OÜ "Runikon Retail" (hereinafter “company” or “we”) respects your privacy and is committed to protecting it through compliance with this privacy policy (hereinafter “Privacy policy”). In this Privacy policy, we will inform you about how we process your personal data. We commit ourselves to be transparent with you by providing clear information about what personal data we process, the purpose of the processing, the retention period of the personal data as well as the legal basis for the processing and other information that we are required to provide under the applicable legislation.

Topics

1.    What personal data do we process and why?
    1.1. Video surveillance
    1.2. Guest registration
    1.3. Marketing projects/activities
    1.4. Games and/or contests
    1.5. Public relations
    1.6. Social media
    1.7. Home delivery
    1.8. Assembling and/or installation of furniture (including measurement of the premises)
    1.9. Interior design services
    1.10. IKEA home planning programs
    1.11. Returns
    1.12. Customer support
    1.13. VAT invoices for goods, services
    1.14. Wheelchair loan
    1.15. Hire purchase
    1.16. Lost and found
    1.17. Småland
    1.18. IKEA Business
    1.19. Contracts management
    1.20. Legal claims
    1.21. Business partners, potential business partners, and its employees/representatives’ personal data
2.    To whom do we disclose the personal data?
3.    Protection of personal data
4.    Your rights
5.    Changes in our Privacy policy
6.    Contacts
1. What personal data do we process and why?

The purposes, categories of personal data that we do process about you and the legal basis for the processing are mentioned below. By providing your personal data you confirm that your data is accurate and correct and that you are at least 18 years old. If you notice any inaccuracies, you should immediately correct your data.

1.1 Video surveillance

Description
We process your personal data for the purpose to ensuring the safety of our property, information, employees and third parties, to prevent, control and disclose unlawful acts, and incidents and to ensure an effective investigation of such cases, if happen.

You have no obligation to provide personal data and we have no aim to identify you unless it is necessary for this specific purpose. Nevertheless, due to the nature of video surveillance, we cannot guarantee your ability to receive our services without being subject to video surveillance.

The video surveillance of indoor and outdoor territories is continuous 24/7.

Video surveillance records shall be stored no longer than for 6 months, unless these records contain information that is necessary as evidence in a legal claim or for an investigation. In such cases, the records may be stored as long as they are necessary for the aforementioned purposes and will be immediately destroyed when they become unnecessary.

We transfer your personal data to our data processors, e.g. who provide system maintenance services to us etc.

Categories of personal data
Image and other personal data fall into the camera’s field. No recording of the voice.

Legal basis for the processing
Our legitimate interests are to ensure the safety of our property, information, employees and third parties, to prevent, control and disclose unlawful acts, and incidents and to ensure an effective investigation of such cases.

1.2 Guest registration

Description
When you are visiting our premises, you provide personal data that we will process.  We are processing your personal data to find out what and how many persons are in the building during evacuation and other dangerous and unexpected situations, when the threat of injuries and/or death is possible. We are also processing your personal data to control the access of individuals to our premises, to ensure the safety of our property, documents and information.

If you are entering our premises, you should provide your personal data. If you do not provide data, we can  refuse to let you into it.

We obtain information about you when you are filling out the registration journal yourself, as well as when you are using a visitor card.

Visitors’ registration journal will be stored 30 days after its last record.

Categories of personal data

  • Name 
  • Surname
  • Company
  • Date and time (the beginning and the end of the visit)
  • Visitors card number
  • Signature

Legal basis for the processing
Data is processed for our legitimate interests mentioned above.

1.3 Marketing projects/activities

Description
We process your personal data to communicate information about our company and its activities and to give you an opportunity to participate in our projects, activities and events and enjoy the results or the output of it.

We obtain information about you when you participate in projects, events, or other activities at our Customer Meeting Points or online.

Projects and/or events are open to everyone, the participation is not mandatory. You are free to choose whether you participate or not. Please note, that we may take pictures or film without explicit consent of the attendees. If you want to avoid the possibility of capturing your image, you are free to not attend the events organised by us or to contact us and ask to exclude your image from the communication materials. When you participate in the events, you should be aware that your image could be captured and used for our communication.

