1.2. Orrefors Kosta Boda AB, org.nr 556519-1300 (“OKB”, “we” or “us”) is the controller of personal data.
2.1 When you place an order on the Website, we collect and store the following information that you provide: name, address, e-mail address and phone number.
2.2 If you contact our customer service in relation to your order, we may – in addition to what is set out above – store such information you provide to our customer service.
2.3 If you participate in competitions that we arrange, we may collect additional personal data that you provide to us during the competition.
2.4 Please note that OKB uses an external partner to manage your payment, with separate terms and conditions. The current payment partner is Adyen, and you may find their terms here.
3.1 We use the personal data we collect for the following purposes:
a) To accept and process your order.
b) To, when needed, contact you in relation to your order.
c) To deliver the goods you have ordered (including to notify you of delivery).
d) To manage complaints and warranty related matters, legal matters and questions to our customer service.
e) Provided that you have not opted out, to send you information regarding us, our products and our services.
f) To provide such services that you have requested (e.g. subscription to our newsletter).
g) To manage competitions that we arrange.
3.2 OKB does not collect or purchase customer data from a third party. Neither do we disclose your personal data to a third party, except and insofar it is necessary to fulfill the purposes set out in section 3.1, to manage our IT systems or if it follows from law or a decision by a public authority.
3.3 Partners who process personal data on our behalf will always enter into a data processing agreement with us, to ensure that our partners maintain a high level of security for your personal data.
4.1 Personal data may only be processed if there is a legal basis for the processing, and OKB will always process your personal data in accordance with applicable law.
4.2 OKB will process personal data since it is necessary for us to fulfill the purchase agreement with the customer. Marketing to customers is based on our legitimate interest to provide relevant information and offers to our customers, alternatively based on consent if the customer has actively requested such marketing (e.g. by subscribing to our newsletter). In case we need to process personal data for legal matters (e.g. in relation to product liability), it is a legitimate interest for OKB to protect our legal interests.
5.1 We will only keep your personal information for as long as it is necessary according to the purposes set out in section 3.1, or is mandated by law.
6.1 OKB has taken necessary and appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, loss or use of personal data. For example, our systems have restricted access and the data is protected behind firewalls and through encryption.
7.1 Please note that the Website may contain links to other websites which are outside the control of OKB. These links may be provided to help you find information we believe are of interest to you as a customer. OKB is not responsible for the protection of your integrity or the contents on such websites, and we ask you to observe that such websites have their own terms and conditions and to review how they process your personal data.
8.1 You have the right to, in accordance with applicable data protection legislation, at any time request access to the personal data concerning you that we process. Further, you have the right to obtain rectification of inaccurate personal data concerning you, to obtain erasure or restriction of processing of personal data concerning you, to exercise your right to data portability and to object the processing of personal data concerning you.
8.2 In case you would like to exercise any of your rights, please contact us: Orrefors Kosta Boda AB, Stora vägen 96, SE-365 43 Kosta, Sweden
firstname.lastname@example.org (write “Data Protection” in the subject line)
8.3 You are further entitled to, at any time, lodge a complaint with the competent supervisory authority if you consider that your personal data has been processed in violation of applicable data protection legislation. A list of EU national data protection authorities, with contact information, is available here: