When we process your personal information
What personal data we process
Why we process your personal information
How long we save your personal information
Your integrity as a consumer is important to us. To protect registered personal data of stakeholders of Centra, we make sure to store and treat this information in accordance with GDPR (General Data Protection Regulation). Our policy is to respect the integrity of our customers’ and suppliers. All registered personal data is strictly secure but can be requested by the relevant person to access and also ask to have their personal data deleted. Thus, this person needs to contact us on email@example.com and we will process the request. Personal data is treated, encrypted and stored by our systems in the EU hosted on secure servers in Google Cloud Platform. Customers’ personal data regarding needful information for processing e-commerce deliveries is treated with no share of this information with 3rd party.
If you have questions, please feel free to contact us by phone at +46 08-720 33 33 or by e-mail to firstname.lastname@example.org
Centra, Mälarvarvsbacken 8, 117 33 Stockholm, Sweden
2. Personal Data Responsible
Centra is personally responsible for Centra's treatment of your personal information and responsibility for such treatment to be carried out in accordance with applicable legislation. Centra is also personally responsible for the processing of personal data within the framework of holdings of the Centra Account.
3. When do we process your personal information?
3.1 Type and purpose of treatment:
In order to suggest the optimal e-commerce delivery in the checkout or at product pages of our e-commerce merchant clients or when you contact us for information and follow-up - we must collect and process personal information about you.
The processing of the data is necessary for the following purposes:
Based on personal data a) to f) in Clause 4, Centra shall propose to the End Customer the optimal shipping method. Customer's delivery preferences in relation to which freight forwarders supply the e-commerce delivery. Customer's address to freight forwarders. Centra also wants to ensure End User Identity, Manage Customer Relationship, Prevent Abuse or Misuse of Centra’s Service, Perform Customer Analysis, Risk Analysis, Risk Management, Business Development, and to comply with applicable laws and regulations. Customer's address to act with other users' data / preferences within the same geographic area.
3.2 Centra collects and processes the personal data required to perform our services when you make a purchase through our website, when you order any of our services via our customer service or when you send electronic orders on our services. The information as collected from you when making an e-commerce purchase and delivery is required for Centra to be able to provide its services and products.
3.3 If you are an Account Holder, Centra collects personal information about you at your disposal when needed. Centra also collects information about you while you are Account Holder. in the context of your account holdings, such as yours purchase history. As Account Holder you can update your information by going into "My Pages".
3.4 We also collect and update your address details via third party services for address updating.
4. What personal data do we treat?
Because our services and products differ in need not all of the information below is not applicable on all services performed. The Personal Data being processed concerns the following categories of registered data:
Contact; name, e-mail address, phone number, etc.
Address; street address, postal code, zip code, country
The end customer's delivery preferences; selected shipping methods in relation to the shippers used by the customer.
Cart; Product, weight, volume, number, price - to be able to recommend the most relevant shipping method for the End customer
Historical information; information about previous purchases, picked goods, returns etc. in order to propose relevant shipping methods.
Information about the End User's Computer / Device; IP address, language settings, browser settings, etc.
5. Restriction of storage
5.2 Centra saves customer data for a maximum of 24 months after the customer last completed a purchase or otherwise integrated with Centra.
5.3 Centra saves information about Account Holder as long as the Account Holder has a Centra Account.
5.4 Centra saves personal information about the delivered delivery no later than 12 months after delivery, unless otherwise agreed with the customer.
LIST OF APPROVED SUPPLIERS
Approved subcontractors to [insert name of supplier], if known, are as follows:
1) Google Cloud - Our data is located within the EU at Google Cloud Data Center, St. Ghislain, Belgium. More about this. https://cloud.google.com/about/locations/ "The European Union's data protection authorities, acting collectively as the Article 29 Working Party, concluded that Google's agreements for G Suite and Google Cloud Platform model contract clauses meet EU regulatory expectations" https://cloud.google.com/security/compliance/eu-data-protection/. For compliance with GDPR, see more here https://blog.google/topics/google-cloud/google-cloud-our- commitment-general-data-protection-regulation-gdpr/ For more questions, see: https://support.google.com/googlecloud/answer/6056694?hl=en
2) Sentry - Sentry provides open source error tracking that shows you every crash in your stack as it happens, with the details needed to prioritize, identify, reproduce, and fix each issue. It also gives you information your support team can use to reach out to and help those affected and tools that let users send you feedback for peace of mind. Signed DPA to amend the terms of the Agreement to reflect the parties' rights and responsibilities with respect to the processing and security of Customer's data under the Agreement. Sentry data is hosted on Google Cloud Platform, which encrypts all data at rest by default, in compliance with the Privacy Rule within HIPAA Title II. Sentry also exercises strong access control technical and administrative safeguards in compliance with HIPAA's Security Rule. For information that we receive from the European Union, Sentry has certified its compliance with EU-U.S. Privacy Shield as set forth by the U.S. Department of Commerce for the collection, use, and retention of personal information from European Union countries and Switzerland. https://sentry.io/legal/dpa/1.0.0/ & https://sentry.io/security/