Your name, surname, phone number or e-mail are only collected when we want to prepare a participant’s list for an event or inform you about the possibility of getting/taking away the result of our collaboration (e.g. to receive photos, etc.).

Your name, surname, phone number e-mail and registration data will be stored until the end of the event for which they were collected. Your image (picture or video) from projects/events/activities will be stored for 10 (ten) years starting from the actual event date or 10 (ten) years from the date of signing of a contract on the assignment of the rights to use the image (for specific projects).

We transfer your data to our data processors who provide us with photo or video editing services, printing services, marketing agencies, providers of IT systems and/or services etc.

Categories of personal data

  • Image (picture or video) 
  • If necessary, for specific project and/or event: name, surname, e-mail, phone, address, registration, and other data.

Legal basis for the processing
Depending on the situation, it is either your consent or our legitimate interest to communicate information about our company and its activities or contract.

1.4. Games and/or contests

Description
We process your data for the purpose of organizing, executing, and administering games and/ or contests, determining and announcing the winner, and presenting prizes and/or other gifts. Having received a complaint regarding a game and/or a contest, personal data shall be processed to file, execute, or defend legal claims (see point 1.20. „Legal claims“).

Participation in a game and/or a contest is optional, but if you agree to participate, you shall submit your personal data requested in the game and/or the contest. Otherwise, you will not be able to participate in the game and/or the contest.

We receive information about you when you agree to participate in the game and/or a contest by completing a registration form or when you voluntarily agree to publish data in comments, messages, posts, etc. in social networks. You have the right to withdraw your consent to collecting and processing your data at any time without affecting the lawfulness of the collection and processing of the data till the withdrawal of the consent. Having withdrawn his consent, a participant in a contest and/or a game shall be removed from the list of participants and shall no longer participate therein. By participating in a contest and/or a game, you also consent to the publication of the receipt number and the date, or the username used in social networks on the contest and/or game website or in social networks in case of winning.

We may also use an automated decision-making programme to manage the registration for a game and/or a contest or to determine the winners of the game and/or the contest. It doesn't cause you any legal effect. If you do not want to be subject to automatic decision-making, you will not be able to participate in the game and/or the contest.

Personal data of game and/or contest participants shall be stored till the day the winner is determined or no longer than 5 working days after the deadline for filing a complaint regarding the game and/ or the contest. Personal data may be stored longer if a complaint has been received regarding a game and/or a contest. In such a case, personal data shall be stored until the complaint has been resolved.

We transfer your personal data to couriers if a prize and/or another gift is delivered to the place of residence, or data processors, such as providers of IT systems and/or services. We allow you to upload your content, for example photos, in social media games and/or contests. In such a case, information that you provided or published shall become public information.

Personal data categories
Depending on the game and/or a contest, there may be one or several of them:

  • Name
  • Surname
  • Social network user name
  • Telephone number
  • E-mail
  • IKEA FAMILY card number
  • Receipt date
  • Receipt number
  • Other contest and/or game-related data (such as photos, etc.)

In case of winning

  • Address (when the prize or another gift is delivered to the place of residence)

Legal basis for data processing 
Your consent.

1.5. Public relations

Description
We process your data if you are journalist and other media representative, blogger, vlogger, or opinion leader to distribute relevant information to the general public or cooperate in advertising of our company. If you would like to receive the news of our company or cooperate with us, we will collect certain information about you. We use the collected data to send you our news like press releases, event invitations, and goods and communicate on the phone, through social media or via other communication channels, o provide you information of our company that is relevant to society.

We obtain information about you when you provide personal data to us by expressing your wish via e-mail  or agree to receive news when attending our events or communicate directly with our Marketing or Public Relations representatives. Sometimes we may receive your personal data from public relations agencies.

You have no obligation to provide all personal data, you may provide only those elements which you prefer to use for communicating with us (for example, you may provide only the company’s name and e-mail). If you do not provide the necessary data, you will not receive our news. If you find the information, we send irrelevant, you can unsubscribe by expressing your wish via e-mail to the company’s Public Relations or Marketing employees.

