Privacy Policy
Midbec Tapeter is committed to handling your personal information in a safe, secure, and transparent manner.
Personal information is any information that can be directly or indirectly linked to you. Examples of personal information include your name, address, email address, phone number, payment details, order information, IP address, customer number, and information you provide when you contact our customer service.
In this privacy policy, we describe what personal data we process, why we process it, the legal basis for our processing, how long the data is retained, with whom we may share the data, and what rights you have.
This policy applies when you visit midbectapeter.com, shop with us, contact our customer service, subscribe to our newsletter, submit reviews, participate in contests, interact with us on social media, apply for a job or an internship with us, or otherwise have contact with Midbec Tapeter.
All processing of personal data is conducted in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Who is the data controller?
Midbec AB, corporate ID No. 556323-7105, is the data controller for the processing of personal data described in this privacy policy.
Contact Information
Midbec AB
Analysvägen 1
435 33 Mölnlycke
Sweden
Email: [email protected]
Phone: 031-88 05 50
In this policy, “Midbec Tapeter,” “we,” “us,” and “our” are used to describe Midbec AB’s business and website.
Summary
In this privacy policy, you can read about:
- What personal information we process
- Why We Process Personal Data
- What legal basis we use
- how long the data is retained
- with whom we share personal information
- if personal data is transferred outside the EU/EEA
- what rights you have
What personal information do we process, and why?
We process personal data for various purposes depending on how you interact with us. Below, we describe the most common types of processing.
A. Manage Purchases and Deliveries
Purpose
We process personal data in order to manage, fulfill, and deliver your order, as well as to communicate with you regarding your purchase.
This includes, for example,
- Receive and process your order
- Confirm your purchase
- process payment
- deliver goods
- Send shipping information
- handle issues related to the order
- handle returns, complaints, or other matters related to the purchase
Personal Data That May Be Processed
- name
- address
- email address
- phone number
- order number
- customer number, if applicable
- ordered products
- shipping address
- selected shipping method
- pickup location
- delivery status
- payment reference
- transaction date
- invoice information
- other information needed to process the purchase
In some cases, the payment provider may request additional information, such as a personal identification number, for identification, credit assessment, or payment processing. Such processing is carried out in accordance with the payment provider’s own terms and conditions and privacy policy when the payment provider acts as an independent data controller.
Legal Basis
Fulfillment of a contract. This processing is necessary for us to process the purchase and deliver the order to you.
In some cases, processing may also be based on a legal obligation, such as when we need to retain accounting records.
Retention period
The data is retained for as long as necessary to process the purchase and, thereafter, for as long as required by law—for example, under accounting laws—or for as long as the data is needed to handle complaints, returns, or legal claims.
Accounting records are retained in accordance with the retention periods specified in accounting legislation.
B. Handle customer service, returns, and complaints
Purpose
We process personal data in order to provide customer service and handle inquiries via email, phone, social media, or other channels.
This includes, for example,
- answer questions
- handle returns
- handle complaints
- follow up on matters
- document communication
- investigate errors, shipping damage, or other issues related to an order
Personal Data That May Be Processed
- name
- contact information, such as email address, phone number, and address
- order number
- relevant order information
- relevant payment and shipping information
- information that you provide when you contact us
- photos you send us, for example, in connection with a complaint or damage during shipping
- case history
- social media username, if you contact us there
Legal Basis
Legitimate interest. The processing is necessary for our and your legitimate interest in being able to administer, follow up on, and handle customer service matters.
When the matter concerns a purchase, a return, a complaint, or a legal claim, the processing may also be necessary to fulfill a contract, comply with legal obligations, or establish, assert, or defend legal claims.
The data subject’s privacy interests are not considered to outweigh this interest, since the processing is limited to data that is directly relevant to the matter, the data subject can reasonably expect a company to handle and document customer service matters, and the processing is in the interest of both the company and the customer.
Retention period
Customer service cases are normally retained for up to 36 months so that we can follow up on them and handle any complaints.
Data may be retained for a longer period if required by law or if it is needed to handle an ongoing matter, a dispute, or a legal claim.
