Privacy Policy

We care about your personal integrity and strive to achieve a high level of data security. This privacy policy explains how we collect and use your personal data. It also describes your rights and how you exercise them.

It is important that you read the privacy policy. You are always welcome to contact us if you have any questions.

Who is responsible for the personal data that we gather and store?

La-Bas AB, 556801–6157, Jungfrugatan 62, 115 31 Stockholm, is Personal Data Controller.

What personal data do we collect about you/your company and for what purpose?

Purpose

To be able to manage the service LIQR and to fulfill our agreed upon obligations, for exemple to present or send relevant information and offers, etcetera.

Processing

  • Creating a log in function.
  • Ensuring our visitors legal age.
  • Maintaining correct and updated data.
  • Storage and transfer of contact details.
  • Sending relevant information and offers by email, SMS or similar channels.
  • Storage, analysis and processing based on your history, location, age, gender and website activities. This is done by, for instance, using cookies, the Meta pixel, Google Analytics and storing the website activity in a database.

Categories of personal data

  • Name
  • Age
  • Gender
  • Contact details (for example address, email and phone number)
  • Email and password
  • IP address
  • Location
  • Click on button that links to retailer (Systembolaget or Alko)
  • Facebook ID/Instagram ID
  • History (for example, what ad you clicked on and what pages on LIQR that you have visited)

From what sources do we collect your personal data?

Beyond the data that you provide us with we can also collect data when running ad campaigns and similar. If you connect to LIQR by an external service, such as Meta (Facebook or Instagram) or Google, information will be collected from that service. You will be informed what data is collected before you connect to any of those services.

With whom is it possible that we share your data?

Personal Data Processor

In case it's necessary for us to be able to provide our services we will share your personal data with so called Personal Data Processors. A Personal Data Processor is an organization that processes the data on our behalf. It can for example be a cloud storage service or an email service (Mailchimp).

Partners

In some cases, to make sure you will receive relevant information we can share some personal data with our partners. Such a partner could be Meta or Google.

Where do we process your personal data

We strive to always process your personal data in EU/EES. All our IT systems are in EU/EES.

What are your rights as a registered member?

Right to access your personal data

We are always open and transparent about how we process your data. If you want a deeper understanding about what personal data we store about you, you can request to get access to that data. We will send you a register extract containing purposes, data categories, receiver categories, storage times, information about where the data has been collected and any occurences of automated decision makings.

Please keep in mind that if we receive a request to access your personal data, we may need to ask you for more information to ensure efficient handling of your request and that the information is delivered to the right person.

Right to correction.

You can request that your personal data shall be corrected, if they are incorrect. You also have the right to request completion of incomplete personal data.

Right to deletion.

You can request deletion of personal data that we are processing if:

  • The data are no longer required for the purposes they were once collected or processed for.
  • You object against the balance of interest and your reason for objection is stronger than our legitimate interest.
  • You object against processing for the purpose of direct marketing.
  • The personal data is processed illegally.
  • The personal data needs to be deleted to fulfill a legal obligation to which we are subject.

Please keep in mind that we may have to deny your request in case there are legal obligations that prevents us to immediately delete certain personal data. These obligations come from bookkeeping and taxation legislation or bank and money laundring legislation. It is also possible that the processing or storage is necessary for us to establish, assert or defend legal claims. In case we would be prevented to accept a request of deletion, we will instead block the personal data from being used for any other purposes than the purpose that prevents the requested deletion.

Right to limitation

You have the right to request that our processing of your personal data is limited. If you claim that the personal data processed by us are incorrect, you can require a limited processing during the time we need to verify if the personal data are correct. If we no longer need the personal data for our purposes, but you need them to establish, assert or defend legal claims, you can request limited processing of the personal data by us. That means that you can demand us to not delete your personal data.

If you have objected against a balance of interests that we have esteemed based on legitimate interest, you can request limited processing during the time we need to verify if our legitimate interests are stronger than your interests to have your data deleted.

If the processing is limited according to any of the above situations, we can only, in addition to the storage itself, process the data to establish, assert or defend legal claims, to protect someone elses rights or if you have given your consent.

The right to object to certain types of processing

You always have the right to avoid direct marketing and to object against all processing of personal data that is based on balance of interests.

Legitimate interest

In cases where we are claiming balance of interests as a legal basis for a purpose, you have the possibility to object against the processing. To be able to continue to process your data after such an objection we need to show a compelling legitimate reason for the current processing that outweighs your interests, rights or freedoms. Otherwise, we may only process the data to establish, exercise or defend legal claims.

Direct marketing (including analyzes for the purpose of direct marketing)

You have the opportunity to object to your personal data being processed for direct marketing. The objection also includes the analyzes of personal data (so-called profiling) that are carried out for direct marketing purposes. Direct marketing refers to all types of outreach marketing measures (for example via e-mail and SMS). Marketing measures where you as a customer actively choose to use one of our services or otherwise sought us out to find out more about our services do not count as direct marketing.

If you object against direct marketing, we will cease processing your personal data for that purpose as well as cease all types of direct marketing activities.

Remember that you always have the opportunity to decide which channels we will use for direct marketing and personal offers. For example, you can choose to only receive offers from us via email, but not SMS. In that case, you should not object to the processing of personal data as such, but instead limit our communication channels.

You can also specifically object to the analyzes we do (profiling).

Right to data portability

In some cases, you have the right to request that the data concerning you and which you have provided to us be transferred to another personal data controller (so-called data portability). A prerequisite for data portability is that the transfer is technically possible and can be automated.

What is written about the rights above applies only to the processing of personal data covered by the GDPR.

How is your personal data protected?

We use IT systems to protect the confidentiality, integrity and access to personal data. We have taken special security measures to protect your personal data against unlawful or unauthorized processing (such as unauthorized access, loss, destruction or damage). Only the people who actually need to process your personal data in order for us to fulfill our stated purposes have access to it.

Contact the Authority for Privacy Protection

The Authority for Privacy Protection is a supervisory authority, i.e. responsible for monitoring the application of legislation. If you believe that a company processes personal data incorrectly, you can submit a complaint to the Authority for Privacy Protection.

What is the easiest way to contact us with questions about data protection?

You can always contact us at:

La-bas AB
Jungfrugatan 62
115 31 Stockholm
Sweden
Email: policy@liqr.se

We may make changes to our privacy policy. The latest version of the policy is always available here on the website.