Privacy Policy - Rekommenda
Last updated: January 11, 2025
This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use Our services (“Service”) and informs You of Your privacy rights and how the law protects You.
We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
Interpretation and Definitions
Interpretation
Words whose initial letters are capitalized have meanings defined under the conditions below. These definitions apply whether they appear in singular or plural form.
Definitions
For purposes of this Privacy Policy:
-
Account: A unique account created for You to access our Service or parts of our Service.
-
Business (CCPA/CPRA context): Refers to the Company as the legal entity that collects Consumers’ personal information and determines the purposes and means of the processing of Consumers’ personal information, or on behalf of which such information is collected.
-
Company (referred to as “the Company,” “We,” “Us,” or “Our”):
Rekommenda, a part of Olof K AB (org. no. 5568927098, tax no. SE556892709801),
Ystadsgatan 47 e, 214 44 Malmö, Sweden.
Phone: +46 790967796
Email: [email protected]
For purposes of the GDPR, the Company is the Data Controller.
-
Consumer (CCPA/CPRA context): A natural person who is a California resident, including individuals in the state for other than a temporary or transitory purpose, and those domiciled in the state but temporarily outside the state.
-
Cookies: Small files placed on Your computer or other device by a website, containing details of Your browsing history, among other possible uses.
-
Country: Sweden (though the policy is intended to meet requirements in multiple jurisdictions, including the USA and Canada).
-
Data Controller (GDPR context): The legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
-
Device: Any device that can access the Service, such as a computer, cellphone, or digital tablet.
-
Do Not Track (DNT): A concept promoted by US regulatory authorities (particularly the FTC) that encourages the Internet industry to develop a mechanism for allowing internet users to control the tracking of their online activities across websites.
-
Facebook Fan Page: A public profile (example name used: “Rekommenda Official Page”) created by the Company on the Facebook social network.
-
Personal Data: Any information relating to an identified or identifiable individual.
- Under GDPR: any information such as a name, identification number, location data, online identifier, etc.
- Under CCPA/CPRA: any information that identifies, relates to, or could reasonably be linked, directly or indirectly, with You.
-
Sale (CCPA/CPRA context): Selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a Consumer’s personal information for monetary or other valuable consideration.
-
Service: Refers to the website(s) or services offered by Rekommenda.
-
Service Provider: Any natural or legal person who processes data on behalf of the Company. Under GDPR, they are considered Data Processors.
-
Third-party Social Media Service: Any website or social network website that allows a user to log in or create an account to use the Service.
-
Usage Data: Data collected automatically, generated by the use of the Service or from the Service infrastructure (e.g., page visit durations).
-
Website: Refers to Rekommenda’s main website, e.g., https://www.rekommenda.com (illustrative domain).
-
You: The individual accessing or using the Service, or the company or legal entity on whose behalf that individual is accessing or using the Service, as applicable.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide certain personally identifiable information used to contact or identify You, which may include:
- Email address
- First and last name
- Phone number
- Address (including State/Province, ZIP/Postal code, City)
- Usage Data
Usage Data
Usage Data is collected automatically when using the Service. It may include IP address, browser type, pages visited, date/time of visits, etc.
Information from Third-Party Social Media Services
You may create an account and log in through Google, Facebook, Twitter, or similar. If You do, We may collect data already associated with that account (e.g., name, email, contacts).
Tracking Technologies and Cookies
We use Cookies and similar tracking technologies (beacons, tags, scripts) to track activity on Our Service. This includes:
- Cookies or Browser Cookies
- Flash Cookies
- Web Beacons
Cookies can be “Persistent” or “Session.” See Our Cookies Policy for further details.
Use of Your Personal Data
The Company may use Personal Data for:
- Providing and maintaining the Service, including monitoring usage.
- Managing Your Account as a registered user.
- Performing a contract (purchase, items/services).
- Contacting You (via email, phone, SMS, push notifications).
- Providing You with news, offers, and general info about Our goods/services, unless You opt out.
- Managing Your requests.
- Delivering targeted advertising.
- Business transfers (merger, acquisition, reorganization).
- Other purposes such as data analysis, usage trends, etc.
We may share Your personal information with Service Providers, affiliates, business partners, and with Your consent in certain contexts.
Retention of Your Personal Data
We retain Your Personal Data only as long as necessary to fulfill the purposes in this Privacy Policy and comply with legal obligations. Usage Data is generally kept for a shorter period unless used for security or service-improvement purposes.
