policy

Details and purposes

Personal data is processed in order for GCU to be able to provide its services, mainly for the following purposes:

• Receive and process your orders and ship your goods to you.
• Manage any returns.
• Send SMS notifications about delivery status.
• Answer your questions and inform you about new or changed services.
• Be able to send marketing offers via newsletters.

The information that is processed is the information that you enter, for example, when you place orders, contact us via e-mail or. like that. The information you enter includes, among other things, contact information, delivery address and ordered goods (“personal information”). The personal data is necessary for GCU to be able to achieve its purposes. Certain information may also be collected from public records or from other publicly available sources. The main legal basis for the processing is that the processing is necessary for GCU to be able to fulfill its obligations towards its customers. Some processing is also based on GCU’s legitimate interest in being able to conduct its business in an efficient and secure manner and on GCU’s obligation to comply with legal obligations.

Information treatment

The personal data may be shared with authorities and other parties that GCU engages to achieve the purposes, for example delivery. The processing of the Personal Data will continue for as long as it is necessary to fulfill the purposes or as long as GCU is obliged to do this. The personal data is then deleted.

Contact

If you have any questions regarding the processing of personal data, you can contact GCU via info@gcu.se. You can also use this address if you want to exercise any of the rights you have as a registered person according to the GDPR. Please note that the rights under the GDPR are not absolute and that invoking a right does not necessarily lead to an action.

Your rights

Your rights under the GDPR include the following:
• Right to access – According to Article 15 GDPR, you have the right to access the Personal Data and to be
informed about the processing. That information can be found in this document.
• Right to rectification – According to Article 16 GDPR, you have the right to have inaccurate
personal data concerning you corrected without undue delay. Taking into account the purpose of the processing,
you also have the right to supplement incomplete personal data.
• Right to erasure (“the right to be forgotten”) – Under certain circumstances,
with the support of Article 17 GDPR, you have the right to have the Personal Data deleted.
• Right to restriction of use – Under certain circumstances, you have the right to
restrict the processing of the Personal Data according to Article 18 GDPR.
• Right to data portability – According to Article 20 GDPR, you have the right to receive the Personal Data
in a structured, commonly used and machine-readable format. You also have the right to transfer this data
to another personal data controller.
• Right to object – According to Article 21 GDPR, you have the right to object to certain processing
of the Personal Data, for example such processing which is based on GCU’s legitimate interests.

Swedish Data Protection Authority

Finally, you also have the right to file a complaint with the Swedish Data Protection Authority (formerly the Data Protection Authority), who can be contacted via imy@imy.se or 08-657 61 00.