Your personal data will be stored until you unsubscribe or otherwise request us to delete your data, until we find out that the recipient is no longer accessible (e.g. receive automatic notification that the contacted person is not working there anymore or that such e-mail address has ceased to exist) or for 10 (ten) years from our cooperation. If we have collected additional data, e.g., food preferences, such data will be stored for no longer than until the end of the event.

The personal data is disclosed to companies that provide services to us, i.e. in some cases we may transfer your personal data to the company’s public relations agencies to share information on our behalf, to data processors, e.g. who provide us IT systems and services etc. In case of a global event communication, if we have your consent, we may transfer your personal data to Inter IKEA Group etc.

Categories of personal data

  • Name
  • Surname
  • Photos and/or videos
  • Company (media, agency, etc.) 
  • E-mail 
  • Phone number
  • Address 
  • Social media account or other communication channel’s account
  • In specific cases (like media trips, and events with catering) to ensure your health and safety, we may ask to provide additional data, for example, for your food preferences.

Legal basis for the processing
Depending on the situation, it is either your consent or our legitimate interest in maintaining public relations.

1.6. Social media

Description
We use external social channels like Facebook, Instagram, Pinterest, YouTube, etc. to keep our customers updated on the latest trends, products, and events and to advertise our products and services. When you are using or posting personal information on our social media channels we may receive it. We only use the data you voluntarily provide to us for the purposes indicated above, e.g. by commenting on our posts, participating in marketing activities, events etc.

Our social media channels are integrated into service providers ‘, e.g. Meta websites, so these companies have all the possibilities to collect other personal data about you. If you would like to know how these companies process your data, you can read their privacy policies.

Your data in social media will be stored for 10 (ten) years.

The data is disclosed to companies that provide services to us, i.e. agencies which are supporting us on social media, providers of IT systems and services etc.

Categories of personal data

  • First name
  • Last name
  • Social network username
  • City
  • Profile picture
  • Photos
  • Activities (comments, posts, likes, events etc.)
  • Messages in social media account
  • Other information which could be accessible based on user's privacy preferences

Legal basis for the processing
It is necessary for the purpose of our legitimate interests to promote the brand, products, and services.

1.7. Home delivery

Description
We process your data to fulfil your order of home delivery of goods.

We receive your data when you submit your order for home delivery of goods.
If you order the service of home delivery of goods, you have to provide your personal data. If you fail to provide it, we will not be able to fulfil your order.

We transfer your data to our partners, i.e. companies providing home delivery services that deliver goods directly to your door, and data processors, e.g. who provide us IT systems and services.

Your personal data shall be stored for 10 years from the date of order fulfilment.

Categories of personal data

  • Name
  • Surname
  • Address (including the door code)
  • Phone number
  • Order date and number

Legal basis for the processing
We process personal data to sign the agreement on the delivery of goods and fulfil it.

1.8. Assembling and/or installation of furniture (including measurement of the premises)

Description
We process your data to fulfil your order for assembling and/or installation of furniture (including measurement of the premises). We receive your data when you submit the aforementioned orders to us.

If you order these services, you have to provide your personal data. If you fail to provide it, we will not be able to fulfil your order.

We transfer your data to our partners, i.e. companies or persons that provide services of assembling and/or installation of furniture (including measurement of the premises), data processors, e.g. who provide us IT systems and services.

Your personal data shall be stored for 10 years from the date of order fulfilment.

Personal data categories

  • Name
  • Surname
  • Address (including the door code)
  • Phone number
  • Order date and number

Legal basis for data processing 
We process personal data to sign an agreement and fulfil it.

1.9. Interior design services

Description
We process your data to provide home furnishing (design) services, including kitchen planning.

Also, when you submit an inquiry on missing kitchen parts, we process your data to notify you that we received these parts and you can purchase them.

We receive your data when you contact us by email, fill out kitchen planning questionnaire, as well as when you notify us about missing parts and ask us to notify you.

You have to provide your personal data when you order these services or request to order particular kitchen parts. If you fail to provide it, fulfilment of your order or ordering of parts may be complicated or not completed.

Your personal data shall be stored for 1 year from the date of order receipt. If the design service agreement is signed personal data will be stored for 10 years. When you provide personal data regarding to kitchen parts we shall store the personal data for 3 months.

Categories of personal data

  • Name
  • Surname
  • E-mail
  • Phone number
  • Address
  • List of the goods
  • Layout and description of the premises

Legal basis for the processing
We process personal data to sign an agreement and fulfil it.

1.10. IKEA home planning programs

Description
We process your data to allow you to create an account of IKEA home planning programs where you can use our interior design tools and furnish your home with IKEA furniture as well as to save your planning drawings and shopping list in your account. Creating this account is completely voluntary.

If you would like to create IKEA home planning program account, you have to provide personal data. If you do not, you will not be able to create an account.

Your account data will be stored for 24 months. Personal data may be disclosed to IKEA group companies as well as to data processors that provide the services, e.g. who provide us IT systems and services.

Categories of personal data

  • Name
  • Surname
  • E-mail
  • Shopping list
  • Planning drawings

Legal basis for the processing
It is necessary for the performance of a contract.

1.11. Returns

Description
We process your personal data to ensure your right to return and/or replace goods under with the laws and internal procedures, as well as to carry out refunds to your bank account in such cases when you e.g. overpay for our goods, when refundable amount exceeds EUR 300, etc. Your contact information is processed, so we can contact you if needed (e.g. when you provide us with incorrect information).

You have to provide your personal data, so we can return and/or replace goods to make refunds. If you fail to provide the data, we shall not be able to ensure your right to return and/or replace goods, nor shall we be able to make refunds to your bank account.

We receive information about you once you fill out a form of replacement and/or return of goods or a refund request. Also, in such cases when you contact companies providing home appliance warranty services, these companies provide us with your details, so we can contact you and make a refund or deliver a new high-quality home appliance to a company providing home appliance warranty service.

Your personal data present in the act of replacement and/or return of goods or a refund request shall be stored for 10 years. Personal data received from companies providing home appliance warranty services shall be stored for no longer than 6 months.

We transfer your personal data to our data processors, e.g. providers of IT systems and services.

Categories of personal data

  • Name 
  • Surname 
  • Phone number (optional) 
  • Bank account number (in case of refunding to a bank account)
  • Signature

Legal basis for the processing
It is necessary for the performance of a contract.

1.12. Customer support

Description
We process your data, so we can evaluate and address your enquiries, requests, suggestions, notes, complaints, requirements, and feedback, as well as to make sure that they are reasonable and to provide you with an answer by also seeking to declare, fulfil or protect legal requirements.

In the case of a complaint you must provide us with your first name, surname, contact information, complaint description and documents supporting the legitimacy of your complaint. If you fail to provide the mandatory information, we shall not be able to evaluate and address your complaint. We allow you to choose whether you want to receive an answer to your enquiry, request, suggestion, note, complaint, requirement, or feedback, and in what way you want to receive it, therefore specify your phone number or email e-mail based on your preference. If you fail to provide the specified information, we shall not be able to answer you.

We receive your personal data once you provide us with the aforementioned enquiries, requests, suggestions, notes, complaints, requirements or feedback via email, through the call centre phone line, our Facebook account, public space, as well as when you fill out feedback forms.

All the personal data related to complaints being addressed or submitted enquiries, requests, suggestions, notes, requirements or feedback shall be stored for no longer than 3 years from the date of their settlement. Personal data may be stored longer if settlement of a complaint or enquiry, request, suggestion, note, requirement or feedback fails or is still in progress, also if personal data is required to protect our or any third parties’ legitimate interests, e.g. for the period of statutory limitation or in case of a legal dispute. If a complaint is to be settled by signing a peace agreement, your personal data shall be stored for 10 years.

We may transfer your data to an insurance company. We transfer your personal data to our data processors, e.g. who provide us with IT systems and services, provider of text messages.

