Privacy policy

Disclosure requirements according to the General Data Protection Regulation (GDPR) Art. 13 and 14

Herewith we inform you how we process your personal data (referred to as “data” in this document below) as well as how you may exercise your claims and rights (effective as of 25^th May 2018).

1. Who is the responsible controller for the data processing and whom you may contact?

The party responsible for processing data (“controller”) is:

IKEA Möbelvertrieb OHG (“IKEA”)
Legal entity: Offene Handelsgesellschaft [General commercial partnership]
Registered office: Shopping City Süd, Südring, 2334 Vösendorf
Company registration number: FN 316 s
Commercial court of registration: Wiener Neustadt Regional Court
VAT ID number: ATU19420008
ARA licence No.: 4838

Do not hesitate to contact us at the following address if you have any questions or concerns as to how we process your data, or if you find an error on our website or app:

IKEA Kundenservice Österreich
(IKEA Customer Service, Austria)
2334 Vösendorf-Süd
Tel.: +43 800 081100
E-mail for retail customers: [email protected]
E-mail for business customers: [email protected]

Or use our contact forms:

2. What data is being processed and from which sources do these stem from?

We process the data that we receive from you in our business relationship. This includes the data you enter when registering with us or when you visit our website at https://www.ikea.com/at/. We also process the data we receive from our contractors and credit agencies, specifically KSV 1870. We will never collect or process special categories of personal data.

Personal data includes:

Your personal details such as your name, address, e-mail address, phone number, date of birth, and gender
Information on your family status and living conditions such as your marital status, name and date of birth of children, apartment, size, and fittings if specified by you when you register for IKEA Family
Information on a company you run such as your industrial specialisation, legal entity, year of establishment, number of employees, ATU and commercial register data if you provide it when registering for IKEA for Business.
Information on your IKEA purchases such as your IKEA Family or IKEA for Business number, store, receipt number, date and time of purchase, item, quantity and price
Information on the payment method you used such as your credit card company and number, name of the credit data owner, period of validity, and CRC number.
Visual data with time and location during your visit at one of our IKEA stores if you have been in an area with surveillance.

3. For which purpose and for how long is the data being processed?

We process your data for specific purposes and for a specific duration according to the data protection laws and legal regulations. Please find below the most important purposes and respective processing periods below. If we collect data from your for purposes which go beyond We will separately inform you of any data we collect from you for purposes that go beyond this when we collect the data:

Shopping at IKEA

We process the data you provide in order to fulfil our contractual obligations for you when you purchase an item. This will include delivery of goods you have purchased or ordered online. We will also process your data for billing and billing management by e-mail or post, as well as receipt of payment, ensuring punctual and smooth delivery, and to inform you on delivery dates and/or changes to the delivery. Beyond that, we will store your data until we have fulfilled our obligations and only as long as we are legally required to do so, or if we need your data to enforce or defend a legal claim.

Payment processing by payment service providers

Payment by debit-/credit card

We will need your data marked with an asterisk* as required on the payment page of the IKEA website or the IKEA App, specifically your name, address and e-mail address, debit-/credit card number, name of the debit-/credit card holder, and the expiry date of the card if you prefer to pay for your order from the IKEA website or the IKEA App using your debit-/credit card as an available payment option. We will check the data you have entered together with the data on your order to check for improper use of the debit-/credit card at an early stage, and we will still need to use the data to process the agreed debit-/credit card payment after your entries have passed the check. We will process the data you provide in order to fulfil our contractual obligations for you.

We will store your data for a maximum of twenty-four months to verify the data against other debit-/credit card payments in combating fraud and abuse; we will erase the data after that period. Payment by debit-/credit card is one payment option that IKEA offers amongst a number of others that you may also choose from.

The data collected from you will be processed according to our legitimateinterest in offering you secure and effective payment options and prevent credit card misuse and fraud.

