Privacy policy

Navigate to privacy policies for:
Privacy Policy IKEA app | Data processing when visiting the website | Shopping at IKEA | IKEA services | IKEA Family | IKEA customer satisfaction survey | Marketing and direct advertising | Improving our services, optimizing our offerings | Statistics and analysis | IKEA video surveillance | Defending and asserting legal claims, fulfilling legal obligations

Information obligations pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR

We hereby inform you about the processing of your personal data ("data") and your data protection rights (effective May 25, 2018): 

1. Who is responsible for data processing and who can you contact?

The data controller is:

IKEA Möbelvertrieb OHG ("IKEA")
Legal form: General partnership
Headquarters: Shopping City Süd, Südring, 2334 Vösendorf
Commercial register number: FN 316 s
Commercial register court: Regional Court of Wiener Neustadt
Sales tax identification number: ATU19420008
ARA license number: 4838

If you have any questions or concerns about the processing of your data, or if you discover an error on our website or in our app, you can contact us at:  

IKEA Customer Service Austria  2334 Vösendorf-Süd
Tel.: 0800/081 100
Email for private customers:[email protected] 
Email for business customers:[email protected]

Or use our contact forms:

• General inquiry about the processing of personal data
• Report errors on our website or in our iOS/Android app  

Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Ireland"; for more information, see 4.9.1) is jointly responsible for the data processing of "Page Insights."  

Information on data protection at Meta Ireland is available at: https://www.facebook.com/privacy/center/?locale=de_DE. 

2. Where does your data come from? 

We process data that we receive from you:

• as part of your IKEA Family membership
• when you use IKEA services
• when you contact IKEA Customer Service
• when participating in, for example, surveys, competitions, or other IKEA promotions
• when you visit our stores (video surveillance)
• when you visit our website

We also process data that we receive from our contractual partners and credit agencies:

• Data from KSV1870 Information GmbH within the scope of our business relationship (information on data protection is available here: https://www.ksv.at/datenschutzerklaerung)
• Data from our social media partners (for information on data protection, see 4.7 ) 

3. Necessity or obligation to provide data, consequences of not providing data 

When we collect data from you, the data that is necessary to achieve the intended data processing purpose is marked with (*) as a mandatory field. If you do not provide the necessary data, we will generally not be able to provide the service you require.

All data that is not marked with (*) as a mandatory field can be provided voluntarily. 

4. For what purposes is the data processed and for how long?

We process your data in the manner described in the following points. If we process your data for other purposes, we will inform you separately before we start processing your data. 

4.1. Data processing when visiting our website (https://www.ikea.com/at/de/)

Processed data:  
Browser type, operating system, country, date, time, and duration of access, IP address, and pages visited on our website, including entry and exit pages

Purpose:
This data processing is necessary to ensure that you have the best possible user experience on our website and to guarantee the stability of the website. In particular, we use this data for the purpose of providing the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services that we use for the purpose of operating the website

Legal basis:  
We process this data on the basis of our legitimate interests or on the basis of the legitimate interests of third parties (Art. 6 para. 1 lit. f GDPR), namely to be able to operate our website technically.  

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected your data. In addition, we only store your data for as long as there is a legal obligation to do so or we have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients: 

4.2. Shopping at IKEA

IKEA offers you various shopping opportunities and options, such as

• online shopping (including delivery);
• shopping with Click & Collect in store;
• shopping in our Second Life store

as well as the option to book additional services and manage your purchase. Depending on which IKEA service you use, the data mentioned here will be processed:

Processed data:
Email address, phone number, personal details (first name, last name), address (country, street and house number, postal code, city), company details, data from your IKEA Family profile, data from your IKEA for Business profile, shopping cart, pickup or delivery details, payment details, product details

Purpose:
We process this data for the purpose of fulfilling our contractual obligations to you, namely to process and manage your purchase at IKEA.

