Privacy Policy & GDPR

Privacy Policy

Updated: 2019-10-21

Shippey Photography AB processes personal data in accordance with the EU’s General Data Protection Regulation (GDPR).

In order to be allowed to process personal data, there must always be support in the Data Protection Regulation, a so-called legal basis. This privacy policy describes how Shippey Photography AB fulfills the obligations arising from the Data Protection Regulation.

This privacy policy describes how Shippey Photography AB collects and processes personal information. It describes the purpose of the treatment, how long the treatment takes place, how the information is used and who can access it. In addition, it also describes how your information is protected, what rights you have regarding your personal data and how you come into contact with us. If you have any questions about Shippey Photography’s privacy protection, you are always welcome to contact us by sending an email to

Basic concepts

The Data Protection Regulation uses the following terms whose meaning and application should also apply to this privacy policy:

Personal data: any information that relates to an identified or identifiable natural person (hereinafter referred to as a data subject), wherein an identifiable natural person is a person who can be directly or indirectly identified specifically by reference to an identifier such as a name, identification number, location information or online identifiers or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person.

Processing: a measure or combination of measures relating to personal data or sets of personal data, regardless of whether they are automated or not, such as collection, registration, organization, structuring, storage, processing or modification, preparation, reading, use, transfer by transmission, dissemination or otherwise providing, adjusting or merging, limiting, deleting or destroying.

Personal data controller: a natural or legal person, public authority, institution or other body that alone or together with others determines the purposes and means of processing personal data; if the purposes and means of processing are determined by Union or national law, the personal data controller or the specific criteria for how he or she is to be designated may be prescribed by Union or national law.

Personal Data Assistant: a natural or legal person, public authority, institution or other body that processes personal data on behalf of the data controller.

Third party: a natural or legal person, public authority, institution or body that is not the data subject, the data controller, the personal data controller or the persons who are under the direct responsibility of the data controller or personal data controller competent to process the personal data.

Personal Data Incident: A security incident that results in unintentional or unlawful destruction, loss or alteration or unauthorized disclosure of or unauthorized access to the personal data transferred, stored or otherwise processed.

Processing of personal data

Responsible for personal data and data protection representative:

Shippey Photography AB (org. Number: 559051-0805) is the data controller and is responsible for the processing of your personal data at Shippey Photography AB, which means that

Shippey Photography AB is responsible for ensuring that your information is processed in a correct and secure manner in accordance with applicable legislation. We may disclose personal data to collaborating partners (personal data assistants), but they will not be entitled to process the data for purposes other than Shippey Photography AB and only according to explicit instructions given to us. Shippey Photography AB contact details can be found at the end of this privacy policy.

Shippey Photography AB has appointed a Data Protection Ombudsman (the “Data Protection Ombudsman”). Among other things, the Data Protection Ombudsman is responsible for monitoring that Shippey Photography AB’s processing of personal data takes place in accordance with applicable legislation. The Data Protection Ombudsman’s contact information is

Legal basis

There are several different legal bases that give Shippey Photography AB the right to process your personal information. Completing an agreement that has been made with you is a legal basis. Other legal bases are to fullfill a legal obligation eg. the Accounting Act, obtaining consent or through a balance of interests.

If Shippey Photography AB has obtained your consent, you may at any time, in whole or in part, withdraw your consent.

A balance of interests means that Shippey Photography AB’s processing of your personal data is only allowed if Shippey Photography AB’s interest in processing your personal data is considered to outweigh your interest in privacy. Please note that you always have the right to object to the processing of your personal data based on a balance of interests.

Personal data stored and collected

We collect and store information about you that you yourself provide to us. The information collected about you includes both information that you yourself have provided to us or to third parties as well as information that is automatically collected when using our website. The types of personal data stored and collected are:

Personal and contact information: Name, title, profession, gender, user ID, birth data, social security number, address, telephone / mobile number, e-mail.

Payment information: Payment and credit card information (card number, CVV code and validity date), invoice information and bank account number;

Purchase history: Information on previous purchases and warranty and complaint cases at Shippey Photography AB.

Device information: IP address, MAC address, cookies or the like; and Other personal information that you choose to provide to us.

Purpose and legal basis of personal data processing

The main purpose of processing your personal data is for Shippey Photography AB to be able to fulfill our obligations to you as a customer, and to develop, maintain and quality assure our processes and our operations. Below is a more detailed description of our various types of processing of your personal data and the legal basis linked respectively to the purpose.


Personal and contact information

payment Information

Purchase History

device Information


In order to be able to provide our services safely and efficiently and deliver relevant follow-up.

For invoicing & accounting

To be able to keep in touch with you regarding eg answering questions via email or through customer service.

To enable, payment, part payment, or credit. In such processing, your information is also transferred to the credit company (see purchase terms)

To handle complaints & warranty issues, as well as to handle customized orders.

To enable marketing, including mailing of a general nature via email.

To enable analysis & segmentation for targeted campaigns.

To systematically and continuously develop and ensure the quality of the business, Shippey Photography AB processes your personal data for statistical purposes. This is done, among other things, through customer surveys to analyze our experience with us and the experience of the results of our products and services. To the extent possible in relation to the purpose, your personal data is anonymized when used for statistical purposes.


