1. Data Controller
The legal entity responsible for the processing of your personal data is:
CVR No. 38262572
Sankt Gertruds Stræde 6e,
DK-1129 Copenhagen K
2. Description of processing
In the following, we have described the purposes for which we process your personal data.
2.1 When you make a purchase via our website
We process personal data about you when you purchase our products. We process your personal data in order to be able to deliver the times that you order.
We process a variety of personal data about you, including your name, address, email address and telephone number.
The legal basis for processing your personal data is the General Data Protection Regulation, Article 6(1)(b), as the processing is required in order to satisfy the contract to which you are a party. Where the processing of your personal data is not sufficiently linked to the satisfaction of the agreement, the processing of your personal data will instead be based on GDPR, Article 6(1)f), pursuant to which our legitimate interest is to manage our sale.
We can share your data with our IT suppliers, collaborating partners, warehouse and shipping company.
We will store your data for as long as it is required to be able to manage our sale. As a general rule, however, we will store your personal data for the use of this purpose for the current fiscal year plus 5 years in accordance with the associated Accounting Act regulations.
2.2 When you pay via Klarna
On our website, we offer you the option to pay via Klarna’s payment solutions - either by paying immediately or by selecting deferred payment.
If you choose to pay with one of Klarna’s solutions when placing an order via our website, we will disclose relevant information to Klarna to enable them to process your payment. You will be paying for the purchase of your goods directly to Klarna.
In connection with your order we will disclose your contact information, including your name, address, telephone number and email address as well as your order details to Klarna. The disclosure is made in accordance with Article 6(1)(b) of the GDPR.
You can sign up to receive our newsletter in order to receive news and extraordinary offers. We process your personal data in order to be able to send the newsletter to you.
We process your personal data in the form of your email address, which we need to be able to send the newsletter to you.
The legal basis for processing your personal data is the balancing of interests provision in the General Data Protection Regulation, Article 6(1)(f). According to the Marketing Practices Act you can withdraw your consent at any time if you no longer wish to receive the newsletter.
We can share your data with our IT suppliers and collaborating partners.
We will store your data for as long as it is required to be able to send our newsletter to you. As a general rule, we will store your data for one year, for documentation purposes, after you unsubscribe from our newsletter.
2.4 Social media
We host fan pages or company pages on various social media which you can visit and make use of. Together with the social media, we are joint controllers for the collection of your personal data when you visit our page on the social media.
You can read the joint controller agreements with Facebook and Instagram here.
We also process the data about you which you submit to us, e.g., in connection with a direct communication from you to us via one of the aforementioned platforms. This will typically be your name and your question to us.
The legal basis for processing your personal data is the General Data Protection Regulation, Article 6(1)(f), as we have a legitimate interest in acquiring knowledge about users of our pages on social media.
We do not store, and do not have access to, data regarding your online behaviour which is collected by the aforementioned social media. We are only given access to aggregated statistical data about the number of visitors, etc.
3. Transfers to countries outside the EU/EEA
We or our data processors can transfer your personal data to countries outside the EU/EEA. You can read more below about the countries to which we and our data processors can transfer personal data:
Klaviyo, USA: See the list of sub-processors here.
Shopify, Canada: See the list of sub-processors here.
Zendesk, USA: See the list of sub-processors here.
3.1 Transfer basis
Canada has been assessed by the Commission, with certain restrictions, as a country which generally, either via legislation or via other measures, ensure an adequate level of protection for personal data. Our data processor’s processing of your personal data is covered by this adequacy decision.
In case of transfer to countries which have not been assessed by the Commission as countries which ensure an adequate protection level, we will ensure to have the necessary guarantees via the use of the Commission’s standard contracts as published by the Commission or via the use of other contracts approved by competent authorities.
You can receive a copy of this contract/agreement by contacting us via email@example.com (state 'privacy' in the subject line).
You can also read the agreement with Klaviyo here.
4. Mandatory information
Information provided in connection with purchases, including purchasing via subscription, is mandatory. If you do not provide this information, we are unfortunately unable to enter into an agreement to supply goods to you.
5. Your rights
You have the following rights:
- You have the right to request insight in, correction or deletion of your personal data.
- You also have the right to have the processing of your personal data limited.
- If the processing of your personal data is based on your consent, you have the right to revoke your consent at any time. Your revocation will not affect the legality of processing performed before you revoked your consent. You can revoke your consent and exercise your rights as specified below.
- Your have the right to receive the personal data which you have provided in a structured, commonly used and machine-readable format (data portability).
- You can always submit a complaint to a data protection authority, e.g., the Danish Data Protection Agency.
You also have the right to object to our processing of your personal data in the following cases:
- If our processing of your personal data is based of Article 6(1)(e) (public interest or exercise of official authority) or Article 6(1)(f) (balance of interest test), see above under processing basis, you have the right, at any time, to object to any such processing on grounds that may relate to your particular situation.
- You also have an unconditional right to object to our processing of your personal information if we process your information with a view to direct marketing.
You can exercise your rights by sending us an email via firstname.lastname@example.org (state 'privacy' in the subject line).
There may be conditions or limitations associated with these rights. It is not certain, therefore that you have the right, e.g., to data portability in a specific instance - this depends on the specific circumstances related to the processing activities.