WBIL-Privacy Policy
WHEN BUSINESS IS LOVE
WHEN BUSINESS IS LOVE
 PRIVACY POLICY FOR HÄSTENS GROUP 
SCOPE AND PURPOSE 
This policy covers the processing of personal data within all companies that are part of Hästens group ("Hästens" or "we"). The purpose of this policy is to provide our existing, former and potential customers, partners and other individuals (collectively, “individuals” or “you”) with a general understanding of:

  • Under what circumstances we collect and process your personal data
  • What type of personal data we collect
  • The reasons why we collect your personal data
  • How we handle your personal data
  • The distribution of responsibility for the processing of personal data between different legal units within Hästens, as well as
  • Our contact details so that you can receive information about and invoke your rights in connection with our processing of your personal data.

This policy is continuously updated to reflect the measures that Hästens takes in relation to your personal data.

You can always contact us regarding privacy and data protection issues by sending an email to privacy@hastens.com.

By using Hästens’ services, you confirm that you have read our data protection policy and are aware of our processing of your personal data. You are also aware of that Hästens uses electronic communication channels to send you information, unless you have opted-out to receive such information. It is important that you read through and understand our data protection policy before using our services.
The processing of your personal data is of great importance for us to be able to offer you products and services. We appreciate the trust you place in us by providing us with your personal information, and we protect your privacy when providing our services.

In order to be able to offer you our services, we need to process your personal data as described below. We do this with the greatest possible consideration for your privacy.
 
 
 RESPONSIBILITY FOR PERSONAL DATA WITHIN HÄSTENS 
Hästens Beds International B.V., Apollolaan 151 1077 AR, Amsterdam, Noord-Holland Netherlands (registered with the Dutch Chamber of Commerce under number 60069104) is responsible for all personal data that is processed within all legal entities that are part of Hästens.

Please note that Hästens and its authorized dealers and partners are separate legal entities, and that we are generally not responsible if these dealers and partners do not comply with applicable legislation. If you have any questions about your retailer's use of your personal data, please contact the retailer directly.
 
 GENERAL PRINCIPLES
Your personal data belongs to you. We strive to make no assumptions about your privacy preferences, and our goal is to design our services so that you can choose whether or not to share your personal information with us.

Hästens will only process its customers' personal data if it is appropriate, relevant and necessary in relation to the purpose for which the data has been collected. We strive to anonymize your personal data when a function or service can be performed with anonymized data. If we combine anonymized or non-personal data with your personal data, it will be treated as personal data as long as the data remains combined.

Hästens believes in being transparent about what personal data we process and for what purposes. For us, it is also important to protect your personal data, because one of Hästens’ core values is to protect what is important to you.
 
 GENERAL PRINCIPLES
It is Hästens’ policy to comply with applicable laws, rules and regulations on privacy and data protection in each country where we operate. If necessary, we will adapt our processing of your personal data as described in this policy to ensure legal compliance.

The personal data Hästens collects about you will be processed for different purposes, on the basis of different legal bases and for different periods of time:
Purpose(s)
Legal basis
Retention period
To provide you with products and services, including to verify your eligibility for certain purchases and services
Necessity for the performance of a contract concluded or to be concluded with you (article 6.1 (b) GDPR)
As long as the customer relationship lasts and, if applicable, until the warranty period ends
To meet information needs in order to carry out all parts of the order process (eg lead, quote, order, delivery, payment, warranty, return and refund)
Necessity for the performance of a contract concluded or to be concluded with you (article 6.1 (b) GDPR)
As long as the customer relationship lasts and, if applicable, until the warranty period ends
To inform you of updates or changes to our products and services, including, but not limited to, changes to our terms and conditions and policies
Our legitimate interest to provide you with relevant service communications (article 6.1 (f) GDPR)
As long as the customer relationship lasts and, if applicable, until the warranty period ends
To provide product support and services (warranty service etc.)
Necessity for the performance of a contract concluded or to be concluded with you (article 6.1 (b) GDPR).
Our legitimate interest to provide support to you (article 6.1 (f) GDPR)

As long as the customer relationship lasts and, if applicable, until the warranty period ends
To send out marketing materials via email or letter, and telephone calls may be made to follow up on marketing materials
Our legitimate interest to promote our business and products and tailor our interactions with you (article 6.1 (f) GDPR), or, where obtained, your consent (article 6.1 (a) GDPR)
As long as the customer relationship lasts or as long as you have not opposed against such a processing or withdrawn your consent (if applicable), whichever is the earliest
To administer your participation in events and management of personal meetings 
Our legitimate interest to organize relevant events and personal meetings (article 6.1 (f) GDPR) or, where obtained, your consent (article 6.1 (a) GDPR)
We will retain this personal data for up to two years following our last interaction with you, unless you oppose to the processing or withdraw your consent (if applicable).
To comply with legal requirements or legal authority requests
Compliance with legal obligations (6.1 (c) GDPR)
As long as required under applicable legislation (e.g. seven years for accounting material) 
To carry out market research
Our legitimate interest to carry out market research (article 6.1 (f) GDPR) or, where obtained, your consent (article 6.1 (a) GDPR)
We will retain this personal data for up to two years after the marketing research was carried out
For analysis and customer profiling purposes (including online and in social media)

