You probably know us as Zeta. Zeta is a trademark owned by Di Luca & Di Luca AB (“Di Luca”). When you come into contact with us, it may mean that your personal data (such as name, address, e-mail, social security number, phone number, etc.) is processed by us at Di Luca. We protect your privacy, which is why we have adopted this privacy policy. This privacy policy aims to describe in what situations we process your personal data, how we process it, what obligations we have and what rights you have. You only need to read the part that is relevant to you.
Your personal data is always processed in accordance with applicable privacy laws, such as the General Data Protection Regulation and complementary legislation. You can always contact us at zeta@diluca.se if you have any questions or concerns regarding our processing of your personal data.
Personal data controller
Di Luca (Di Luca & Di Luca AB, ID: 556459-2078, Visiting address: Alsnögatan 11, 116 41 Stockholm, phone number: 08-556 942 00, e-mail address: zeta@diluca.se) is the controller in relation to processing of your personal data as described in this policy. If you have any questions or concerns about this policy and/or our processing of your personal data, you are always welcome to contact us at zeta@diluca.se or at 08-556 942 00.
Your rights
Regardless of how or why we process your personal data, you always have the following individual rights:
– the right to access what personal data we are processing about you by requesting subject access.
– the right to rectification.
– the right to request erasure (we’ll delete personal data that is no longer required).
– the right to request restriction of our processing of your personal data.
– the right to obtain the personal data we process about you in a structured, commonly used and machine-readable format (i.e. data portability).
When we process your personal data based on your consent, you are also entitled to withdraw your consent at any time, free of charge.
If you wish to exercise any of the above rights, please do not hesitate to contact us at zeta@diluca.se.
Complaints
If you have any complaints about our processing of your personal data, you have the right to file a complaint to the Swedish Data Protection Authority (E-mail: datainspektionen@datainspektionen.se, Phone: 08-657 61 00, Website: www.datainspektionen.se).
1. Newsletter subscribers
1.1. What personal data are we processing?
When you sign up for Zeta’s newsletter, you are asked to enter your first name, last name and e-mail address. When you fill in the information, it means that you provide your personal data to us.
You can register to our newsletter via our website, when you visit our booth at trade fairs or when you participate in any of our competitions. Regardless how you register yourself as a subscriber, we process your personal data with the same purpose, and in the same way.
1.2. Why do we process your personal data?
We process your personal data solely to send out the newsletter you are a subscriber to.
1.3. Legal basis
We process your personal data based on your consent. You can withdraw your consent at any time, free of charge. If you wish to withdraw your consent, please contact Nyhetsbrev@diluca.se or follow the unsubscribe link that you will find in each newsletter.
1.4. Duration
We process your personal data as long as we have a valid consent from you. If you wish to withdraw for consent, please contact Nyhetsbrev@diluca.se or follow the unsubscribe link that you will find in each newsletter.
1.5. Whom we share your personal data with
We share your personal data with the service we use to create and distribute our newsletters.
We do not share your personal data with any third party unless we are obliged to do so by law. We will not sell your personal information to third parties for direct marketing, and we will not transfer your personal data to countries outside the EU/EEA.
2. When you participate in any of our competitions
2.1. What personal data are we processing?
When you participate in any of our competitions, you are asked to fill in your name, e-mail address and phone number. This is personal data. Usually there is also a free text field where you can – depending on what you write – provide us with your personal data. In some competitions, you also need to submit a picture, which in some cases may constitute personal data.
If you win the competition, we may also ask you to leave your social security number. We will contact you when applicable.
2.2. Why do we process your personal data?
We process your personal data to assess your contest contribution and to designate a winner. If you win the competition, we will also process your personal information in order to communicate with you as a winner and send the prize to you.
If you win, we need your social security number to register the prize.
If you choose to sign up for Zeta’s newsletter in connection with the competition, your personal information will be processed in accordance with section 1 above.
