Privacy Policy
Privacy Policy for KFC Holding AB including its subsidiary companies Tages Konditori & Kök AB, Edenbos AB, and Oense AB.
Your personal privacy is important to KFC Holding AB ("KFC") and our subsidiary companies Tages Konditori & Kök 556435-3331 ("Tages"), Edenbos AB 559048-8804 ("Edenbos"), and Oense AB 559458-8732 ("Oense"). In this policy, we aim to inform you about how we process your personal data and your rights. Personal data is information that can be linked to you as an individual, such as your name and contact information.
To summarize, we process your personal data:
To the extent required:
To provide offers and inspiration to you, both through newsletters, SMS, targeted personalized marketing on social media, as well as online and offline.
To communicate with you and respond to your inquiries.
To ask you about Tages Konditori & Kök AB, Edenbos AB, and Oense AB and your experience with us.
To create and maintain a customer account.
To comply with laws and regulations (e.g., consumer and accounting law).
You have several rights under data protection laws. For example, you always have the right to object to marketing. You can also learn about how you can influence our processing of your personal data – what rights you have.
Want to know more? Please read our detailed explanations below. There, you can read about how we process your personal data.
Who is responsible for the processing of your personal data?
KFC Holding AB with organization number 559087–2833 is responsible for the processing of your personal data for this company, and so are Tages Konditori & Kök 556435-3331, Edenbos AB 559048-8804, and Oense AB 559458-8732.
If you wish to contact us regarding the processing of your personal data, please contact us at
From whom or where do we collect your personal data?
We process personal data that you have shared with us.
Who can access your personal data?
Your personal data is primarily processed by us at Tages, Edenbos, and Oense. We will never sell your personal data. Your personal data is processed by us so that we can fulfill our obligations to you in marketing our products to you. In some cases, we share your personal data to fulfill our obligations to you in a good and efficient manner:
To collect and publish your reviews on our website, we share your personal data with the provider that supplies us with technical solutions to collect and publish the reviews.
To market relevant products and to make our website as relevant as possible, we share your personal data with those who provide us with marketing services. For example, Google and Facebook.
We will share your personal data with IT suppliers who process the data on our behalf as processors to assist us with IT services.
You can contact us if you want more detailed information about who we share your personal data with.
Do we transfer your personal data outside the EU/EEA?
KFC and its subsidiary companies Tages, Edenbos, and Oense generally process your personal data within the EU/EEA, but in individual cases, we use suppliers from countries outside the EU/EEA. When we transfer your personal data outside the EU/EEA, KFC and its subsidiary companies ensure that there is a sufficiently high level of protection. KFC and its subsidiary companies may transfer your personal data to the USA, to our newsletter provider, and our suppliers who provide services to market relevant products and to make our website as relevant as possible. Please contact us if you have any questions about how we share your personal data.
How can you influence the processing of your personal data?
According to data protection laws, you have several rights to influence our processing of your personal data. Read more below.
Right to withdraw consent and to object to treatment
You have the right to wholly or partially withdraw consent for the processing of your personal data. Your withdrawal will be effective from the time you withdraw consent. You have the right to object to the processing of your personal data. You always have the right to object to marketing from us, such as newsletters. You generally have the right to object when the processing is based on balancing of interests. Read more about what this means below. In some other cases, the right to object does not exist (e.g., because we need to retain your personal data). If we can demonstrate compelling legitimate grounds for the processing that override your interests and fundamental rights, or if it is for the purpose of establishing, exercising, or defending legal claims, you never have the right to object to the processing.
Right of access
You have the right to obtain confirmation of whether we are processing personal data concerning you. You can access the personal data and obtain a copy of the personal data we process.
Right to rectification
You have the right to have incorrect personal data concerning you rectified and to request us to complete incomplete personal data.
Right to erasure ("the right to be forgotten") and restriction of processing
Under certain circumstances, you have the right to erasure of your personal data. This applies, for example, when the personal data are no longer necessary for the purposes for which they were collected or processed, or when you withdraw your consent on which the processing is based, and there is no other legal ground for the continued processing. You also have the right to request that KFC and its subsidiary companies restrict the processing of your personal data. This applies, for example, when the accuracy of the personal data is contested by you or when the processing is unlawful, and you oppose the erasure of the personal data and instead request the restriction of their use.