Categories of personal data

  • Name
  • Surname
  • Address
  • E-mail
  • Phone number 
  • Description of complaint or other request
  • Documents supporting the complaint that aside from other personal data may also include health data given that the request is related to compensation for damage because of health impairment
  • Loyalty card number
  • Purchase history
  • Feedback
  • Other related information

Legal basis for the processing
Your personal data are processed based on our legitimate interests to make sure that your complaint or other request is legitimate as well as to analyse it, while we process personal data of special categories to declare, fulfil or protect legal requirements.

Personal data may also be processed based on your consent.

1.13. VAT invoices for goods, services

Description
We process your data, so we can ensure fair fulfilment of tax obligations, correct invoicing of accounting documents, as well as we can invoice you and administer accounting documents, e.g. VAT invoices, credit VAT invoices when you purchase goods in our meeting points.

We receive information about you when you provide it to us.

You have to provide us with your first name, surname, address. Such personal data is required to correctly invoice documents as well as to declare the acquisition of goods to state institutions.

If you fail to provide your personal data, we shall not be able to issue you accounting documents and declare your acquisition of goods to state institutions.

Your personal data shall be stored for 10 years from the date of acquisition and accounting document invoicing.

We transfer your personal data to state institutions (tax institutions mostly), auditors, our data processors, e.g. who provide us with IT systems and services.

Categories of personal data

  • Name
  • Surname
  • Address
  • Order date and number
  • List of goods

Legal basis for the processing
It is necessary for the performance of a contract.

1.14. Wheelchair loan

Description
We process your data, so we can provide you with a wheelchair for temporary use free of charge during your visit to our store during its working hours and in case we need to contact you (e.g. if a wheelchair is not returned).

So we could provide you with the wheelchair for temporary use, you must provide us with your personal data. If you fail to provide the data, we may refuse to hand it over to you.

We receive information about you once you fill out your application for a wheelchair loan.

Your personal data is stored until you return a wheelchair.

Categories of personal data

  • Name
  • Surname 
  • Phone number
  • Signature

Legal basis for the processing
Your personal data is processed to fulfil an agreement.

1.15. Hire purchase

Description
We process your data for the purpose of hire purchase allowing you to pay for goods at our selling points based on your loan agreement. Additionally, we use certain data for statistical purposes, as outlined in point 1.6. of „Privacy policy for loyalty program and digital solutions“.

When you initiate the hire purchase process, you provide us with your certain personal data. This information is immediately transferred to our partner AS "Citadele banka" where it is securely stored. We also receive some data from AS "Citadele banka", when you sign a loan agreement with them.

If you do not provide personal data, you will not be able to use the hire purchase service.

Your personal data shall be stored for 12 months from the financing agreement.

We transfer your personal data to our data processors, e.g. who provide us with IT systems and services.

Categories of personal data

  • Credit amount
  • Name
  • Surname
  • Date of loan agreement 
  • Phone number
  • Email
  • Technical information (e.g. where and when the QR code for credit is scanned)

Legal basis for the processing
Personal data is processed to fulfil an agreement.

1.16. Lost and found

Description
We process your data to ensure your right to retrieve the item(s) that you lost (left) at our Customer Meeting Points.

We receive your personal data when you sign the act of acceptance of findings.

You are not obliged to provide your personal data, but if you fail to provide them it shall be more difficult to get the items back.

Your personal data shall be stored for 1 month from the date of signing of the act of acceptance of findings.

Categories of personal data

  • Name
  • Surname
  • Signature

Legal basis for the processing
Your personal data are processed based on our and your legitimate interests to retrieve your item(s) that you lost (left).

1.17. Småland

Description
When you leave your child in the Småland playroom for our supervision, you have to fill in the form and provide your and your child‘s personal data for our processing. The registration form is considered as the agreement between you and us to provide the services of Småland.

If you do not specify your first name, surname, telephone number, and the child’s first name and age, you will not be able to use our services.

We process information on your first name and surname to identify you as the person responsible for the child during the child’s visit to the Småland. We process the information on your telephone number to be able to contact you when your child is at the Småland, or if you leave any personal belongings behind after visiting the Småland, etc. We process information on your child’s first name to identify your child who is at the Småland.  We process information on your child’s age in order to determine whether and under what conditions the child has the right to visit the Småland based on the Rules of the Småland. If you decide to provide other information that you consider necessary to know to better care for your child, you will provide this information with your free, wilful consent. This information is not mandatory to provide, and you have the right to decide freely if it is necessary or not.

