Information about Cookies

According to the Electronic Information Act, visitors to a website for privacy purposes must be informed that cookies are being used. The information in the cookie can be used to track a user's browsing. A cookie is a small text file that the website you visit requests to be saved on your computer in order to provide access to various functions. It is possible to set your browser so that it automatically refuses cookies.

Personal data

  • By shopping at Kespa, the customer accepts Kespa's data protection policy and Kespa's processing of customers' personal data. Kespa protects the customer's personal privacy and does not collect more information than is necessary to process each customer's order. Kespa never sells or passes on customer data to third parties without a legal basis.
  • Kespa is responsible for the processing of personal data provided by customers in connection with purchases. Customers' personal data is processed by Kespa in order to handle orders and on occasions when customers have made an active choice to receive newsletters or promotional offers - in order to be able to adapt the marketing for customers and the customer's individual needs.
  • The information below is a summary of how Kespa, in accordance with the data protection regulation (GDPR), stores and processes customer data.

What is personal data?

  • Personal data is all information that can be directly or indirectly attributed to a natural person.

What data does Kespa store?

  • In order to handle customer orders and answer questions related to specific customer orders (customer service), we store each customer's first and last name, address, phone number, e-mail address, IP address and purchase history.
  • Customer data is stored as long as Kespa has a legal basis for processing customer data, for example to fulfill an agreement entered into between Kespa and the customer or to comply with a legal obligation according to, for example, the Accounting Act.

Legal basis

  • In connection with a purchase, customers' personal data is processed to fulfill the agreement between the customer and Kespa. Marketing, campaigns and similar mailings take place with the consent of the customer.

What information is shared and for what purpose?

Payment provider

  • When making a purchase, information is shared with Kespa's payment provider. What is stored is first name, last name, address, e-mail address and telephone number. If the customer chooses to pay by invoice, the social security number is also saved. The information is saved to be able to carry out the purchase and to protect the respective parties against fraud.
    The payment providers that Kespa uses are Klarna and Mastercard/Visa as well as Maestro. Shopify payments is a payment platform.

Shipping company and third party supplier

  • In order to be able to deliver customers' orders and fulfill agreements, Kespa must share specific information with third-party suppliers and, at any time, the relevant shipping company. What is shared with the respective shipping company is first name, last name, telephone number and address information for delivery. What is shared with the third-party supplier is first name, last name, address details and order information (order number, items). Email address and/or mobile number may also be shared with the shipping company and the third-party supplier for notification. The shipping companies Kespa cooperates with are DHL.

The right of access

  • The customer has the right to receive an extract of all information available about him at Kespa. Extracts are delivered electronically in a readable format.

Right to rectification

  • The customer has the right to ask Kespa to update incorrect information or supplement information that is incomplete or incorrect.

The right to be forgotten

  • The customer can at any time ask Kespa for their data to be deleted. Kespa reserves the right to restrict the customer's right to deletion in cases where Kespa has a legal obligation (or other legal basis) to store their information.

Responsible for data protection

  • Kespa is responsible for the storage and processing of personal data at and for ensuring that current laws and regulations are followed.

How Kespa protects personal data

  • Kespa uses industry standards such as SSL/TLS and one-way hash algorithms to store, process and communicate sensitive information such as personal data and passwords in a secure manner.
    Kespa uses Shopify as a platform.