Payment using Mastercard ID (previously Maestro Secure Code)

We will need your data marked with an asterisk* as required on the payment page of the IKEA website or the IKEA App, specifically your name, address and e-mail address, Maestro card number, name of the Maestro card holder, and the expiry date of the card if you prefer to pay for your order from the IKEA Website or the IKEA App using your Maestro card as an available payment option. We will check the data you have entered together with the data on your order to check for improper use of the Maestro card or Maestro card payment option at an early stage, and we will still need to use the data to process the agreed Maestro card payment after your entries have passed the check. We will process the data you provide in order to fulfil our contractual obligations for you.

We will store your data for a maximum of twenty-four months to verify the data against other credit card payments in combating fraud and abuse; we will erase the data after that period. Payment by Maestro card is one payment option that IKEA offers amongst a number of others that you may also choose from.

The data collected from you will be processed according to our legitimate interest in offering you secure and effective payment options and prevent misuse and fraud

Payment by Paypal

We will send the amount you owe along with your first and last name, delivery address, e-mail address, phone number, and IP address to PayPal – specifically PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, 2449 Luxembourg – for you to authorise payment to us via PayPal, if you wish to use this payment method. Note that you will need a PayPal account for this payment method. PayPal also offers users that do not have a PayPal account the option to settle virtual payments using a credit card.

GDPR Art. 6.1 (b) authorises us to collect the data required as we need to process your data to fulfil the agreement on purchase payment by PayPal.

PayPal may also transmit data to credit agencies. The purpose of this is to verify your identity and creditworthiness. Further details on data privacy at PayPal are available on the PayPal website at https://www.paypal.com/at/webapps/mpp/ua/privacy-full. Payment by PayPal is one payment option that IKEA offers amongst a number of others that you may also choose from.

The data collected from you will be processed according to our legitimate interest in offering you secure and effective payment options and prevent credit card misuse and fraud

Payment using Klarna (purchase on account)

Where the option is available, the IKEA online shop service supports payment by purchase on account using the Klarna service (Klarna AB, Sveavägen 46, 11134 Stockholm, Sweden). You will need to transmit your personal data as required for processing the purchase on account and an identity and credit check (your first and last name, address, date of birth, gender, e-mail address, IP address, phone number) as well as data required for processing the purchase on account (number of items, item number, invoice amount, and tax in percent) to Klarna as part of your agreement with Klarna, if you decide to purchase on account using this service. This data needs to be collected for Klarna to perform an identity and credit check and generate a payment request to process your purchase and settle the invoice using this payment method you have selected. Klarna may request data from credit and fraud prevention agencies, retailers, or public databases for your identity and credit check.

Klarna uses information on your previous payment behaviour as well as probability scores for this behaviour in the future in addition to an address check using this payment option to purchase on account. Klarna uses a scientifically recognised mathematical-statistical method as a basis for calculating these scores. Klarna will also use your address data for this purpose. Further details how Klarna processes your data are available in the Klarna privacy policy at https://www.klarna.com/at/datenschutz/.

Klarna will process your data to fulfil your agreement with Klarna on paying for your purchase using the Klarna purchase on account service. Klarna will also process the data it has collected according to its legitimateinterest in providing a secure and effective payment option and prevent misuse and fraud

Payment by bank transfer for supported banks (bank transfer by Trustly)

Where the option is available, the IKEA website or the IKEA App supports payment by bank transfer using the Trustly service provided by Trustly Group AB, Rådmansgatan 40, 11357 Stockholm, Sweden. By deciding to pay by bank transfer using Trustly, you will need to transmit your personal data as required for Trustly to process your purchase (first and last name) as well as your order number and total order amount in order to process the transfer as part of your agreement with Trustly. Your data will be collected for Trustly to settle your order by bank transfer.

Further details how Trustly processes your data are available in the Trustly privacy policy at https://www.trustly.net/at-DE/uber-uns/privacy-policy.

The data collected from you will be processed according to our legitimate interest in offering you secure and effective payment options and prevent credit card misuse and fraud

Payments by technical service providers

Payment with Apple Pay or Google Pay

We will process your data marked with an asterisk* provided by Apple Pay or Google pay to complete your payment on the IKEA website or the IKEA App, specifically your name, address and e-mail address, masked PAN (primary account number) name of the debit-/credit card holder, and the expiry date of the card if you decide to pay for your order from the IKEA website or the IKEA App using Apple Pay or Google pay as an available payment option.

