1 Introduction

Stadium AB works to ensure your privacy. The purpose of the Privacy notice is to inform you about how we process your personal data. This Privacy notice may be updated, and you will find the latest version of the Privacy notice at everestoutdoor.com and socsportswear.com.

If we make any major changes to this Privacy notice, we will send the updated version to the email address you have registered via our newsletter.

2 Scope of the Privacy notice

This Privacy notice applies to the personal data we collect about you when purchasing, when visiting any of our websites or through other contact with us. Please note that the Privacy notice does not apply to personal data you provide to any of our partners (e.g. that you have clicked on any link to any of our partners). Stadium AB takes no responsibility for the personal data processing carried out by our partners.

3 Who is responsible for your personal data?

Stadium AB, Swedish organisation number 556187-3299, Norra promenaden 63, 601 60 Norrköping is responsible, in accordance with current personal data legislation (including the general data protection regulation (EU) 2016/679), for the personal data you have provided to us. All information that you provide to "we", "us" or "our" is to Stadium AB.

4 What personal data do we collect and how do we use it?

We collect and save the personal data you provide to us when purchasing online, when visiting our websites and when contacting our customer service. When contacting our customer service, we save the information you provide to us to be able to handle your case.

This could, for example, be your full name, address, e-mail address, social security number, mobile phone number or payment method. We also save purchase history and information on how you use our services (e.g. clicks in e-mails).

We use your personal data for the purposes and based on the legal basis set out below.

4.1 To be able to handle your web order

In order for you to be able to buy and order products from us, we need to process your personal data.

Why we use your personal data	To be able to handle your web order.
Legal basis	Based on the agreement with you. The processing is necessary for us to be able to fulfil our contractual obligations to you.
Storage time	Until the purchase has been completed (including delivery and payment) and for a period of 36 months thereafter in order to be able to handle any complaints and warranty matters.

4.2 Customer service matters

In all contacts with us, we will do our best to provide you with the best possible service. Contact information for our customer service can be found at the bottom of this Privacy policy. In order to handle your case, we need to process your personal data.

Why we use your personal data	To be able to handle customer service matters, complaints and guarantees.
Legal basis	Based on our legitimate interest in us being able to assist you in inquiries about our products (customer service matters), on a legal obligation (complaints) and on our agreement with you (guarantees).
Storage time	We store your personal data for 36 months thereafter in order to be able to handle any complaints and warranty matters.

4.3 Marketing and communication

In order for you to be able to take part in our latest offers and news, we can market and send communication about our products and our company in various channels, e.g. through different types of advertising or through inspirational images in social media. In order to market ourselves, we sometimes need to process your personal data.

Always remember that you have the right to object to our marketing. You can do this in our mailings through our deregistration link or by contacting us (you will find our contact information at the bottom of the document). If our marketing is displayed in social media, you can state your preferences directly in the social media platform, e.g. via your settings or in connection with the relevant post.

Why we use your personal data:	To be able to send general offers via e-mail, text message, mail, digital banners, or social media
Legal basis	Based on our legitimate interest in being able to offer customers offers for new products and promotions. If you no longer want offers from us, you are always able to unsubscribe from our mailings or choose to stop following us or block us on social media.
Storage time	What first occurs within 24 months of your most recent activity (activity refers to purchase or other interaction, e.g. click in e-mail) or until you object to our marketing, e.g. unsubscribe from our newsletter, update your preferences in the relevant social media platform or choose to no longer follow us on social media.

4.4 Competitions and events

Sometimes we want to organize competitions and events. In connection with this, we will process your personal data.

Why we use your personal data	To be able to make improvements to technical functionality, services, and products.
Legal basis	Based on our legitimate interest in being able to make updates to the technology that enables you to visit our website or shop in our web shop. And to enhance the customer experience by both improving existing and developing new services and products.
Storage time	For this purpose, it is difficult for us to specify in advance how long your personal data will be stored. Instead we have introduced routines to continuously check whether your personal data is still necessary for this purpose. Personal data that we have not used for a period of 24 months, will be deleted because we at that time no longer consider your personal data necessary.

4.6 Security work and to prevent abuse or prevent and investigate crime

For your and our employees' safety, we work with our safety on our website. To fulfil this purpose, we may process your personal data.

