Privacy policy

One of Lisa & friends AB’s main priorities is the privacy of our visitors and customers. In this Privacy Policy, you can read how we process the personal data that come into our possession. The Privacy Policy applies where we are the data controller for the personal data we process about you.

For the purposes of this Privacy Policy, personal data means any information relating to an identified or identifiable natural person. In other words, any information that can be traced directly or indirectly to you.

If you have additional questions or require more information about our processing of your personal data, do not hesitate to contact us.

1. Purpose and legal basis of our processing of personal data

1.1 Purchases and rentals

We and Samsung Electronics Nordic AB’ (“Samsung”) are joint data controllers for the processing of data in connection with rentals of devices and purchases of accessories. Information about how your personal data is processed by Samsung in this connection can be found in Samsung’s Privacy Policy: https://account.samsung.com/membership/terms/privacypolicy.

We process personal data about you if you have requested to rent a device, or if you are one of our customers.

Personal data is collected from you and from our business partners.

We process the following types of general personal data, including:

  • Name
  • Address
  • Telephone number
  • E-mail address
  • Method of payment
  • Details of payment card number and expiry date
  • Data about previous purchases
  • Data about written correspondence with you as our customer, including feedback, complaints, or other comments
  • Credit score

We also process any further types of data you have provided in e-mails, free text fields, or similar.

Personal data is processed for the purpose of:

  • Delivering the agreed devices, accessories, and associated services
  • Communicating with you, e.g., answering questions, requests, complaints, or other inquiries
  • Assessment of your ability to pay

Our processing is limited to the personal data that is necessary for achieving the above purposes.

The legal basis of our processing for the purposes of delivering the agreed devices, accessories, and associated services, and communicating with you, is the following:

  • The processing of personal data is necessary to take steps at your request prior to entering into a contract, see Article 6(1)(b) of the General Data Protection Regulation.
  • The processing of personal data is necessary for the performance of a contract to which you are a party, see Article 6(1)(b) of the General Data Protection Regulation.

The legal basis of our processing for the purpose of assessment of your ability to pay is that you have given your consent to the processing, see Article 6(1)(a) of the General Data Protection Regulation.

We transfer or make your personal data available to:

  • Data processors (e.g. Foxway for maintenance, return and exchange services, and IT suppliers)
  • Business partners

We may store your personal data for up to 5 years from the date of the termination of our contract with you, or up to 5 years from completion of our assessment of your ability to pay, after which time the data will be erased unless we are legally required to store the data for a longer period.

1.2 Use of cookies and log files on our website

We process personal data about you if you are a visitor to our website https://lisaand.com/.

Personal data is collected from you via cookies and log files. The log files log visitors when they visit websites. All hosting companies do this as a part of hosting services' analytics. Like any other website, we also use "cookies".

We process the following types of general personal data, including:

  • IP address data
  • Browser type
  • Internet Service Provider (ISP)
  • Data and time stamp
  • Referring/exit pages
  • Number of clicks

The personal data is processed for the purpose of:

  • Remembering your selected preferences for the purpose of adapting our website to your choices to enhance your user experience
  • Generate statistics of your visits to our website to learn how visitors interact with our website
  • Analyzing trends and gathering demographic information
  • Administering the site

Our processing is limited to the personal data that is necessary for achieving the above purposes.

The legal basis of our processing is that you have given your consent to the processing, see Article 6(1)(a) of the General Data Protection Regulation.

We transfer or make your personal data available to data processors (e.g., IT suppliers).

We may store your personal data for up to 3 years from the collection via cookies or log files, after which time the data will be erased unless we are legally required to store the data for a longer period.

2. Mandatory provision of certain personal data

In certain cases where we process personal data about you due to a contractual requirement or a requirement that must be complied with before entering into a contract with you, you are obliged to provide the personal data that we need to comply with our obligations under the contract. If you do not provide the data that we need to comply with our obligations under the contract, the consequences may be that we can't fulfill our contract with you, e.g. deliver as provided.

It will be stated in the relevant forms whether the provision of the personal data is mandatory or optional. If the provision of the personal data is mandatory, the relevant field will be marked with an asterisk (*).

3. Your rights

3.1 General

You have certain rights under the General Data Protection Regulation in relation to our processing of your personal data.

You have the right to access the data that we process about you and certain other information.

You have the right to have incorrect data about you corrected. In special cases, you have the right to have data about you erased. In addition, in certain circumstances, you have the right to require that the processing of your personal data be restricted, and/or to object to our otherwise lawful processing of your personal data.

Finally, in certain circumstances, you have the right to data portability, which means that you have a right to receive your personal data in a structured, commonly used and machine-readable format and the right to have those personal data transferred from us to another data controller.

3.2 Consent

Where our processing of your personal data is based on your consent, you can withdraw your consent at any time by contacting us.

If you withdraw your consent, you should note that we will not be able to further process your data unless we are legally or contractually obliged to do so.

You should note, however, that this will not affect the lawfulness of our processing of your personal data based on consent before your withdrawal. The withdrawal of your consent will therefore only take effect at the time of the withdrawal.

3.3 Contact

You can contact us if you wish to exercise any of your rights as described above, if you wish to complain, or if you have any questions in relation to this Privacy Policy:

Lisa & friends AB
Business reg. nr. 559315-0955

Birger Jarlsgatan 57C

113 56 Stockholm

E-mail: hello@lisaand.com

You also have the right to lodge a complaint with the relevant supervisory authority.

4. Changes to our Privacy Policy and latest update

This Privacy Policy will be updated on an ongoing basis. The latest update was on 8. July 2024.

Third Party Privacy Policies

Lisa&'s Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.

LISA& logotyp
Lisa & friends AB
Birger Jarlsgatan 57
113 56 Stockholm
SWEDEN