2.3. Legal basis
We process your personal data to assess your contest contribution. In order to compete, you must meet the terms and conditions for participating. When you submit your contribution, we have entered an agreement where we have undertaken to assess your contribution and designate a winner based on all contest contributions. To do this, we must process your personal data.
If you win the competition, we must also process your social security number in order to comply with legal obligations, e.g. tax profits.
If you sign up for our newsletter when you submit your contest contribution, we process your data bases on your consent. Read more about this at section 1 above.
2.4. Duration
Once the contest is completed and a winner has been appointed, your personal data will be processed for up to three months. Thereafter we will stop processing your personal data for this purpose. However, such personal data that is included in our financial statements may be processed (henceforth) for up to seven years after the end of the financial year in accordance with the Swedish legislation.
In case you have signed up for Zeta’s newsletter, we process your personal data until you unsubscribe from the newsletter (withdraw your consent) in accordance with section 1 above. However, we will only continue to process such data that we need in order to send out the newsletters.
2.5. Whom we share your personal data with
We share your personal data with the IT services we use to receive and administer the contest contributions. Furthermore, your personal data is shared with the jury that assess your contribution.
We do not share your personal data with any third party unless we are obliged to do so by law. We will never sell your personal data to third parties for direct marketing, and we will not transfer your personal data to countries outside the EU/EEA.
3. Customer care
3.1. What personal data are we processing?
When you contact us via email, phone, letter or through our website (customer forum) you provide personal data such as name, e-mail address, phone number and address. Furthermore, what you provide together with your case may include personal information, such as allergies, or health information in connection with a potentially injury matter.
If your general question concerns allergies and you – in your message – indicate that you ask because of your allergies, it means that you provide us with sensitive personal data
3.2. Why do we process your personal data?
We process your personal data in order to receive your question/complaint/viewpoint and to be able to answer you. Therefore, in order to be provide the requested service we need to know who to contact, and how to contact you.
If your case concerns replacement due to defective products, we need to process your contact and account details to pay any compensation to you.
If you suffered from an injury (dental injury and other claims) due to our products, we process your personal data to investigate whether or not to indemnify the damage. Due to the matter of the case, sensitive personal data about your health may be processed.
In case your question concerns allergies and you in your message, indicate that you ask a general question regarding allergies because of our own allergies; it means that you provide us with sensitive personal data. We don’t have any need to process this data but when you inform us it means that we are processing the data. We will not save this data in any way. We only process such data with the purpose of answering the question you have.
3.3. Legal basis
When we initially receive your question/viewpoint/comment (”message”), we process the personal data based on our legitimate interest. We believe that we have a legitimate interest in answering your question and giving you the service you request in your message. We believe that our legitimate interest in this case overweighs your interest of protection of personal data, since you started the dialogue with us.
If your case concerns indemnification due to defect goods or indemnification due to injuries caused by our products, we process your personal data- incl. processing of sensitive data that occurs in these cases –based on the legal obligations we have under the Consumer Sales Act and Product Liability Act.
3.4. Duration
We process your personal data for the time needed to answer your question and/or help you with the matter you have – including payment of indemnification due to defective products. Your personal data will be deleted if we have not had a dialogue with you within six months of the latest communication.
If you provide data about your allergies in connection with a question, this data will be deleted immediately after we have answered your question.
Such data processing that is necessary to investigate an injury matter in accordance with the Product Liability Act, is processed for up to three years after the payment decision (and if paid – since the payment was made) since you, according to applicable legislation, have the right to take legal action within this time.
3.5. Whom we share your personal data with
We share your personal data with the IT services we use to provide the contact forms and the mail tools we use.
If your case concerns an injury, we will share your personal data with our insurance company to investigate the injury.
We do not share your personal data with any third party unless we are obliged to do so by applicable law. We will never sell your personal data to third parties for direct marketing, and we will not transfer your personal data to countries outside the EU/EEA.
