We act as data controller of the personal data, you provide us with. If you wish to contact us, please feel free to do so at:
Registration no. 40546472
2: What personal data do we collect and what do we use it for?
When you visit the Website or purchase products from us, we gather personal data pertaining to you. We do so in order to
- Deliver our products to you and thus fulfil the agreement entered into with you,
- Comply with applicable legislation,
- Process requests made by you via the Website and
- Improve our products and services.
We may thus collect and process the following personal data pertaining to you:
When you purchase products from us, we will gather and process contact information pertaining to you, in order to allow us to deliver and invoice the products in question. We do not gather or process your credit card or account information. All processing of these personal data will be carried out separately by DIBS and NETS.
If you purchase headshots or the like, we will process personal data pertaining to you in the form of your image.
3: For how long do we process your personal data?
We may process your personal data as long as we have a reasoned purpose for doing so. The processing period will thus depend on the character of the personal data in question and the purpose of processing. Your personal data will nonetheless be deleted no later than 1 year after your purchase or visit to the Website.
We do however process personal data used for bookkeeping purposes for a period of 5 years after the issuance of the invoice in question, which we are legally obligated to. Upon the expiry of the 5-year period, this personal data will be deleted as well.
We may also need to process personal data in the form of your headshot during a longer period than the 1-year period stated above. We thus reserve the right to process such personal data for as long as this in necessary for us in order to enforce our intellectual property rights pertaining to such photographs.
4: Whom do we share your personal data with?
We may, if necessary, share your personal data with the following categories of third party service providers such as third parties such as providers of IT-services, providers of e-mail, payment and website solutions, independent carriers, providers of hosting and back-up and other professional collaborators, that allow us to manage customer relations and the Website.
In some cases, we thus appoint sub-contractors required to deliver our services to you. If these sub-contractors process personal data on our behalf, we ensure contractual documentation in relation to any such sub-contractor to make sure that they process personal data according to our legal and regulatory obligations.
5: Where do we transfer our personal data to?
In order to make use of third party service providers as mentioned above, we may need to transfer your personal data to locations outside the jurisdiction in which you provide it.
In any such cases, we will make sure that we have a lawful basis for the transfer in question. We will thus (i) have entered into a data sharing agreement based on the EU standard contractual clauses or (ii) ensure that the entity in question is sufficiently certified (i.e. under the EU – U.S. Privacy Shield) to ensure that we and our third party service providers comply with our legal and regulatory obligations in relation to your personal data.
6: How do we protect your personal data?
We are obligated to ensure that any personal data pertaining to you and processed by us is kept secure and confidential at all times. We have thus implemented appropriate safeguards and policies as well as technical and organizational measures in order to protect your personal data.
All of our employees with access to your personal data are obligated to keep all such personal data confidential.
7: What are your rights?
When you provide us with your personal data, you have the following rights:
Right to access: If you ask us, we will confirm whether we are processing your personal data and, if necessary, provide you with a copy of such personal data.
Right to rectification: If the personal data we process is inaccurate or incomplete, you are entitled to request to have it rectified.
Right to deletion: You may, under certain circumstances, ask us to delete or remove your personal data. Such circumstances may arise where we no longer need it or if you withdraw your consent (where applicable).
Right to restrict processing: You can, under certain circumstances, ask us to ‘block’ the processing of personal data. Such circumstances may arise where you contest the accuracy of that personal data or you object to us.
Right to data portability: You have the right, under certain circumstances, to obtain the personal data you have provided us with (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
Right to object: You may, under certain circumstances, ask us to stop processing your personal data.
Right to withdraw your consent: If we rely on your consent as our legal basis for processing your personal data, you have the right to withdraw that consent at any time.
Right to complain: If you have a concern about any aspect of our practices regarding the processing of personal data, you can report it to the relevant supervisory authority (“Datatilsynet”).
If you wish to exercise your rights, you may contact us via e-mail at firstname.lastname@example.org
Last updated September 2019.