Legal basis:
We process this data to carry out pre-contractual measures or to fulfill our contractual obligations (Art. 6 (1) (b) GDPR), namely to process and manage your purchase. 

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it, we are legally obliged to do so, or we have a corresponding overriding interest in storing it. For tax reasons, we are required to retain contracts and related documents from the contractual relationship for a period of 7 years in accordance with § 132 BAO (from the end of the year in which the business transaction took place – see also § 212 UGB).

Data

• from your debit/credit card, your Mastercard ID, and data processed in the course of payment via Apple Pay or Google Pay will be deleted after 24 months;
• Data relating to your Click & Collect reservation will be deleted after 7 days;
• Data relating to your Zweites Leben Shop reservation will be deleted after 72 hours;
  unless we are legally obliged to retain it for longer or have a corresponding overriding interest in retaining it for longer.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

Further information on data processing by the various payment service providers can be found at:

• PayPal: https://www.paypal.com/at/webapps/mpp/ua/privacy-full
• Klarna: https://cdn.klarna.com/1.0/shared/content/legal/terms/de-AT/privacy
• Trustly: https://www.trustly.com/about-us/privacy-policy
• Ikano: https://ikanobank.at/kontakt/datenschutz
• Apple Pay: https://support.apple.com/de-at/101554
• Google Pay: https://support.google.com/googlepay/answer/9039712

4.3. Services from IKEA

4.3.1. IKEA Online Planning Appointment & Online Expert Check & Interior Design Service

Processed data:
Email address, phone number, personal details (first name, last name), address (country, street and house number, postal code, city), company details, data from the IKEA Family profile, data from the IKEA for Business profile, selected service, selected appointment, payment details

Purpose:
We process your data for the provision of the IKEA online planning appointment, online expert check, and interior design service, in particular to contact you to arrange an appointment and to plan your IKEA furnishing solution.

Legal basis:
We process this data to carry out pre-contractual measures or to fulfill our contractual obligations (Art. 6 (1) (b) GDPR), namely to process the service you have booked.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it, we are legally obliged to do so, or we have a corresponding overriding interest in storing it. For tax reasons, we are required to retain contracts and related documents from the contractual relationship for a period of 7 years in accordance with § 132 BAO (from the end of the year in which the business transaction took place – see also § 212 UGB).Data relating to your debit/credit card, your Mastercard ID, and data processed in the course of payment via Apple Pay or Google Pay will be deleted after 24 months, unless we are legally obliged to retain it for longer or have a corresponding overriding interest in retaining it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

Further information on data processing by the various payment service providers can be found at:

• PayPal: https://www.paypal.com/at/webapps/mpp/ua/privacy-full
• Klarna: https://cdn.klarna.com/1.0/shared/content/legal/terms/de-AT/privacy
• Trustly: https://www.trustly.com/about-us/privacy-policy
• Ikano: https://ikanobank.at/kontakt/datenschutz
• Apple Pay: https://support.apple.com/de-at/101554
• Google Pay: https://support.google.com/googlepay/answer/9039712

4.3.2. IKEA Creative 3D Room Planner

Processed data:
Data from the IKEA Family profile, selected products, chosen room design, creation date, uploaded photos.

Purpose:
The processing of data is necessary to provide you with the "IKEA Creative 3D Room Planner" feature.

Legal basis:
We process this data to carry out pre-contractual measures or to fulfill our contractual obligations (Art. 6 (1) (b) GDPR), namely to provide the "IKEA Creative 3D Room Planner" feature.

Duration:
We only store your data for as long as is necessary for the purposes for which we collected it. If you do not save a room design, we delete the data after 30 days. If you save a room design, we delete the data after 2 years and 21 days, unless you inform us that you wish to continue storing the room design. Beyond that, we only store your data if we are legally obliged to do so or have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.3.3. IKEA competitions, promotions, etc.

