Celsius Sweden AB, 556705-5784 (“Celsius” or “we” in any form) collects and otherwise processes personal data about you when (i) you participate in our events or promotions; (ii) interact with us on our websites, social media or otherwise; or (iii) when you represent a business partner or supplier (including when acting as an ambassador) of Celsius.
This privacy notice (“Privacy Notice“) sets out information about the processing of personal data carried out by us in our role as controller, including what personal data we collect about you, for which purposes the personal data is processed and with whom we may share your personal data.
“Applicable Data Protection Laws” means all legislation and regulations, including regulations issued by relevant supervisory authorities, protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data that from time to time applies to this Privacy Notice, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR“) as well as laws and regulations supplementing the GDPR.
Unless otherwise stated, terms defined in the GDPR, such as “personal data” and “processing“, shall have the same meaning in this Privacy Notice.
Accordingly, “personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The term “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
We collect your personal data from:
We use technologies on our website that are intended to facilitate the use of the website and make it more user-friendly and to provide various functionalities. Such technologies include, for example, cookies, pixels and scripts. Please see our Cookie Notice for further details on what cookies and similar technologies we use on our websites, and how you can manage them.
We process your personal data in order to manage and improve our websites, to ensure that the content is presented in the most effective manner for you and your device and that you as a visitor have a positive experience when using our website.
(a) Categories of personal data
(b) Legal basis
We base the processing on our legitimate interest to manage and administer our website (Art. 6 (1) (f) GDPR).
(c) Retention period
Your personal data will be retained for the relevant purpose during a period of up to two (2) years after you visited our website, as stated in our cookie policy.
(d) Recipients of personal data
We may share your personal data with our service providers, such as IT- and hosting suppliers.
We process your personal data to communicate with you via the contact form on our website.
(a) Categories of personal data
(b) Legal basis
We base the processing on our legitimate interest to communicate with our website visitors (Art. 6 (1) (f) GDPR).
(c) Retention period
Your personal data will be retained for the relevant purpose during a period of two (2) years after the communication.
(d) Recipients of personal data
We may share your personal data with our service providers, such as IT- and hosting suppliers.
If you attend an event organized or otherwise supported by us, we may process your personal data, including personal data relating to specific dietary requirements and access assistance, in connection with the event.
(a) Categories of personal data
(b) Legal basis
We base the processing on our legitimate interest to host events (Art. 6 (1) (f) GDPR). Any special categories of personal data is processed based on your explicit consent (Art. 9 (2) (a) GDPR), in order for us to e.g. accommodate any dietary needs.
(c) Retention period
Your personal data will be retained for the relevant purpose during a period of six (6) months after the event.
(d) Recipients of personal data
We may share your personal data with our service providers, such as event management agencies and catering suppliers.
If you attend an event organized or otherwise supported by us, we may process your personal data, such as photos and video recordings of you taken at the event, for marketing purposes in e.g. our social media channels.
(a) Categories of personal data
(b) Legal basis
We base the processing on our legitimate interest to use content produced at our events for our marketing purposes (Art. 6 (1) (f) GDPR).
(c) Retention period
We will not use the personal data in any new marketing following five ten (105) years after the content was first used. If you wish that we remove any content, please contact us using the contact information at the end of this notice.
(d) Recipients of personal data
We may share your personal data with our service providers, such as marketing agencies.
If you attend an event organized or otherwise supported by us, we may process your personal data, to follow up on the event.
(a) Categories of personal data
(b) Legal basis
We base the processing on our legitimate interest to follow-up on events that we are hosting (Art. 6 (1) (f) GDPR).
(c) Retention period
Your personal data will be retained for the relevant purpose up to three (3) years after the event.
(d) Recipients of personal data
We may share your personal data with our service providers, such as event management and marketing agencies.
If you are a visitor to our social media sites (e.g. Facebook, Instagram, LinkedIn), the purposes of the processing of personal data are to ensure that the content is relevant and presented in the most effective manner for you, and that visitors have a positive experience. If you use message functions and bulletin boards, we encourage you to maintain good manners and keep a good tone. If we come across any violent, harassing, or in any other way improper content posted, we may at any time remove such content. Please note that social media sites are owned by social media providers. We do not have full control of the social media sites and any information that you may choose to share on our social media sites may also be used by the site provider for their own independent purposes, which are not covered by this Privacy Notice. Please read the site providers’ privacy statements for further information on how they may use your personal data.