C. Manage Reviews
Purpose
We process personal data so that you can submit reviews of our products and so that we can publish reviews on the website. Reviews help other customers get better product information.
Personal Data That May Be Processed
- name or alias
- email address
- review text
- grade
- Order information for purchase verification
If you submit a review, your name or username, rating, and review text may be published on the website.
Legal Basis
Consent: when you choose to submit a review and approve its publication.
In some cases, we may also process limited order information based on a legitimate interest to verify that the review relates to an actual purchase.
Retention period
The review will remain posted as long as the product is available for sale or until you withdraw your consent or request that the review be removed.
If you wish to withdraw your consent to the publication of a review, please contact us at [email protected] and specify which review your request concerns.
D. Send newsletters and offers
Purpose
We process personal data so that we can send newsletters, offers, inspiration, and information about our products and services.
Personal Data That May Be Processed
- name
- email address
- any information about previous purchases
- information about your preferences, if you have provided such information yourself
- information about how you interact with our emails, such as opens and clicks
Legal Basis
Consent, when you sign up for our newsletter yourself or otherwise agree to receive marketing communications.
In some cases, we may send marketing communications to existing customers based on legitimate interests, provided that the marketing pertains to similar products or services and that you always have the option to opt out of receiving further marketing communications.
Retention period
Your information will be processed until you unsubscribe, withdraw your consent, or opt out of marketing communications.
You can always unsubscribe from the newsletter using the unsubscribe link in the email or by contacting us. Every email includes an option to unsubscribe from future emails.
E. Marketing, Advertising, and Abandoned Shopping Carts
Purpose
We may process personal data to market our products and services, display relevant ads, and send reminders about products that have been added to the shopping cart but for which the purchase has not been completed.
This can be done, for example, through email, advertising on external platforms, or other digital channels.
Personal Data That May Be Processed
- email address
- IP address
- cookie ID
- Device Information
- browser information
- information about which pages you visit
- information about the products you're viewing
- Information about the items in the shopping cart
- click and behavioral data
- purchase history, if applicable for segmentation
- Technical Information About Your Device
Legal Basis
Consent, when the processing is based on marketing cookies, web beacons, or similar technologies.
Legitimate interest may be used for certain direct marketing to existing customers, provided that it is consistent with applicable regulations and that you always have the option to object to such marketing.
This processing applies only to existing customers and the marketing of similar products or services. The data subject always has the option to object to such marketing, which limits the impact on the individual’s privacy.
Retention period
Your data will be processed until you withdraw your consent, change your cookie settings, or opt out of marketing.
The retention periods for cookies and similar technologies are outlined in our cookie policy.
F. Provide and analyze the website
Purpose
We process technical data in order to provide, improve, and analyze the website.
This includes, for example,
- The website must function properly from a technical standpoint
- The shopping cart should work
- The page should load correctly
- We should be able to identify and resolve technical problems
- We need to be able to understand how the website is used
- We should be able to improve the user experience
Personal Data That May Be Processed
- IP address
- cookie ID
- Technical Information About the Device and Browser
- Information about sessions
- click data
- information about which pages are visited
- approximate geographic information based on IP address, if applicable
- error messages and technical logs
Legal Basis
For essential functions and technical operations, we process data based on our legitimate interest in providing a functional and secure website.
For analytics cookies, marketing cookies, and similar technologies that are not necessary, we process data based on your consent.
Retention period
Technical logs are normally retained for a limited period of time as necessary for operations, troubleshooting, and security.
Data collected through analytics cookies is stored in accordance with the retention periods specified in our cookie policy, typically no longer than is necessary for the intended purpose.
G. Comply with legal obligations
Purpose
We process personal data to comply with legal obligations that apply to us, such as those under accounting laws, tax regulations, consumer protection laws, or other applicable laws.
Personal Data That May Be Processed
- name
- contact information
- order information
- payment information
- invoice information
- complaint information, if applicable
- other information required by law
Legal Basis
Legal obligation.
Retention period
The data is retained for as long as required by applicable law.