Processed data:
First name, last name, email address, data from the IKEA Family profile

Purpose:
We process this data to enable you to participate in our competitions and promotions.

Legal basis:
We process this data to carry out pre-contractual measures or to fulfill our contractual obligations (Art. 6 (1) (b) GDPR).

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it. Your data will be deleted after the competition or promotion has ended. Beyond that, we only store your data for as long as there is a legal obligation to do so or we have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.3.4. Second Life buy-back service

Processed data:
First name, last name, email address, data from IKEA Family profile, product details, details of the selected IKEA store, uploaded photos, content of the offer

Purpose:
We process this data in order to evaluate your offer or, if necessary, to make a different offer and to purchase your item from you in exchange for a gift card and resell it in our Second Life Shop.

Legal basis:
We process this data to carry out pre-contractual measures or to fulfill our contractual obligations (Art. 6 (1) (b) GDPR).

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it. For tax reasons, we are required to retain contracts and related documents from the contractual relationship for a period of 7 years in accordance with § 132 BAO (from the end of the year in which the business transaction took place – see also § 212 UGB).Beyond that, we only store your data for as long as there is a legal obligation to do so or we have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.3.5.  IKEA Customer Service (telephone, contact form, chat, chatbot, social media, on site)

Processed data:
Name or user name, contact details (email address, phone number), address, IKEA Family number, information about the purchase or order, company, IKEA Business number, content of the request

Purpose:
The processing of the data is necessary in order to respond to and process your request.

Legal basis:
We process this data on the basis of our legitimate interest or the legitimate interests of third parties (Art. 6 (1) (f) GDPR) in processing our customers' inquiries and requests appropriately.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it. We delete your data once your request has been dealt with and it is not expected to be relevant again in the future, but no later than 6 months after the last contact regarding your request. Beyond that, we only store your data if we are legally obliged to do so or have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.3.6. Return

Processed data:
Receipt or order number, return data (product details, reason for return, type of return), email address, telephone number, personal details (first name, last name), address (country, street and house number, postal code, city), data from the IKEA Family profile, data from the IKEA for Business profile, payment data, scanned barcodes of the items

Purpose:
We process this data for the purpose of fulfilling our contractual obligations to you, namely to process your return.

Legal basis:
We process this data to carry out pre-contractual measures or to fulfill our contractual obligations (Art. 6 (1) (b) GDPR), namely to process your return.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it, we are legally obliged to do so, or we have a corresponding overriding interest in storing it. For tax reasons, we are required to retain contracts and related documents from the contractual relationship for a period of 7 years in accordance with § 132 BAO (from the end of the year in which the business transaction took place – see also § 212 UGB).

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.3.7. Free ordering of spare parts

Processed data:
Order data (product details, reason for order), email address, telephone number, personal details (first name, last name), address (country, street and house number, postal code, city)

Purpose:
We process this data for the purpose of fulfilling our contractual obligations to you, namely to process your order.

Legal basis:
We process this data for the purpose of carrying out pre-contractual measures or fulfilling our contractual obligations (Art. 6 (1) (b) GDPR), namely to process your order.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it. We delete your data 15 days after your order. Beyond that, we only store your data if we are legally obliged to do so or have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.3.8. IKEA Homevisit

Processed data:
Age, information on living and housing situation, occupation, nearest IKEA store, personal details, contact details, address, videos transmitted

Purpose:
We process this data to enable your participation in IKEA Homevisit and to use the information obtained to show you more relevant furnishing solutions in our store and on our website.

Legal basis:
We process this data on the basis of your consent (Art. 6 (1) (a) GDPR). You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it. Your data will be deleted 6 months after your registration or until you withdraw your consent. Beyond that, we only process your data if we are legally obliged to do so or have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.4. IKEA Family

4.4.1.  IKEA Family membership

Processed data:
Personal details (first name, last name, date of birth, gender, telephone number, email address), address (country, street and house number, postal code, city), password

Purpose:
We process this data to fulfill our contract with you regarding IKEA Family membership, to manage your membership, and to provide our services in connection with your IKEA Family membership (benefits, offers, and activities).