(a) Categories of personal data
(b) Legal basis
The use of your personal data is necessary for us to pursue our legitimate interest in managing and administering our social media sites and to provide you with the content and services on our social media sites (Art. 6 (1) (f) GDPR).
(c) Retention period
We refer to the social media providers’ privacy statements.
(c)(d) Recipients of personal data
When you visit our social media sites your personal data is shared with the social media providers. We may also share your personal data with third party suppliers such as analytics providers.
We will process your personal data for the purpose of enabling you to participate in campaigns/competitions that we arrange, including administering prizes and publishing winners.
(a) Categories of personal data
(b) Legal basis
We base the processing of personal data on our legitimate interest to carry out campaigns/competitions (Art. 6 (1) (f) GDPR).
(c) Retention period
Your personal data will be retained for the relevant purpose during a period of one (1) year from the completion of the competition.
(d) Recipients of personal data
We may share your personal data with our service providers, such as suppliers of vouchers, as applicable.
We will process your personal data to check compliance with the terms and conditions of the campaign/competition, such as minimum age, prohibition of participation by employees and their relatives and the condition that only one prize can be awarded per participant.
(a) Categories of personal data
(b) Legal basis
We base the processing of personal data on our legitimate interest to ensure compliance with the terms and conditions for our campaigns/competitions (Art. 6 (1) (f) GDPR).
(c) Retention period
Your personal data will be retained for the relevant purpose during a period of one (1) year from the completion of the campaign/competition.
We will process your personal data when you contact us with a question or complaint.
(a) Categories of personal data
(b) Legal basis
We base the processing on our legitimate interest to provide you with customer service (Art. 6 (1) (f) GDPR).
(c) Retention period
Your personal data will be retained for the relevant purpose during a period of up to three (3) years from the time your customer service matter was closed.
(d) Recipients of personal data
We may share your personal data with our service providers, such as IT-suppliers.
We will process your personal data when you contact us with ideas on new flavors, products or campaigns.
(a) Categories of personal data
(b) Legal basis
We base the processing on our legitimate interest to take your suggestions and ideas into consideration (Art. 6 (1) (f) GDPR).
(c) Retention period
Your personal data will be retained for the relevant purpose during a period of up to three (3) years from the time you contacted our customer service.
(d) Recipients of personal data
We may share your personal data with our service providers, such as IT-suppliers.
If you represent a (current or potential) customer, supplier or other business partner, we process your personal data when we communicate with you in your capacity as such a representative.
(a) Categories of personal data
(b) Legal basis
We process your personal data for our legitimate interest to communicate with you in your role as a representative of a (current or potential) customer, supplier or other business partner (Art. 6 (1) (f) GDPR).
(c) Retention period
Your personal data will be retained for as long as we have a contractual relationship with the company that you represent and thereafter for a period of up to five (5) years.
(d) Recipients of personal data
We may share your personal data with our service providers, such as IT-suppliers.
If you are an ambassador for our company we will process your personal data in order to fulfil the ambassador agreement, e.g. by sending you products and paying any agreed renumeration.
(a) Categories of personal data
(b) Legal basis
Where we contract with you as an individual, we base the processing on a contractual obligation (Art. 6 (1) (b) GDPR). Where we contract with the company to which you are affiliated, we base the processing on our legitimate interest to fulfil our contract with such company (Art. 6 (1) (f) GDPR). Any special categories of personal data is processed based on your explicit consent (Art. 9 (2) (a) GDPR), in order for us to e.g. accommodate any dietary needs. Any processing of personal identity number is necessary for the purpose of ensuring that we are entering into an agreement with the correct party.
(c) Retention period
We will process your personal data for a maximum of five (5) years after the term of the agreement.
(d) Recipients of personal data
We may share your personal data with our service provider such as marketing agencies.
If you are a model for our company we will process your personal data in order to fulfil the model agreement, e.g. by sending you products and paying the agreed renumeration.
(a) Categories of personal data
(b) Legal basis
Where we contract with you as an individual, we base the processing on a contractual obligation (Art. 6 (1) (b) GDPR). Where we contract with the company to which you are affiliated, we base the processing on our legitimate interest to fulfil our contract with such company (Art. 6 (1) (f) GDPR). Any processing of personal identity number is necessary for the purpose of ensuring that we are entering into an agreement with the correct party.
