Privacy Policy
At reirei AB ("reirei", "we" or "us"), we are committed to personal privacy.
This Privacy Policy contains information on how and why we use your personal data in connection with your visit to our websites www.reirei.se, info.reirei.se, b2b.reirei.se and www.kitandkin.se (jointly referred to as the "Website"), when you make a purchase, or when you are otherwise in contact with us.
The Privacy Policy also describes your rights connected to our processing of your personal data and how you can exercise them.
If you have any questions regarding our handling of your personal data, you are always welcome to contact us using the contact details at the end of this Privacy Policy.
When the term "processing" is used in this Privacy Policy, it refers to all measures involving personal data, such as collection, registration, handling, storage, sharing, access, transfer, and deletion of personal data.
"Applicable Data Protection Legislation" means the legislation, ordinances, and regulations in force from time to time, including regulations issued by relevant supervisory authorities, regarding the protection of natural persons' fundamental rights and freedoms and in particular the right to the protection of their personal data applicable to the processing in question, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR") as well as legislation, ordinances, and regulations supplementing the GDPR.
"Personal data" refers to any information that can directly or indirectly (e.g., in combination with other information) be linked to an individual.
WHO IS RESPONSIBLE FOR THE PERSONAL DATA WE COLLECT?
reirei AB, reg. no. 556853-2773, Norra Oskarsgatan 12, 582 73 Linköping, is the data controller for the processing of personal data described in this Privacy Policy.
WHERE DO WE COLLECT PERSONAL DATA FROM?
We collect personal data directly from you. This may be information that you either provide to us yourself (e.g., in connection with a purchase) or when you are otherwise in contact with us.
It may also involve personal data connected to the device (e.g., computer, mobile phone, tablet) you use when you visit our website (e.g., via cookies and similar technologies).
WHEN AND WHY DO WE PROCESS PERSONAL DATA?
For consumers: performance of purchase agreement
We process your personal data in order to fulfill the purchase agreement with you. This includes, among other things, executing your order, including, where applicable, manufacturing custom-made products, organising shipping/delivery, offering payment methods, and handling correspondence such as order confirmations.
|
Categories of personal data |
Legal basis |
|
Contract. The processing is necessary to fulfill our obligations under the purchase agreement with you. |
|
Retention period: Personal data is retained until the purchase has been completed (including delivery and payment) and is documented thereafter for the purpose of establishing, exercising, and defending potential legal claims. |
|
For business customers and other business partners: management of the contractual relationship with the company you represent or otherwise have a connection to
We process your personal data to manage the (existing or potential) contractual relationship with the company you represent or otherwise have a connection to.
This includes, for example, communication with you in your capacity as a contact person for the company in question, invoicing, handling order confirmations, and other customary management.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to satisfy our legitimate interest in managing the (existing or potential) contractual relationship with the company to which you have a connection. Contract. If you are the owner of a sole proprietorship with which we have or plan to enter into an agreement, the processing is necessary to fulfill the agreement with you and/or to take steps at your request prior to entering into the agreement. |
|
Retention period: Documentation containing your personal data is retained for the purpose of managing the current contractual relationship as long as we have an ongoing relationship with the company you represent or otherwise have a connection to, and where there is a connection to activities in which you have been involved. |
|
Creating and managing your user account on our website
If you choose to create a personal user account on our website, we will process your personal data to enable this and to otherwise administer the user account.
You can, for example, use your account for a smoother checkout process and to review and track your orders of products on our website.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to satisfy our legitimate interest in offering our customers the possibility to create an account on our Website, to provide updated account information, such as purchase history and details of orders. |
|
Retention period: Personal data is retained for the relevant purposes until you choose to close your account with us. |
|
Handling warranties, complaints, product recalls, and safety notices
We process your personal data to be able to handle warranties and complaints, as well as to be able to contact you in the event of product recalls or regarding safety notices about a product.
|
Categories of personal data |
Legal basis |
|
Contract. The processing is necessary to fulfill our contractual obligations to you as a customer. Legal obligation. The processing is necessary to fulfill legal obligations that apply to us. |
|
Retention period: Personal data is retained to handle warranties, complaints, product recalls, and safety notices until the warranty period expires, during the time a complaint can be made, a product recall can be made, or a safety notice can be issued, and thereafter during the general limitation period for the purpose of being able to establish, exercise, and defend legal claims, which in Sweden is ten (10) years. |
|
Handling cases, feedback, and potential complaints as well as answering questions
If you contact us, e.g., via our customer service, we will process your personal data to communicate with you as well as to handle cases, feedback, and potential complaints, and to answer questions.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to satisfy our legitimate interest in handling cases, feedback, and potential complaints as well as answering questions. |
|
Retention period: Personal data is retained for the purpose of handling the relevant customer service case until it is closed. |
|
Providing you with information about our business, including news and offers
We may process your personal data to provide you with information about our business, including news and offers.
You can unsubscribe from our mailings at any time by clicking on the unsubscribe link in our mailings or by contacting us.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to satisfy our legitimate interest in providing you with information about our business, including news and offers. Consent. The processing may also be based on your consent. |
|
Retention period: As a starting point, we process your personal data for this purpose for three (3) years from your last activity, such as your last purchase, from the time you last opened an email from us, or from the time you signed up for mailings. Otherwise, we process your personal data for this purpose until you have notified us that you no longer wish to receive email mailings. |
|
Evaluating and following up the use of our Website
To analyze and better understand how you use our website, we process your personal data that we, for example, have collected via cookies and similar technologies. This is done, among other things, by collecting information about the individual web pages or products you have visited and/or purchased, which websites or search terms referred you to the website, and information about how you interact with the website.
For more information on how we use cookies, please see our Cookie Policy.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to satisfy our legitimate interest in having a functional website. Consent. The processing is based on your consent where required by law. |
|
Retention period: Information is saved for the times specified in our Cookie Policy. Reports at an aggregated level that do not contain any personal data and statistics are saved indefinitely. |
|
Improving your experience on our Website
In order to improve your experience on our Website and provide you with tailored content when appropriate, we will collect and process your personal data, e.g., via cookies and similar technologies. This means that we, for example, can save information about your browsing history and selected settings on the website (such as language and display settings) for the aforementioned purpose.
For more information on how we use cookies, please see our Cookie Policy.
|
Categories of personal data |
Legal basis |
|
Consent. The processing is based on your consent. |
|
Retention period: Information is saved for the times specified in our Cookie Policy. Reports at an aggregated level that do not contain any personal data and statistics are saved indefinitely. |
|
Establishing, exercising, and defending legal claims
For the purpose of establishing, exercising, and defending legal claims, e.g., in connection with a dispute or legal process, we process your personal data where applicable.
|
Categories of personal data |
Legal basis |
|
All data necessary to handle and respond to the legal claim. |
Legitimate interest. The processing is necessary to satisfy our legitimate interest in establishing, exercising, and defending legal claims, e.g., in the event of a dispute and legal process. |
|
Exception for sensitive personal data: Any sensitive personal data, including information about crimes or suspected crimes, is processed only if necessary to establish, exercise, and defend legal claims. |
|
|
Retention period: Personal data is retained during the statutory limitation period for the purpose of establishing, exercising, and defending legal claims. The general statutory limitation period in Sweden is ten (10) years. |
|
Fulfilling legal obligations
We process your personal data to fulfill legal obligations that apply to us, e.g., regarding bookkeeping and accounting as well as requirements under the GDPR.
|
Categories of personal data |
Legal basis |
|
All data collected that is necessary to fulfill the respective legal obligation. |
Legal obligation. The processing is necessary to fulfill legal obligations that apply to us. |
|
Retention period: Personal data is retained for the time necessary for us to be able to fulfill the legal obligations that apply to us. |
|
Managing and protecting systems and services
To manage and protect our IT systems and services, e.g., during logging, troubleshooting, backup, identification of potential risks and fraud, change and problem management in systems, and in connection with potential IT incidents, we process your personal data if necessary.
|
Categories of personal data |
Legal basis |
|
All data specified for the above-mentioned purposes as well as log data. |
Legitimate interest. The processing is necessary to satisfy our legitimate interest in managing and protecting our IT systems and services. |
|
Retention period: Personal data is retained for the same period as stated in relation to the respective purpose specified above. Personal data in logs is retained for troubleshooting and incident management for a period of twelve (12) months calculated from the time of the log event. |
|
RECIPIENTS WITH WHOM WE SHARE PERSONAL DATA
When necessary, we share personal data with the recipients below. Unless otherwise stated, named recipients are independently responsible (data controllers) for their own processing of personal data.
|
Recipients |
Purpose |
Legal basis |
|
Companies that arrange general transport of goods |
To be able to deliver ordered products and thereby fulfill our obligations under purchase agreements. |
For consumers: Contract. The processing is necessary to fulfill our contractual obligations with you as a customer. For business customers: Legitimate interest. The processing is necessary to satisfy our legitimate interest in delivering products to the company, including to a designated person at the company in question. |
|
Authorities (e.g., the Police and the Swedish Tax Agency) and external auditors |
To fulfill any legal obligations to which we are subject, e.g., in connection with requests from authorities or other legal requirements. |
Legal obligation. The processing is necessary to fulfill legal obligations to which we are subject. |
|
Companies offering payment solutions |
To enable your payment of ordered products and thereby enter into a purchase agreement with you. |
Contract. The processing is necessary to take steps at your request prior to entering into a purchase agreement. |
|
Authorities (including courts) and legal representatives |
To establish, exercise, and defend legal claims. |
Legitimate interest. To satisfy our legitimate interest in having disputes and cases handled by competent courts and representatives. |
|
Buyers, sellers, and external advisors/other involved parties |
Enabling business changes, e.g., sale or merger of the business or investments in general. |
Legitimate interest. To satisfy our legitimate interest in implementing business changes. |
Service providers
To fulfill the purposes of the processing of personal data, we share your personal data with service providers we have engaged.
These providers provide, for example, IT services (companies that handle necessary operations, technical support, maintenance, and development of our IT solutions and IT systems), financial services (e.g., accounting systems), and statistical services.
The service providers we have engaged may only process your personal data according to our express instructions and may not use your data for their own purposes.
They are also obliged by law and contract to take appropriate technical and organisational security measures to protect your data.
Appropriate safeguards for transfers of personal data to third countries
If reirei transfers or discloses your personal data to a recipient in a country outside the EU/EEA area (third country), reirei will ensure that appropriate safeguards have been taken (such as the EU Commission's standard contractual clauses and other necessary measures) to protect the personal data.
reirei may transfer personal data to the USA and India.
According to the GDPR, you have the right, upon request, to receive a copy of the documentation demonstrating that necessary safeguards have been taken for the purpose of protecting your personal data when transferring to a third country.
If you want to know more about the processing of your personal data and if your personal data is transferred to a third country, please contact us at the contact details shown below.
YOUR RIGHTS
Rights in relation to your personal data
In connection with our processing of your personal data, you have, under certain conditions, the right to exercise the following rights:
Access
You can request confirmation of whether your personal data is being processed or not and, if it is being processed, request access to your personal data and additional information such as the purpose of the processing.
You also have the right to receive a copy of the personal data being processed.
If the request is made electronically, the information will also be obtained in an electronic format that is widely used unless you request otherwise.
Rectification
If you discover that personal data related to you is incorrect, incomplete, or inaccurate, you have the right to have your personal data rectified.
|
Object to specific processing You can object to the processing of your personal data based on a legitimate interest, against the background of the particular situation, and to processing that takes place for direct marketing purposes. If we cannot demonstrate a compelling legitimate ground for continuing the processing that outweighs your interests, or if the processing is not necessary to establish, exercise, and defend legal claims, we are obliged to cease the processing. |
Erasure
You can have your personal data erased under certain circumstances, e.g., when the personal data is no longer needed to achieve the purpose for which the personal data was collected.
Restriction of processing
You can ask us to restrict the processing of your personal data to only include storage of your personal data under specific circumstances, e.g., when the processing is unlawful but you do not want your personal data erased.
Withdraw consent
You always have the right to withdraw your consent to the processing of personal data to the extent the processing is based on your consent.
Data portability
You have the right to request a machine-readable copy of the personal data processed on the basis of your consent or when the processing is necessary to fulfill an agreement with you, and where personal data has been obtained from you (data portability), and to request that the information be transferred to another data controller (if possible).
Complaints to supervisory authority
You are welcome to contact us with questions or complaints regarding the processing of your personal data.
However, you also always have the right to lodge a complaint regarding the processing of your personal data with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).
For more information on how to contact the Swedish Authority for Privacy Protection, visit www.imy.se.
CONTACT US
If you have any questions regarding the processing of your personal data or if you wish to exercise any of your rights under Applicable Data Protection Legislation, please contact reirei at the contact details below.
We reserve the right to change and supplement this privacy text if necessary.
Data Controller is: reirei AB,
Norra Oskarsgatan 12,
582 73 Linköping
E-mail address:
kundservice@reirei.se
Telephone number:
+46 (0) 13-51030
This Privacy Policy was last updated on 2026-01-15.
CATEGORIES OF PERSONAL DATA
Below you will find an explanation of the categories of personal data that we may collect and save about you.
|
Categories of personal data |
Examples of personal data |
|
User-generated data |
Click and visit history, technical data regarding devices used and their settings (e.g., language setting, IP address, browser settings, time zone, operating system, screen resolution, and platform), information on how you have interacted with us, login method, where and for how long different pages were visited, response times, how you reach and leave our website, etc. |
|
Your communication |
Personal data that you provide in your communication with us, e.g., emails, e.g., regarding complaints. |
|
Geographical data |
Location data from your device which, e.g., is collected via cookies. |
|
Identity data |
Name, IP address. |
|
Account details |
Username/email address and password. |
|
Contact details |
Address, email address, telephone number. |
|
Purchase data |
Details about the purchase such as purchased product, time of purchase, order history, order number, delivery address. |
|
Organisational data |
The company you are associated with, title, position, professional role. |
|
Payment details |
For business customers: Time of completed payment, billing address. |
|
Information on requests for custom-made products |