Legal basis:
We process this data to carry out pre-contractual measures or to fulfill our contractual obligations (Art. 6 (1) (b) GDPR).

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it, we are legally obliged to do so, or we have a corresponding overriding interest in storing it. Your data is no longer required once your IKEA Family membership has ended, which is why it will be deleted. However, we are obliged under Section 132 of the Austrian Federal Tax Code (BAO) to retain contracts and related documents from the contractual relationship for a period of 7 years (from the end of the year in which the business transaction took place – see also Section 212 of the Austrian Commercial Code (UGB)).

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.4.2. Registration for the IKEA Family newsletter

Processed data:
Personal details (first name, last name, date of birth, gender, telephone number, email address, telephone number, password), address (country, street and house number, postal code, city), password, family status, information about living situation (apartment, size, furnishings), information about children, preferred store, previous opening or clicking behavior (e.g., opens our newsletter, clicks on "New arrivals," "Collections," etc.), products previously viewed online, products previously added to the shopping cart, products previously purchased, search history on ikea.at

Purpose:
We process this data to inform you about (interest-based) offers, services, and events from IKEA and its partner companies.

Legal basis:
We process this data on the basis of your consent (Art. 6 (1) (a) GDPR). You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.

Duration:
The data processed for this purpose will be stored until you withdraw your consent. In addition, we only process the data for as long as there is a legal obligation to do so or we need the data to assert or defend legal claims.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.4.3. Rewards from IKEA Family

Processed data:
Data from the IKEA Family profile (first name, last name, email address, online shopping history, purchases made and shopping lists, wish list), address (country, street and house number, postal code, city), logins to the IKEA Family profile, registration for IKEA events/workshops, selection of benefits, use of the IKEA online kitchen planner

Purpose:
We process this data to provide the IKEA loyalty bonus as part of our contract with you regarding IKEA Family membership

Legal basis:
We process this data to carry out pre-contractual measures or to fulfill our contractual obligations (Art. 6 (1) (b) GDPR).

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it, we are legally obliged to do so, or we have a corresponding overriding interest in storing it. Your data is no longer required once your IKEA Family membership has ended, which is why it will be deleted. However, we are legally obliged to retain contracts and related documents from the contractual relationship for a period of 7 years for tax reasons in accordance with § 132 BAO (from the end of the year in which the business transaction took place – see also § 212 UGB).

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.4.4. IKEA Family service surveys "Ratings and Reviews"

Processed data:
Data from the IKEA Family profile (first name, last name, email address, online shopping history, purchases made), survey content

Purpose:
We process this data so that you can participate in the IKEA service surveys for IKEA Family members and so that we can make your rating available to other customers.

Legal basis:
The service surveys are sent on the basis of your consent (Art. 6 (1) (a) GDPR). You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.Further processing of the reviews you submit is based on our legitimate interests or the legitimate interests of third parties (Art. 6 (1) (f) GDPR), namely to make the review available to other customers and to improve our services.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected your data or until you withdraw your consent (if the processing is based on your consent). If you terminate your IKEA Family membership, the data will be deleted unless there is a legal obligation to store it further or we need the data to assert or defend legal claims.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.4.5. IKEA product review platform "Ratings and Reviews"

Processed data:
Data from the IKEA Family profile (first name, last name, email address, online shopping history, purchases made), content of the review, product data (e.g., price, date of purchase)

Purpose:
We process this data so that you can rate our products and we can make your rating available to other customers.