Right to lodge a complaint with a supervisory authority
You always have the right to lodge a complaint with a supervisory authority. You can do this in the particular EU/EEA member state where you reside, where you work, or where an alleged infringement of data protection law has occurred. In Sweden, the Data Inspection Authority is the supervisory authority. This right does not affect other administrative or judicial remedies.
Right to data portability
You have the right to request us to transfer certain of your personal data that we have about you to another company (data portability). This right applies to personal data that you have provided to us in a structured, commonly used, machine-readable, and interoperable format if:
The processing is based on consent or a contract; and
The processing is carried out by automated means.
When exercising your right to data portability, where technically feasible, you have the right to have personal data transmitted directly from KFC and its subsidiary companies to another data controller.
How and why do we process your personal data?
Our goal is to be as transparent as possible about how and why we process your personal data. In the table below, you can find more detailed information about why we process your personal data (processing purposes), what personal data we process, our legal basis for processing your personal data, and how long we process your personal data for each purpose.
Processing to manage reviews
For what purposes do we process your personal data? What personal data do we process? What is our legal basis for processing your personal data? How long do we process your personal data for the specific purpose? To send emails asking you for reviews after your purchase. Your name, your email address and your order details. Our legitimate interest is to contact you with a request to rate or review your purchase and experience to improve future experiences for you and other customers. Until we have sent you our request.
Processing to manage your customer account
For what purposes do we process your personal data? What personal data do we process? What is our legal basis for processing your personal data? How long do we process your personal data for the specific purpose? To send email requests for reviews after your purchase. Your name, email address, and order details. Our legitimate interest is to contact you with a request to rate or review your purchase and experience to improve future experiences for you and other customers. Until we have sent our request to you.
Processing to manage your customer account
To manage your customer account, we process your personal data for the performance of our contract with you. If you do not provide us with personal data for this purpose, we cannot provide you with your customer account.
For what purposes do we process your personal data? What personal data do we process? What is our legal basis for processing your personal data? How long do we process your personal data for the specific purpose? To manage your customer account that you have created. This includes sending you updated information about your account and our privacy policy. It also includes processing to take security measures regarding your account. Your name, personal identification number, email address, mobile number, cookies and IP address, username, and delivery address. Processing is necessary for the performance of our contract to provide you with an account when you have decided to have an account. Processing to send updates of our privacy policy to you is necessary to comply with laws and regulations. We store your personal data until you ask us to delete your account.
Processing to communicate news, inspiration and relevant offers to you.
For what purposes do we process your personal data? What personal data do we process? What is our legal basis for processing your personal data? How long do we process your personal data for the specific purpose? To send newsletters and relevant offers to you upon request and to send marketing to you who have made a purchase. Your email address and purchase history. When you choose to subscribe to our newsletter, we process your personal data based on your consent. If you have chosen to receive newsletters and relevant offers, we will send them until you unsubscribe from our newsletters. To conduct targeted marketing to you on social media and third-party sites. Your email address, cookies and IP address. When you have made a purchase, we process your personal data based on our legitimate interest in sending relevant direct marketing. We do this only if you have made a purchase and have not objected to receiving marketing. If we send newsletters based on our legitimate interest, we send such marketing for two (2) years unless you object to receiving marketing before then. Our legitimate interest is to use your personal data for direct marketing and to make our marketing more relevant to you. Your personal data will be processed from when you choose to register to receive marketing from us (2) years unless you object to our marketing before. We only do this if you have chosen to receive marketing from us.
To publish a review that you have chosen to write to make the customer experience transparent to our visitors and to market our brand to potential customers. Your name and the information you have provided in your review. Our legitimate interest is to publish the review that you have written and shared on a review platform. Until you remove the review from the review platform.
HOW HAVE WE ASSESSED THE BALANCING OF INTERESTS WHEN THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA IS OUR LEGITIMATE INTEREST?
For certain purposes, KFC, Edenbos, Tages, and Oense process your personal data and rely on our legitimate interest as the legal basis for processing. In assessing the legal basis, we rely on a balancing of interests test through which we have determined that our legitimate interests for processing outweigh your interest and fundamental right not to have your personal data processed. We have specified our legitimate interest in the tables above. Please contact us if you would like to read more about how we have conducted this test. Our contact details are provided at the beginning of this privacy policy.
This privacy policy was updated by KFC Holding AB but also includes the following subsidiary companies Tages Konditori & Kök 556435-3331 Edenbos AB 559048-8804 ("Edenbos") and Oense AB 559458-8732 ("Oense") on 11/04 2024.