Our legitimate interest to promote our business and products and tailor our interactions with you (article 6.1 (f) GDPR), or, where obtained, your consent (article 6.1 (a) GDPR)
As long as the customer relationship lasts or as long as you have not opposed against such a processing or withdrawn your consent (if applicable), whichever is the earliest
Using both online and offline data, as well as data from third-party providers, such as social media or other online platforms, to tailor communications to your interests
Our legitimate interest to promote our business and products and tailor our interactions with you (article 6.1 (f) GDPR), or, where obtained, your consent (article 6.1 (a) GDPR)
As long as the customer relationship lasts or as long as you have not opposed against such a processing or withdrawn your consent (if applicable), whichever is the earliest
To prevent crimes and guarantee the safety of you and our employees in Hästens’ premises by use of video surveillance and access control systems
Our legitimate interest to prevent crimes and maintain safety in our premises (article 6.1 (f) GDPR)
Video surveillance material is normally stored for 72 hours. In case of an investigation the material may be retained until the investigation is completed 
To defend our rights in case of accusations, claims and litigation
Our legitimate interest to legally defend ourself (article 6.1 (f) GDPR).
We will retain related personal data until any statutes of limitation have expired
COLLECTION OF PERSONAL DATA
Information you provide to us: You can directly or indirectly provide us with information about yourself in various ways, for example by contacting us, ordering beds and accessories or services and registering for newsletters, personal meetings, events and guarantees via Hästens website, customer service, sales contact, fairs and stores where you provide personal information. We may also obtain such information from our authorized dealers and other third parties. Such information ("personal data provided by the customer") may include:
 
  • Your contact details (name, address, telephone number, e-mail address, etc.)
  • Information in connection with your purchase and your use of products and services (customer preferences and settings, purchase history, etc.).
 
    Information we may collect about you: When you use our services (for example, when you book a bed test, confirm a purchase, sign an agreement, take delivery, after-sales services, confirm a service agreement, visit events and use services provided on Hästens’ website) as well as for cold marketing, we may collect the following information:
    • Your contact details (name, address, telephone number, e-mail address, etc.)
    • Demographic information (age, marital status, household composition, etc.)
    • Information in connection with your purchase of products and services (customer preferences, purchase history, payment and credit history, etc.)
    • How you interact with Hästens (i.e. how you use our services)
    • Information (IP address, language settings, browser settings, time zone, operating system, etc.) about the client (PC, tablet, mobile phone, etc.)
    • Surveillance information (video surveillance in premises, logs from access control systems, etc.).

      Only basic contact and personal information will be used to send out marketing materials via email or letter, and telephone calls may be made to follow up on marketing materials. Contact information may be collected through public services that provide personal information.

      The information you provide as well as information about the products/services and your financial information is generally necessary to enter into a contract with us, while other information we collect is generally necessary for other purposes, as described in the table above.
      WEBSITES AND COOKIES 
      In general, you can visit Hästens’ websites without telling us who you are or revealing any information about yourself. However, in order to provide you with certain services or offers, we often need to register certain personal data, for example your name and email address. We may also collect (using cookies) anonymous information about how you have used our websites prior to such registration. This information helps us improve our websites or our marketing. See Hästens' cookie policy at www.hastens.com for information about the cookies we use.

      CONSENT

      As far as is practicable or in accordance with applicable law, we will obtain your consent before we collect or use your personal data. The request for your consent will be clear and specific and give you a reasonable basis for making your decision. We will never take your consent for granted. Instead, we will ensure that you can actively consent in a clear and transparent manner. Your consent is voluntary and can be revoked at any time, for example by contacting Hästens at the address specified in the "Information and access" section below. If you do not provide your consent, it may be impossible to use services or parts of services.

      USE OF PERSONAL DATA

      For most processing purposes, you can stop our use of your personal data by updating your preferences or withdraw your consent to the processing by contacting Hästens at the address specified in the "Information and access" section below, or as otherwise instructed by us. However, unless otherwise provided by applicable legislation, you may not generally refuse processing of your personal data:

      • Which we carry out to send you important notices, such as changes to our terms and conditions and policies or in case of product recalls
      • Which we carry out to fulfill our legal obligations.

      CONTINUING

      We will only retain your personal data for as long as is necessary to fulfill the purposes described in this policy, or the purposes of which you have been informed otherwise. This means e.g. that once you have given your consent to our processing of your personal data, we will keep the data until you withdraw your consent. If you have withdrawn your consent, we may still retain certain personal data for the period necessary for us to fulfill our legal obligations and defend ourselves in legal disputes. If we have not received your consent to processing, the data will only be retained to the extent permitted by law and as described in the table above.

