Safety for customers

Data protection and privacy are matters of trust for us, and your trust is important to us. To ensure you feel secure when interacting with us, we strictly adhere to the regulations when handling your personal data. Below, we would like to inform you about our data collection and usage practices. The following policy explains what information is collected from you. We also describe the data we use and how this is done. In this policy, we use the term "personal data" to describe information that can identify a physical person. We do not consider personal data to include information that has been anonymized or collected in a way that it cannot be used to identify a physical person with the help of other information. No data will be sold to third parties.

Sweef AB (org. no. 556850-4681) is the data controller for the processing of your personal data concerning purchases on Happy Fluffy Cloud.

The purposes for processing your personal data at Sweef AB are as follows:

Processing activities performed:

• Delivery, including notification and contact.
• Identification and age verification.
• Payment processing (including an analysis of potential payment solutions, which may involve a check against payment history and obtaining credit reports from Klarna or Stripe).
• Handling of warranty and guarantee claims.
  

Categories of personal data:

• Name.
• Contact information, such as phone number, email, and address.
• Payment history.
• Payment information.
• Purchase information (e.g., which item has been ordered or if the item should be delivered to a different address).
  

Legal basis:
Fulfillment of the purchase agreement. This collection of your personal data is required for us to fulfill our obligations under the purchase agreement. If the information is not provided, our obligations cannot be fulfilled, and we may have to deny your purchase.

By email and other channels based on your previous purchase(s) or use of Sweef's channels. To communicate relevant information to you, we analyze the data we have collected in various ways, such as sorting customers into different customer segments.

Processing activities performed:

• Creating your personalized product recommendations, inspiration, and news.
• Analysis of the data we collect for this purpose. Based on the data we collect (e.g., purchase history and age), we conduct an analysis that may result in you receiving communication specific to you.

Categories of personal data:

• Contact information (email and phone number).
• Purchase and user-generated data (e.g., click and visit history).
• Stated customer preferences regarding products and services.
  

Legal basis:
Legitimate interest. The processing is necessary to satisfy our legitimate interest in communicating personalized and relevant information and offers to you.

Activities Carried Out

• Communication and responding to any inquiries to customer service (via telephone or digital channels, including social media)
• Identification
• Investigation of any complaints and support issues (including technical support)
  

Categories of Personal Data:

• Name
• Contact information, such as address, email, and phone number
• Your correspondence
• Information about the time of purchase, any defects/complaints
  
  Legal Basis
  Legitimate interest. Processing is necessary to fulfill our and your legitimate interest in managing customer service matters.

Activities Carried Out

• Customizing services to become more user-friendly, such as changing the user interface to simplify information flow
• Preparing material to develop and improve our range of products
• Preparing material to develop and improve our resource efficiency from an environmental and sustainability perspective
• Giving our customers the opportunity to influence our product range
  
  Categories of Personal Data:
• Place of residence
• Correspondence and feedback regarding our services and products
• Purchase and user-generated data (e.g., click and visit history)
• Technical data regarding devices used and their settings (e.g., language settings, IP address, browser settings, time zone, operating system, screen resolution, and platform)
• Information on how you have interacted with us, i.e., how you have used the service, where and how long different pages have been visited, response times, download errors, how you access and leave the website, for example
  
  Legal Basis:
  Legitimate interest. Processing is necessary to fulfill our and our customers' legitimate interest in evaluating, developing, and improving our services, products, and systems.

Activities Carried Out:

• Communication before and after participating in a contest or event (e.g., registration confirmations, inquiries, or evaluations)
• Identification and age verification
• Selection of winners and the communication of any prizes
  

Categories of Personal Data:

• Name
• Contact information, such as address, email, and phone number
• Information provided in contest entries
• Information provided in event evaluations
  

Legal Basis:
Legitimate interest. Processing is necessary to fulfill our and your legitimate interest in managing your participation in contests and/or events.