(c) Retention period
We will however process your personal data for a maximum of five (5) years after the term of the agreement.
(d) Recipients of personal data
We may share your personal data with our service providers, such as marketing agencies.
If you are a photographer for our company we will process your personal data in order to fulfil the photographer agreement, e.g. by sending you products and paying the agreed renumeration.
(a) Categories of personal data
(b) Legal basis
Where we contract with you as an individual, we base the processing on a contractual obligation (Art. 6 (1) (b) GDPR). Where we contract with the company to which you are affiliated, we base the processing on our legitimate interest to fulfil our contract with such company (Art. 6 (1) (f) GDPR). Any processing of personal identity number is necessary for the purpose of ensuring that we are entering into an agreement with the correct party.
(c) Retention period
Your personal data will be retained for the relevant purpose during the term of the agreement and thereafter for as long as your profile is relevant to us. We will however process your personal data for a maximum of five (5) years after the term of the agreement.
(d) Recipients of personal data
We may share your personal data with our service providers, such as marketing agencies.
If you are a student ambassador for our company we will process your personal data for the purpose of providing you with relevant products that you can market and to pay the agreed remuneration.
(a) Categories of personal data
(b) Legal basis
Where we contract with you as an individual, we base the processing on a contractual obligation (Art. 6 (1) (b) GDPR). Where we contract with the company to which you are affiliated, we base the processing on our legitimate interest to fulfil our contract with such company (Art. 6 (1) (f) GDPR). Any special categories of personal data is processed based on your explicit consent (Art. 9 (2) (a) GDPR), in order for us to e.g. accommodate any dietary needs.
(c) Retention period
We will process your personal data for a maximum of five (5) years after the term of the agreement.
(d) Recipients of personal data
We may share your personal data with our service providers, such as marketing agencies.
If you are an event ambassador for our company we will process your personal data for the purpose of scheduling your participation at our events and paying agreed remuneration.
(a) Categories of personal data
(b) Legal basis
Where we contract with you as an individual, we base the processing on a contractual obligation (Art. 6 (1) (b) GDPR). Where we contract with the company to which you are affiliated, we base the processing on our legitimate interest to fulfil our contract with such company (Art. 6 (1) (f) GDPR). Retention period We will process your personal data for a maximum of five (5) years after the term of the agreement.
(c) Recipients of personal data
We may share your personal data with our service providers, such as marketing agencies.
We might process your personal data for the purpose of finding profiles that might be relevant as ambassadors for Celsius. We might use third party databases or current/former ambassadors’ social media pages for such searches,
(a) Categories of personal data
(b) Legal basis
Where we contract with you as an individual, we base the processing on a contractual obligation (Art. 6 (1) (b) GDPR). Where we contract with the company to which you are affiliated, we base the processing on our legitimate interest to fulfil our contract with such company (Art. 6 (1) (f) GDPR). Retention period Your personal data will be retained for the relevant purpose for as long as our collaboration is ongoing or the ambassador profile is relevant for our marketing purposes and up to five (5) years since the latest activity relating to your profile.
(c) Recipients of personal data
We may share your personal data with our service providers, such as marketing agencies.
We process your personal data for legal defense purposes, including establishingto establish, exerciseing and or defending legal claims.
(a) Categories of personal data
(b) Legal basis
We base the processing of your personal data on the legal basis legitimate interest to satisfy our legitimate interest to establish, exercise and or defend legal claims (Article 6 (1) (f) GDPR). Any special categories of personal data, including information on criminal offenses, are only processed if it is necessary for the establishment, exercise and defense of legal claims (Article 9 (2) (f) GDPR).
(c) Retention period
In Sweden, the general statutory limitation period for legal claims is ten (10) years.
(d) Recipients of personal data
We may share your personal data with advisors and authorities, such as courts, in order for us to be able to establish, exercise or defend legal claims.
We process your personal data for the purpose of complying with legal requirements placed upon us such as, corporate financial responsibilities including audit requirements and employment-related requirements such as e.g. income tax, social security deductions and immigration requirements.
(a) Categories of personal data
(b) Legal basis
We base the processing of your personal data in the legal basis compliance with a legal obligation to which we are subject (Article 6 (1) (c) GDPR).