We will check the data you provided together with the data on your order to check for improper use of the debit-/credit card when using Apple Pay or Google Pay at an early stage, and we will still need to use the data to process the agreed Apple Pay or Google Pay payment after your entries have passed the check. We will process the data you provide in order to fulfil our contractual obligations for you.

We will store your data for a maximum of twenty-four months to verify the data against other debit-/credit card, Apple Pay or Google Pay payments in combating fraud and abuse; we will erase the data after that period. Payment via technical service providers is one payment option that IKEA offers amongst a number of others that you may also choose from.

The data collected from you will be processed according to our legitimate interest in offering you secure and effective payment options and prevent credit card misuse and fraud.

Payments with Apple Pay or Google Pay, like debit/credit card payments, are processed by the card-issuing institution. IKEA does not transfer any personal data to Apple Inc. or Google Ltd. For more information, see the Apple Pay privacy policy and Google Pay (Google Payments) privacy policies.

IKEA online planning appointment

We will process the data you provide when booking the IKEA online planning appointment to provide this service; in particular, this includes contacting you to arrange an appointment, and obviously also planning your IKEA furnishing solution.

We will send you a confirmation e-mail with appointment confirmation. Your appointment booking is binding on confirmation of the appointment; the data you provide will be stored by us for the duration of our business relationship and only as long as we are legally required to do so or need the data to enforce or defend legal claims.

IKEA customer satisfaction survey

We will sometimes contact you by e-mail or text message to find out how satisfied you are with any IKEA products you purchased, customer services you called, or other services you used. Our aim is to ensure that your experience at IKEA and our products and services keep improving.

To this end, we will be using the e-mail address or mobile phone number that you gave us when making a purchase, placing a service order, or contacting customer service. We will treat your information anonymously as far as possible and process your data in such a way as to ensure that no conclusions can be drawn about you; make sure you do not give us any personal data such as your name, IKEA Family membership number or similar. However, we will erase your personal data if it is apparent to us that you did not intend to transmit your personal data to us. We will erase your e-mail address or phone number once we have completed the customer satisfaction survey and no longer have any other legally justifiable reason to process your data according to this Privacy Policy.

IKEA store app

We will process the data you have given us on downloading and registering the IKEA Store app for direct advertising purposes. This will entail sending you a personalised newsletter by e-mail, text message, or push notification in the IKEA app if you are using it with information about IKEA offers, services and events we think might be particularly interesting and relevant for you from your data. We will also process the data you have provided for IKEA Store App services, such as creating shopping lists.

We will store the data you provide for the IKEA Store app as long as you have the IKEA Store app installed on your device and, beyond that, only as long as we need the data to enforce or defend legal claims.

IKEA catalogue

We process the data you provide when ordering the catalogue to send the IKEA catalogue to you. We will erase this data within eight weeks after sending the catalogue. Beyond that, we will only store your data as long as statutory retention periods require, or if we need the data to manage a legal claim from or against us.

IKEA Family

We will process the data you provide when registering for IKEA Family to manage your IKEA Family membership and your benefits there, send you IKEA service ratings and reviews surveys (see below), and for purposes of marketing, customer loyalty and for information about product recalls. This will entail sending personalised messages to you with information that we think might be particularly relevant and interesting for you based on your data. This information might include our own offers or offers from partner companies as well as current workshops, product recalls, competitions, bonus programmes, and events. We will also process your data to enable us to provide you with IKEA Family services such as free shipping insurance.

Your IKEA Family customer profile includes the AuthO single sign-on login service provided by AuthO, 10900 NE 8th Street, Suite 700, Bellevue, WA 98003 USA (“AuthO”). We have concluded standard contractual clauses (SCCs) according to 2010/87/EU with AuthO to ensure adequate data protection. Further details on how AuthO protects your privacy are available at https://auth0.com/privacy/.