Activities Carried Out:

• Necessary processing for compliance with the company's legal obligations according to statutory requirements, court decisions, or regulatory decisions (e.g., the Accounting Act, Anti-Money Laundering Act, or rules regarding product liability and product safety)
  

Categories of Personal Data:

• Name
• Contact information (e.g., address, email, and phone number)
• Payment history
• Payment information
• Your correspondence
• Information about the time of purchase, place of purchase, any defects/complaints

Legal Basis:
Legal obligation. This collection of your personal data is required by law. If the data is not provided, our legal obligation cannot be fulfilled, and therefore, we may have to deny your purchase.

In cases where it is necessary for us to provide our services, we may share your personal data with companies that act as data processors for us. A data processor is a company that processes information on our behalf and according to our instructions.

We seek the assistance of other companies that process your personal data on our behalf and according to our instructions. This includes companies that provide IT services and companies that assist us with mailings, for example.

We also share your personal data with certain companies that act as independent data controllers. When a company is an independent data controller, it means that we do not control how the information provided to the company should be processed. When your personal data is shared with a company that is an independent data controller, the privacy policy and data processing of that company apply.

Independent data controllers with whom we share your personal data include:

• Governmental authorities (the police, the tax authority, or other authorities) if we are required to do so by law or in cases of suspected criminal activity.
• Companies that offer payment solutions (card processing companies, banks, and other payment service providers).
• Companies that handle general merchandise transport (logistics companies and carriers).

will collect personal data about you in connection with payment. They are therefore data controllers for such personal data according to their respective terms and conditions:

• Klarna's terms and conditions
• Stripe's terms and conditions

will receive the personal data necessary to fulfill and deliver an order as required by the performance of the purchase agreement:

• Sun-Com
• Flexit

Right to Rectification
You have the right to request that your personal data be corrected if the data is inaccurate. Within the framework of the specified purpose, you also have the right to complete any incomplete personal data.

Right to Erasure
You have the right to have your data deleted, and we will remove all personal data for which we have no legal requirement to retain.

Right to Restriction
You have the right to request the restriction of the processing of your personal data. We will inform you when the restriction on the processing of personal data ceases.

Right to Object to Certain Types of Processing

• Legitimate Interest: You have the right to object to processing that relies on legitimate interests that we have if you have personal reasons related to the situation. However, we may continue to process your data, despite your objection, if we have compelling legitimate grounds for the processing that override your privacy interests.
• Direct Marketing (including analyses conducted for direct marketing purposes): You have the option to object to the processing of your personal data for direct marketing purposes. If you object to direct marketing, we will cease processing your personal data for that purpose, including all types of direct marketing measures. You can, of course, decline to receive communications and personalized offers through certain channels.
  

Right to Data Portability
You have the right to receive a copy of the personal data concerning you in a structured, commonly used, and machine-readable format and, in some cases, have this data transferred to another data controller. The right to data portability only applies to data you have provided to us and which we process based on certain legal grounds, such as a contract with you.

Withdrawal of Consent
You have the right to withdraw your consent at any time. If you withdraw your consent, we will cease collecting new data for purposes based on your consent. However, we have the right to continue processing previously collected data in accordance with the consent given, but we will not supplement or update this data. If there is no other legal basis that requires us to retain the data, we will delete it. If you wish to withdraw your consent, please contact our customer service at the email address: info@happyfluffycloud.com.

Complaint to the Supervisory Authority
If you believe that we are processing your personal data incorrectly, you can contact us. You also have the right to lodge a complaint with the supervisory authority (Data Inspection Authority / Swedish Data Protection Authority).

Source of Data
In addition to the information you have provided to us or that we have collected from you based on your purchases or how you use our services, we may also collect personal data from someone else, i.e., from a third party.

Klarna will collect personal data about you in connection with payment. Klarna is thus the data controller for such personal data according to Klarna's terms.

Stripe will collect personal data about you in connection with payment. Stripe is thus the data controller for such personal data according to Stripe's terms.

How to Contact Us Regarding Data Protection

You can always reach us at info@happyfluffycloud.com.

Acceptance of Cookies
Accepting cookies is not a prerequisite for visiting our websites. However, we want to point out that our website and service have limited functionality if you do not allow us to set cookies.