Accounting records are retained in accordance with the retention periods specified in accounting legislation.
H. Manage Suppliers and Business Contacts
Purpose
We process personal data in order to manage our relationships with suppliers, business partners, and other business contacts.
Personal Data That May Be Processed
- name
- role or position
- company name
- email address
- phone number
- address
- communication history
- contract-related information
Legal Basis
Legitimate interest in managing supplier relationships, partnerships, and business contacts.
If the contact person is a party to the agreement, the processing may, in certain cases, be carried out to fulfill the agreement.
The processing concerns contacts in a professional context and is limited to data necessary for managing the business relationship. The impact on privacy is assessed as low, since the processing is expected within the framework of a business relationship.
Retention period
The data is retained for the duration of the business relationship and thereafter for as long as necessary for follow-up, documentation, accounting, or legal claims.
Contact information and communication history are normally retained for up to 36 months after the relationship ends, unless longer retention is required by law or necessary for legal claims.
I. Handling Job Applications and LIA
Purpose
We process personal data in order to handle applications for jobs, internships, or LIA placements.
Personal Data That May Be Processed
- name
- contact information
- Resume
- personal letter
- educational information
- work experience
- portfolio or work samples, if you are submitting them
- references, if you provide any
- other information that you provide in your application
Legal Basis
Legitimate interest in being able to manage and carry out recruitment processes.
If we wish to retain your application for future recruitment opportunities after the current process has concluded, we will do so only with your consent.
The applicant initiated contact on his or her own and provided the information for the purpose of being considered for a position. The processing is limited to what is necessary for the recruitment process and is not considered to infringe upon the data subject’s fundamental privacy interests.
Retention period
Information related to a recruitment process is normally retained for up to 24 months after the recruitment process has been completed so that we can follow up on the recruitment and handle any legal claims.
If you consent to us retaining your application for future recruitment, your information will be retained for the period specified when you provide your consent, or until you withdraw your consent.
J. Organize and administer competitions
Purpose
We process personal data in order to administer contests, communicate with participants, select winners, and distribute prizes.
Personal Data That May Be Processed
- name
- contact information
- contest entry
- information that you provide yourself in connection with the contest
- any profit information
- communication related to the competition
Legal Basis
Legitimate interest in being able to conduct and administer competitions.
If contest entries are used for marketing purposes, or if images, videos, or other content are published on our channels, such processing is based on consent or in accordance with specific contest terms and conditions.
The participant has chosen to enter the contest and can expect that their information will be used for the administration of the contest. The processing is time-limited and restricted to what is necessary to conduct the contest.
Retention period
Data is normally stored for up to 12 months after the competition ends.
Data may be retained for a longer period if required by law, contest rules, or to address legal claims.
K. Managing User-Generated Content and #yesmidbec
Purpose
We process personal data in order to collect, manage, and publish user-generated content, such as photos, videos, or posts in which you demonstrate how our products are used.
This may be used for inspiration, reference images, and marketing on our own channels, such as our website, social media, newsletters, or other marketing materials.
Personal Data That May Be Processed
- name
- social media username
- photos, videos, or other content that you share
- caption or other accompanying text
- any image metadata
- communication related to approval
- information about where the content has been published
Legal Basis
Consent.
You may withdraw your consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.
Retention period
The data will be processed as long as consent is in effect or until you request that the content be deleted.
We may need to retain certain documentation regarding the consent even after it has been revoked in order to demonstrate that we were entitled to use the content during the period it was published.
If you wish to withdraw your consent to the publication of user-generated content, please contact us at [email protected] and specify which content your request applies to.
Cookies and Similar Technologies
We use cookies and similar technologies on our website.
Cookies may be used to:
- The website should function properly
- remember your choices
- manage the shopping cart and checkout process
- analyze how the website is used
- improve the user experience
- display relevant marketing content
Essential cookies are used to ensure the website functions properly and typically do not require consent.
Cookies for analytics, statistics, personalization, and marketing are used only when you have given your consent, to the extent that consent is required by law.
You can change or withdraw your consent at any time through our cookie settings. For more information about the cookies we use, the providers that use them, their purposes, and retention periods, please see our cookie policy.
