Privacy Policy

Tuttelu's PERSONAL DATA POLICY

1. GENERAL

1.1 This policy describes how Tuttelu ApS collects and processes the personal data that you provide to us or that we collect about you via Tuttelu's website, www.tuttelu.dk 2. CONTACT INFORMATION FOR THE DATA CONTROLLER 2.1 Tuttelu ApS is the data controller for the personal data that we collect.

2.2 Tuttelu ApS has joint data responsibility with Facebook for personal data collected using Facebook's analysis tool "Facebook Insights" when you visit our Facebook page. Read more under point 3.4. 2.3 If you have questions or comments about this personal data policy, or if you wish to exercise one or more of your rights described in point 6, you can contact: Tuttelu ApS Guldbergsgade 11 – stuen, 2200 – Nørrebro Tel. no.: 28264456 E-mail: info@tuttelu.dk

  1. WHAT PERSONAL DATA DO WE COLLECT, FOR WHAT PURPOSES AND THE LEGAL BASIS FOR THE PROCESSING

3.1 When you visit the website, we collect information about your use of the website, such as what type of browser you use, what search terms you use, your IP address, including your network location, and information about the device you use to visit the website. We also collect information about which goods and services you click on and add to your basket. The information is collected, among other things, by using cookies when you consent to this via our cookie banner. 3.1.1 The purpose is 3.1.1.1 to compile statistics so that we can analyze how our customers use and navigate our website, so that we can optimize the user experience and the function of the website, 3.1.1.2 to give you suggestions for products that we think you may be interested in on our website, and 3.1.1.3 to market our products to you, including via Facebook and Google, and 3.1.1.4 to improve the security of our site. 3.1.2 The legal basis for the processing is Article 6(1)(a) of the EU General Data Protection Regulation. 3.2 When you purchase a product or communicate with us on the website, we collect the information you provide yourself, such as name, address, email address, telephone number, payment method, information about the time of purchase, which products you purchase and possibly return, delivery wishes, and information about the IP address from which the order was made. 3.2.1 The purpose is, 3.2.1.1 that we can register you as a customer and deliver the products you have ordered and otherwise fulfill our agreement with you, and 3.2.1.2 to be able to administer your rights to return and complain, 3.2.1.3 to prevent fraud, and 3.2.1.4 that we can comply with legal requirements, including for bookkeeping and accounting. 3.2.2 The legal basis for the processing is Article 6(1)(a) of the EU General Data Protection Regulation. 1, letter b (points 3.2.1.1. – 2.), letter c (point 3.2.1.4) and letter f (point 3.2.1.3.). 3.3 When you sign up for our newsletter, we collect information about your name, e-mail address, IP address and possibly mobile phone number. We also collect information about when you signed up for the newsletter, when you unsubscribed from the newsletter, as well as information about where and when you open the newsletter. 3.3.1 The purpose is 3.3.1.1 to be able to deliver newsletters to you, 3.3.1.2 to prepare statistics for use in optimizing the newsletters and for marketing our services, and 3.3.1.3 to be able to document your consent to receive the newsletter. 3.3.2 The legal basis for the processing is Article 6, paragraph 1, of the EU General Data Protection Regulation. 1, letter f. 3.4 When you visit our Facebook page, you should be aware that we use Facebook's analysis tool "Facebook Page Insights" to obtain statistics on visitors and to gain insight into user behavior on our Facebook page, including the number of likes, who likes, the number of page views and interactions with the page, the revocation of likes and the reach of posts, etc. In this connection, we and Facebook collect information as joint data controllers. When you visit our Facebook page, you will have access to information about this processing. You can get more information here https://www.facebook.com/legal/terms/information_about_page_insights_data We and Facebook have entered into an agreement on joint data controllership. You can read the agreement here: https://www.facebook.com/legal/terms/page_controller_addendum New https://www.facebook.com/legal/terms/page_controller_addendum 3.5 When you sign up for our customer club, you will be asked to provide [name, address, date of birth, email address, phone number, your date of birth, your preferences and interests, etc.] In addition to your name, email address and phone number, you choose which information you want to give us. In addition, we collect information about your use of the customer club benefits, competitions you participate in, etc. We compare this information with other information we have about you, including information about what you have purchased. 3.5.1 The purpose is 3.5.1.1 to be able to administer your membership and provide you with the services and offer you the benefits associated with membership of the customer club, 3.5.1.2 to be able to send newsletters and offer you products that we think you may be interested in. 3.5.2 The legal basis for the processing is the EU General Data Protection Regulation, Art. 6, para. 1, letter b (point 3.5.1.1.) and letter f (point 3.5.1.2). When registering, you will be asked to give separate consent to electronic marketing.