Legal basis:
We process this data on the basis of your consent (Art. 6 (1) (a) GDPR). You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it. Your reviews, including the personal data you have provided, will be anonymized no later than 2 years after they have been submitted. Your review profile will be deleted after 2 years of inactivity, without submitting another review during this period, unless there is a legal obligation to store the data further or we need the data to assert or defend legal claims.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.5. IKEA user profile

Processed data:
Personal details (first name, last name, date of birth, gender, telephone number, email address), address (country, street and house number, postal code, city), password, data related to the use of the profile

Purpose:
We process this data to fulfill our contract with you regarding your IKEA user profile, to manage your membership, and to provide our services in connection with your IKEA user profile (provision of IKEA services such as the creation of shopping lists, the online planner, and the IKEA kitchen planner).

Legal basis:
We process this data to carry out pre-contractual measures or to fulfill our contractual obligations (Art. 6 (1) (b) GDPR).

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it. We delete your data after 2 years of inactivity on your part or when your profile is deleted. Beyond that, we only process your data if we are legally obliged to do so or have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.6. IKEA customer satisfaction survey

Processed data:
Email address, telephone number, order number, information provided in the survey

Purpose:
We process this data to contact you to find out how satisfied you are with the products you have purchased from us or the services you have used, so that we can improve our offering.

Legal basis:
We process this data on the basis of your consent (Art. 6 (1) (a) GDPR). You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it. Your data is no longer required once we have completed the customer satisfaction survey. Beyond that, we only store your data if we are legally obliged to do so or have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.7. Marketing and direct advertising

Processed data:
Personal master data, usage and behavioral data, technical data, transaction and purchase data, communication data

Purpose:
We process this data to collect information about our customers and use this information to better market our products and services and to create (target group-oriented) advertising for our customers.

Legal basis:
We process this data on the basis of our legitimate interest or the legitimate interests of third parties (Art. 6 (1) (f) GDPR) in conducting marketing and direct advertising.
If we use cookies and similar technologies for these purposes (see section5 of this privacy policy), we process your data on the basis of your consent (Art. 6 (1) (a) GDPR). You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected your data or until you withdraw your consent. In addition, we only store your data for as long as there is a legal obligation to do so or we have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

Further information on data processing by the various platform providers can be found at:

• Facebook: https://www.facebook.com/privacy/policy/
• Instagram: https://privacycenter.instagram.com/policy/
• TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/de
• YouTube: https://policies.google.com/privacy?hl=de
• Pinterest: https://policy.pinterest.com/de/privacy-policy
• Salesforce: https://www.salesforce.com/de/company/legal/privacy/#privacy-statement
• Adform: https://site.adform.com/privacy-center/overview/

4.8. Improvement of our services, optimization of our offering

Processed data:
Data from the IKEA Family profile (e.g., online shopping history, purchases made and shopping lists, online planning results, statistical data on shopping behavior, participation in IKEA competitions, events in IKEA stores, subscription to IKEA email newsletters, use of IKEA services), personal master data, usage and behavioral data, technical data, transaction and purchase data, communication data

Purpose:
The processing of data is necessary to improve our services (including communication with customers), to better understand our customers, to make data-based business decisions, and thus to increase both our efficiency and our sales.

Legal basis:
We process this data on the basis of our legitimate interest or the legitimate interests of third parties (Art. 6 (1) (f) GDPR) in improving our services and optimizing our offering.If we use cookies or similar technologies to collect your data or record telephone calls with IKEA customer service, we process this data on the basis of your consent (Art. 6 (1) (a) GDPR). You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. For more information on the use of cookies and similar technologies, please see 5.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected your data or until you withdraw your consent. Data from your IKEA Family profile will be deleted after 60 months of inactivity (i.e., if you have not interacted with IKEA Austria, including logging into your profile, opening our emails, or making registered purchases). Recorded telephone conversations are deleted completely after 3 months at the latest, and other communications with IKEA Customer Service are deleted after 6 months. Beyond that, we only store your data for as long as there is a legal obligation to do so or we have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.9. Statistics and analysis

Processed data:
Data from the IKEA Family profile (e.g., online shopping history, purchases made and shopping lists, online planning results, statistical data on shopping behavior, participation in IKEA competitions, events in IKEA stores, subscription to IKEA email newsletters, use of IKEA services), personal master data, usage and behavioral data, technical data, transaction and purchase data, communication data, performance data

Purpose:
We process this data to identify patterns and trends, improve our business processes, support strategic decisions, predict developments, measure business success, optimize customer service and offerings, determine the performance of our marketing campaigns, optimize our marketing campaigns, and make decisions regarding our campaign budget.