7. Why do we treat information about you?
7.1 For you who are Centra customers Centra deals with your personal information for different purpose. Essentially, Centra treats yours personal data in order to:
Comply with our obligations to you as customer, such as suggestions of optimal delivery, support and provision of support
Enable general customer care and customer service, like to answer questions and correct the wrong ones
Provide information and targeted marketing, by mail, e-mail, SMS / MMS and telephone end Centra services
Manage your customer relationship and provide our Services
Provide relevant information and custom offers in newsletters as well as on the web
Improve our customer offer, for example development of services, products and functions
Prevent fraud and risk management
Follow applicable legislation, such as bookkeeping laws
The data may also form the basis for market and customer analyzes, market research, statistics, business tracking and business method development related to the purchase of services.
7.2 For you who are Account Holders
In addition to the list above, Centra stores personal information about Account Holders with purpose to:
Manage Account Holdings
Allow you to use Account Holdings benefits such as the ability to add delivery methods, manage pre-filled data and ability to handle multiple addresses.
Enable general customer service, such as asking answer questions, change delivery date and correct/ false information.
8. The legal basis for our processing of your personal data
8.1 We process your personal information to fulfill the agreement with you as a customer or Account Holder, such as for making suggestions and booking e-commerce deliveries before, during or after a purchase and to fulfill our commitments to you as Account Holder, such as simplified administration and order history. With the support of This legal basis will also inform you as Account Holder, as well as your interest in our offerings and products in order to fulfill our commitment to provide you with the Centra possible services and products.
8.2 In some cases, Centra may have a legal obligation to process your personal data. This is an example of the processing of personal information as we perform in order to comply with the accounting laws or to fulfill our obligations under the terms of transport of goods.
8.3 You can at any rate object to the processing of personal data. You can contact us by contacting email@example.com. When Centra has received your notification request, Centra will cease to process personal information for this purpose.
9. Your rights
9.1 Centra is responsible for your personal data processing in accordance with applicable laws.
9.2 At your request or on your own initiative, Centra will correct, disidentify, delete or complete information found to be incorrect, incomplete or misleading.
9.3 You are entitled to request:
A) Access to your personal information. This means you have the right to request a registry statement over the treatment we conduct regarding your personal information. You are also entitled to receive a copy of the personal data being processed. You have the right to receive, once a calendar year, a written application free of charge, extracts from the personal data available about you, the purpose of the processing and to which recipients data habits have been submitted or to be disclosed. You have also corrected in the registry extract information about where data data has been retrieved if personal data has been collected from you, the existence of automated decision making (including profiling), and the predicted period during which data tasks are stored or the criteria used to determine this period. You also have the right to inquire about your other rights as stated in dennapunkt.
B) Correction of your personal data. We arrive at your request to correct the defective or incomplete information we process as quickly as possible. Deletion of your personal information. This means you have the right to request your personal data removed if they are no longer necessary for the purpose for which they were collected. However, legal requirements may be imposed on the fact that we do not immediately receive deleted personal data, such as accounting and tax laws. We will then finish processing done for other purposes than comply with the legislation. Limitation of treatment. This means that your personal data will be marked so that they can only be processed for certain delimited purposes. You may, for example, request a limitation when dues that your information is incorrect and you have requested a correction. Meanwhile, the accuracy of the data will be limited.
9.4 Centra will inform each recipient of which personal data has been given in section 8 above about any corrections or deletion of data and limitation of data processing.
9.5 You are entitled to data portability. This means that under certain conditions you may transfer and transfer your personal data in a structured, widely used and machine-readable format to another personally responsible person.
9.6 You are entitled to object to personal data processing by carrying out a balance of interest. If you object to such treatment we only wish to continue the treatment if there are legitimate reasons for the treatment that weighs heavier than your interests
9.7 If you do not wish to process your personal data for direct marketing, you are always entitled to object to such treatment by sending an email to firstname.lastname@example.org. When we have received your opposition we will cease to process personal data for such promotional purposes.
9.8 You may submit any complaint processing your personal data to the Data Inspektionen in Sweden.
11. Contact Information