Your privacy is important to Kanto Korniza. In this policy, we want to inform you about how we process your personal data and about your rights. Personal data is any information that can be connected to you as a private person, for example name and contact information.

In short, this is why we process your data:

• To the extent necessary for handling and delivering your order.
• To give you offers and inspiration both by newsletters, text message and by targeted marketing in social media, and other media online and offline.
• To communicate with you and answer your questions.
• To ask you about Kanto Korniza and your experience with us.
• To remind you of an abandoned shopping cart and to provide our picture wall feature.
• To create and maintain a customer account.
• To comply with mandatory law (e.g. consumer and accounting law).

You have several rights according to data protection law. For example you always have a right to object against marketing. You can also read about how to affect our processing of your personal data – what rights you have.

Your personal information is processed primarily by us at Kanto Korniza. We will never sell your personal data. In some cases, we share your personal data in order to fulfill our obligations to you in a good and efficient manner:

• ­In order for us to ensure that you pay us, our payment provider(s) will gain access to your personal data.
• ­In order for us to deliver your goods to your home address or to a postal agent, and to handle any returns, we will share your personal data with a carrier.
• ­To collect and publish your reviews on our website we share your personal data with the supplier that provide the technical solution to collect and publish such reviews.
• ­If a friend has referred you to us, we will share a hashed id (text-ID) of your email address with a supplier that have assisted us with enabling friend-referrals. The purpose is to know if we should pay the supplier of the service for referring a new customer or not. Note however that the supplier is not able to convert the text-ID to get access to your actual email address.
• ­To market relevant products and to make our website as relevant as possible we share your personal data with those providing us with a marketing service including such as Google and Facebook.
• We will share your personal data with IT suppliers that process the personal data on behalf of us as processors to assist us with IT-services.
• In order to print and deliver your personalised poster, we need to share your personal data and any information to be printed on the poster with our printing service provider.

If you want more detailed information about who we share your personal data with, please feel free to contact us.

Kanto Korniza generally process your personal data within the EU/EEA, but in a few cases we use suppliers from countries outside of the EU/EEA. When transferring your personal data outside of the EU/EEA, Kanto Korniza will ensure there is an adequate level of protection.

If you have any questions about how we share your personal data or if you want the information appropriate safety measures we have, please contact us.

According to data protection legislation, you are entitled to a variety of rights to affect our processing of your personal data. Read more below.

You have a right to, entirely or partly, withdraw a given consent for the processing of your personal data. Your withdrawal will have effect from the time of your withdrawal.

You have the right to object to our processing of your personal data. You always have a right to object to marketing from us, such as newsletters.

The right to object generally is applicable when the processing is based on a balance of legitimate interests. Read more about what this means in the tables below. In some cases however, the right to object does not exist (e.g. since we must store your personal data). If we can show compelling legitimate reasons for the processing that weigh heavier than your interests and fundamental rights or if it is for the purpose of determining, practicing or defending legal claims you never have a right to object to the processing.

You have the right to obtain confirmation as to whether or not we are processing personal data concerning you. You can gain access to the personal data and obtain a copy of the personal data processed by us.

Under certain circumstances, you have a right to request erasure of your personal data. This is the case for example where the personal data is no longer necessary for the purposes for which they were collected or otherwise processed, or you withdraw your consent on which the processing is based and where there is no other legal ground for continuance of the processing.

You also have a right to request that Kanto Korniza restrict its processing of your personal data. That is the case for example when the accuracy of the personal data is contested by you, or the processing is unlawful and you oppose the erasure of the personal data and instead requests restriction of its use.

You have a right to ask us to transfer certain of your personal data we have about you to another company (data portability).This right applies to personal data that you have provided us in a structured commonly used, machine-readable and interoperable format if:

• ­The processing is based on consent or on a contract; and
• ­The processing is carried out by automated means.

In exercising your right to data portability, you have the right to have personal data transmitted directly from Kanto Korniza to another controller, where technically feasible.

Our aim is to be as transparent as possible regarding how and why we process your personal data. In the table you can read more detailed information about why we process your personal data (the purposes of processing), what personal data we process, our legal basis for processing your personal data, and how long we process your personal data for each purpose.

We process personal data that you have chosen to share with us.