  1. LEGITIMATE INTERESTS PURSUANT TO THE PROCESSING As mentioned above, our processing of your personal data is partly based on the balancing of interests rule in Article 6(1)(f) of the General Data Protection Regulation. We have balanced our legitimate interests in marketing, improving the website, security and preventing fraud against your interests to ensure that your interests or fundamental rights or freedoms do not outweigh our interests. If you would like more information about the balancing we have made, you can contact us at the address stated under point 2.
  2. RECIPIENTS OF PERSONAL INFORMATION 5.1 Information about your name, address, e-mail, telephone number, order number and specific delivery requests will be passed on to the selected warehouse and PostNord or another carrier that will deliver the purchased goods to you. When purchasing goods that are not in our own warehouse, the aforementioned information may be passed on to the manufacturer or importer of the goods in question, who will then be responsible for the delivery. 5.2 Personal information may be passed on to public authorities if we are required to do so by law, or to the police if we suspect a crime or as part of an investigation into specific crimes. Information about a purchase, including who made the purchase and where the goods were delivered, may be passed on to the card issuer if the cardholder reports that the card has been misused in connection with the specific purchase. 5.3 Information may be passed on to external partners who process the information on our behalf. We use external partners for, among other things, hosting, technical operation and improvements of the website, sending newsletters and targeted marketing, including retargeting, as well as for your assessment of our company and products. These companies are data processors and, under our instructions, process data for which we are the data controller. The data processors may not use the information for any purpose other than fulfilling the agreement with us, and are subject to confidentiality of this. 5.4 Two of these data processors, Google Analytics v/Google LLC. and Facebook Inc. are established in the USA. The necessary guarantees for the transfer of information to the USA are ensured through the data processor's certification under the EU-US Privacy Shield, cf. Art. 45. 5.4.1 copy of Google LLC's certification can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI 5.4.2 copy of Facebook Inc.'s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active .

 

  1. YOUR RIGHTS 6.1 In order to create transparency regarding the processing of your information, we, as the data controller, must inform you of your rights. If you wish to exercise your rights, you can contact us. You will find our contact details under point 2. 6.2 Right of access 6.2.1 You have the right to be informed, among other things, of what information we have registered about you, what purpose the registration serves, what categories of personal data and recipients of information there may be, as well as information about where the information originates. You also have the right to receive a copy of this information. 6.3 Right to rectification 6.3.1 You have the right to have incorrect personal information about yourself corrected. 6.3.2 You have the opportunity to correct information that we have collected in connection with your registration for our customer club by logging in to your user profile. 6.4 Right to erasure 6.4.1 In certain cases, you have the right to have all or some of your personal data erased by us, for example if you withdraw your consent and we have no other legal basis for continuing the processing. To the extent that continued processing of your data is necessary, for example for us to comply with our legal obligations or for the establishment, exercise or defence of legal claims, we are not obliged to erase your personal data. 6.5 Right to restriction of processing to storage 6.5.1 In certain cases, you have the right to restrict the processing of your personal data to storage only. In such cases, we may only process the data with your consent or for the establishment, exercise or defence of legal claims. 6.6 The right to data portability 6.6.1 In certain cases, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit this information to another data controller. 6.7 The right to object 6.7.1 You have the right to object at any time to our processing of your personal data for direct marketing purposes, including profiling that may be carried out in order to target our direct marketing. You also have the right at any time, on grounds relating to your personal situation, to object to the processing of your personal data that we carry out on the basis of our legitimate interests, as mentioned in points 3 and 4. 6.8 The right to withdraw consent 6.8.1 You have the right to withdraw consent that you have given us for a given processing of personal data at any time. 6.9 The right to complain 6.9.1 You have the right to file a complaint with the Danish Data Protection Authority at any time if you are dissatisfied with the way we process your personal data. You will find a complaint form and contact information at www.datatilsynet.dk

 

  1. DELETION OF PERSONAL DATA 7.1 Information collected about your use of the Website, cf. section 3.1. is deleted when the cookie expires. See our cookie declaration. (link) 7.2 Information collected in connection with your registration for our newsletter, cf. section 3.3., is deleted when your consent to the newsletter is withdrawn, unless we have another basis for processing the information. However, we may store documentation of your consent for 2 years after we last sent you electronic marketing. 7.3 Information collected in connection with purchases you have made on the Website, cf. section 3.2, will generally be deleted 2 years after the end of the calendar year in which you made your purchase. However, information may be stored for a longer period of time if we have a legitimate need for longer storage, e.g. if it is necessary for legal claims to be established, asserted or defended, or if storage is necessary for us to comply with legal requirements. Accounting material is stored for 5 years until the end of a financial year to meet the requirements of the Accounting Act. 7.4 Information that we have collected in connection with your registration for and during your membership of our customer club, cf. clause 3.5, we will automatically delete if you have not logged into your user profile for 3 years, or if you unsubscribe from your membership of our customer club.
  2. SECURITY 8.1 We have implemented appropriate technical and organizational security measures to protect personal data against accidental or unlawful destruction, loss, alteration or deterioration, and against unauthorized access or misuse. 8.2 Only employees who have a real need to access your personal data to perform their work have access to this

9. CHANGES TO THE PERSONAL DATA POLICY 9.1 If we make changes to the Personal Data Policy, you will be informed of this on your next visit to the Website. 9.2 If you have registered for our customer club, you will be informed of the changes to the policy by sending information to your registered email address.

  1. VERSIONS 10.1 This is version 1 of Tuttelu's privacy policy dated 12.11/2024