Legal basis:
We process this data on the basis of our legitimate interest or the legitimate interests of third parties (Art. 6 (1) (f) GDPR) in improving our business processes, supporting strategic decisions, predicting developments, measuring the success of the company, optimizing customer service and the offering, and evaluating the performance of our advertising campaigns and improving our advertising campaigns on the basis of these evaluations.If we use cookies or similar technologies to collect your data, we process this data on the basis of your consent (Art. 6 (1) (a) GDPR). You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. For more information on the use of cookies and similar technologies, please see 5.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected your data or until you withdraw your consent. Data from your IKEA Family profile will be deleted after 60 months of inactivity (i.e., if you have not interacted with IKEA Austria, including logging into your profile, opening our emails, or making registered purchases). In addition, we only store your data for as long as there is a legal obligation to do so or we have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.9.1.  "Page Insights": Joint responsibility

We operate the Facebook account "IKEA" (https://www.facebook.com/IKEA.Austria) and the Instagram account "ikeaaustria" (https://www.instagram.com/ikeaaustria/) ("Meta Products"), services provided by Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Ireland").

Meta Ireland uses information about how people use Meta Products to provide analytics services, known as Page Insights, to page operators (such as IKEA) so that they can gain insights into how people interact with their pages and the content associated with them.

Page Insights are aggregated statistics created based on certain events logged by Meta servers when people interact with pages and their associated content.

Such events consist of various data points, which, depending on the event, may include the following:

• Information about an action (viewing a page, post, video, story, or other content associated with a page, interacting with a story, subscribing to a page, liking a page, reacting to a page post, moving the mouse to preview page content, clicking on buttons such as phone number, "plan route" or other buttons on a page, viewing/clicking on items in a page shop) as well as
• information about the person who performed the action and the browser/app used for this purpose (date and time of the action, country/city (estimated based on the IP address or, for logged-in users, imported from the user profile), language code (from the browser's HTTP header and/or language settings), age/gender group (from the user profile, only for logged-in users), previously visited website (from the browser's HTTP header), whether the action was performed on a computer or a mobile device (from the browser user agent or app attributes), Facebook user ID (only for logged-in users)

With regard to the data processing described below, IKEA and Meta Ireland are joint controllers within the meaning of Art. 26 GDPR:

IKEA and Meta Ireland are joint controllers within the meaning of Article 26 GDPR with regard to the processing of personal data in events for the purpose of creating page insights ("insights data").

The joint responsibility includes the creation of these events and their consolidation into Page Insights, which are then made available to IKEA.

In order to determine the respective responsibilities for compliance with the obligations under the GDPR with regard to joint processing, IKEA and Meta Ireland have entered into a joint data processing agreement ("Page Insights Addendum Regarding the Controller," available at https://www.facebook.com/legal/terms/page_controller_addendum?locale=de_DE).

In accordance with the provisions of the GDPR and the Addendum for Controllers (the "Addendum"),

• Meta Ireland assumes responsibility for fulfilling the obligations under the GDPR for the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 21 GDPR, Articles 33 and 34 GDPR);
• Meta Ireland shall implement appropriate technical and organizational measures to ensure the security of the processing in accordance with Article 32 GDPR;
• Meta Ireland shall make the essence of this Page Insights Supplement available to the data subjects (Article 26(2) GDPR). This is currently done via the information on Page Insights data, which can be accessed from all pages

The legal basis for IKEA's processing of this data is the legitimate interest of IKEA or the legitimate interests of third parties (Article 6(1)(f) GDPR) in obtaining insights into how individuals interact with our pages and the content associated with them.