(c) Retention period
Your personal data will be retained for as long as required under the relevant legal obligation. For Sweden, the Bookkeeping Act requires that bookkeeping information is stored for seven (7) years following the end of the calendar year during which the financial year ended.
(d) Recipients of personal data
We may share your personal data with advisors and authorities, such as tax authorities, in order for us to fulfil the legal obligation laid upon us.
In the event of a contemplated or actual reorganization, merger, acquisition, sale, joint venture, assignment or other disposition of all or any portion of our business, assets and stock we may need to share personal data for the purposes of executing the change at hand.
(a) Categories of personal data
Potentially all categories of personal data, subject to assessment in each individual case.
(b) Legal basis
We base the processing of your personal data on the legal basis legitimate interest to facilitate and/or enable the contemplated or actual reorganization, merger, acquisition, sale, joint venture, assignment or other disposition of all or any portion of our business, assets and stocks (Article 6 (1) (f) GDPR).
(c) Retention period
We will process the personal data until the change at hand has been executed.
(d) Recipients of personal data
Buyers and external advisors/other involved parties and group companies.
Where we have bought all or any portion of assets or stock of a business that you have had a relationship with, we may process your personal data for the purposes set out in this Privacy Notice. The actual processing would depend on the nature of your relationship with the business at hand.
(a) Categories of personal data
Potentially all categories of personal data, subject to assessment in each individual case.
(b) Legal basis
Our legal basis for processing of personal data may be any of the legal bases mentioned above, depending on the nature of your relationship with the business at hand.
(c) Retention period
The retention time will depend on the respective processing purpose.
(d) Recipients of personal data
External advisors/other involved parties, authorities and group companies.
For the purposes set out in this Privacy Notice, we may transfer your personal data to our service providers and business partners in the UK, e.g. hosting service providers. These parties will generally act as processors relating to the processing of personal data, which means that they are contractually obliged to process your personal data only on behalf of and in accordance with the our instructions. We otherwise share personal data as follows.
| Recipient | Purpose | Legal basis |
|---|---|---|
| Group companies | For internal administration, reporting and external business purposes (e.g. ambassador initiatives or other campaigns). | As an international company, we base the processing on our legitimate interest to run our business in an efficient manner (Art. 6 (1) (f) GDPR). |
| Transport companies | To deliver ordered products and hence fulfil our obligations under customer agreements. | We base the processing on our legitimate interest to fulfil our contract with our customers (Art. 6 (1) (f) GDPR). |
| Authorities (e.g. the Police, and the Tax Agency) and external auditors | To comply with legal requirements placed upon us such as, corporate financial responsibilities including audit requirements and employment-related requirements such as e.g. income tax, social security deductions and immigration requirements and to assist the Police as needed. | We base the processing of your personal data in the legal basis compliance with a legal obligation to which the controller is subject (art. 6 (1) (c) GDPR). |
| Payment services providers | To enable payment of ordered products. | We base the processing on our legitimate interest to offer efficient payment solutions for our customers (Art. 6 (1) (f) GDPR). |
| Authorities (including courts) and legal counsels | To establish, exercise and or defend legal claims. | We base the processing of your personal data on the legal basis legitimate interest to satisfy our legitimate interest to establish, exercise and or defend legal claims (Art. 6 (1) (f) GDPR). Any special categories of personal data, including information on criminal offenses, are only processed if it is necessary for the establishment, exercise and defense of legal claims (Art. 9 (2) (f) GDPR). |
| Buyers, Sellers, and external advisors/other involved parties | To enable changes of our business, e.g. sale or merger of the business as a whole or in part. | We base the processing on our legitimate interest to carry out changes of our business (Art. 6 (1) (f) GDPR). |
Transfers of personal data outside of the EU/EEA
In case we transfer your personal data to a recipient in a country outside of the EU/EEA, such as to the US and the UK (“third country”), such transfer will only take place where an adequate level of protection is ensured in accordance with a decision by the EU Commission. Alternatively, we will ensure that appropriate safeguards have been implemented (such as those provided for in the EU Commission’s standard contract clauses). Where deemed necessary, such appropriate safeguards will be complemented by supplementary measures for ensuring an essentially equivalent level of data protection to that found under the GDPR.