AuthO supplies a single sign-on service to authenticate your identity for all login procedures; all you have to do is enter your e-mail address and password. Make sure you keep your password secret to prevent misuse; it is also in your own interests to make sure that your data is up to date. You will be responsible for all procedures initiated using your user name within your sphere of responsibility.

We will only store the data you have given us for your IKEA Family membership for the duration of your IKEA Family membership. We will erase data that we only need for individual benefits of your IKEA Family membership (such as bonus programmes) after termination. Beyond that, we will only store your data as long as statutory retention periods require, or if we need the data to manage a legal claim from or against us.

IKEA service ratings and reviews surveys

IKEA Family members may participate in our IKEA service ratings and review surveys. We will occasionally contact you by e-mail to find out how satisfied you are with a product you have bought at IKEA. Any opinion you give, will appear on our website on https://www.ikea.com/at/en/ as a star rating and comment on the product you have rated.

You may certainly unsubscribe from service surveys at any time by clicking the unsubscribe link in any service survey e-mail or by sending an e-mail or letter to the address given under Pt. 1. We will then no longer send you any new service surveys, but your previous ratings and comments will still appear under the first name specified in your profile on the above website.

We will only store your service surveys as long as you are a member of IKEA Family. If you unsubscribe from IKEA Family, we will only store your data as long as statutory obligations require or as long as we need data to enforce or defend against legal claims.

IKEA profile

We will process the data you have given us when you created your IKEA user profile in order to provide IKEA services. This will allow you to create and save shopping lists online using your IKEA user profile, use our online planners such as IKEA kitchen planner, or save these planning results. Any purchases you make online using your user profile will involve us processing your data to manage and fulfil your purchase.

Your IKEA online shop user profile includes the AuthO single sign-on login service provided by AuthO, 10900 NE 8th Street, Suite 700, Bellevue, WA 98003 USA (“AuthO”). We will transmit the above data to AuthO to the USA. We have concluded standard contractual clauses (SCCs) according to 2010/87/EU with AuthO to ensure adequate data protection. Further details on how AuthO protects your privacy are available at https://auth0.com/privacy/.

We will erase your IKEA user profile for the IKEA Shop Online service and the data it contains after two years of inactivity on your part, if you delete your profile yourself, or ask us to delete the profile unless statutory regulations allow or require us to keep your data for longer. Inactivity means not logging into your user profile.

You are free to create an IKEA customer profile for the IKEA Shop Online service or not; you may also make purchases as a guest without creating an IKEA customer profile using the IKEA Shop Online service.

IKEA product ratings and reviews platform

You may rate IKEA products at any time as long as you have an IKEA customer profile for our IKEA Shop Online service or IKEA Family customer profile. We have commissioned Yotpo Inc., 400 Lafayette St. Fl. #4, New York, NY 10003, USA, to provide this service.

You will need to accept the terms of use applicable to leave an IKEA product review. After that, we will transmit your name, e-mail address, product and price and, if applicable, your date of purchase and rating to Yotpo once you submit a product rating.

Your data transmitted in this way, may be accessible to authorities in the USA for control and monitoring purposes without any effective legal remedies available to you. We will therefore only transmit your data to Yotpo on your consent. GDPR Art. 6 para1 lit (a) will then serve as a basis for us to process and transmit your data as you have given us your consent to do so.

We have also concluded EU Standard Contractual Clauses according to 2010/87/EU with Yotpo. Further details on how Yotpo protects your privacy are available here.

Your ratings, including any personal data you may have provided in them, will be anonymised within two years after submission. Your rating profile will be erased after two years of inactivity without submitting another rating during this period.

IKEA Kreativ 3D Room Planner

IKEA Kreativ allows you to record and scan your rooms using your device's camera, upload them to your IKEA Family profile and add, move and remove furniture and furnishings from IKEA in the captured views. You can also move or remove existing furniture and try out countless design ideas.

If you use IKEA Kreativ, we process your recordings created in the app locally on your device until you log in with your IKEA Family profile and upload the recordings. If you are logged in to your IKEA Family profile and use IKEA Kreativ as an IKEA Family member, you have the option of using the visualization options of IKEA Kreativ via the IKEA app. In this context, we process your first name, surname, e-mail address, IKEA Family account number and the photos you have taken, as well as when and how you use IKEA Kreativ.