How do we protect your personal information?
We protect personal data through technical and organizational security measures.
Among other things, this means that:
- Only authorized persons have access to personal data
- Access is restricted based on job responsibilities and needs
- The system is protected by technical security measures
- Vendors that process personal data on our behalf must follow our instructions and enter into data processing agreements
- Personal data is deleted or anonymized when it is no longer needed
We work continuously to ensure that personal data is processed securely.
How do you exercise your rights?
If you wish to exercise any of your rights, you can contact us at: [email protected]
To protect your personal information, we may need to request additional information from you to verify your identity before we process your request.
We will respond to your request without undue delay, usually within one month.
With whom do we share personal information?
We share personal information when it is necessary to conduct our business, provide our services, fulfill our agreements with you, or comply with legal requirements.
We never sell your personal information to third parties.
We may share personal information with the following categories of recipients:
- payment service providers, in order to process and manage payments
- logistics and transportation companies, in order to deliver orders
- system providers for website operation, e-commerce, CRM, order management, and customer service
- Email and marketing platforms, for newsletters and mailings
- analytics and advertising platforms, for statistics and targeted marketing
- providers of features on the website, such as forms, reviews, and user-generated content
- IT and Operations Providers
- financial systems and accounting partners
- government agencies, if we are required by law to disclose information
- legal advisors or other advisors, if necessary to protect our rights
Some recipients process personal data as data processors in accordance with our instructions. Other recipients, such as payment providers, shipping companies, government agencies, or certain advertising platforms, may in some cases be independent data controllers for their own processing of personal data.
When a supplier processes personal data on our behalf, we ensure that a data processing agreement is in place.
Transfers Outside the EU/EEA
Some of our suppliers or their subcontractors may process personal data outside the EU/EEA.
Examples of providers where this may apply include analytics, advertising, payment, e-commerce, hosting, cookie, and functionality providers, such as Google, Meta, Roomvo, CookieYes, WooCommerce, and Klarna.
When personal data is transferred to a country outside the EU/EEA, we ensure that the transfer is carried out in accordance with the GDPR. This can be done, for example, by:
- other appropriate safeguards under the GDPR
- Decision by the European Commission on an adequate level of protection
- EU-U.S. Data Privacy Framework, where applicable
- European Commission Standard Contractual Clauses
Your Rights
Under the GDPR, you have several rights related to our processing of your personal data.
Right of Access
You have the right to receive confirmation as to whether we are processing personal data about you and, if so, to access that data through a record of the data we hold.
Right to Correction
You have the right to request that inaccurate or incomplete personal data be corrected or supplemented.
Right to Erasure
You have the right to request that your personal data be deleted, for example, if the data is no longer necessary for the purpose for which it was collected or if you withdraw your consent.
The right to erasure does not apply if we are required by law to retain the data, if the data is necessary to fulfill a contract, or if it is necessary to establish, assert, or defend legal claims.
Right to Limitation
You have the right to request that the processing of your personal data be restricted in certain situations, such as if you contest the accuracy of the data or object to our processing of it.
Right to Object
You have the right to object to processing based on legitimate interests.
You always have the right to object to processing for direct marketing purposes. If you object to direct marketing, we will cease such processing.
Right to Data Portability
You have the right to receive the data you have provided in a structured format and, where technically feasible, to have it transferred to another party.
Right to Withdraw Consent
If the processing is based on consent, you have the right to withdraw that consent at any time.
Right to File a Complaint
You have the right to file a complaint with the Data Protection Authority (IMY) if you believe that your personal data is being processed in violation of applicable law.
Contact
If you have any questions about our processing of personal data, this privacy policy, or if you wish to exercise your rights, please feel free to contact us.
Midbec AB
Analysvägen 1
435 33 Mölnlycke
Sweden
Email: [email protected]
Phone: 031-88 05 50
Changes to the Privacy Policy
We may update this privacy policy as our business, website, services, or applicable regulations change. The most recent version is always available on our website.
Last updated: June 5, 2026