You have the right, upon request, to receive a copy of the documentation demonstrating that the necessary safeguards have been put in place to protect your personal data when transferred to a third country. Such request may be made by contacting us on the contact details set out below.
We will ensure that access to your information is adequately protected by having appropriate security measures implemented and, depending on the circumstances, taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of processing as well as the risks. To uphold this warranty, we have also implemented appropriate technical, physical and organizational measures to protect your personal data from unlawful or accidental destruction, alteration or disclosure, misuse, damage, theft or loss by accident or unauthorized access.
Rights in relation to your personal data
In connection with our processing of your personal data, you may, under the conditions set out below, exercise the following rights:
Access
You can request confirmation of whether or not your personal data is being processed and, if it is being processed, request access to your Personal data and additional information such as the purpose of the processing. You also have the right to receive a copy of the personal data that is processed. If the request is submitted electronically, the information will also be obtained in a commonly used electronic form unless you request otherwise.
Rectification
If you notice that personal data about you is inaccurate or incomplete, you have the right to have your personal data rectified or completed.
Object to specific processing
You can object to processing of your personal data if it is based on a legitimate interest, on grounds relating to your particular situation or if the processing takes place for direct marketing purposes. Upon such an objection, we are obliged to cease the processing, unless we can demonstrate compelling legitimate grounds to continue processing and those grounds override your interests. We may also continue processing that is necessary to establish, exercise and or defend legal claims. Processing for the purpose of direct marketing will, however, always be ceased upon your objection.
If you object to processing of your personal data, you have the right to request restriction of the processing pending our verification of whether we may continue to process it, in accordance with the below (see Restrict processing).
If, upon your objection, we no longer have a right to process your personal data, you have a right to have the personal data erased in accordance with the below (see Erasure).
Erasure
You can have your personal data erased under the following circumstances;
The right to erasure does not apply when our processing of your personal data is necessary for compliance with a legal obligation which requires the processing; or for the establishment, exercise or defense of legal claims.
Restrict processing
Under the following circumstances, you can request that we restrict the processing of your personal data to only involve the storage of your personal data;
We may, however, still use your personal data for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
Withdraw consent
To the extent that the processing of personal data is based on your consent, you always have the right to withdraw your consent. If there is no other legal ground for the processing, you have the right to have the relevant personal data erased in accordance with the above (see above Erasure).
Data portability
Unless it adversely would affect the rights and freedoms of others, you have the right to request a machine-readable copy of the personal data processed based on your consent or when the processing is necessary to fulfil an agreement with you as well as when personal data has been obtained from you (data portability), and to request that the information be transferred to another data controller (if possible).
Complaints to the supervisory authority
You are welcome to contact us with questions or complaints regarding the processing of your personal data on the contact details set out below. However, you also have the right to lodge a complaint regarding the processing of your personal data to the Swedish Authority for Privacy Protection.
If you have any questions regarding the processing of your personal data or if you wish to exercise any of your rights pursuant to applicable data protection legislation, please contact by using the contact details below. If needed, we have the right to change and supplement the Privacy Notice.
The controller is:
Celsius Sweden AB
Mariehällsvägen 37 C
168 65 Bromma
info.se@celsius.com
08-515 185 00
Please see the table below for detailed information regarding which personal data that we process.
| Categories of personal data | Examples of personal data |
|---|---|
| Contact information | Name, email address, phone number, postal address, entrance code |
| Correspondence data | Personal data that is included in your communication with us |
| Employment data | CV, cover letter |
| Payment data | Bank account, remuneration |
| Personal identity number and date of birth | |
| Photographs, videos and voice recordings | |
| Size (if we send you clothes) | |
| Social media related data | Content from social media accounts, such as Instagram and TikTok, data regarding engagement of social media content |
| Special categories of personal data | Special medical or access assistance, which may provide us with health information about you, or your specific dietary requirements in connection with your attendance at an event, which may indicate your religious beliefs, e.g. halal or kosher meal selections. |
| User-generated data | Click and visit history, technical data regarding used devices and their settings (e.g. language setting, IP address, browser settings, time zone, operating system, screen resolution and platform), information about how you interacted with us, login method, which pages and how long different pages have been visited, response times, download errors, how to access and leave the service, etc. |
| Work related information | Title, position, employer |
