This privacy policy describes the types of information we collect from you or that you provide to us when you visit www.lordse.se (our "Site"), our practices for collecting, using, protecting and disclosing this information and the choices you do do have in connection with this information.

General information
a) Which law applies?
In principle, we will only use your personal data in accordance with applicable data protection laws, in particular the Data Protection Act ("DPA") and the EU counterpart General Data Protection Regulation ("GDPR").

b) What is personal data?
Personal data is any information that relates to personal or material circumstances relating to an identified or identifiable individual. This includes, for example, your name, date of birth, email address, postal address or telephone number and online identifiers such as your IP address.

c) What is processing?
"Processing" means any operation or set of operations performed on personal data, whether automatic or not. The term is broad and covers practically all handling of data.

d) Who is responsible for data processing?
The responsible party in the sense referred to in the DPA and GDPR is LORD se at Furutorpsgatan, 34 Helsingborg, Skåne 25237, Sweden ("LORD se", "we", "us" or "our"). If you have any questions about this policy or our data protection practices, please contact us by using our contact form , call +46 73 6300633, email us at [email protected] or write to us at the above address.

e) What are the legal grounds for the processing?
In accordance with the DPA and GDPR, we must have at least one of the following legal grounds to process your personal data:

      • you have given your consent,
      • the data is necessary to fulfill a contract / pre-contractual measures,
      • the data is necessary to fulfill a legal obligation or
      • the data is necessary to protect our legitimate interests, provided that your interests are not overridden.

Data we collect automatically

a) Log data

Each time you visit our website, our system automatically records the following data from the visiting device and stores it in a so-called log file: i) Name of the downloaded file, ii) date and time of the visit, iii) amount of data transferred, iv) notification of successful download, type of browser and version used, v) IP address (identification of the user's device), vi) Operating system of the visiting device, vii) Internet service provider of the visiting device, viii) website from which you access our website, and ix) which of our website pages you visit. The legal basis for the processing is our legitimate interest.

b) Content Delivery Networks

We use a Content Delivery Network (CDN) to distribute our online content. Our CDN is a network of regionally distributed servers for our technical service providers connected via the Internet. When visiting our website, your device's browser transmits information to these service providers, which is collected in the corresponding server log files. Server log files are generally anonymized and then transferred without any personal reference. Server log files include in particular i) details of the browser and operating system used, ii) the previously visited pages (so-called referral URL), iii) the IP address of the device used, iv) the name of the Internet provider, as well as v) date and time for all page views including the amount of data transferred. The legal basis for the processing is our legitimate interest.

c) Cookies

We use so-called cookies on our website. Cookies are pieces of information that are transferred from our web server or third-party web servers to your browser and stored there for later retrieval. Cookies can be small files or other types of information storage. There are different types of cookies: i) Essential cookies. Essential cookies are cookies to provide an accurate and user-friendly website; and ii) Non-essential cookies. Non-essential cookies are all cookies that do not fall within the definition of essential cookies, for example cookies used to analyze your behavior on a website ("analytical" cookies) or cookies used to show you advertisements ("advertising"- cookies).

As stated in Sweden's Electronic Communications Act (“ECA”) and the EU Privacy and Electronic Communications Directive (“PECD”), we need to obtain consent for the use of non-essential cookies. For further information about the cookies we use, see our Cookie Policy. The legal basis for the processing is our legitimate interest and your consent.

d) Provision of the store

We use the store system Quickbutik AI at the service provider Quickbutik AB , in order to host and display the store on the basis of processing on our behalf. All data collected on our website is processed on Quickbutik's servers. The legal basis for data processing is our legitimate interest in providing an appealing website and store.

e) Third Party Services and Content

We use content or service offerings from third-party providers based on our legitimate interests to integrate their content and services ("Services").

This always requires that the third-party providers of this content are aware of the user's IP address, since without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary to display this content.

The following provides an overview of third-party providers and their content, together with links to their privacy policies, which contain additional information about the processing of data and possible so-called opt-out measures,

      • Analytics:

            o Google Analytics from Google LLC ,

            o Hotjar av Hotjar Ltd ,

      • Tag Management: Google Tag Manager and Google Site Tag from Google LLC ,

      • Fonts: Google Fonts from Google LLC and Font Awesome from Fonticons Inc ,

      • Spam protection: reCAPTCHA by Google LLC

      • Remarketing and advertising:

         o DoubleClick by Google LLC,

         o Google AdSense from Google LLC ,

         o Facebook Remarketing av Meta Platforms Inc

If you do not wish to participate in our personalization of advertising or retargeting/tracking, you may object to behavioral advertising at the following websites: Your Online Choices , Digital Advertising Alliance of Canada, Network Advertising Initiative or AdChoices .

Data we collect directly

     a) Contact us

Personal data is processed depending on the contact method. In addition to your name and email address, IP address or phone number, we typically collect the context of your message, which may also include some personal information. The personal data collected when you contact us is used to process your request and the legal basis is your consent.

We also offer to contact us via WhatsApp messaging services. If you contact us via WhatsApp, we store and use the mobile phone number you use and - if provided - your first and last name in accordance with the provision of a contractual or pre-contractual measure to process and respond to your request.