What Are Cookies?
Cookies are small text files that are stored on your computer and save certain settings and data for exchange with our system via your browser. There are essentially two different types of cookies, so-called session cookies, which are deleted when you close your browser, and permanent/temporary cookies, which are stored on your computer for a longer or unlimited period. This storage helps us design our web pages and offers and makes it easier for you to use. For example, some of your inputs are saved in a way that means you don't have to repeat them constantly.

What Cookies Does Sweef Use?
Most of the cookies we use are automatically deleted from your computer when you close your browser (end of session). Therefore, they are also called session cookies. Session cookies are needed, for example, to offer the shopping cart function on multiple pages. In addition, we also use cookies that stay on your computer. On your next visit, it is automatically registered that you have visited us before and which inputs and settings you prefer. These temporary or even permanent cookies are stored on your hard drive and are automatically deleted when the set time is reached. It is these cookies, in particular, that are used to make our services more user-friendly, efficient, and secure. Thanks to these files, it is possible, for example, for you to receive tailored information on the page. The sole purpose of these cookies is to adapt our offers to customers' preferences and make your browsing experience as comfortable as possible.

What Data is Stored in Cookies?
In the cookies Sweef uses, only pseudonymized data is stored. When these cookies are activated, they are assigned an identification number. There is no correlation between your personal data and this identification number. Your name, IP address, or similar data that would allow direct correlation between you and this cookie is not stored. Based on cookie technology, we only receive pseudonymized information, such as which pages in our web store have been visited, which products have been viewed, etc.

What is Onsite Targeting?
Based on cookie technology, data is collected on the Sweef website to optimize our advertising. This data is not used to personally identify you but is used for pseudonymized evaluation of website usage. With this technology, we can present services and products just for you. The content is based on information obtained through click analysis (e.g., advertising targeted at someone who has recently viewed sofas). Our goal is to make our online services as attractive as possible for you and to present advertising that matches your interests.

Are There Also Third-Party Cookies?
Sweef uses some advertising partners to make our internet offerings and websites more interesting for you. Therefore, cookies from partner companies are also stored on your hard drive when you visit the websites. These are temporary/permanent cookies that are automatically deleted when the specified time expires. These temporary or even permanent cookies are stored on your hard drive and are automatically deleted when the set time is reached. Even our partner companies' cookies typically contain only pseudonyms, and in some cases, completely anonymous data. This includes information about which products you have viewed, whether something was purchased, which products were searched for, etc. In this context, some of our advertising partners also record information about which pages you visited before and which products you showed interest in. The purpose is to display advertising that matches your interests as closely as possible.

Retargeting
Our websites use so-called retargeting technology. We use this technology to make our offers more interesting for you. This technology allows us to address internet users who have already shown interest in our online store and our products with advertising on our partners' websites. We believe that personalized, interest-based advertising is generally more interesting for internet users than standard advertising that lacks such a personal connection. The display of these advertising materials on our partners' pages is based on cookie technology and an analysis of previous user behavior. This type of advertising is completely pseudonymous. When using our site, cookies are used. Consequently, data about your usage is collected, stored, and used. Furthermore, your data is also stored in cookies after the end of the browser session and can be accessed again the next time you visit the website.

How Can You Prevent Cookies from Being Stored?
You can configure your browser settings to accept cookies only when you give your consent, thus preventing cookies from being stored on your computer in the future. If you only want to accept Sweef cookies but not those from our suppliers and partners, you can change your browser settings to "Block third-party cookies."

Usually, you can see how to reject new cookies and delete cookies you've already received via the help function in your browser's menu bar.

Web Analytics
To continually improve and optimize our offerings, we use tracking technology. For this purpose, we use services from Google Analytics.

Google Analytics
This website uses Google (Universal) Analytics, a web analysis service provided by Google Inc. (www.google.com). Google (Universal) Analytics uses methods that allow an analysis of your use of the website, such as so-called "cookies," text files that are stored on your computer. This generated information about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by enabling IP anonymization on this website, your IP address will be truncated by Google within European Union member states or in other countries within the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en

Retargeting and Data Collection by Third Parties for Banner Advertising
In the context of retargeting and banner advertising, we use services from third parties that store cookies on our site. These include the following providers: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA; https://www.facebook.com/about/privacy