We would ask you, when using IKEA Kreativ, not to create scans of people in the recording area, of photos in the recording area that show people, or of confidential information.

The legal basis for the associated data processing is Art. 6 para. 1 a) GDPR, i.e. the processing of your data is based on your consent.

If you do not upload your recordings in the IKEA app, you can delete them from your device storage at any time. If you upload your tested room designs and save them in your IKEA Family profile, we will ask you after 2 years whether you want to keep them and delete them after another 21 days, unless you instruct us otherwise and unless there is another legal obligation to keep them, or we need data to enforce or defend against legal claims. You can revoke your consent to the processing of your data in the IKEA Kreativ 3D Room Planner with future effect via this contact form.

Click & Collect in the Swedish Food Market

To use our Click & Collect service in the Swedish Food Market and to reserve items, IKEA processes your first name, last name and email address according to the information you have entered in your IKEA Family user profile. We will contact you to provide you information regarding your reservation. The legal basis for the data processing associated with this is Art. 6 para. 1 lit. a GDPR , i.e. the processing is based on your consent. After the reservation is completed, your data will be deleted after 7 days. Beyond that, we only store your data as long as there is a legal obligation to do so, or we need data to enforce or defend legal claims.

IKEA for Business

We will process the data you have given us when registering for an IKEA for Business membership to manage your IKEA for Business membership as well as for purposes of marketing and customer loyalty. This will entail processing your data for us to provide you with IKEA for Business services such as cashless payment on account, taking phone and e-mail orders, unlimited right to exchange goods – even without an invoice – and any special offers and discounts for IKEA available to IKEA for Business members. This business relationship will involve us collecting information from credit agencies (specifically KSV 1870) on you and your company to determine your creditworthiness and default risk. We will also send personalised messages to you with information that we think might be particularly relevant to you based on your data.

We will store the data you have given us in IKEA for Business membership for the duration of your IKEA for Business membership, and beyond that, only as long as we are legally required do so or as long as we need the data to enforce or defend against legal claims.

IKEA for Business corporate account

We will also process data for the above purposes from people such as your co-workers or agents that you authorise to create or access your IKEA for Business corporate account. The data will include the first and last names and contact information (telephone number and/or e-mail address) of these people.

Your IKEA for Business customer profile includes the AuthO single sign-on login service provided by AuthO, 10900 NE 8th Street, Suite 700, Bellevue, WA 98003 USA (“AuthO”). We have concluded standard contractual clauses (SCCs) according to 2010/87/EU with AuthO to ensure adequate data protection. Further details on how AuthO protects your privacy are available at https://auth0.com/privacy/.

AuthO supplies a single sign-on service to authenticate the identity of the profile owner for all login procedures; all they have to do, is enter their e-mail address and password. Profile owners must ensure they keep their password secret to prevent misuse. In their own interest, profile owners must also ensure that their data is kept up to date. Profile owners will be responsible for all procedures initiated using their user name within their sphere of responsibility.

We will process the data to fulfil our contract obligations regarding your IKEA for Business corporate account.

IKEA Family Newsletter

We will process the data you have given us on registering with the IKEA Family newsletter for the purpose of direct marketing. This will entail sending you a personalised e-mail, text message, or newsletter with information on offers, services, and events from IKEA and our partner companies we think will be particularly relevant or interesting for you based on your data. Click here for our current list of partner companies.

The data you have given us for the IKEA Family newsletter is part of your IKEA Family membership; we will store the data until you end your IKEA Family membership. Beyond that, we will only store your data as long as we need the data to enforce or defend against legal claims.

IKEA competitions, ad campaigns etc.

We will only store the data you give us for the purpose of conducting and processing the respective competition, ad campaigns, and similar events by contacting you if you have registered for them. We will erase the data, you have given us, immediately after fulfilling the purpose of storing the data, that is, at the end of the competition, ad campaign or similar event.

