Privacy and GDPR

Commitments in relation to customers in terms of data protection and integrity
Protecting personal data and your privacy is of utmost importance to DARTH Sweden. In this privacy notice, we want to communicate clearly, concisely and clearly about our collection, use, processing, storage, etc. of personal data for our customers.
In the sense referred to in this privacy notice, "DARTH Sweden's customers" means past, current or potential customers or users of a product offered by DARTH Sweden, visitors to our a sales channels such as Instagram, Facebook or our website dartsweden.com.

Principles
DARTH Sweden expresses its commitment to privacy and data protection by adopting the following principles.
DARTH Sweden uses personal data legally, fairly, correctly and clearly.
DARTH Sweden does not collect more data than is required, and only for legitimate purposes
DARTH Sweden does not store data longer than necessary or for a longer period than necessary.
DARTH Sweden protects personal data with appropriate security measures.

Why do we process your data?
We use and process your personal data in connection with, for example, purchasing our products online via our social media or website or contacting customer service. Examples of personal data are full name, address, e-mail address, telephone number, social security number, payment information, purchase, order and usage history, IP address, member ID and other case-related information (e.g. information you provide when contacting our customer service).
Under each specific section of this privacy notice, you will receive information about the purpose of the respective relevant processing of data.

Who is responsible for the processing of your personal data?
DARTH Sweden is primarily responsible for the processing of personal data within the framework of this privacy notice.
DARTH Sweden is responsible for the processing of personal data described in all sections of this privacy notice. section you will find information on the distribution of responsibilities and the rules for enforcing rights.
The following entity is responsible for personal data in relation to you:
DARTH Sweden
personal data controller:
Martin Högberg
support@darthsweden.com
19268 Sollentuna
Sweden

DARTH Sweden's named personal data controller is referred to throughout this privacy notice as “DARTH Sweden”, “we” or “us”.
In some circumstances, responsibility for data protection and your privacy is shared with third parties, such as banks and financial institutions, postal services or providers of electronic communications. More information can be found under each specific section of this privacy notice.

Where do we process your data?
The personal data we collect from you is usually stored within the European Union or the European Economic Area (EU/EEA), but can also be transferred and processed in a country outside the EU/EEA when required. All such transfer of your personal data takes place in accordance with current legislation and without undermining your statutory rights.

We may sometimes transfer personal data from the EU/EEA to a third country that lacks a decision on an adequate level of protection from European Commissions. Where applicable, either the EU Commission's Standard Contractual Clauses are used to ensure a similar level of protection guaranteed within the EU/EEA or other legal bases for the transfer.
Who has access to your data?
Your personal data is only available and accessible to those who need it to fulfill the intended purpose of the processing. To the extent required, your personal data may be shared between the various companies and product suppliers, and subcontractors (personal data processors and subcontractors) who perform certain tasks on behalf of DARTH Sweden and with independent third parties.

We may also disclose personal data to third parties, if we have reason to believe that it is necessary to be able to: (i) investigate possible violations of the law, (ii) identify, contact or take legal action against anyone who may be in breach of an agreement with us, (iii) investigate security breaches or cooperate with authorities in a legal matter or (iv) protect our rights, our safety or our property, including to prevent fraud.

We reserve the right to transfer any personal data we hold about you in the event that we are merged with or acquired by a third party or become the subject of any other business transaction such as a reorganization, or if any such transaction is proposed.

On what legal basis is the data processed?
It is not permitted for DARTH Sweden to collect, process, use, save, etc. personal data without a valid legal basis. The legal basis may be based on your consent, through contracts, statutory requirements or our legitimate interest as a company. For each specific processing purpose, we inform you which legal basis is applicable and which rights you can exercise. We do this regardless of whether the processing of personal data is statutory or mandatory to enter into an agreement and whether it is mandatory to provide the personal data and any consequences if you choose not to do so.

What are your rights?
Right of access:
You have the right to request information about the personal data we hold about you at any time. You can contact customer service, who will send you your personal data via e-mail.

Right to data portability:
Every time that DARTH Sweden processes your personal data in an automated way after your consent or according to an agreement, you have the right to have a copy of your data in a structured, common and machine-readable format transferred to you or another party. It only includes the personal data you have shared with us.

Right to rectification:
You have the right to request correction of your personal data if it is incorrect, including the right to supplement incomplete personal data.
If you have a DARTH Sweden account, you can edit your personal data on your account page.

Right to erasure:
You have the right to delete your personal data processed by DARTH Sweden at any time. Your request may be hindered by the following circumstances:

* you have an ongoing case with customer service
* you have a pending order that has not yet been sent or has been partially sent
* you have an unpaid debt with H&M, regardless of payment method

The right to object to processing based on legitimate interest:
You have the right to refuse processing of your personal data based on DARTH Sweden's legitimate interest. DARTH Sweden will not continue to process the personal data unless we can demonstrate a legitimate reason for the process that takes precedence over your interests and rights or due to legal claims.

Right to limitation: DARTH Sweden's legitimate interest shall require DARTH Sweden to suspend all processing of such data pending confirmation of the legitimate interest.
* If you object to the processing of your personal data on the basis of DARTH Sweden's legitimate interest, DARTH Sweden shall limit all processing of the data during the ongoing investigation of legitimate interest.
* If you have claimed that your personal data is incorrect, DARTH Sweden must limit all handling of this data during an ongoing investigation into whether the personal data is correct.
* If the processing of the personal data is against the law, you can object to the deletion of the personal data and instead request restriction of the use of your personal data
* If H&M no longer needs the personal data but it is required for you to be able to defend yourself against legal claims.

How do you exercise your rights?
We take the protection of personal data very seriously. If you wish to exercise your rights as described above or if you have any questions about our privacy policy or our processing of your data, you can contact us at any time at support@darthsweden.com

If you have a DARTH Sweden account, you can exercise your right to access, portability and correction of data under my account, where you can also delete your account.

Data Protection Officer:
We have appointed a data protection officer to ensure that we continuously handle your personal data in an open, correct and legal manner. You can contact our Data Protection Officer at supporrt.darth@gmail.com with DSO as the subject.

Right to lodge a complaint with a supervisory authority:
If you have a complaint about how DARTH Sweden processes and protects your personal data and your privacy, you have the right to lodge a complaint at any time with the Integritetsskyddsmyndigheten (IMY) or another competent supervisory authority in your country of residence.

Updates to our privacy notice:
We may need to update our privacy notice. The latest version of the privacy notice is always available on our website.

You can find the change history in the Changes section of this Privacy Notice.