Why we use your personal data:	To be able to work with the safety at Stadium AB, e.g. prevent abuse or prevent, investigate, or detect crime
Legal basis	Based on our legitimate interest in being able to work with security issues, e.g. to be able to provide secure services that can prevent attempts to unauthorized access or illegal use of our services.
Storage time	In accordance with the limitation periods specified in the relevant law. According to the Swedish Accounting Act, we have e.g. obligation to store information about our transactions for 7 years.

5 How we create and use customer profiles

In general, we use analyses of our customers' purchases and behaviours at a group level. This is to be able to improve technical functionality, services, and products. Thus, no analyses are performed on an individual level.

6 How we share your information with others

Sometimes we will need to disclose your information to other companies. These companies can either be a data processor to us or independently responsible for personal data for their processing. If they are data processors, they are only allowed to process your personal data according to our instructions.

Categories of companies that are data processors to us:
• Providers of marketing services
• Service providers who help us to adapt our services based on our users' experience of the services
• Supplier of our e-commerce solution

Categories of companies that are independently responsible for personal data:

• Delivery companies
• Payment solution partners
• Social media platforms, e.g. Facebook or Instagram
• Suppliers of analysis tools, e.g. Google
• Service providers who help us to adapt our services based on our users' experience of the services.

We will share your information within the various concepts within the Stadium Group. Stadium's concept is Stadium, Stadium Outlet, Sneakers Point, SOC and Everest. The information will be used for the same purpose for which it was collected.

7 Storage

In general, we store your personal data for as long as the information is necessary to fulfil the purposes for which the personal data was collected. The personal data can also be saved for the time required by applicable law. Stadium AB has ongoing routines that ensure that we do not store unnecessary personal data about you. In the table above, we clarify how long your personal data is stored.

8 For those of you who subscribe to our newsletter

We save your personal data for as long as you choose to keep your subscription. If you choose to terminate it, we will delete your personal data, except for data that is necessary to fulfil purposes listed above, 5.1, 5.2, 5.5 and 5.6 under section 5.

9 Your rights

When we process your personal data, you have certain rights. Here is a review of what these rights are, what they mean and how you exercise them.

Your right to access	We strive to be open about how we process your personal data. If you want to gain insight into the personal data processing that we do regarding you, you have the right to request access to your personal data. If we receive a request for access, we may ask for additional information to ensure that we disclose the personal data to the right person
Your right to rectification	Do we not have your latest information, or do we process incorrect information about you? You can then request that your personal information be rectified.
Right to erasure or restriction of processing	If you think that your personal data is being processed in violation of applicable law, you also have the right to request that the personal data to be deleted or restricted.
Your right to object (including the right to object to direct marketing)	You have the right to object to our processing (e.g. the processing based on our legitimate interests). Your personal data may not be processed for direct marketing if you object to such processing. If you object to our direct marketing, we will stop all forms of mailing to you. If you still want mailings in certain channels, you do not have to object to all types of marketing. In these cases, you can choose to only receive offers from us in the channels of your choice, e.g. via e-mail, but not SMS.
Your right to revoke a given consent	Have you given consent to any processing we perform? In that case, you have the right to revoke it at any time. When you revoke your consent, we will not collect new personal data about you for the purpose for which your consent was intended, but we still have the right to process the information we collected about you before you revoked your consent.
Your right to data portability	For the processing we perform based on our agreement with you, you can request that the information you have provided to be transferred to another data controller (so-called data portability).
Your right to submit a complaint to the supervisory authority	If you think that we handle your personal data incorrectly, you also have the right to submit your complaint to the supervisory authority.

10 Transfer of personal data

[Sometimes we may have to transfer your personal data to a country outside the EU / EEA. This may be when we disclose your personal information to other companies in accordance with section 7. We only disclose your personal data to a country outside the EU / EEA if there are sufficient guarantees that your personal data is handled properly.

To protect your personal data when we transfer it, we take all reasonable legal, technical and organisational measures to ensure that the level of protection is the same as within the EU / EEA. In cases where personal data is processed outside the EU / EEA, the level of protection is guaranteed either through a decision from the EU Commission that the country in question ensures an adequate level of protection or through the use of so-called appropriate protection measures. Examples of appropriate protection measures are standard contract clauses or binding corporate rules. You can get a copy of the protection measures by contacting us.

11 Contact us

Our goal is to always give you easy-to-understand information about how we use your personal data. If you still have questions about how we use your personal data, you are welcome to contact our customer service.

Tel: 0753-252 200
Opening hours: Monday - Friday 9.00 am-5.00pm CET.