      QUALITY OF PERSONAL DATA

      When we process your personal data, we strive to ensure that it is accurate and up-to-date. We try to delete or correct personal data that is incorrect or incomplete. More information about your right to check whether the personal data we hold about you is correct can be found in the section "Information and access" below.

      INFORMATION AND ACCESS

      You have several rights under data protection laws in relation to our processing of your personal data. If you want to exercise any of these rights or have any questions, please feel free to contact us– please see the contact details below. Your request will be handled promptly and correctly. If current legislation permits an administrative fee to accommodate such a request, such a fee may be charged by Hästens. In the following you can read about your rights:

      Right to information: You have the right to be informed about how we process your personal data. We do this through this privacy policy and by answering your questions. If you want to know more about our processing of your personal data, you can contact us and request additional information.

      Right to access your personal data: You have the right to request information if Hästens processes personal data about you, and to receive a copy of such data. Upon such request, we will also provide information about e.g. which categories of personal data are processed, what the personal data are used for and recipients of the personal data.

      Right to rectification: We strive to always have accurate personal data about you and to update them when necessary. If you discover that we process inaccurate data about you, you have the right to have these corrected. You also have the right to ask us to complete incomplete data if this is relevant based on the purposes for which your data are processed, by providing us with additional information.
      Right to erasure (right to be forgotten): You have the right to request the erasure of your personal data. However, certain conditions must be at hand in order for us to erase your data. For example, you may have the right to have your data erased if they are no longer necessary for the purposes for which they were collected. The right to erasure is not absolute and it may not always be possible to erase personal data on request, for example, when the data is still necessary to process for the purpose for which the data was collected or because we have a legal obligation to keep it.

      Right to object: You have the right to object to our processing of your personal data which is based on our legitimate interest (see legal bases in the table above). If you object, we do not have the right to process the data anymore, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or if it is needed for the establishment, exercise or defense of legal claims. If we consider that we have such legitimate grounds, or if the data are needed for the establishment, exercise or defense of legal claims, we will notify you of this, and the reasons for such assessment. You can also object to your personal data being processed for marketing purposes. If you do so, we will stop sending marketing messages to you.

      Right to restriction: You can request that the processing of your personal data should be restricted, for example if you do not think that the information we have about you is correct or if you believe that the processing is unlawful. Such request can also be made during the time we investigate whether our legitimate interests override your privacy interest when you object to the processing (see more about this under right to object above).

      Right to data portability: You have the right to receive your personal data, that you have provided to us in a structured, commonly used and machine-readable format (in case the legal basis for our processing is consent or performance of an agreement - see legal bases in the table above). However, this presupposes that the processing takes place by automated means (i.e. not in physical form on paper). If technically possible, and you wish to do so, we may also transmit such personal data to another data controller.

      If you want to read more about your rights – please see here.

      SECURITY

      Hästens has taken technical and organizational measures to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or unauthorized access and all other unlawful forms of processing.

      DISCLOSURE TO THIRD PARTIES

      Hästens can share your personal data:
       

      • Between Hästens’ legal units
      • With Hästens’ authorized dealers and partners for the purpose of distributing product and service offers and other communications to you
      • With Hästens’ authorized dealers and partners when you use and register for services provided on Hästens’ website and partner-specific subpages
      • In connection with the sale or transfer of a Hästens unit or its assets
      • As required by law, for example in connection with a government request, dispute or other legal process or request
      • When we have good reason to believe that the disclosure is necessary to protect our rights, for example to investigate possible violations of our terms and conditions or to identify, prevent or detect fraud or other security risks.

      Hästens, as the data controller for your personal data, will, as a general rule, only disclose your personal data to third parties if we have received your consent to this. However, if permitted by law, we may share your personal data without your consent, unless we believe that your consent is necessary in the individual case or your consent is required by law, in the following situations:

      • Situations where a disclosure is required by law.

      • Situations where disclosure is necessary for a purpose according to Hästens’ legitimate interest (for example, to protect our legal rights, as described above).

      MARKETING

      We will not share your personal data with third parties for their marketing purposes, unless we have obtained your consent to such disclosures. If you have provided such consent but wish to stop receiving marketing materials from third parties, please contact the third party directly. We may provide you with information about new products, services, events or similar marketing activities. If you wish to unsubscribe from a particular newsletter via e-mail or similar communication, please follow the instructions in the relevant communication.

      CONTACT DETAILS

      Use the following contact details to contact the Data Protection Officer:
      privacy@hastens.com
      Hästens Beds International B.V., Data Protection Officer, Apollolaan 151 1077 AR, Amsterdam, Noord-Holland Netherlands.
        PAGES  
       RESOURCES 
       SOCIAL 
      [bot_catcher]