At dortehyldstrup.dk cvr.nr. 35 57 65 84 we respect our users’ right to “privacy” and comply with the new EU Data Protection Regulation, which entered into force on 25 May 2018 and the Danish Data Protection Act (Act no. 502 of 23 May 2028).

You can read about our personal data policy below.
Contents:
1. What personal information do we collect, for what purposes and the legal basis for the processing.
2. Recipients of personal data.
2.1 Within the EU / EEA
3. Your rights.
3.1 The right of access
3.2 The right to rectification
3.3 The right to delete
3.4 The right to limit the treatment to storage
3.5 The right to data portability
3.6 The right to object
3.7 The right to withdraw consent.
3.8 Right to complain.
4. Deletion of personal data.
5. Security.
6. Contact information.
7. Changes in personal data policy.
8. Versions.

1.What personal information do we collect, for what purposes and the legal basis for the processing.

When you visit Dortehyldstrup.dk, we automatically collect information about you and your use of the website, eg what type of browser you use, what search segments you use on the website, your IP address, including your network location, and information about your computer for that purpose to optimize the user experience and the function of the website, as well as carry out targeted marketing, including retargeting via Facebook and Google.
This processing of information is necessary so that we can take care of our interests in improving the website as well as show you relevant offers.

The legal basis for the processing is the EU Personal Data Regulation, Article 6 (1). 1, letter b.
When you buy a product on Dortehyldstrup.dk
we collect the information you provide yourself, e.g. name, address, e-mail address, telephone number, payment method, information about which products you buy and information about the IP address from which the order was made. This processing is for the purpose that we can deliver the products you have ordered and otherwise fulfill our agreement with you, including to be able to manage your rights to advertise and return and to be able to contact you in connection with your order. We also process information about your purchases in order to comply with legal requirements, including for bookkeeping and preparation of accounts and to carry out targeted marketing. When purchasing, the IP address is collected for the purpose of being able to prevent fraud. The legal basis for the processing is the EU Personal Data Regulation, Article 6 (1). 1, letters b, c and d.

When you sign up for our newsletter, we collect information about your name, e-mail address and telephone number for the purpose of being able to take care of our interest in being able to deliver newsletters to you. The legal basis for the processing is the EU Personal Data Regulation, Article 6 (1). 1, letter b.
When you create a user profile, you will be asked to provide e.g. name, address, e-mail address, telephone no. In addition, we collect information under your possible “membership” about your use of our website and its user benefits. We compare this information with other information we have about you, including information about what you have purchased and possibly returned. We carry out this treatment for the purpose of being able to manage your membership / your user profile and offer you any services and benefits associated with the membership / user profile, as well as to be able to take care of our interest in being able to send you newsletters and carry out targeted marketing. The legal basis for the processing is the EU Personal Data Regulation, Article 6 (1). 1, letters b and f. Upon registration, you may be asked to give separate consent to electronic marketing.

When you communicate with us, we collect the information you provide yourself, e.g. name, address, e-mail address, telephone no. as well as the content of your inquiry. This processing of information is done with the aim that we can provide the best possible customer service. The legal basis for the processing is Article 6 (1) of the EU Personal Data Regulation. 2, letters b, c and f.

2. Recipients of personal data.

2.1 Within the EU / EEA
Information about your name, address, e-mail, telephone number as well as order number and specific delivery requests will not be passed on to others.

Information may be left to external partners who process it on our behalf. We use external partners for technical operation and improvements of the website, sending out newsletters and targeted marketing – as well as for your assessment of our company, products and user experience.
These companies are data processors and under our instruction and process data for which we are data responsible. The data processors may not use the information for any purpose other than fulfilling the agreement with us, and are subject to confidentiality about this. We have entered into written data processor agreements with all data processors that process personal data on our behalf.

3. Your rights.
In order to create transparency regarding the processing of your information, we, as data controller, must inform you of your rights.
They are basically the following:

3.1 The right of access
You are at all times entitled to ask us to state, among other things, what information we have registered about you, what purpose the registration serves, what categories of personal information and recipients of information that may. may be, as well as information on where the information comes from.
You have the right to receive a copy of the personal data that we process about you. If you want a copy of your personal information, simply write to mail@dortehyldstrup.dk and document that you are who you pretend to be.

