Privacy Policy

Under applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Swedish Act (2018:218) with supplementary provisions to the EU Data Protection Regulation, NoseOption AB (556861-2294), Surbrunnsgatan 42, 113 48 Stockholm, Sweden (NOSA, we, us), is the data controller for its processing of your personal data in connection with your use of its products and services.

NOSA is fully committed to protecting your individual rights and keeping your personal data safe.

NOSA protects the privacy of customers and partners and complies with applicable data protection regulations. This policy informs you about our processing of your personal data.

Personal data means any information relating to an identified or identifiable natural person.

We collect information you provide directly to us, for example when you become a customer, shop in our webshop, use our smell-training application, contact us, complete a questionnaire, submit a review or order samples.

This may include:

• Name, address, phone number and email address
• Payment information
• Age, well-being and health information
• Professional title, workplace and department
• Location and IP address
• The content of reviews, messages and emails
• Corporate and financial information
• Information collected automatically, including device location for language selection, phone numbers used to contact customer service and cookies
• Information from carriers, distributors, public sources, social media and search engines

We use personal data to operate, provide, develop and improve our products and services.

• To confirm and handle orders, deliver products, process payments and communicate about orders, products and offers
• To provide functionality, analyze performance, troubleshoot and improve NOSA services, including our mobile application
• To recommend and personalize products that may interest you
• To comply with legal obligations, including identity verification and reporting obligations
• To communicate with you by phone, email or other channels
• To display interest-based advertising for relevant products and services

If you are located in the EU/EEA, we only process personal data when there is a valid legal basis.

• Consent: you have consented to processing for one or more specific purposes
• Contract: processing is necessary to perform a contract or take steps before entering into one
• Legal obligation: processing is necessary to meet a legal obligation incumbent on NOSA
• Legitimate interest: processing is necessary for the interests of NOSA or a third party, unless your interests or fundamental rights outweigh those interests

If you use our smell-training mobile application, we process information about your well-being and health. We only process these special categories of personal data based on your consent. You may withdraw your consent at any time by contacting us.

NOSA may send information about products, services and distributors that we believe may interest you. If you have agreed to receive marketing, you may opt out at any time.

To stop receiving newsletters, product information and updates, contact gdpr@nosaplugs.com or use the unsubscribe link in our emails.

We may share personal data with service providers that operate our website and mobile application. We enter into appropriate agreements with our providers to protect your data. We may also disclose personal data when required by law or regulation.

We may transfer personal data outside the EU/EEA, including to the United States or another country where we or our service providers operate. Such transfers are protected through adequacy decisions, contractual safeguards or EU binding corporate rules, where applicable.

NOSA uses appropriate technical and organizational measures to protect personal data. These include access controls and logging, backups, firewalls, protected wireless networks, updated malware protection, password protection, encryption where necessary and safeguards against unauthorized internal access.

NOSA stores personal data only for as long as necessary for the purposes of the processing. Data that is no longer needed is anonymized or deleted.

Under applicable data protection laws, you may have the following rights:

• Access to copies of the personal data we process about you
• Rectification of incomplete or incorrect information
• Erasure of your personal data under certain conditions
• Restriction of processing under certain conditions
• Objection to processing under certain conditions
• Data portability to another organization or directly to you under certain conditions
• Objection to automated decision-making, including profiling
• The right to lodge a complaint with a supervisory authority, such as the Swedish Authority for Privacy Protection (IMY)

Contact us if you have questions or wish to exercise any of your rights. We may update this policy from time to time. The latest version is always available on our website.