We store personal data provided for the purpose of visiting the Småland for one month after the expiry of the calendar month during which you completed the registration form.

In the cases provided for in legal acts, your and/or the child’s personal data may be transferred to insurance companies, law enforcement, judicial or pre-trial authorities due to their investigation, to legal advisers, or in other cases provided for by legal acts. We can disclose your personal data to medical professionals and emergency services providers in case your child needs of emergency medical aid and this is necessary to save the life of the child.

Categories of personal data

  • Child’s name
  • Age 
  • Phone number
  • Name and surname of parents (guardians) 
  • Type of relationship with the child (parents, authorized person etc.) 
  • Signature 
  • Other necessary to-know information, e.g. information relating to the health conditions, if you think that we should know based on your express consent

Legal basis for the processing
We process personal data to perform a contract with you or to enter into a contract with you.

Your consent if you decide to provide other information that you consider necessary to know to better care for your child.

1.18. IKEA Business

Description
To maintain a business relationship, manage and execute IKEA Business activities for companies and organisations, to sign and execute agreements, and/or to contact for various questions about agreement fulfilment with IKEA Business clients, we have to process personal data of IKEA Business clients (which may also be natural persons - entrepreneurs), their employees and/or representatives’.

Also, with IKEA Business client’s (if she/he is natural person) or IKEA BUSINESS client (if it is company) employeesand/or representatives’ prior free consent we are sending information about our products, services, offers, promotions, and events for companies and organisations, the surveys to provide feedback and rate products purchased from IKEA, also to better understand if the information we send is relevant we track interaction of newsletter (information if a newsletter was read, when it was read, how many times it has been read (or opened), if it has forwarded, what operating system was used, which email server, including its location). In such cases, personal data will be stored as long as direct marketing is unsubscribed.

IKEA Business clients, their employees and/or representatives personal data will be stored for 10 years from the date of termination of a contract if the contract was signed. If the contract provides for a warranty period that exceeds the storage term specified above, then all personal data relating to the contract will be retained until the warranty period expires. If the contract was not signed, personal data of IKEA Business clients’, their employees and/or representatives will not be stored.

We can disclose your personal data to auditors, finance and law consultants, companies that provide home delivery, furniture assembling and installation services, data processors, e.g.  company whose system we are using for sending newsletters, providers of IT systems and services etc.

Categories of personal data

  • Name
  • Surname
  • Email 
  • Phone number 
  • Interaction of newsletter (information if a newsletter was read, when it was read, how many times it has been read (or opened), if it has forwarded, what operating system was used, which email server, including its location)

Legal basis for the processing
Consent for direct marketing (if the recipient is IKEA Business client (natural person) or IKEA Business client’s employee/representative). We process personal data to perform a contract or to enter into a contract.

1.19. Contracts management

Description
We process your data for the purposes of concluding the contracts, of performing these contracts, monitoring their execution, processing payments under concluded contracts, deal with complaints and claims related to the conclusion, execution and/or termination thereof.

In addition, we process your personal data to ensure accurate execution of our tax obligations: issuing/receiving invoices, calculating taxes, and payments and declaring to supervisory tax authorities information about the services/goods we have obtained from you and the payments to you.

We can process your personal data to recover debts and/or other payables where necessary and fulfil our legitimate interest when bringing, presenting and defending legal claims.

We obtain information about you when you submit it to us by concluding the contract and/or providing services/goods (if not contracted).

You have to provide us your name, surname, VAT registration number (if registered as a VAT payer), address, commercial register number and contacts. If you do not provide the mandatory information, we will not be able to conclude an agreement with you and not be able to buy the services/goods provided by you.

Your personal data will be stored for 10 (ten) years from the expiry date of a contract. If the contract provides for a warranty period that exceeds the storage term, all personal data related to the contract will be retained until this warranty period expires. If you have provided us with services, but there was no contract concluded with you, your personal data will be stored for 10 (ten) years starting from the provision of the service and the issuance of the accounting document.

We transfer your data to banks, state institutions (mainly supervisory tax authorities), auditors, legal, financial advisers, debt collection companies, data processors, e.g. providers of IT systems and services etc.

Categories of personal data

  • Name 
  • Surname
  • Bank account
  • Date of birth or/and personal code
  • VAT registration number (if registered as a VAT payer)
  • Commercial register number
  • Address
  • Email 
  • Phone number

Legal basis for the processing
We process personal data to perform the contract with you or to enter into a contract with you. However, if we retain your personal data to recover debts and/or other payables, such processing of personal data is based on the legitimate interest to protect our rights.

1.20. Legal claims

Description
We may process personal data, including special categories of personal data to inform relevant regulatory authority/enforcement authority about possible criminal offences and/or administrative offences and/or other misdemeanours as well as to bring, present and defend legal, including insurance claims where necessary.

Your personal data will be stored for 10 (ten) years from closing the above-mentioned case.

We can disclose your personal data to law enforcement and other regulatory authorities, legal advisers, insurance, data processors, e.g. providers of IT systems and services etc.

Categories of personal data

  • Name
  • Surname
  • Phone number
  • Email
  • Other information related to criminal activities, administrative infringements, other infringements and/or legal/insurance claims
  • Documents supporting the claim that aside from other personal data may also include special categories of personal data, e.g. health data

Legal basis for the processing
The legal basis for the processing of this data is the aforementioned legitimate interest and in cases of processing of special categories of personal data – establishing, claiming and defending legal claims.

1.21. Business partners, potential business partners and its employees’/representatives’ personal data

Description
We process your (as a business partner’s employee’s/representative’s) personal data to sign and execute the contracts, and/or to contact you about various questions about agreement fulfilment.

We process your (as a potential business partner’s employee’s/representative’s) personal data to build new business relationships (e.g. when we are receiving commercial offers in our tenders).

Business partners, potential business partners, and its employees’/representatives’ personal data will be also processed to ensure that the IKEA refrain from engaging in business with organisations and/or individuals included in global and local sanction lists and/or relationships that could impact the reputation of the IKEA.

We obtain your personal data from you, from our business partner, the potential business partner, and public resources: webpages which provide public information about business partner or potential business partner, its employees/representatives, the list of global and local sanction lists, geographical risks, screening database Okredo.com.

Your (as a business partner’s employee’s/representative’s) personal data will be stored for 10 (ten) years from the end of the contract. If the contract provides for a warranty period that exceeds the aforementioned storage term specified above, then all personal data relating to the contract will be retained until this warranty period expires. Your (as a potential business partner’s employee’s/representative’s), personal data will be stored 3 years after the end of the tender.

We can disclose your personal data to auditors, state institutions (mainly tax authorities), finance and law consultants, data processors, e.g. providers of IT systems and services etc.

Categories of personal data

  • Name
  • Surname
  • Registration number
  • Address
  • Email
  • Phone number
  • Position 
  • Basis of representation
  • Information if business partner and/or potential business partner is/is not included in global and local sanction lists 
  • Board members 
  • Ultimate beneficial owners, including their country of citizenship, country of permanent residence, percentage share of share capital 
  • Data on connection with politically exposed persons (special category)

Legal basis for the processing
Legitimate interests to conclude and execute contracts with business partners, to build new business relationships with potential business partners and to protect reputation of the IKEA.

For data about politically exposed persons: explicit consent of business partner, potential business partner, its employee’s/representative’s.

2. To whom do we disclose personal data?

We disclose your data to:

a)    Companies we work with
We work with several trusted service providers who carry out services on our behalf and are mentioned in each section. These companies are required to adequately safeguard your personal data and not use this data for any unauthorised purposes, and to ensure that its suppliers do the same.

We may need to disclose your personal data to our insurers where we believe that it is required under our contractual relationship with our insurance provider to do so.