3.2 The right to rectification
You have the right to have incorrect information about yourself corrected by us. If you become aware that there are errors in the information that we have registered about you, we ask you to contact us in writing so that the information can be corrected.

You will be able to correct certain information yourself via your log in to your user profile (eg by changing address).

3.3 The right to delete
In certain cases, you have the right to have all or some of your personal information deleted by us, e.g. if you revoke your consent and we otherwise have no other legal basis to continue the storage / processing.
To the extent that continued storage / processing of your information is necessary for us to comply with our legal obligations, or for legal claims to be established, asserted or defended, we are not obliged to delete your personal information.

3.4 The right to limit processing to “storage”
In certain cases, you have the right to have the processing of your personal data limited to storage only.

3.5 The right to data portability
In certain cases, you have the right to have personal information that you have provided to us handed out in a structured, commonly used and machine-readable format and have the right to transfer this information to another data controller.

3.6 The right to object
You have the right at any time to object to our processing of your personal data, with a view to direct marketing, including the profiling carried out in order to target our direct marketing.

You also have the right at any time, for reasons relating to your personal situation, to object to the processing of your information, which we carry out on the basis of our legitimate interests, cf. above on visits to the website and registration of newsletters.

3.7 The right to withdraw consent
You have at any time the right to revoke a consent you have given us for the processing of personal data, including for profiling made by you as a member of the customer club. Consent to newsletters and recommendations can be revoked either via your user profile, at the bottom of the marketing material , you have received or by contacting us at mail@dortehyldstrup.dk

3.8 The right to complain
You have at all times the right to submit a complaint to the Danish Data Protection Agency, Borgergade 28, 5., 1300 København K about our processing of your personal data. The complaint may include submitted by email dt@datatilsynet.dk or telephone +45 33 19 32 00.

4. Deletion of personal data.
Information collected about your use of the website is anonymised when you have not used the website for 2 years.

Information collected in connection with purchases that you have made on the website will in principle be anonymised 2 years after the order has been completed or canceled, unless you are an active user. However, the information can be stored for a longer period of time if we have a legitimate need for longer storage, e.g. if it is necessary for legal claims to be established, asserted or defended, or if this retention is necessary for us to meet legal requirements. Accounting material is stored for 5 years until the end of a financial year to meet the requirements of the accounting legislation.

Information collected in connection with your subscription to our newsletter will be deleted when your consent to the newsletter is revoked. However, information can be stored longer if we have a legitimate need for longer storage, e.g. if it is necessary for legal claims to be established, asserted or defended, or if storage is necessary to meet legal requirements.

Information that we have collected in connection with your creation of a user profile will be automatically deleted if you have not used the website for 2 years.

Information collected in connection with the fact that you have communicated with us will in principle be anonymised 2 years after you have contacted us. However, information can be stored longer if we have a legitimate need for longer storage, e.g. if it is necessary for legal claims to be established, asserted or defended, or if storage is necessary to meet legal requirements.

5. Security.
We have implemented appropriate technical and organizational security measures to protect against the accidental or unlawful destruction, loss, alteration or deterioration of personal data, and against the unauthorized disclosure or misuse of unauthorized persons.
Only employees who have a real need to access your personal information in order to perform their duties are allowed to access it.

6. Contact information.
Dorte Hyldstrup is data responsible for the personal data collected via the website Dortehyldstrup.dk.
If you have any questions or comments about this Privacy Policy, or you would like to exercise one or more of your rights described above in Section 3, please contact:

Dorte Hyldstrup
Sørisvej 2 C
3650 Ølstykke
on
mail@dortehyldstrup.dk

7. Changes in personal data policy.
If we make changes to our personal data policy, you will be informed of this by sending information to that e-mail address. This will only happen if you have an active user profile or an order that has not yet been anonymised.

8. Versions.
This is version 1 of Dorte Hyldstrup´s personal data policy dated April 27, 2021