IKEA does not have access to the personal data processed in the context of events, but only to the aggregated Page Insights.The events that Meta Ireland logs to generate page insights are determined solely by Meta Ireland and cannot be set up, changed, or otherwise influenced by IKEA.

For information on how Meta Ireland uses cookies and similar technologies, please refer to Meta Ireland's cookie policy (https://www.facebook.com/privacy/policies/cookies).

For information on data processing by Meta Ireland, please refer to Meta Ireland's Privacy Policy (https://www.facebook.com/privacy/policy/).

4.10. Sending important information

Processed data:
Email address Personal details (first name, last name), address (country, street and house number, postal code, city)

Purpose:
We process this data in order to send you (safety) relevant information, in particular in connection with product safety, to inform you as a customer comprehensively about possible risks, and to ensure your safety.

Legal basis:
We process this data on the basis of our legitimate interest in providing you, as a customer, with important information (in particular in connection with product safety) (Art. 6 (1) (f) GDPR). In certain cases (e.g., information about a product recall due to an obligation under product safety law), processing is necessary to fulfill a legal obligation (Art. 6 (1) (c) GDPR).

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected your data, we are legally obliged to do so, or we have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.11. IKEA video surveillance

Processed data:
Image data, location and time of image recording

Purpose:
We process this data to protect our customers, the safety of our employees, our products, and our property, to fulfill legal due diligence obligations, including the procurement and securing of evidence.

Legal basis:
We process this data on the basis of our legitimate interest or the legitimate interests of third parties (Art. 6 (1) (f) GDPR) in ensuring the safety of persons in the monitored area, protecting our property, and fulfilling our due diligence obligations.

Duration:
We only store your data for as long as it is necessary for the purposes for which we collected it. Your data will be deleted after 72 hours, unless an evaluation is carried out in the event of an incident (e.g., damage report, theft).

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

4.12. Defense and assertion of legal claims, fulfillment of legal obligations

Processed data:
Personal master data, contract data, communication data, other supporting data

Purpose:
This data processing is necessary for the defense and assertion of legal claims and the fulfillment of legal obligations.

Legal basis:
We process this data

• on the basis of our legitimate interests or on the basis of the legitimate interests of third parties (Art. 6 (1) (f) GDPR), namely to defend and assert legal claims and fulfill legal obligations; or
• to fulfill a legal obligation to which we are subject (Art. 6 (1) (c) GDPR).

Duration:
e only store your data for as long as it is necessary for the purposes for which we collected your data. In addition, we only store your data for as long as there is a legal obligation to do so or we have a corresponding overriding interest in storing it.

In order to achieve the intended purposes, it may be necessary in some cases to disclose your data to the following recipients:

5. IKEA cookies, analytics services, and marketing

Cookies and other technologies are used on IKEA websites. All information about this and further information about the analytics and marketing services we use can be found in the cookie settings and in the IKEA Cookie Policy.

6. Is there automated decision-making, including profiling?

No, we do not use automated decision-making pursuant to Art. 22 GDPR to make decisions about the establishment and implementation of business relationships or other decisions that would significantly affect you in a similar way.

7. Your rights in connection with the processing of personal data

You may (i) request information from us about whether and what personal data we have stored about you and receive copies of this data, (ii) request the correction, supplementation, or deletion of your personal data that is incorrect or not processed in accordance with the law, (iii) request that we restrict the processing of your personal data, (iv) object to the processing of your personal data under certain circumstances or withdraw your previously given consent to processing, (v) request data that you have provided to us in a transferable format, and (vi) lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

To exercise any of the above rights, please contact us using our contact form or by letter to the contact addresses listed above.

As of September 2025