Second Life Shop

In order to reserve items from the Second Life Shop, IKEA processes your first name, last name and e-mail address according to the information recorded in the IKEA Family user profile. We will contact you to send you information regarding your reservation. The legal basis for the associated data processing is Art. 6 Para. 1 lit. f GDPR which means the processing takes place in our legitimate interest. Your data will be deleted after 72 hours. In addition, we only store your data as long as there is a legal obligation to do so or as long as we need data to enforce or defend against legal claims.

IKEA customer service

We will only use the data you give us when you contact our IKEA customer service with enquiries or concerns by phone, contact form, chat, social media, or in the store itself to respond to and deal with your enquiry or concern, and for statistical purposes. We will need your name and a contact option – your e-mail address or phone number. Depending on the matter at hand, we will also need your address, IKEA Family number, information about your purchase or order, or for business customers, the name of your company and IKEA for Business number if applicable. Your alias or user name will also be processed if you contact us using social media.

We will erase the personal data we have collected for this purpose once we have dealt with your enquiry in full and do not expect this matter to come up again in the future, or no later than six months after our last contact concerning your enquiry. Beyond that, we will only store your data if statutory retention periods require, or if we need the data to manage a legal claim from or against us.

If you contact IKEA customer service by phone, we will ask you for your consent to monitor your call for training purposes or improve our customer service quality before the call begins.

We will erase all calls recorded on your consent as above within three months after the call. However, you may also revoke your consent beforehand; revoking your consent will not affect the legal validity of previously processing your data.

We may need to e-mail you a gift card for some enquiries and matters with our IKEA customer service. You may redeem a gift card online or at our furniture stores. We use the Frizbee platform provided by our partner SELP DIGITAL (SELP DIGITAL, Route de Ribérac Mareuil, 24340 Mareuil En Perigord, France) for the purpose.

IKEA chatbot/chat

The IKEA chatbot can support you with general concerns and also answer your questions about your order status automatically. If you are connected to an employee from one of our specialist departments or our customer service, this person will process your inquiries or fulfill your concerns in the chat.

The processing of personal data, e.g. name, e-mail address, order number, is necessary for the processing of your request or your order status. The legal basis for the data processing associated with this is Article 6 (1) (a) GDPR, i.e. the processing is based on your consent. Your data will be deleted after 6 months. In addition, we only store your data as long as there is a legal obligation to do so or we need data to enforce or defend legal claims.

Your communication with customer service employees will be processed to optimize the customer service, in particular for training purposes. The legal basis for the data processing associated with this is Article 6 (1) (f) GDPR, i.e. the processing is carried out on the basis of our legitimate interest in continuously improving the communication of customer service. Your data will be deleted after 6 months. In addition, we only store your data as long as there is a legal obligation to do so or we need data to enforce or defend legal claims.

IKEA bathroom assembly service

We will process the data you have given us when booking IKEA bathroom installation services in order to provide this service; this especially includes assembly and installation of furniture and connections to utilities as well as making contact.

We will store the data you have given us for the IKEA bathroom installation service until this service has been completed. Beyond that, we will only store your data as long as statutory retention periods require, or if we need the data to manage a legal claim from or against us.

IKEA home visit

We will process the data you have given us when you fill out your registration for IKEA home visit to select applicants and enable us to contact you. We will contact you by phone, e-mail or text message if you have been selected from all the applicants. We will only store your data for the above purposes for a period of six months after registration. You may at any time withdraw your consent, demand the erasure of your data, and leave the programme.

IKEA Leihanhänger

We will process the data that you have given us in your online booking for an IKEA rental trailer in order to provide this service. This means that you may use the IKEA rental trailer according to the Terms and Conditions you have agreed to for this booking.

We will store the data you have given us for the IKEA rental trailer for up to two years from the date at which you have returned the IKEA rental trailer to us to contact you if there are any traffic fines or other legal claims against you.

IKEA WiFi network

We will process your MAC (media access control) address that you have transmitted to us automatically on logging into our WiFi network in order to provide you with the free WiFi service offered at our IKEA stores if you should use this offer.

