries?
    
    
    • The transfer may only take place if necessary for DPD to fulfill its engagement and/or to protect the interests of users. DPD may also process personal data in order to comply with money laundering regulations. If DPD is involved in a merge, engages cooperation, partners, acquisition or asset sale, we may transfer your personal data to the third party involved. DPD shall ensure that any personal data is afforded equivalent protection as prescribed in this privacy policy and in accordance with GDPR. DPD may also transfer personal data to others within DPD’s business operation, coordinators, co-operation partners and providers, as well as third parties, including but not limited to suppliers, cloud service providers. DPD shall, however, only transfer personal data if DPD has a legal ground under GDPR to do so and continue to ensure the confidentiality of all personal data.
      
    • DPD may also transfer personal data to a third country, i.e., a country outside the EU/EEA, or to international organization according to applicable laws and data regulations. Third parties may be based anywhere in the world, which could include countries that may not offer the same legal protections for personal data as your data subject’s country of residence. DPD will follow local data protection requirements and its internal global privacy standards and will apply the necessary safeguards under the applicable law of the country transferring the personal data for such transfers.
      
      If DPD transfers your personal data to a third country, i.e. a country outside the EU/EEA, or to international organizations, DPD must then ensure that that country maintains the same adequate level of protection as if the processing had taken place within the EU/EEA. Regarding the transfer of personal data to the United States, new rules apply from July 10, 2023, when the European Commission made a new decision on the adequate level of protection for the United States, provided that the recipient is covered by the EU-US Data Privacy Framework (DPF).
      
      In the event that personal data is processed that involves a transfer of it to the United States, the personal data assistant must follow the rules for the transfer of personal data in force at all times. You can find more information, about which countries are considered to have an "adequate level of protection" on the EU Commission's website, and you can read more about standard clauses and adequacy decisions on the Data Protection Authority´s website http://www.imy.se"http://www.imy.se. You are encouraged to get further information about the legal aspects of third-party transfers: www.imy.se.
      
    • More information regarding the transfers of personal data may be obtained by contacting us on any of the addresses indicated below.
      
12. Changes to our privacy policy
    
    
    • Dirty Peach Design AB keeps its privacy policy under regular review and places updates on our website. This privacy policy was last updated on August 30, 2024.
      
13. Applicable law and jurisdiction
    
    
    • Swedish law shall be applicable and the Swedish courts shall have jurisdiction subject always to mandatory laws and regulations of users in the country .
      
14. How to contact us
    
    
    • If you have any questions or concerns about DPD, our privacy policy, the data we collect and store, or if you would like to exercise one or more of your data protection rights, please feel free to e-mail us at hej@dirtypeachdesign.se
      
    • Full contact details: Dirty Peach Design; company registration number: 559339-3357;
      Registered postal address: Näsuddsvägen 21, 817 93 Hamrångefjärden, Sweden.
      
15. How to contact the appropriate authorities
    
    
    • If you would like to report a complaint or if you feel that Dirty Peach Design AB have not addressed your concern in a satisfactory manner, you may e-mail Integritetsskyddsmyndigheten in Sweden (IMY); imy@imy.se