Privacy Policy

Holistisk Styrka with Jenny Lemberg and The Oberon hub (Organization number: 7706026841) is committed to processing personal data in a correct and trustworthy manner when you visit our website: holistiskstyrka.se och theoberonhub.newzenler.com
This Privacy Policy contains information about what data is collected when you use our websites, as well as general information about how we process personal data.  The purpose of this Privacy Policy is to inform you about your rights, and to outline our guidelines and procedures for processing the personal data we collect from you through your use of our websites.  
This Privacy Policy is governed by Swedish law and will be updated over time, particularly in response to changes in applicable data protection legislation or if the services offered on our websites are expanded or modified.
We will notify you of any changes to the Privacy Policy that require your consent.  
Please read this policy carefully to gain a clear understanding of how we collect, use, protect, and process your personal data.

Consent
To use the services available on our websites, you are required to provide certain personal data. If you choose not to provide this information, we may be unable to offer you access to the requested service.  
By using the services on our websites, you confirm that you have read, understood, and agreed to the contents of this Privacy Policy and to our processing of your personal data.  
You may withdraw your consent at any time by contacting us. Please note that doing so may result in us no longer being able to provide our services to you.  If a child under the age of 16 has provided us with personal data, we will delete the information as soon as we are made aware of it. Parents or legal guardians are encouraged to contact us in such cases.

Data Controller
Holistisk Styrka with Jenny Lemberg is the data controller for the processing of personal data related to our business operations, in accordance with data protection legislation. The data controller determines the purpose of the processing and the tools to be used. The data controller bears the overall responsibility for the processing of your personal data.

What Is Personal Data?
Personal data refers to information that can be linked to an identifiable individual—for example, name, address, phone number, and email address. Processing refers to any use of personal data, such as collection, registration, compilation, storage, and transfer.

What Personal Data Do We Process?
By using the services made available through our websites, we may process your personal data, which includes, but is not limited to:  
Address  
Payment history, including date and time, amount charged, payment and credit card details, and other related transaction data  
Username  
Email address  
Company name  
Information about your use of our websites, such as your search history, visited pages, etc.  
Device types  
Contact person information and IP addresses  
Comments and activity logs from our course portals (after login)  
Email tracking  
Name  
Browser settings  
Operating system  
Password (encrypted)  
Phone number  
Traffic data  

How Information Is Collected
We process personal data that you provide through forms on our websites, such as:  
Contact forms or newsletter subscriptions  
Registration for free courses, webinars, or similar offerings  
Downloads of e-books, guides, templates, or similar materials  
Purchases of courses, services, or products on our websites  
Comment fields

For What Purposes Is Information Collected?
We strive to handle personal data in a way that ensures you feel confident that your information is being processed safely and confidentially. We process personal data that is necessary for you to use our services and websites.  We will process personal data received either directly from you or automatically (e.g., via automatic server registration) for the purposes described below, and in order to provide, monitor, and analyze the use of our services and websites, as well as to carry out maintenance and improvements.  
The purpose of our processing of your personal data is to facilitate and enable your use of our services and websites.
When you provide personal data to access our services and websites, we will process that data to:  
Provide access to our products and services  
Send relevant information  
Handle customer service inquiries  
Offer you free tips, e-books, guides, etc.  
Inform you about the products and services most relevant to you  

We will not use your personal data for any purposes other than those described above unless you have given your explicit consent for such additional use.  

How Information Is Stored
Information is collected via forms on our website. The data is stored until you request its deletion, or until it has been inactive for 2 years, unless legal obligations require longer storage. You may request deletion of your data at any time by contacting us.

Invoicing Customers
Our purpose for storing your data (organization number, name, address, mobile number, and email address) is to fulfill your request to become an invoicing customer. In such cases, your data will be stored for 7 years in accordance with the Swedish Accounting Act. This means that if you wish to be invoiced, you consent to us entering your information into our accounting software. The program is cloud-based, which means that the personal data we register is stored on remote servers.

How You Can Delete Your Personal Data
You may request the deletion of your personal data at any time by contacting us at: jenny@holistiskstyrka.se

Transfer of Information to Third Parties
Your personal data will not be shared with third parties unless you choose to use payment services provided by our subcontractors, such as Stripe or Swish. These subcontractors may process personal data on our behalf. Our course platform is hosted by the provider New Zenler.  
If we disclose personal data to organizations performing services on our behalf, we will require these providers to use the data solely for providing the agreed-upon services and to obtain sufficient assurances that your personal data is handled in a safe and appropriate manner.  
All third-party providers with whom we share personal data are required to comply with our data processing guidelines or equivalent standards, as well as the applicable data protection legislation in force at the time.  Where required by applicable law, or if there is suspicion that a crime has been committed in connection with the use of our services, personal data stored about you may be shared with the relevant authorities.  In the event that personal data must be transferred to another organization as part of a merger, acquisition, financing, reorganization, or liquidation of all or parts of our business, we will do so only if the parties involved enter into an agreement that limits the collection, use, and disclosure of personal data to the purpose of the transaction — including a condition that the transaction is completed — and ensures that personal data will be used only by the parties involved to carry out the transaction.  If another company acquires us, our business, or our assets, that company will gain access to the personal data we have collected and will assume the rights and obligations related to your personal data as described in this Privacy Policy.

