Privacy Policy (GDPR)

ONLINESHOPPEN365 ApS

PRIVACY POLICY

1. GENERAL

1. This policy concerns the processing of personal data and describes how OnlineShoppen365.dk ApS ("OnlineShoppen365", "us", "our", "we") collects and processes information about our customers.
2. The privacy policy applies to personal data that you provide to us or that we collect via OnlineShoppen365's website, www.os-365.dk ("Webshoppen").
3. OnlineShoppen365 is the data controller for your personal data, and all inquiries to OnlineShoppen365 can be made via the contact information stated under section 7.

2. WHAT PERSONAL DATA DO WE COLLECT, FOR WHAT PURPOSES, AND THE LEGAL BASIS FOR PROCESSING

1. When you visit the Webshop, we automatically collect information about you and your use of the Webshop, such as the type of browser you use, the search terms you use on the Webshop, your IP address, including your network location, and information about the operating system on the device used.
   1. The purpose is to optimize the user experience and Webshop functionality, as well as to conduct targeted marketing, including possible retargeting via Facebook, Google, and other social media. This information processing is necessary for us to pursue our interests in improving the Webshop and showing you relevant offers.
   2. The legal basis for processing is Article 6(1)(f) of the EU General Data Protection Regulation (GDPR).
2. When you purchase a product or communicate with us on the Webshop, we collect the information you provide, such as name, address, email address, phone number, VAT number, payment method, information about the products you purchase and possibly return, delivery preferences, and information about the IP address from which the order is placed.
   1. The purpose is for us to deliver the products you have ordered and otherwise fulfill our agreement with you, including administering your rights to return and complain. Information about your purchases may also be processed to comply with legal requirements, including accounting and bookkeeping. The IP address is collected at the time of purchase for the purpose of preventing fraud.
   2. The legal basis for processing is Article 6(1)(b), (c), and (f) of the GDPR.
3. When you sign up for our newsletter, we collect information such as your name, email address, mobile number, and address.
   1. The purpose is to pursue our interest in delivering newsletters to you.
   2. The legal basis for processing is Article 6(1)(f) of the GDPR.
4. When you join our customer club, you are asked to provide information such as name, address, email address, phone number. Additionally, we collect information during your membership about your use of the customer club's benefits, competitions you participate in, etc. We match this information with other information we have about you, including information about what you have purchased and possibly returned.
   1. The purpose is to administer your membership and provide you with the services and benefits associated with membership of the customer club, as well as to pursue our interest in being able to send newsletters and conduct targeted marketing.
   2. The legal basis for processing is Article 6(1)(b) and (f) of the GDPR. You will be asked to give separate consent for electronic marketing upon registration.

3. RECIPIENTS OF PERSONAL DATA

1. Information about your name, address, email, phone number, order number, and specific delivery preferences is provided to PostNord, GLS, or another carrier responsible for delivering the purchased items to you.
2. When purchasing non-stock items, the mentioned information may be provided to the manufacturer or seller of the item in question, who will then handle the delivery.
3. Information may be disclosed to external partners who process the information on our behalf. We use external partners for technical operation and improvement of the Webshop, sending newsletters, targeted marketing, including retargeting, and for your assessment of our company and products. For example, information about your name and email may be provided to TrustPilot so that an invitation to rate us on TrustPilot's website can be sent on our behalf. If you choose to provide a review, TrustPilot becomes the data controller for the information provided.
   • These companies are data processors and operate under our instructions, processing data for which we are data controllers. Data processors may not use the information for any other purpose than fulfilling the agreement with us and are subject to confidentiality regarding this information. We have entered into written data processing agreements with all data processors processing personal data on our behalf.
   • Two of these data processors, Google Analytics by Google LLC and Facebook Inc., are established in the USA. The necessary guarantees for the transfer of information to the USA are ensured through the data processor's certification under the EU-U.S. Privacy Shield, according to Article 45 of the GDPR. The other data processors are located in Europe and also comply with applicable EU rules for personal data.

4. YOUR RIGHTS

1. In order to provide transparency about the processing of your information, we, as the data controller, must inform you about your rights.
   • Right of access: You are entitled at any time to request information about, among other things, what information we have registered about you, the purpose of the registration, the categories of personal data and recipients of information, and information about the source of the information. You have the right to receive a copy of the personal data that we process about you.
   • Right to rectification: You have the right to have incorrect personal data about yourself corrected by us.
   • Right to erasure: In certain cases, you have the right to have all or certain of your personal data deleted by us.
   • Right to restriction of processing for storage: In certain cases, you have the right to have the processing of your personal data restricted to only consist of storage.
   • Right to data portability: In certain cases, you have the right to receive personal data that you have provided to us in a structured, commonly used, and machine-readable format and have the right to transfer this data to another data controller.
   • Right to object: You have the right to object at any time to our processing of your personal data for direct marketing purposes, including the profiling carried out to target our direct marketing.
   • Right to withdraw consent: You have the right at any time to withdraw consent you have given us for a particular processing of personal data.
   • Right to lodge a complaint: You have the right at any time to lodge a complaint with the Danish Data Protection Agency about our processing of your personal data.

5. DELETION OF PERSONAL DATA

1. Information collected about your use of the Webshop according to section 2.1 is deleted at the latest when you have not used the Webshop for 3 years.
2. Information collected in connection with your registration for our newsletter will be deleted when your consent to the newsletter is withdrawn unless we have another legal basis for processing the information.
3. Information collected in connection with purchases you have made on the Webshop according to section 2.2 will in principle be deleted 3 years after the expiration of the calendar year in which you made your purchase.
4. Information collected in connection with your registration for and during your membership of our customer club according to section 2.4 will be automatically deleted under specific conditions.

6. SECURITY

1. We have implemented appropriate technical and organizational security measures to prevent personal data from being accidentally or unlawfully destroyed, lost, altered, or disclosed, and to prevent unauthorized access or misuse.
2. Only employees who have a real need to access your personal data to perform their work have access to it.

7. CONTACT INFORMATION OnlineShoppen365.dk ApS is the data controller for the personal data collected via the Webshop. If you have any questions or comments about this Privacy Policy or wish to exercise one or more of your rights, you can contact: OnlineShoppen365 ApS Møllelodden 4 2791 Dragør Phone: 60 55 11 12 Email: info@os-365.dk

8. CHANGES TO THE PRIVACY POLICY

1. If we make changes to the Privacy Policy, you will be informed of this on your next visit to the Webshop.
2. If you have signed up for our customer club, you will be informed of policy changes by sending information to your registered email address.

9. VERSIONS This is version 1 of OnlineShoppen365's privacy policy dated May 5, 2024.