Privacy Policy
Data controller
We are the data controller for the processing of the personal data we process about our customers and partners. You can find our contact information below.
Børnecyklerne.dk
CVR no.: 45 00 01 33
It is not a requirement that our company has an external DPO, but if you have questions about the processing of your personal data, you can contact us via [mailadresse].
Processing activities
As the data controller under GDPR, we have the following processing activities.
Website visits
When you visit our website, we use cookies so the website can function, which you can read more about in our [cookiepolitik].
Communication with potential customers
If you have questions about our site or want to learn more about our services, you can contact us via:
- Contact form
- Phone
Through this, we will process your personal data so we can engage in a dialogue with you, for example, to answer questions about our services. We only process the information you provide us in connection with our communication.
We typically process the following common information: name, email, phone number.
Our legal basis for processing this personal data is Article 6(1)(f) of the General Data Protection Regulation.
We delete our communication with you once it is clear whether you want our services or not.
If in a special case there is a need to store your personal data for a longer period, this may be the case.
Customers
We need to communicate with our customers to ensure that the service is delivered correctly. Through this, we can process information such as name, address, services, special agreements, payment information, and similar.
The legal basis for processing this personal data is Article 6(1)(b) of the General Data Protection Regulation.
Once the service has been delivered and any outstanding issues resolved, we will immediately delete the personal data.
Newsletter
We have a newsletter that you can choose to subscribe to – and you can always unsubscribe again.
The purpose of the newsletter is to send registered recipients emails with new information from the company, which may include new content on the website, advertising our services.
We will only send you emails if you have given your active consent. This initially requires you to provide your email address, to which we then send a confirmation email so you can confirm your subscription. This way, we ensure that you have actively subscribed to the newsletter yourself, i.e., given active consent.
Our legal basis for processing your personal data (i.e., the email address) in connection with the newsletter is Article 6, paragraph 1, letter a of the General Data Protection Regulation.
We will process your personal data as long as you remain subscribed to the newsletter. Upon unsubscribing, we will also stop sending it to you. If we have not sent you a newsletter for 1 year, your consent will expire due to our inactivity.
When unsubscribing from the newsletter, we store your previously given consent for 2 years after it was last used due to limitation requirements according to the Consumer Ombudsman's spam guidelines section 11.3.
SMS
Collection and use of phone numbers When you sign up for our SMS service, we collect your phone number and securely store it in our systems (Klaviyo). We use your number solely to send you marketing messages (offers, news, promotions) as well as any service messages related to your order. Data storage and sharing Your information is treated confidentially and shared only with our trusted SMS provider (Klaviyo), with whom we have a data processing agreement. We do not share your data with other third parties without your consent. Your rights You always have the right to access, correct, and delete your information according to GDPR. You can unsubscribe from SMS marketing at any time by replying STOP to one of our messages.
Bookkeeping
We must keep all accounting documents according to the bookkeeping law. This means we store invoices and similar documents for accounting purposes. These may include common personal data such as name, address, and service description.
Our legal basis for processing personal data for bookkeeping is Article 6, paragraph 1, letter f of the General Data Protection Regulation.
We store this information for a minimum of 5 years after the current financial year has ended.
Job Applications
We gladly accept job applications to assess whether they match a hiring need in our company.
If you send your job application to us, our legal basis for processing your personal data is Article 6(1)(f) of the Data Protection Regulation.
If you have sent an unsolicited application, HR will immediately assess whether your application is relevant and then delete your information again if there is no match.
If you have submitted an application for a posted job, we will dispose of your application if you are not hired, and immediately after the right candidate has been found for the job.
If you enter a recruitment process and/or are hired for the job, we will provide you with separate information about how we process your personal data in this context.
Data Processors
Few can manage everything alone, and the same applies to us. Therefore, we have partners and use suppliers, some of whom may be data processors.
External suppliers can, for example, provide systems to organize our work, services, consulting, IT hosting, or marketing.
- [Oprems eventuelt dine databehandlere med virksomhedsnavn + formålet med behandlingen]
It is our responsibility to ensure that your personal data is processed properly. Therefore, we set high standards for our partners, and our partners must guarantee that your personal data is protected.
We therefore enter into agreements with companies (data processors) that handle personal data on our behalf to enhance the security of your personal data.
Disclosure of Personal Data
We do not disclose your personal data to third parties.
Profiling and Automated Decisions
We do not perform profiling or automated decisions.
Transfers to Third Countries
As a rule, we use data processors within the EU/EEA or who store data within the EU/EEA.
In some cases, this is not possible, and data processors outside the EU/EEA may be used if they can provide appropriate protection for your personal data.
Processing Security
We keep the processing of personal data secure by having implemented appropriate technical and organizational measures.
We have conducted risk assessments of our processing of personal data and have subsequently implemented appropriate technical and organizational measures to enhance processing security.
One of our most important measures is to keep our employees updated on GDPR through ongoing awareness training, GDPR courses, and by reviewing our GDPR procedures with the employees.
The rights of data subjects
Under the data protection regulation, you have a number of rights regarding our processing of information about you.
If you want to exercise your rights, you should contact us so we can assist you with this.
Right to access information (right of access)
You have the right to access the information we process about you, as well as a number of additional details.
Right to rectification (correction)
You have the right to have incorrect information about yourself corrected.
Right to deletion
In special cases, you have the right to have information about you deleted before the time of our regular general deletion occurs.
Right to restriction of processing
In certain cases, you have the right to restrict the processing of your personal data. If you have the right to restrict processing, we may only process the data going forward – except for storage – with your consent, or for the purpose of establishing, exercising, or defending legal claims, or to protect a person or important public interests.
Right to object
In certain cases, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your data for direct marketing.
Right to data portability
In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, as well as to have this personal data transferred from one data controller to another without hindrance.
You can read more about your rights in the Data Protection Agency's guide on the rights of data subjects, which you can find at www.datatilsynet.dk.
Withdrawal of consent
When our processing of your personal data is based on your consent, you have the right to withdraw your consent.
Complaint to the Data Protection Agency
You have the right to file a complaint with the Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the contact details of the Data Protection Agency at www.datatilsynet.dk.
We generally encourage you to read more about GDPR so that you are up to date on the regulations.