Third-Party Links
From time to time, and at our discretion, we may include or offer third-party products or services on our websites. We may also provide links on our websites to external websites not controlled by us. These links are provided for informational purposes only. These external websites have their own separate privacy policies, and we encourage you to review the privacy policy of every site you visit. We accept no responsibility for the content or activities of these external websites.

Security
We take the protection of your personal data very seriously. Therefore, we do our best to maintain and implement reasonable physical and technical security measures for our accounts and data storage systems, in order to prevent loss, misuse, unauthorized access, disclosure, or alteration of your personal information.  Your personal data is stored on secure networks and is accessible only by a limited number of individuals with special access rights to such systems, who are also required to treat the information as confidential. We use data systems with restricted access, located in facilities with physical security measures in place. We continually evaluate our data collection, storage, and processing practices — including physical security measures — to protect against unauthorized access to our systems.  All payments are handled via a secure payment gateway provider and are therefore neither stored nor processed on our own servers. In addition, all credit and debit card information is encrypted using Secure Socket Layer (SSL) technology.  If any individual or organization misuses personal data they have accessed in order to assist us in delivering our services and website functionality, this will be considered a serious breach, and we will take appropriate action, which may include termination of the agreement between us and that organization.  In the event of any data breach involving your personal information, you will be notified by email within 4 business days.

Transfer of Personal Data Abroad
Your personal data may be transferred within the European Economic Area (EEA) as well as to other countries deemed by the European Commission to have an adequate level of data protection, in accordance with Article 45 of Regulation (EU) 2016/679. Your acceptance of this Privacy Policy also constitutes your consent to such data transfers.

Handling of Records in Connection with Treatments/Sessions
At Holistisk Styrka with Jenny Lemberg, the following core principles apply regarding the processing of personal data:  
We are considerate about the personal information we request and collect from you.
 We retain your personal data only for as long as there is a legitimate reason to keep it.  
We aim to make it easy for you to control your personal data.  
We strive to be fully transparent about how we collect, use, and share your personal information.  

What Information Does Holistisk Styrka with Jenny Lemberg Collect About You?
In order to fulfill requests from visitors to our website, you may be asked to provide one or more of the following details:  
Your name  
Your personal identity number (personnummer)  
Your email address  
Your mailing address  
Your delivery address  
Your telephone number
Your contact information

When Does Holistisk Styrka with Jenny Lemberg Collect Your Information?
We collect your personal data when you register with us, purchase or order a product or service. We also collect information when you voluntarily complete customer surveys, meet with us, provide feedback, or participate in competitions. Information regarding website usage is collected via cookies.  When you subscribe to our newsletter, your email address and, if applicable, your name will be used for our own marketing purposes until you unsubscribe. You can unsubscribe from newsletters at any time.

How Does Holistisk Styrka with Jenny Lemberg Use Your Information? 
We collect and process your personal information solely for specified purposes. These purposes include:  
Processing your order or treatment  
Managing your account with us  
Processing payments  
Delivering products to you  
Sending information, news, and offers  
Improving the quality of our products and developing new ones  
Analyzing trends  
Improving the design and security of our website  

All personal data is handled with strict confidentiality.  
The collected personal data will be processed, used, and stored for the purpose of fulfilling your order, including credit assessments, personalization of the website, and marketing activities.  
We only process your personal information for the purposes listed above, and always based on a valid legal ground. When a private individual purchases our products or services (i.e. processing of orders, managing accounts, handling payments, and delivering products), we process your personal data to fulfill the agreement between you and us. For other purposes, or when the customer is a legal entity, our legitimate interest in developing our services and products forms the legal basis for the processing.  If necessary, your personal data may be transferred to our service providers (e.g., logistics providers such as DHL, Postnord, or others). In such cases, the data will only be processed and used by them for the agreed purposes.  Holistisk Styrka with Jenny Lemberg will never unlawfully share your information with companies outside our organization.

Data Subject Rights
You have the right to request access to the personal data we process about you. You also have the right to request correction or deletion of any information you believe to be incorrect at any time.

Cookies – What Are Cookies?
A cookie is a text file containing anonymized information, including a unique user identifier and the name of the webpage. For more detailed information, please refer to our Cookie Policy found in the footer of this website.

Other Websites
This information about personal data processing only applies to our website. Our website may contain links to other websites. Holistisk Styrka with Jenny Lemberg is not responsible for the content of external websites, even if they are linked from our own.

 Complaints
If you have a question, would like to file a complaint with Holistisk Styrka with Jenny Lemberg regarding how your personal data has been processed, or appeal a decision, you can contact us using the contact information provided below.

Your Rights
As a user of our websites, and subject to applicable data protection legislation, you have the right to access the personal data we have collected about you and to understand how it is being processed.
You may also request rectification, deletion, or restriction of the processing of your personal data.  You may withdraw your consent at any time. This will result in the deletion of all data we hold about you, except for information we are legally required to retain for example, due to tax regulations if you are a paying customer.  

Contact Information
If you would like to request access to, correction of, or deletion of your personal data, or if you have any questions or concerns regarding this Privacy Policy or our data processing practices, you are welcome to contact us at:  
Email: jenny@holistiskstyrka.se
Address: Aspvägen 3, 18670 Brottby, Sweden  

You also have the right to file a complaint about the processing of your personal data with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten): https://www.imy.se