Effective from: 180522
Junkyard will process your personal data when you visit and shop at Junkyard’s webshop at www.junkyard.com. Your privacy is key to us and we want to make sure that you feel safe and informed when using our services, therefore Junkyard handles personal data with the utmost care.
Responsible for your personal data (data controller) is:
Company: Junkyard AB
Company identification number: 556603-2107
Address: Ladugårdvägen 101, 461 70 Trollhättan, Sweden
Phone: +46(0)10 510 05 00
Personal data means all information that enables a person to be identified directly or indirectly such as name, address, personal identification number, e-mail and IP-number.
You must be 18 years old, or 16 years old with your guardian’s permission, to be allowed to shop at Junkyard. You must be 18 years old to apply for credit services at Junkyard’s partners. You may create a customer account from the age of 16. At your customer account you can mark products as favourites and sign up for our newsletter.
We collect your personal data in the following situations:
When you create a customer account. If you want to you can create a customer account with us. In order to create a customer account you need to provide your name and e-mail. There is also some voluntary information that you may choose to provide, for example your birthday. When you create a customer account you receive a unique customer identification number.
When you shop at junkyard.com. When you purchase a product at junkyard.com you need to provide your name, e-mail, address and phone number in order for us to deliver your products and also to stop and prevent fraud (as well as for investigation of such). We will also store information regarding your purchases, order history and, if applicable, returns and exchanges. When you shop without a customer account you receive a unique customer identification number. Upon your purchase, you will get an e-mail with an offer to create a customer account connected to your customer identification number.
When your sign up for our newsletter. When you sign up for our newsletter you need to submit your e-mail. When you sign up for our newsletter you will receive a unique customer identification number.
When you apply for invoice. When you apply to pay by invoice a credit check will be done and sometimes also a credit score. This will be done by Junkyard’s partners that are controllers for such personal data provided by Junkyard. To complete the credit check you will need to leave your personal identification number.
Below you can find out how we use your personal data. We need a lawful basis for processing your personal data. Below you can see our purposes and the lawful basis for processing your personal data.
We will use your personal data:
Processing of personal data for performance of a) – f) above are necessary in order to enter into, and fulfil, our contract with you.
We use your personal data:
Processing of your personal data according to g) – j) above is based on your consent. You have the right to withdraw your consent to processing at any time.
We use your personal data at the use and provision of our services:
Processing of your personal data according to k) – r) above is done to improve your experience of our services and to offer you products from our assortment that can be of interest to you based on legitimate interest. You have the right to object to processing in these cases.
We use your personal data:
Processing of personal data in accordance with s) above is based on legal obligation.
We will also give you specific offers based on your personal data as well as from an analysis of your user behaviour, i.e. by profiling. You have the right to object to such processing at any time. Read more about this under section 13 below and in our Cooke Policy.
We may share your personal data to our trusted service providers who may process your data outside the European Union (EU) and the European Economic Area (EEA) when performing services on our behalf as set out in section 7 below. When we do this, we make sure that appropriate steps are taken to protect your personal information and your rights.
Your personal data may be shared with companies within our group. Data may also be shared with our service providers when needed for us to provide our services to you, such as carriers for delivery of products, e-mail service providers for distribution of newsletters, server hosts, business partners within statistics, advertising and personalisation, payment service providers, business systems and credit or collection agencies for credit checks, identity checks and debt collection. Personal data transmitted to our service providers may only be used of them for their fulfilment of their services.
Personal data may also be shared in order to comply with legal or regulatory requirements, court rulings, at suspicion of crime or otherwise if necessary to meet applicable regulations. In case Junkyard is sold or transferred, in full or partial, personal data may be transferred to the acquiring company as part of the sale or transfer.
You have the right to access your personal data processed by us and to get information on our processing. If you have a customer account, you can find your personal data under “My page”. Here you will find information about previous purchases, returns, exchanges and saved credit cards. If you don’t have a customer account or if you want our help you can send us an e-mail at email@example.com.
You have the right to rectification of inaccurate data. Under “My profile” on your customer account you can update the data we have on you.
You also have the right to be forgotten, i.e. to get your personal data deleted, for example in such cases where your personal data is no longer needed for the purpose they were collected. In case there are legal obligation that prevents Junkyard from deleting some or all of your personal data, we will not be able to delete your personal data during the time we are obliged to keep them.
In some cases, you have the right to request restriction of processing of your personal data. In such cases, we will restrict processing of relevant personal data, this means that they will not be used for other purposes than to fulfil legal requirements.
If you want to request rectification of inaccurate data, deletion of your personal data or restriction of processing of your personal data you can contact us at firstname.lastname@example.org.
We have taken appropriate security measures to protect your personal data from loss, change or unauthorised access. We are continuously improving our security measures in line with progress and developments in the technical field.
To make purchases by credit card as safe as possible, all information is transmitted encrypted. This means that all information is transmitted via a safe connection and that your personal data cannot be read by a third party. For card payments we work with payment service providers who help us to control with your bank that your card is valid for purchase. Our payment service provider processes your card details in accordance with the international security standard PCI DSS. Therefore, your card details are processed with very high security. When you pay by card we reserve the right to perform an identity check.
You have the right to get some of your personal data provided to us in a structured, commonly used and machine-readable format (given that they were provided based on consent or contract with you) for your own use or to move to another controller.
If you wish to get this information, or part of it, you can download it from your customer account. If you do not have a password connected to your customer identification number you can get one by clicking “forgotten password” under “My account”. If you want our help you can contact us at email@example.com.
Where technically feasible, we can send your personal data directly to another controller.
We will retain your data for as long as necessary in relation to the purposes for which it was collected. If you have not purchased (and have chosen not to receive any marketing) from us within a time period of 36 months, we will close your customer account.
When your personal data is no longer necessary for the purposes for which they were collected, your personal data will be deleted or anonymised if there is no other legitimate reason of storing your data.
We will also retain your personal data as necessary to comply with applicable laws, to resolve disputes and to enforce our contracts.
If you want to object to our process of personal data for merchandise or profiling purposes, please contact us at firstname.lastname@example.org.
In our offers to you by sms and e-mails there is a direct link to use to terminate the merchandise. You can also log in to your customer account and edit how and if you want to receive merchandise (under ”Edit profile”).
If you would like to terminate your customer account at junkyard.com you need to send an e-mail to email@example.com. Your customer account will be deleted within 30 days and you will no longer have access to the personal data stored in the account. We will only retain personal data as necessary for other legitimate reasons, such as receivables or before we have fulfilled our contract with you, such as a purchase.
The Swedish Data Protection Authority is the supervisory authority for the processing of personal data in Sweden. If you consider our processing of your data to be in violation of applicable data protection laws, you have the right to lodge a complaint with the Swedish Data Protection Authority.
We can update this policy at any time. When we make changes, we will publish the last updated version at junkyard.com and the changes will come into force on the publication date.
Please contact us if you have any questions or want to know more about Junkyard’s processing of personal data, either by e-mail to firstname.lastname@example.org or by post to Junkyard AB, att: GDPR, Ladugårdsvägen 101, 461 70 Trollhättan, Sweden.