We may share the personal data we collect with other organisations in the Inter IKEA Group where those other companies support various operations and business processes (such as Inter IKEA Systems B.V., IKEA Lithuania, IKEA Latvia, etc). 

b)    State and local government institutions, other persons performing functions assigned to them by law
We transfer your personal data to state and local government institutions and other persons performing functions assigned to them by law upon their legal request or to meet our legitimate interest in establishing, claiming and defending legal claims.

3. Protection of personal data

We take the following precautions concerning the personal data you provide us:

a)    Security
We take the security of your data very seriously. We have implemented various strategies, controls, policies and measures to keep your data secure and keep these measures under close review. We protect your data by using encryption techniques and we use other safeguards such as firewalls and password protection, processes for regular testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing, etc. This means that your data is protected and only accessible by co-workers who are trained and need it to carry out their job responsibilities. We also ensure that there are strict physical controls in our buildings which restrict access to your personal data to keep it safe.

b)    Transfer of your personal data outside the EU/EEA
The companies mentioned above mainly process personal data within the European Union/European Economic Area. Sometimes we may need to transfer your personal data to our service providers which are established outside the EU/EEA, i.e. in a third country, for example the USA.

Other third countries may not have the same data protection laws as the European Union/European Economic Area so your data may not be subject to the same protections. However, in such cases, we will make sure that any transfer of your data to countries outside the European Union/European Economic Area is subject to appropriate safeguards set out in data protection laws (e.g. data can be transmitted based on signed EU Standard Contractual Clauses).

4. Your rights

Your rights are:

a) The right to access - you have the right to obtain a confirmation from us as to whether or not we process your personal data and, when we do, access the personal data. That’s why we inform you in advance about our processing activities via this privacy policy. If you have any questions, or would like to learn more about what information from you we process, you are always welcome to contact us and we will provide you with further information.

b) The right to rectification - you have the right to request a correction of any inaccurate personal data.

c) The right to erase - under some circumstances you have the right to the erasure of your personal data, if you believe there’s no longer any need for us to keep it. Or, if you previously have given your permission, you can just decide to withdraw it.

This does not apply if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation or the establishment, exercise, or defence of legal claims.

d) The right to receive yourself or transfer your personal data to another company in certain circumstances (known as the right to data portability). This applies when data processing is based on your consent or a contract and whenever processing is carried out by automated means.

e) The right to restrict - in some circumstances you have the right to restrict the processing of your personal data. This means we will continue to store your information, but we’ll temporarily stop any other processing. Why would you want to do this? For example, if you’ve asked us to fix incorrect information. In this situation you may want us to stop processing until the information is correct.

f) The right to object - you have the right to object to our processing. This applies when data processing is based on legitimate interests pursued by us or by a third party. You can do this when you believe that your personal interest outweighs ours.

g) The right to object - you have the right to object to our processing of your personal data for direct marketing purposes.

h) Object to automated decision-making which produces legal effects concerning you or similarly significantly affects you.

i) The right to withdraw your consent to the processing at any time.

To carry out the aforementioned rights please provide a written request to us or the Data protection officer (contacts mentioned below).

You also have the right to complain to the Estonian Data Protection Inspectorate (https://www.aki.ee), 39 Tatari St., 10134, Tallinn, Estonia, tel. +372 627 4135, e-mail: info@aki.ee, if you believe that the processing of personal data by us does not comply with the applicable legislation.

5. Changes in our privacy policy

We revise our Privacy Policy on a regular basis. Please regularly check this policy to ensure you are aware of the most updated version. This version was updated on the 1st of June, 2024.

6. Contacts

If you have any questions about the processing of your data, any requests, or if you would like to give us feedback, please contact:
OÜ Runikon Retail, registration number 14611049, legal address: Kangrumetsa St. 1, Kurna, 75307 Harju maakond, Republic of Estonia phone number: +372 330 4000, e-mail address: info@IKEA.ee.

Data protection officer: dpo@ikea.ee
You also can contact our Data protection officer by sending a letter to us at the above mentioned address and addressing it to the Data protection officer.




X

Back to stock notifications

Be the first to know when [itemName] is available again:

Alert has been set correctly

You will receive an email when [itemName] become available again