Personal data

Privacy Policy

How we process and protect your personal data.

Data Controller

ChantyBikes.us is the data controller responsible for processing the personal data we collect about our customers, website visitors, and business partners.

ChantyBikes.us

Ejby Kirkevej 30

5220 Odense

Denmark

CVR No.: 45 00 01 33

Our company is not required to appoint a Data Protection Officer (DPO). If you have any questions regarding the processing of your personal data, you can contact us at:

Email: support@chantybikes.com

Processing Activities

As the data controller under the General Data Protection Regulation (GDPR), we process personal data in the following situations.

Website Visits

When you visit our website, we use cookies to ensure the website functions properly and to improve your browsing experience. You can read more about this in our Cookie Policy.

Communication with Potential Customers

If you contact us to learn more about our products or services, you may reach us through:

Contact Form
Email
Phone

We process your personal data so we can communicate with you and respond to your inquiries.

The personal information we typically process includes:

Name
Email address
Phone number

The legal basis for this processing is Article 6(1)(f) of the General Data Protection Regulation (GDPR), based on our legitimate interest in communicating with potential customers.

We delete our communication once it is clear that you do not wish to use our services unless legal obligations require us to retain it longer.

Customers

To fulfill our agreement with you and deliver our products or services, we process personal information such as:

Name
Address
Ordered products or services
Special agreements
Payment information
Other information necessary to complete your order

The legal basis for processing this information is Article 6(1)(b) GDPR, which allows processing necessary for the performance of a contract.

After your order has been completed and any outstanding matters have been resolved, your personal data will be deleted in accordance with applicable legal requirements.

You may voluntarily subscribe to our newsletter and unsubscribe at any time.

The newsletter may include:

Company news
Website updates
Promotions
Product launches
Special offers

We only send newsletters if you have actively given your consent.

To subscribe, you must enter your email address and confirm your subscription through a verification email.

The legal basis for processing your email address is Article 6(1)(a) GDPR (Consent).

Your personal information will be processed as long as you remain subscribed.

If you unsubscribe, we immediately stop sending newsletters.

If we have not sent you any newsletters for one year, your consent automatically expires.

To comply with Danish consumer protection regulations, documentation of your consent is stored for two years after your last interaction.

SMS Marketing

Collection and Use of Phone Numbers

If you sign up for SMS marketing, we collect your phone number and securely store it in our SMS marketing platform (Klaviyo).

Your phone number is used exclusively for:

Marketing offers
Promotions
Campaigns
Company news
Service notifications related to your orders

Data Storage and Sharing

Your information is treated confidentially and is shared only with our trusted SMS provider, Klaviyo, with whom we have a Data Processing Agreement.

We do not share your information with any other third parties without your consent.

Your Rights

You have the right to:

Access your information
Correct your information
Request deletion of your information

You may unsubscribe from SMS marketing at any time by replying STOP to any SMS message you receive from us.

Bookkeeping

Under applicable bookkeeping laws, we are required to retain accounting records.

These records may include:

Name

Address

Invoice information

Order details

Product descriptions

The legal basis for this processing is Article 6(1)(f) GDPR.

Accounting information is retained for a minimum of five years following the end of the relevant financial year.

Job Applications

We welcome job applications for available positions within our company.

If you submit a job application, your personal information will be processed under Article 6(1)(f) GDPR, based on our legitimate interest in evaluating candidates.

Unsolicited Applications

If you send an unsolicited application, we will assess whether your qualifications match our current hiring needs.

If no suitable position is available, your application and personal information will be deleted.

Applications for Advertised Positions

If you apply for a posted vacancy and are not selected, your application will be deleted once the recruitment process has been completed.

If you are hired, you will receive separate information regarding how your employee data is processed.

Data Processors

We work with trusted suppliers and partners who help us operate our business.

Some of these partners process personal data on our behalf, including providers of:

Website hosting
IT services
Marketing services
Email marketing
SMS marketing
Payment services
Customer support systems

Where required, we have entered into Data Processing Agreements (DPAs) with these providers to ensure your personal information remains protected.

Disclosure of Personal Data

We do not sell, rent, or disclose your personal information to third parties except where required by law or necessary to provide our services.

Profiling and Automated Decision-Making

We do not use profiling or automated decision-making that produces legal or similarly significant effects.

Transfers Outside the EU/EEA

Whenever possible, we use service providers that process and store personal data within the European Union (EU) or European Economic Area (EEA).

If a provider outside the EU/EEA is used, appropriate safeguards are implemented to ensure your personal information receives adequate protection in accordance with GDPR.

Data Security

We take the protection of your personal information seriously.

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, loss, misuse, or alteration.

Our security measures include regular risk assessments, employee GDPR training, internal procedures, and ongoing security improvements.

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data.

Right of Access

You have the right to request a copy of the personal information we hold about you.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information.

Right to Erasure

In certain circumstances, you may request that your personal data be deleted before our normal retention period expires.

Right to Restrict Processing

You may request that we temporarily limit how your personal data is processed in specific situations.

Right to Object

You have the right to object to our processing of your personal information where processing is based on legitimate interests.

You also have the right to object to the processing of your information for direct marketing purposes.

Right to Data Portability

Where applicable, you may request that your personal data be provided in a structured, commonly used, machine-readable format or transferred to another data controller.

More information about your GDPR rights is available from the Danish Data Protection Agency.

Withdrawal of Consent

If we process your personal information based on your consent, you have the right to withdraw that consent at any time.

Withdrawal of consent does not affect the legality of processing carried out before the consent was withdrawn.

Complaints

If you believe we have processed your personal information unlawfully, you have the right to lodge a complaint with the Danish Data Protection Agency.

You may also contact us first, and we will do our best to resolve your concerns.

For any questions regarding this Privacy Policy or the processing of your personal data, please contact: