1.PRIVACY POLICY

1.1 Your personal data and how we handle it
When you entrust Majana Health Concept AB with your personal data, it is important to us that you feel safe. We protect your personal integrity. Your personal data is treated with the utmost respect and in accordance with applicable legislation. This policy describes how we collect and process your personal data when you visit our website and use the services offered there.

All personal data processing is carried out in accordance with the General Data Protection Regulation. The controller is Majana Health Concept AB (corporation no. 559382-4948 ) with address Maria Röhls Väg 30, 128 63 Sköndal.

When you place your order, you agree that we save and use your information to fulfill and provide the service you can expect from us.

1.2 What is personal data?
Personal data is information and data that can be directly or indirectly attributed to a living natural person. Examples of personal data include name, social security number, address, email address and telephone number. It can also include customer numbers, encrypted data and various types of electronic identities such as IP numbers.

Any operation performed on personal data constitutes processing, whether or not by automated means. Examples of common processing operations include collection, recording, organization, structuring, storage, processing, transfer and erasure.

1.3 What personal data do we collect and why?

Information you provide when you become a customer at Majana Health Concept AB

When you become a customer at Majana Health Concept AB, it means that we collect your contact information: name,

email address, telephone number, address, delivery method, possible delivery location and IP address.
The purchase agreement that we have entered into with you constitutes the legal basis for the processing of your personal data and is necessary for us to be able to fulfill our legal obligations and fulfill this agreement towards you regarding, for example, delivery and payment.

Data collected during personal contact
When you contact us via, for example, email, contact form or chat, we collect the personal data that you provide to us. We do this in order to be able to answer the questions you have and to handle your case. This may, for example, be information about your name, email address and order number. We also collect information that you choose to provide to us regarding, for example, health conditions or medicines. If your question concerns a complaint, we will process your information in order to be able to fulfill our obligations under applicable consumer legislation. We do this based on the legal basis that is based on our purchase agreement with you.

1.4 How do we use your personal data?

Fulfilling agreements entered into
We process your data to identify you as a customer, handle and deliver your order, and to handle billing and payment. We also process your personal data to be able to help you if you contact us with questions, comments, or, for example, a complaint.

Information about products and services
We use your personal data for SMS and email mailings with information about our products, services and inspiration as well as educational content regarding skin and skin care. You can withdraw your consent to receiving newsletters, SMS, campaigns and offers at any time by contacting us or using the unsubscribe link in each newsletter and SMS.

If you choose to participate during the majana.se registration process or at other times when you may provide personal information, the information you provide may be used to create and deliver direct marketing to you.

Direct marketing includes all types of marketing, such as our regular email list, SMS and postal mailings, which may consist of promotions, special discounts, new product launches, upcoming updates, skincare advice, product recommendations and other relevant information ("Opt-In Communications").

We will never disclose your information to unauthorized parties or sell it to external parties.

1.5 Who do we share personal data with?

Payment solutions Legal basis: In order to be able to fulfill the purchase agreement.
In order to be able to charge, manage invoices and payments, we share data with Shopify and Klarna. Shopify and Klarna will collect personal data about you in connection with payment. Shopify and Klarna are therefore data controllers for this data according to the companies' terms and conditions. See Klarna's terms and conditions or Shopify's terms and conditions .

Transport company/Freight company/Unifaun Legal basis: In order to be able to fulfill the purchase agreement.
Our shipping companies receive the personal information required to fulfill and deliver your order.

Google/Facebook Legal basis: Balancing interests
We share analytics data via third-party cookies for marketing and web analytics to improve our services. We do not record any information about the visitor's IP address, therefore the information about you can never be linked to your identity.

We use the analysis tool Google Analytics to improve the content, navigation and structure of the website. The analysis tool uses JavaScript and cookies and the information about your use is anonymized.

To avoid having your information saved, you can choose not to accept cookies in your browser.

Direct marketing Legal basis: Customer consent
In order to send you information about our products and services, we use an external CRM system where we store your email address. You can cancel your subscription at any time, either via the link in the newsletter or by contacting us directly at info@studiomajana.se .

Authorities Legal basis: Exercise of authority and task of public interest
Upon request, we may be required by law and authority decisions to disclose certain personal data, for example to the Police in connection with a criminal investigation.

Other Legal basis: Balancing interests
We may, where appropriate, transfer your personal data to recipients other than those specified above if it is necessary for our business. All processing of personal data is carried out with a high level of security and confidentiality. We may also share information with potential buyers if we were to sell all or part of the business or in the event of a merger.

1.6 Recruitment and personnel administration

This applies to processing job applications and any new employment. Termination of employment. Administration of any rehabilitation and discrimination cases.

• CV
• Name
• Phone number
• Email address
• Physical address
• Picture uploaded by the candidate (optional)
• Social security number
• Personal letter which may include medical history etc.
• Email exchange between the recruitment manager and the candidate
• Notes from the recruitment manager regarding interviews
• Test results from work experience related to the position
• Contact information for references

Legal basis: legitimate interest in completing or terminating recruitment processes and, where applicable, retaining information about security in cases of discrimination or similar. Explicit consent in cases where sensitive information may be present.

Storage period: 60 months from the collection or completion of the recruitment process.

To follow up on references during recruitment
If someone has provided contact information for references during the recruitment process, we only save their name, phone number, and email address. We retain the information until the recruitment process is complete.

2. COOKIES

2.1 What are Cookies?
Cookies are small text files consisting of letters and numbers that are sent from our web server and saved on your browser or device. At majana.se we use the following cookies:

1) Session cookies (a temporary cookie that expires when you close your browser or device)
2) Persistent cookies (cookies that remain on your computer until you delete them or they expire)
3) First-party cookies (cookies set by the website you are visiting)
4) Third-party cookies (cookies set by a third-party website. We use these primarily for analytics, such as Google Analytics)
5) Similar technologies (technologies that store information in your browser or on your device in a way similar to cookies)

The cookies we use generally improve the services we offer. Some of our services require cookies to function properly, while others improve the services for you. We use cookies for overall analytical information regarding your use of our services and to save functional settings such as language and other information. We also use cookies to be able to target relevant marketing to you.

2.2 Influence the use of cookies
Your browser or device allows you to change the settings for the use and scope of cookies. Go to the settings for your browser or device to learn more about how to adjust the settings for cookies. Examples of what you can adjust are blocking all cookies, only accepting first-party cookies, or deleting cookies when you close your browser. Keep in mind that some of our services may not work if you block or delete cookies. You can read more about cookies in general on the Swedish Post and Telecom Agency's website, pts.se.

2.3 How long we store your personal data
We store personal data as long as there is a legal basis, a documented purpose for the processing or an ongoing user relationship. We have ongoing procedures that ensure that we do not store unnecessary personal data and we minimize the storage period to the greatest extent possible. Normally, we store your customer data for a maximum of three years from your last customer contact. However, we store data required by the Accounting Act for up to eight years.

2.4 How we protect your personal data
We have taken appropriate security measures to protect your personal data against loss, misuse and unauthorised access. The number of people who have access to your personal data is limited. Only those people within us who need to process your personal data have access to it. The suppliers with whom we share personal data will only process it on our behalf and in accordance with our instructions.

2.5 You control your personal data
You have the right to see which of your personal data is held by Majana Health Concept AB and to request that this data be deleted. To access this information or delete your data, your application must be in writing, contain your full name and social security number and be signed by you. Send your application to Majana Health Concept AB, Maria Röhls Väg 30, 128 63 Sköndal. The data or confirmation of deletion will be sent to your registered address without undue delay.

You can always use the unsubscribe link found in all campaigns, offers and newsletters we send you.

If your data is incomplete, inaccurate or irrelevant, you have the right to request that it be corrected or deleted. You also have the right to claim damages if the processing of your personal data has not complied with the law.

Among the things that cannot be deleted are data required by the Accounting Act and data required for Majana Health Concept AB to be able to fulfill its obligations in the event of, for example, complaints.

It is important to us that you feel safe. We protect your personal integrity and always strive to treat your personal data with the utmost respect. If you still believe that we are processing your personal data incorrectly, please contact us. You also have the opportunity to file a complaint with the Swedish Data Protection Authority, which is the authority that supervises the processing of personal data.

Majana Health Concept AB reserves the right to make changes to this privacy policy at any time, to the extent necessary to address disruptions or meet new legal and technical requirements. All changes to this privacy policy will be published on the website.

For further information about our personal data processing, please contact info@studiomajana.se.