Privacy Policy – Budi AB

Note: This document is a translation from Swedish. The original Swedish version is the legally binding document. In the event of any discrepancy, the Swedish version shall prevail.

BUDI values your personal privacy. We therefore always strive to protect your personal data in the best possible way and to comply with all applicable data protection legislation. Through this Privacy Policy, we wish to inform you about how your personal data is processed by BUDI.

General

BUDI AB ("Budi" / "we"), reg. no. 559246-0421, with registered address at Linta Gårdsväg 5A, 168 74 Bromma, is the data controller responsible for the processing of your personal data.

This policy applies to all personal data collected by BUDI about you as a seller, buyer or bidder in respect of an object. It also applies if you hold a user account on budi.se ("the Website"), or if you act as the representative of a seller, buyer or bidder, for example where the party is a company and you act as that company's contact person.

What is stated in this policy in respect of sellers, buyers and bidders applies, in relevant parts, equally to you as a representative of such a person or entity.

What Personal Data Do We Process?

The personal data we process about you is data that you have provided to us or that we collect through the Website or from a third party.

Personal data you have provided to us: When you wish to sell an object through us, or when you wish to place a bid and/or make a purchase, you will provide us with certain information about yourself. The same applies when you register an account, subscribe to our newsletters or submit an expression of interest through the Website. You may also provide information to us for other reasons. The information you provide may include, for example, your name, contact and address details, your personal identity number, information about your financial circumstances and your payment card number.

Personal data we collect from you or a third party: In addition to data you have provided to us, we also process data about your purchases and your bidding, purchase and sales history. When you visit the Website, we automatically collect certain personal data, such as your IP address and information about the goods you have searched for, viewed and bid on. Where you are not acting in a personal capacity, we may also process data about you that we have obtained from public registers and databases, for marketing purposes or to improve your customer experience with us.

For What Purposes Do We Process Your Personal Data?

All collection and processing of personal data is carried out for the purpose of administering and fulfilling our obligations to you, improving our products and services, and complying with applicable legislation and regulatory requirements.

We process your personal data to administer the sale of your object if you are a seller, or to administer your bidding, saved searches, purchases and user account if you are a buyer. We may also process your personal data to send direct marketing, conduct customer surveys and compile statistics. Further detail is set out below.

Administering your sales and/or purchases on the Website

We process your name, email address, delivery address, home address, bidding information and telephone number to administer your user account, the bids you place and your purchases, and to fulfil our other obligations to you as a seller or buyer. Where you wish to finance your purchase through a BUDI partner, or where we are otherwise permitted to do so under applicable legislation, we may also process your personal identity number and information about your financial circumstances to carry out a credit check and to verify your identity in that connection. The legal basis for processing under this section is that it is necessary for the performance of the agreement we have with you for the sale or purchase of an object. A user account is required in order to place bids and purchase objects on the Website. If the data is not provided, we will be unable to sell an object on your behalf or complete your purchase, or otherwise fulfil our obligations to you. If we do not process your personal identity number and financial information, we will be unable to carry out a credit check and will therefore be unable to grant you credit.

Administering your user account

For users who have registered a user account, we process, in addition to the data mentioned above, your personal identity number, bidding and purchase history and IP address. This data is processed to enable us to administer your user account and to facilitate your use of the Website. Your bidding and purchase history is also processed so that you can easily review the bids you have placed and purchases you have made. We process your IP address so that a placed bid can be traced back to you, thereby ensuring that the correct person has won the bidding for an object. The legal basis for processing under this section is your consent, given when you registered your user account.

Marketing and related purposes

We wish to keep in contact with you regarding selling or purchasing objects through us, and may for a limited period process your email address, postal address and mobile telephone number in order to send you our newsletters and other communications by email, post and SMS. The legal basis for this processing is our legitimate interest in communicating with you as a customer for marketing purposes.

Where you have given your consent – for example, in connection with registering a user account – your email address, postal address and mobile telephone number may also be used for direct marketing, newsletters, customer surveys and/or statistical purposes, and for communications by post, email and SMS, until you deregister your user account or withdraw your consent. The legal basis for this processing is therefore your consent.

Who May Have Access to Your Personal Data?

As a general rule, your data is processed only by BUDI and other companies within the BUDI group. We may also share your information with selected partners and suppliers as described below.

To enable delivery of goods you have purchased, we share your contact details with transport companies for the transport of your order.

For payment purposes, we may share your payment card details with payment service providers, and for credit checks we may share your personal identity number and financial information with credit reference agencies.

For marketing purposes, we may share your contact details with advertising agencies and printing companies for the production and distribution of mailings.

Our internal and external IT suppliers, and any other suppliers we engage, may have access to all personal data we hold about you, but only to the extent necessary for them to fulfil their obligations to BUDI.

Our agents may have access to all personal data we hold about you, but only to the extent necessary for them to fulfil their obligations as a BUDI agent.

How Long Do We Retain Your Personal Data?

Personal data processed for the purpose of administering the sale, bidding or purchase of an object, or to fulfil our contractual obligations to you, is not retained for longer than is necessary for those purposes.

For accounting purposes, we retain information about our agreement with you for seven years in accordance with applicable bookkeeping legislation.

Under applicable legislation, we are entitled to retain your contact details for direct marketing purposes for a defined period after your purchase or after our agreement has ended. The length of this period varies depending on the nature of the agreement. BUDI may therefore retain your contact details for direct marketing purposes for as long as permitted by applicable data protection legislation, marketing law and industry practice.

Where you have specifically consented to receive direct marketing, we will retain your email address, postal address and mobile telephone number for marketing purposes until you deregister your account or request that we stop contacting you.

For users who have registered a user account, we process all personal data until you close your account or otherwise request deletion of certain data. We will in all cases delete your account if you have been inactive for two years. Purchase history is in all cases deleted no later than two years after the relevant purchase was made.

Your personal data may be retained for longer than stated above to the extent we are required to do so by law, regulation or regulatory decision.

Your Rights

You have the right at any time to request access to the personal data we hold about you. Your request must be made in writing, be personally signed and include your name and personal identity number, so that we can ensure the data is disclosed to the correct person.

Requests for data access, information or correction of inaccurate data should be sent to: hello@budi.se. The information will be sent to your registered address.

If personal data held by BUDI is inaccurate, incomplete or irrelevant, you may request that it be corrected. We are unable to delete data that constitutes a public record or where retention is required by law, such as under bookkeeping rules, nor where there are legitimate grounds for retention, such as unpaid debts.

In certain circumstances, you have the right to receive your personal data in a commonly used, machine-readable format (data portability). This right applies only to data you yourself have provided to us and where the data is processed on the basis of a contract with you or your consent.

You have the right to withdraw all or part of a consent to processing at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.

Under applicable data protection legislation, you have the right to access information about which personal data we hold about you and the right to request rectification of inaccurate data.

Transfers to Third Countries

BUDI transfers personal data to countries outside the EU/EEA only where the recipient country has been assessed by the EU or the European Commission as providing an adequate level of protection, or where this has been specifically disclosed to you in connection with the provision of your personal data.

Cookies

BUDI's websites use cookies to provide a personalised browsing experience, and session cookies to manage your visit. A cookie is a small text file placed on your hard drive by a web server. Cookie files cannot be used to execute programs or deliver viruses to your device. A cookie is uniquely assigned to you and can only be read by a web server in the domain that issued it. One of the principal purposes of cookies is to indicate to the web server that you have returned to a specific page, enabling a personalised experience on your return visit.

You may choose whether to accept cookies. Most web browsers accept cookies automatically, but you can usually modify your browser settings to refuse them if you prefer. If you disable cookies, you may not be able to make full use of the interactive features of the Website. Session cookies are deleted from your device when all browser windows are closed; if you also disable session cookies, you will not be able to make purchases, log in or use other functions essential to shopping on BUDI.