The treatment is necessary to fulfill the agreement with you, i.e. when you make a purchase from Shippey Photography AB, and to fulfill our legal obligations.

The treatment is necessary for Shippey Photography AB’s legitimate interest in marketing its services to you (interest weighing)

The treatment is necessary for Shippey Photography AB’s legitimate interest in improving its services by achieving a safer & more relevant treatment for customers & visitors, as well as increasing the rate of repeat customers (balance of interest).

For information on how we handle cookies and other types of tracking see Cookies, as well as

Transfer of personal data

We strive to process your personal data within the EU / EEA and do not transfer your personal data to countries outside the EU / EEA beyond what is stated below.

Shippey Photography AB discloses personal information to third parties in situations where this is a legal obligation or to fulfill our commitment to you as a customer. Your personal data will not be transferred or sold to third parties for advertising purposes. Shippey Photography AB also discloses your personal information to third parties for updating and posting information from the public records or other public records.

Shippey Photography AB takes the help of a third party in, for example, conducting customer satisfaction surveys, e-mailing or handling insurance matters, which means that your personal data may be transferred to a third party providing such services.

For those who wish to pay via partial payment, Shippey Photography AB forwards your social security number to payment and credit companies who need this for credit information purposes and the establishment of associated credit agreements.

The personal information we collect about you through your use of the Shippey Photography AB website may be transferred to an IT provider in countries outside the EU / EES who host, develop and provide support for our website, as well as Google in the United States, through Google Analytics. Shippey Photography AB has ensured that your rights are guaranteed upon transfer to the United States through Google’s connection to the EU-US Privacy Shield. More information is available at

Your rights

When Shippey Photography AB processes your personal data, you have certain statutory rights relating to your personal data and you have the opportunity to influence our processing of your personal data and what is saved. To invoke these rights, you send a written request, signed by you, to the postal address listed at the end of this Privacy Policy.

Right to information

This privacy policy describes how your personal information is processed at Shippey Photography AB and it is always available at You will receive this information both when data about you is collected and when you request it yourself. In the event of a data breach or similar (a personal data incident) and there is a risk of, for example, identity theft or fraud, this information should be communicated to you.

Request for extracts

You hav the right to request ´, at no cost, an extract of which of your personal data that Shippey Photography AB has registered.
Shippey Photography AB

Request for correction

You always have the right to contact Shippey Photography AB, as personal data manager, to have your information corrected. It also means that you have the right to supplement any personal data that is missing and that is relevant to the purpose of the personal data processing. If information is corrected at your request, Shippey Photography AB must ensure that third parties to whom your information has been disclosed receive information about the correction. It does not, however, apply if it proves impossible or involves an overly burdensome effort.

Deletion request

You have the right to contact Shippey Photography AB and request that the information relating to you be deleted. The personal data must be deleted in the following cases:

– If the data is no longer needed for the purposes for which it was collected

– If the treatment is based on your consent and you withdraw the consent

– If the processing is for direct marketing and you oppose the processing of the data

– If you oppose personal data processing after a balance of interest and there are no justifiable reasons that outweigh your interest

– If the personal data has been processed illegally; or

– If deletion is required to fulfill a legal obligation.

If you request that your data be deleted, Shippey Photography AB must also inform those to whom we have provided information about the deletion. It does not, however, apply if it proves impossible or involves an overly burdensome effort. Shippey Photography AB is in some cases obliged to process your personal data even though you have requested that it be deleted.

Right to restriction of treatment

In some circumstances, you may request limitation on the continued processing of your personal data and a right to object to the processing under the conditions permitted by applicable personal data legislation (for example, if you question whether the personal data is accurate or whether the processing is legal).

Right to complain to the supervisory authority

If you believe that Shippey Photography AB processes information about you in violation of the Data Protection Regulation, you have the right to file a complaint with the Data Inspectorate. The Data Inspectorate examines all complaints and assesses whether supervision should be initiated and then leaves a message to you who brought the complaint. The Data Inspectorate must announce whether supervision should be initiated or not within three months of receiving the complaint. If, as a complainant, you are not notified within that time, you can go to court to request a notice.

Protection of information

Our goal is that you always feel safe when you submit your personal information to Shippey Photography AB. We will not disclose your information to anyone other than as expressly stated in this Privacy Policy.

Preservation and thinning

Your personal data will be stored by us only for the period necessary to fulfill the purposes for which the data was collected or as long as Shippey Photography AB is required to store your personal data by law or to safeguard Shippey Photography AB’s legal interests, t.ex. whether a legal process is in progress. Your personal data will then be deleted.


Shippey Photography AB uses cookies-like techniques to provide certain features of our website as well as to improve our website and to provide a better and more personalized service. The information is stored in the form of a file containing encrypted login data. This information is used for automatic login and to remember any settings settings on the site. We use cookies in accordance with our cookie policy, see

Links to other websites

At, there may be links to external websites over which Shippey Photography AB does not control. These are not covered by this privacy policy. Shippey Photography AB takes no responsibility for the content of the websites linked to from

Contact us

If you have any questions or comments regarding the Privacy Policy, please contact us. If you want to invoke your right to delete or change the information we have about you, please email us and we will help you.