We are present on social media (currently Facebook , Instagram and YouTube ) on the basis of our legitimate interest. If you contact or connect with us via social media platforms, we and the relevant social media platform are jointly responsible for the processing of your data and enter into a so-called joint register agreement. The legal basis is our legitimate interest, your consent or, in some cases, the initiation of a contractual service, if any.

b) Order processing

We process your first name, last name, e-mail address, delivery and billing address, if different, and the data related to your contract with us data to manage the contractual relationship between you and us. It is also possible for you to register for an account. For this purpose, you can choose a password together with your email address, both of which will make it easier for you to log in without having to enter your details again when you make a future purchase. We store the information you enter to create a customer account through which your orders are registered, fulfilled and processed. We will store your details for further orders as long as you have your account with us. The legal basis for data processing is our contract and the fulfillment of our legal obligations.

c) Payment data

If you make a purchase, your payment will be processed via our payment service providers Stripe , Google Pay , Swish or Klarna . Payment data will only be processed by your chosen payment service provider and we do not have access to any payment information you may send. The legal basis for the provision of a payment system is the establishment and implementation of the user agreement for the use of the service.

d) Newsletter

If you have agreed to receive our newsletter, we will use your email address to send you information about us, our products and promotions and news. You can withdraw your consent to receive the newsletter or create personal user profiles with effect for the future at any time. You will find the unsubscribe link at the end of each newsletter. The revocation leads to the deletion of the collected user data.

e) Service reviews

We use Trustpilot's rating functions to constantly improve our service, we offer our customers the opportunity to rate us via an independent portal, without us being able to influence this in any way. For this purpose, a certain date is transmitted to Trustpilot. The integration is based on our legitimate interest, and we have no influence or control over the data collected and processed by Trustpilot.

f) Marketing

To the extent that you have given us your separate consent to process your data for marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels to which you have given your consent.

You can give us your consent in a number of ways, including by checking a box on a form where we ask for your permission to send you marketing information, or sometimes your consent is implied from your interactions or contractual relationship with us. If your consent is implied, it is on the basis that you would have a reasonable expectation of receiving a marketing communication based on your interactions or contractual relationship with us.

Direct marketing generally takes the form of email but can also include other less traditional or emerging channels. These forms of contact will be handled by us or by our contracted service providers. Any direct mail marketing sent or made by us or on our behalf will include a means by which you can unsubscribe or opt-out.

Principles for processing personal data

a) Storage and retention

At the time of data collection, for example in connection with a contractual relationship, we process and store personal data from you. We process and store your personal data only to achieve the respective processing purposes or as long as a legal storage period exists. When the purpose has been achieved or the storage period has expired, the corresponding data is routinely deleted.

b) Security

Our website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us. We have also implemented a number of security measures ("technical and organizational measures"), such as encryption or need to know access, to ensure the most complete protection of personal data processed through this website.

Nevertheless, Internet-based data transmissions may always have security gaps, so absolute protection cannot be guaranteed. And databases or data sets that include personal data can be breached by accidental or wrongful breach. When we become aware of a data breach, we will notify all affected individuals whose personal information may have been compromised as soon as possible after the breach is discovered.

c) Specialkategoridata

Unless it is specifically necessary when you use our services and express consent is obtained for that service, we do not process special category data.

d) Minors

We do not request personal data from minors and children and do not knowingly collect such data or forward it to third parties.

e) Automated decision-making

Automated decision making is the process of making a decision by automated means without human intervention. Automated decision-making including profiling does not take place.

f) Do not sell

We do not sell your personal data.

g) Sharing and Disclosure

We will not disclose or otherwise distribute your personal data to third parties unless this is i) necessary to carry out our services including our overseas delivery and forwarding, ii) you have consented to the disclosure, iii) or if we are legally obliged to to do it e.g. by court order or if this is necessary to support criminal or legal investigations

lawsuits or other legal investigations or other legal proceedings; or procedures at home or abroad or to meet our legitimate interests.

h) International transfer

We may transfer your personal data to other companies and/or personnel if necessary for the purposes described in this privacy policy. To provide adequate protection for your personal data when it is transferred, we have contractual arrangements regarding such transfers. We take all reasonable technical and organizational measures to protect the personal data we transfer.

Your rights and privileges

a) Privacy rights

Under the DPA and GDPR, you can exercise the following rights:

     • Right to information

     • Right to rectification

     • Right to object to processing

     • Right to erasure

     • Right to data portability

     • Right of objection

     • Right to withdraw consent

     • Right to complain to a supervisory authority

     • Right not to be subject to a decision based solely on automated processing.

If you have any questions about the type of personal data we hold about you, or if you wish to exercise any of your rights, please contact us.

b) Update your information

If you believe that the information we hold about you is incorrect or that we no longer have the right to use it and would like to request correction, deletion or objection to its processing, please do so by contacting us.

c) Withdraw your consent

You can revoke the consent you have given at any time by contacting us. The lawfulness of the data processing carried out up to the revocation remains unaffected by the revocation.

d) Access Request

In the event that you wish to make a data subject access request, you may notify us in writing of the same. We will respond to requests for access and correction as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days, we will tell you why and when we will be able to respond to your request. If we cannot provide you with any personal data or make a correction that you requested, we will tell you why.

e) Complaints to a supervisory authority

You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection. The supervisory authority in Sweden is: Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm www.imy.se.

Changes and questions

We may update this privacy policy from time to time. If we make changes to this Privacy Policy or materially change our use of your personal information, we will revise this Privacy Policy accordingly and also change the effective date at the end of this section. We encourage you to regularly read this privacy policy to be informed about how we use and protect your personal data. If for any reason you would like to contact us regarding our privacy practices, please do so using the information above.

Effective date

Sunday, April 23, 2023

You can always contact us if you have any questions.