4. When you contact us via social media or email any of our employees
4.1. What personal data are we processing?
When you contact any of our employees via e-mail, you provide your e-mail address, your name and any other personal data that your e-mail contains.
If you leave comments, like a post, etc. via Zeta’s Instagram, Facebook, YouTube Channel or Pinterest Profile, you provide personal data e.g. name and any other personal data depending on your post/comment.
4.2. Why do we process your personal data?
We process your personal data to respond to your email, and/or comment/activity on social media.
In case your contact with us takes place in the light of any of the various circumstances as described in sections 1-6, we will process your email, post, comment, etc. in accordance with sections 1-6.
4.3. Legal basis
In case your question/comment/post etc. cannot be attributed to any of the above described circumstances (sections 1-6), we process your personal data based on a legitimate interest where we have a legitimate interest in answering and responding to your questions, comments, etc. Since you initiated the dialogue, you are also able to predict this processing. We therefore estimate that our legitimate interest in this context overweighs your interest of protection of personal data.
4.4. Duration
If your contact with us relates to any circumstance described in sections 1-6, we will process your personal data according to the criteria specified there.
In the event that it is a general question to us, without being attributable to any existing customer relationship and/or matter, we will cease processing your personal data once we have answered your question. In order to make it easier for you to come back with any additional questions, we will of course await further additional questions before we stop processing your personal information for this purpose.
4.5. Whom we share your personal data with
We use different IT services (e.g. our mailboxes). For natural reasons, your personal data is therefore shared with these providers. However, they cannot use your personal data in any way.
If you communicate with us through our social media channels, it means that the social media channel also has access to your personal data in accordance with the terms and conditions you approved when you created an account at the social media platform in question. In some cases, these platforms may be outside the EU/EEA.
We do not share your personal data with any third party unless we are obliged to do so by law. We will not sell your personal data to third parties for direct marketing.
5. For customers and suppliers
5.1. What personal data are we processing?
We process personal data about those who are the contact person for our customer or supplier Hence, we process the contact person’s personal data e.g. name, e-mail address, telephone number and where this person is working. When we refer to ”your personal data” below, we refer to you as a contact person for the customer/supplier we work with in different ways.
5.2. Why do we process your personal data?
We need to process your personal data in order to communicate with the companies and suppliers we have different agreements with in order to fulfill the obligations we have undertaken due to the agreement. Hence, we need to process your personal data e.g. to send you the items you have ordered, receive payments and enter the payment into the books.
Since you are the contact person for the company/organization we are working with, we also process your data to send marketing, invitations to events, news, etc. to you.
5.3. Legal basis
We process your data based on our agreement with our customer or supplier. The processing of your personal data is necessary to fulfill our obligations under that agreement. This basis covers such processing that occurs before, during and after the term of the agreement.
Our processing with the purpose of sending marketing, invitations, news, etc. to you is based on our legitimate interest. We believe that we have a legitimate interest in sending this information to you as a contact person for the customer/supplier with whom we have a current customer relationship. We also believe that you, as a represent for our customer/supplier has an interest of receiving such communication. We believe that our legitimate interest in this context overweighs your interest of protection of personal data, since we have an existing customer relationship with the company you represent.
5.4. Duration
We process your personal data as long as the company/organization you represent has an active contractual relationship with us. We review our data once a year to ensure that only current personal data is processed.
In the event that you for any reason cease to be a contact person for our contractor, we will terminate our processing of your personal data as soon as we become aware of it.
In case your personal data (e.g. name) appears in our accounting records, your personal data will still be processed by us according to applicable law. Hence, such data will be processed for up to seven years after the end of the fiscal year, even though our contractual relationship has ceased or if you are no longer the represent for our contractual party.
The processing of personal data based on our legitimate interests continues for up to one year after our last customer contact with you. Thereafter our processing stops.
5.5. Whom we share your personal data with
Your personal data will be shared with the IT services we use to store customer/supplier agreements, manage orders, manage payments and bookkeeping, and the mailing tools we use to communicate marketing, news, events, and more.
