Privacy policy

1. Introduction

AEPB Affairs AB ("AFFAIRS", "we", "us") respects your personal integrity. This privacy policy has been adopted to describe how we process your personal data in the situations described below. It also describes your rights toward us under the applicable data protection legislation and how you can exercise these rights.

This policy applies to our processing of personal data relating to you as a:

    • Customer who purchases our products, e.g. via our web shop;

    • Visitor on our website (arrivals.se), platforms and social medias ("Digital Channels"); and

    • Participant in marketing activities, contests and events arranged by us.

2. Contact information

AFFAIRS is the data controller in respect of the processing of your personal data. If you have any questions concerning this privacy policy or AFFAIRS' processing of your personal data, you are welcome to contact us via email or mail at:
AEPB Affairs AB
Karlavägen 5, SE-114 24 Stockholm
E-mail: arrivals@weareaffairs.com

3. What personal data is processed by us and for which purposes?

3.1 When you purchase our products
As a customer to us, we process your personal data such as your name, e-mail address, phone number, payment/bank details and other information that relates to your purchase. Your personal data is processed for following purposes:

    • To deliver the products that you have purchased by us and to administrate the agreement with you (including enabling payment and handling of returns and complaints);

    • To be able to communicate with and to respond to inquiries related to our products; and

    • For marketing purposes, such as marketing via mail, email and SMS/MMS (which you can opt out from by following the instructions included in each marketing message or by contacting us via the contact details above).

3.2 When you visit our Digital Channels
When you visit our Digital Channels, we collect information that you provide about yourself, e.g. your name, address, e-mail address and phone number. We may also process information about your use of our Digital Channels collected via cookies, as described in our cookie policy. Your personal data is processed for the following purposes:

    • To provide, maintain, test and improve our Digital Channels;

    • To provide support in case of any problems with our Digital Channels;

    • For marketing purposes, such as for marketing via mail, email and SMS/MMS (which you can opt out from by following the instructions included in each email or SMS/MMS or by contacting us at the contact details above;

    • To analyse and group visitors by selection, prioritization and preferences (so-called profiling) in order to provide you with relevant and customized content, recommendations, advertisements and offers;

    • To create anonymized statistics regarding the use of our Digital Channels; and

    • Provided that you have consented to it, to create custom audiences in order for us to send you customized offers and marketing on YA!'s Digital Channels. You may withdraw your consent at any time by using the opt-out tools offered on the Digital Channel where targeted marketing and advertising occur. If there are no such opt-out tools, you can withdraw your consent by contacting us at the contact details above.


3.2 When you participate in marketing activities, contests and events
If you participate in marketing activities, contests or events that we organize, we will process e.g. your contact information, submissions in contests, preferences, requests and other personal information that you choose to submit to us. We process your personal data for the following purposes:

    • To administrate the marketing activity, including communicating the outcome to you and providing prizes (if any);

    • To inform you about and offer you new marketing activities, contests or events;

    • For other marketing purposes, such as marketing via mail, email and SMS/MMS (which you can opt out from by following the instructions included in each message or by contacting us via the contact details above); and

    • To obtain anonymized statistics over the use of YA!'s marketing activities, contests or events.

4. Legal basis for processing
We process your personal data when it is necessary in order to perform an agreement with you or when we have a legitimate interest in processing your personal data, e.g. when we send marketing to our existing customers. Your personal data can also be processed if we are legally obliged to do so. If a certain data process requires your prior consent, we will collect such consent before carrying out the processing in question (a consent can be withdrawn at any time but that will not affect the lawfulness of processing based on consent before its withdrawal).

5. Security measures and ereasure
We have appropriate technical and organizational security measures in place to protect your personal data from unauthorized access, modification, dissemination or destruction.

We process your personal data only as long as it is needed to fulfil the purposes of the processing. YA! deletes personal data when the purpose of the processing has been completed in accordance with our internal guidelines for deletion of data.

6. Disclosure of personal data
AFFAIRS will not sell your personal data to a third party. We only share personal data with business partners, including service providers, who process personal data on YA's behalf or when delivering services to YA!, and when we are required to do so according to law or decisions by public authorities. Where personal data is transferred to partners outside the EU/EEA, it is YA!'s responsibility to ensure that such personal data is protected in the same way as in the EU/EEA, for example by putting data transfer agreements in place including the standard contractual clauses issued by the EU Commission.

7. Your rights

You have the following rights in relation to our processing of your personal data:

    • Right to access – right to obtain confirmation of and information on the processing of your personal data;

    • Right to rectification – right to have your personal data corrected;

    • Right to erasure – right to have your personal data erased. This right is limited to data that, by law, requires your consent to be processed, if you withdraw that consent and oppose the processing.

    • Right to object – right to object to our processing if the legal ground for the processing is based on a balancing of interests or if it is used for direct marketing.

    • Right to restrict data processing – right to demand that the processing of personal data is restricted, e.g. if you oppose the accuracy of the data. While the matter is investigated, YA's access to the data in question is restricted.

    • Right to data portability – right to request that personal data be sent from one data controller to another. This right is restricted to data which you have submitted to us.

You are also entitled, at any time, to submit complaints to the relevant supervisory authority if you think that your personal data is being processed in violation of applicable data protection legislation.

If you wish to exercise any of your rights, please contact us via the contact details above in Section 2.