We will store your MAC address for 366 days from your first login and then erase it. Click the corresponding button on the WiFi network homepage if you wish to have your MAC address erased earlier. We will then erase your MAC address immediately.

IKEA video surveillance

We will process the personal data (“data”) collected by CCTV during your stay at one of our IKEA stores. The data collected will include visual data as well as the time and place of recording for the period in which you are in a video surveillance area. We do not record audio.

Only general shopping and sales areas are subject to video surveillance at IKEA stores. This form of data processing serves our legitimate interests in protecting our customers, the safety of our co-workers, our products and property, and fulfilling our legal duty of care including gathering and securing evidence, with evaluation only taking place as defined by the purpose of data processing in each specific case.

We will erase your data after seventy-two hours unless we need to perform an evaluation in a case as defined in the purpose of data processing, such as in a damage report or theft. We have taken the appropriate technical, physical, and organisational security measures to protect the data from unauthorised access, disclosure, or loss. In particular, we store the data in such a way that only persons authorised to maintain and administer the video surveillance can view it. We log every viewing of recordings.

IKEA Live Shopping, IKEA Festival

We use a technology from Bambuser AB, Regeringsgatan 29, 111 53 Stockholm, Sweden (“Bambuser”). This allows us to provide you with an opportunity for consultation using product presentations taken live or recorded in advance and/or during a video live shopping session or IKEA Festival, and to purchase goods directly from us during the product presentation or live consultation.

We also offer live shopping as part of the IKEA Festival. You may also use a chat function to contact our co-workers involved in the presentation if you choose to use the video live shopping service or IKEA Festival. To do this, you will need to select a user name of your choice that you would like to be referred to as in the chat using the corresponding input field before joining the chat. This user name does not need to have any relation to your real name. We will process the user name that you have selected in the chat and the messages that you enter in the chat while using the service. We will store the data provided by Bambuser such as your user name and the message history while using the service for contract fulfilment in the provision of technology for six months. Beyond that, we will only store your data as long as statutory retention periods require, or if we need the data to manage a legal claim from or against us.

Bambuser will act as our processor in providing the video stream on our website, including the chat function. The data will not leave the EU for processing.

IKEA cookies, analytics and marketing

This IKEA website uses cookies. Further details on this and more information on the analytics and marketing services we use our available in our IKEA Cookie Policy.

We will use your IKEA customer profile data, purchase data (card number, IKEA store, receipt number, purchase date and time, articles, quantities, prices) as well as any IKEA competitions or IKEA store events you have joined, any e-mail IKEA newsletters you have received, and IKEA services you have used for our own statistical purposes and to make our products and services even more attractive, and to create customer groups, and generate general and/or customer group-specific offers.

We use the Salesforce service for this purpose. This service provides a data management platform (DMP). The above data will be combined and analysed to identify particularly popular parts of our range. This allows us to optimise our services with targeted advertising.

Further details on the salesforce.com privacy policy are available at the Salesforce website.

We will only store the personal data processed until the purpose of data processing has been fulfilled. Beyond that, we will only store your data as long as statutory retention periods require, or if we need the data to manage a legal claim from or against us.

4. On which legal basis is personal data being processed?

4.1 On grounds of consent – Art 6 para 1 lit a GDPR:

We will only process your personal data according to the purposes specified in the respective declaration of consent and to the extent agreed after you have given us your consent for us to process your data.

You may revoke your consent in writing at any time with effect for the future by e-mail or letter to the contact address given in Pt. 1. Revocation of consent shall not affect the lawfulness of processing your data before revocation.

4.2 To fulfil contractual obligations – GDPR Art 6.1 (b):

We will process your data in order to fulfil our contractual obligations towards you. For example, we will need your name and address in order to send you the goods you have ordered online and to send you an invoice for your order. As another example, we will need your e-mail address or phone number to contact you if there are difficulties in delivering your order or to respond to any requests or enquiries you may have made.