Transfer of Your Personal Data
Your information may be processed at the Company’s operating offices and elsewhere. By submitting Your information, You agree to such transfer. No transfer takes place to any organization or country without adequate controls in place, including data security.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will notify You accordingly.
Law Enforcement
We may disclose Your Personal Data if required by law or in response to valid requests by public authorities.
Other Legal Requirements
We may disclose Your Personal Data in good faith if necessary to:
- Comply with a legal obligation
- Protect and defend the Company’s rights/property
- Prevent wrongdoing related to the Service
- Protect the personal safety of users or the public
- Protect against legal liability
Security of Your Personal Data
While We strive to use commercially acceptable means to protect Your Personal Data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
Detailed Information on the Processing of Your Personal Data
Our Service Providers may have access to Your Personal Data to perform tasks on Our behalf. They are contractually obligated not to disclose or use it for other purposes.
Analytics
We may use third-party analytics like Google Analytics, ClickMagic, etc. for usage monitoring. They may collect data per their own policies.
Email Marketing
We may use Your Personal Data for newsletters or promotions. You can opt out at any time. We might use providers like Mailchimp, AWeber, GetResponse, etc.
Payments
For paid products/services, We use third-party payment processors (e.g., Stripe, PayPal, Klarna) who adhere to PCI-DSS standards. We do not store payment card details.
Behavioral Remarketing
We partner with third-party vendors (e.g., Google Ads, Twitter, Facebook) to display ads after You visit Our Service. These third parties use Cookies to show more relevant ads.
Usage, Performance, and Miscellaneous
We may use third-party tools (e.g., Google reCAPTCHA, Mouseflow) for security and improving user experience.
GDPR Privacy
Legal Basis for Processing Personal Data under GDPR
We may process Personal Data under these conditions: consent, performance of a contract, legal obligations, vital interests, public interests, or legitimate interests. Contact Us for clarity.
Your Rights under GDPR
You have rights to access, rectify, erase, object, restrict processing, request data portability, or withdraw consent. Contact Us to exercise these rights. You may also complain to a Data Protection Authority in the EEA.
Facebook Fan Page
Data Controller for the Facebook Fan Page
The Company may operate an official Facebook Fan Page and is considered a Joint Controller with Facebook for data collected there. Refer to Facebook’s policies for details on its data handling.
CCPA/CPRA Privacy
This section supplements the main Privacy Policy for California residents.
- Categories of Personal Information Collected
- Sources of Personal Information
- Use/Disclosure for Business or Commercial Purposes
- Sale of Personal Information
- Your Rights (notice, access, opt-out, deletion, non-discrimination)
Contact Us to exercise CCPA/CPRA rights. Only You or an authorized agent may make a verifiable request.
“Do Not Track” Policy
Our Service does not respond to DNT signals. Please adjust browser settings as needed.
Children’s Privacy
We do not knowingly collect personal data from anyone under 13. If You become aware of such collection, contact Us to remove it. Parental consent may be required by local laws for minors.
Your California Privacy Rights (Shine the Light law)
California residents with an established business relationship may request information about shared personal data for direct marketing. Contact Us for details.
California Privacy Rights for Minor Users
California residents under 18 who are registered users can request removal of posted content. We will make reasonable efforts to comply. Contact Us for instructions.
Links to Other Websites
Our Service may contain links to external sites not operated by Us. We assume no responsibility for external content. Review their Privacy Policies before providing personal data.
Changes to this Privacy Policy
We may update this Privacy Policy periodically. We will post the new policy on this page and update the “Last updated” date. We may notify You via email or a prominent notice before changes take effect.
Contact Us
If You have questions about this Privacy Policy, contact us:
- By email: [email protected]
- By mail: Rekommenda, Ystadsgatan 47 e, 214 44 Malmö, Sweden
- By phone: +46 790967796
Summary of Changes & Important Notes (2025 Update)
-
New Business Details: Company name updated to Rekommenda (part of Olof K AB), address, phone, email, CEO Jens Engström.
-
References to New Laws: Mentions CPRA (California), GDPR for EU, and general compliance with Canada.
-
Key Additions/Edits: Replaced old references, clarified “sale” under CCPA/CPRA, children’s privacy, updates to analytics/remarketing services.
-
Practical Considerations: Reinforce data security, encryption, compliance monitoring for future regulations.
-
Next Steps: Make policy publicly accessible, review vendor contracts, ensure compliance with local data laws.