Privacy, GDPR & cookies

1. Data Controller

The Syrian Orthodox Church Youth Union (SOKU), corporate registration number 802404-2205, is the data controller for the processing of personal data described on this page.

E-mail: kansliet@soku.org
Address: Klockarvägen 104, 151 61 Södertälje.

2. What personal data can we process?

3. Why do we process personal data?

To manage purchases

We process the data needed to receive an order, administer payment, deliver products and handle returns and complaints.

The legal basis is primarily that the processing is necessary to fulfill the contract with you.

To comply with legal obligations

Certain information needs to be saved so that SOKU can meet requirements according to, for example, accounting and tax legislation.

To answer questions

When you contact us, we process the information needed to be able to handle and respond to your request.

Newsletters and voluntary mailings

If SOKU offers newsletters or similar mailings, your email address will be processed for this purpose when there is a valid legal basis, such as your consent.

4. Payments

When you make a purchase, your payment details may be processed by the payment provider used at checkout.

SOKU does not normally need to store full card details. Instead, we receive the payment information needed to administer the order.

5. How long is personal data stored?

We do not store personal data for longer than is necessary for the purpose for which it was collected.

• Order information is saved as long as it is needed to handle the purchase and any subsequent matters.
• Accounting information is saved for the period required by accounting legislation.
• Contact details are saved as long as there is a relevant need for the information.
• Data processed on the basis of consent is handled until consent is withdrawn or the data is no longer needed.

6. Who can access the data?

In order to operate the website and process orders, SOKU may use external suppliers.

These could be, for example, suppliers of:

• web hosting and technical services,
• e-commerce platform and website features,
• payment services,
• shipping and delivery,
• IT security and operations.

We may also disclose information when required by law or government decision.

7. Your rights under GDPR

Depending on the situation, you have the right under GDPR to:

• request information about what personal data we process about you,
• request correction of incorrect information,
• request deletion where the law provides the right to do so,
• request restriction of processing,
• object to certain processing,
• request data portability when the conditions are met,
• revoke any consent given.

Contact kansliet@soku.org if you want to exercise any of your rights.

You also have the right to file a complaint with the Swedish Data Protection Authority (IMY).

8. Children and young people

Because SOKU conducts activities aimed at children and young people, we are particularly cautious with personal data concerning minors.

We strive not to collect more personal data than is necessary and handle personal data about children in accordance with the specific requirements that apply under GDPR and other applicable legislation.

9. Cookies

SOKU's website uses cookies and similar technologies. Cookies are small data files that are stored in your browser or on your device.

You can change or revoke your choice at any time via the website's cookie settings.

10. Changes to the policy

We may update this policy as the website, our services or applicable rules change. The date at the top of the page indicates when the policy was last updated.