4.3 To fulfil statutory obligations – GDPR Art 6.1 (c):

Statutory obligations may require us to process your data, especially retention of business correspondence and contract documents. These obligations may arise from the following laws, amongst others:

Austrian Commercial Code (UGB)
Austrian Federal Fiscal Code (BAO)
Austrian Civil Code (ABGB)

4.4 To protect legitimate interests – GDPR Art 6.1 (f):

We may process your personal data as necessary to safeguard our legitimate interests or the legitimate interests of a third party:

As an example, we may need to process your date of birth in order to identify you and avoid confusion with other customers of the same name. This may be necessary to ensure that we have only stored you once in our database.
A legitimateinterest in processing your personal data also applies for our own and third-party marketing purposes, customer loyalty, and direct advertising where legally permissible. As an example, we may process your purchasing data from your IKEA Family membership in order to thank you for your loyalty to IKEA with special offer tokens.
We may also process your data from enquiries to customer service to be able to respond to your enquiry or request more quickly and effectively.
We also have a legitimate interest in processing your data for administration purposes within the IKEA Group and in litigation.
We may also process your data with credit agencies to determine your creditworthiness and default risk or to process enquiries or requests you have made towards us.
Apart from that, we will also ask you for your opinion on the products you have purchased in our IKEA service ratings and review surveys. This serves our policy of constant improvement in our product range and services, and helps other customers make a decision on their purchases.
We will process your MAC address when you use our free IKEA WiFi service in order to provide you with this free service, and also to log users in the event of legal claims or to investigate criminal offences.
Data processing from video surveillance serves our legitimateinterests in protecting our customers, the safety of our co-workers, our products and property, and fulfilling our legal duty of care including gathering and securing evidence, with evaluation only taking place as defined by the purpose of data processing in each specific case.

We may therefore process your data on the basis of our legitimateinterests in addition to your consent as a legal basis, that is, even if you have revoked your consent.

5. Who will be receiving your data?

Your data will be passed on to the following recipients:

Contractors such as IT and payment service companies, suppliers, and freight companies that we have commissioned as data processors to the extent that they require your data to perform services that we have ordered from them. These contractors are contractually obliged to treat your data confidentially and only process the data to the extent necessary to provide the services ordered.
Our co-workers and other parties in IKEA Möbelvertrieb OHG and the IKEA company group will receive your data that they need to fulfil their respective contractual and statutory obligations or protect our vested interests.
If legally required to do so, we will also pass your data on to public bodies and authorities.
We may also pass your data on to the following recipients as necessary on a case-by-case basis:
- To secure evidence in criminal cases: Law enforcement and courts
- For security purposes: Law enforcement
- To secure evidence in civil matters: Courts
- To process insurance claims: Insurance companies
- For law legal purposes: Lawyers, authorities and other authorities.

6. Are you obliged to provide data?

You will need to give us your data for us to be able to fulfil our contractual obligations and provide our optional benefits and or free services for you – your purchases, IKEA for Business or IKEA Family membership, IKEA Family newsletter, or our free WiFi service. This data will include, for example, your name and address for us to deliver your order and send you your invoice. Necessary data entries are marked with an asterisk* on mandatory fields. We will usually not be able to provide the service you have requested, such as a purchase or membership, unless you give us this necessary data.

Providing your visual data is optional but remember that we will need to process your data for the purposes given above if you access areas of our IKEA stores with video surveillance as clearly marked out in the store.

7. Is there automated decision-making including profiling?

We will not use automated decision-making according to Art 22 GDPR in order to establish and maintain business relationships or make other decisions that would significantly affect you in a similar way.

8. Your rights in processing your personal data

You may (i) demand disclosure on whether and what personal information we have stored on you and request copies of your data, (ii) demand correction, supplementation or deletion of your personal data if incorrect or processed so as to violate statutory regulations, (iii) demand that we restrict your personal data from being processed, (iv) object to the use of your personal data for processing or revoke consent you have previously granted, (v) request the data that you have given us in a transferable format, (vi) lodge a complaint to the Austrian data protection authority (www.dsb.gv.at).

Contact us via this contact form or send us a letter by post using the above contact addresses in order to assert any of the rights stated above.

Status October 2024