Your personal data may also be shared within the corporate group we are part of.
We do not share your personal data with any third party unless we are obliged to do so by law. We will never sell your personal data to third parties for direct marketing, and we will not transfer your personal data to countries outside the EU/EEA.
6. Press releases to professionals
6.1. What personal data are we processing?
If you are a journalist, Influencer or in a similar profession, we process your contact information. Your contact details often constitute personal data. We usually receive your personal data when you consent to such processing, but we can also obtain such data from a third party.
In some cases, you provide us with your data with a request to receive our press releases (usually during e.g. a trade fair or an event). In these contexts, you can also provide other personal data such as personal preferences – so that we can adjust our communication after your preferences.
6.2. Why do we process your personal data?
We process your personal data to communicate with you in PR-purpose. Hence, we’ll send information about new products, provide inspiration for how Zeta’s products can be used, and in some cases to send out samples to you. You may also receive invitations to various events etc.
6.3. Legal basis
When we purchase addresses to send information about our products, this is done based on our legitimate interest of marketing ourselves. We believe that you – in the light of your profession- are interested in receiving such information from us. Hence, we also believe that your interest of protection of your personal data in this context do not overweigh our legitimate interest.
In case you henceforth wishes to receive our communication mailings, we will request your consent to process your personal data for that purpose. In such cases, we will base our processing of your personal data on your consent, which you at any time, free of charge, may withdraw by contacting us at elisabeth.askefalk@diluca.se.
If you have contacted us without any prior communication from us, we will process your personal data based on your consent. You can withdraw your consent at any time, free of charge, by emailing elisabeth.askefalk@diluca.se.
6.4. Duration
In case we have received your personal data by purchasing it form a third party, we process your personal data for up to 24 months from the date of purchase. If you do not wish to receive any more emails from us, you are welcome to contact us by email at elisabeth.askefalk@diluca.se. You can also follow the unsubscribe link you will find in each email.
If you have given your consent to receive our communication, we will process your personal data during the time we have a valid consent from you. If you wish to withdraw your consent, please email elisabeth.askefalk@diluca.se or follow the unsubscribe link contained in each email.
6.5. Whom we share your personal data with
We share your personal data with the service we use to create and distribute our communication.
We do not share your personal data with any third party unless we are obliged to do so by law. We will never sell your personal data to third parties for direct marketing, and we will not transfer your personal data to countries outside the EU/EEA.
7. Processing of personal data when you use our website
7.1. What personal data are we processing?
We use different techniques (through so-called cookies) that collect information about you when you visit our website. In some cases, the information constitutes personal data (e.g. IP address, your civil status, your age, if you have any children).
Cookies are a small text file sent from a web server to a web browser. Through the text file, the website can collect both information that constitutes personal data and such information that is not personal data. This privacy policy deals with the use of cookies that collects personal data about you. Zeta’s other use of cookies is described here https://www.zeta.nu/om-zeta/cookies/. If you do not want cookies to be saved on your device, you can turn off the feature in your browser settings.
7.2. Purpose and legal basis
We process your personal information (through cookies) to adjust our marketing communication and make it more relevant to you, in order to analyze and follow up campaign statistics, as well as to analyze the interaction on our site in order to streamline and improve our business.
Our processing of personal data in this context is based on a legitimate interest. We believe that we have a legitimate interest in conducting market and customer analysis, method and business development, as well as collecting statistics and making our marketing as relevant as possible for you. Since you, during your visit to our website approved the use of cookies, we believe that your interest of protection of your personal data does not overweigh our legitimate interest.
7.3. Duration
Your personal data will be processed for up to 12 months from the date of collection; thereafter the data will be erased.
7.4. Whom we share your personal data with
Your personal data is shared with the personal data processor we use to host our website. The data is also shared with various actors who provide marketing tools, for example. Facebook and Google.
