• 2.1 What personal data do we collect?

  2.1.1 When you visit our website, we automatically collect information about you, such as which browser you use, which search terms you use on the website, which items you click on, IP address and information about your computer.

  2.1.2 When you purchase a product on our website, we also record the following personal data: name, address, email address, telephone number, IP address and information about which products you purchase and, if necessary, return.

• 2.2 What are the purposes of the personal data?

  2.2.1 We use the personal data referred to in clause 2.1.1 to improve the shopping experience and the website, to optimize conversion and to carry out targeted marketing.

  2.2.2 We use personal data under clause 2.1.2 to deliver purchased products to you, to fulfil our complaint obligations and to fulfil our accounting obligations.

• 2.3 What is the basis of treatment?

  2.3.1 The collection of personal data, as referred to in clause 2.1.1, is necessary in order for us to safeguard our interests in improving the website and to offer you relevant offers.

  2.3.2 The collection of personal data, as mentioned in clause 2.1.2, is necessary in order for us to fulfill the purchase contract concluded with you. We collect IP addresses to prevent fraud.

• 2.4 Where is your personal data stored?

  2.4.1 Personal data is stored on our secure servers. Some personal data are passed on to third parties. Some of these third parties are data processors who store and process personal data on behalf of Virkplan APS in accordance with this data policy and in accordance with the data processing agreements concluded with respective data processors. All personal data is stored and processed in accordance with the applicable legislation on the protection of personal data.

• 2.5 How is your personal data collected?

  2.5.1 Personal data is collected primarily when creating customer accounts and making purchases.

  2.5.2 In addition, personal data is collected on the website, including by means of cookies, see section 7 of this privacy policy.

  2.5.3 Virkplan ApS does not receive personal data about you from other companies in cases other than where this results from data portability at your request.

• 3.1 We sometimes use external companies to assist, among other things, in the technical operation of the website, as well as to carry out targeted marketing, including retargeting, assessment of purchase progress and improvements to the website. Some of these external companies are independent controllers of the data transmitted to them. The basis for this disclosure is a balance of interests of, respectively. Virkplan APS interests and user interests. This means that personal data is not disclosed if the interests of the customer exceed those of Virkplan APs. In addition, Virkplan ApS has signed agreements on the transfer of data to external companies in order to fulfill the contract. For example, it could be GLS in relation to delivery by dropshipment agreement.
• 3.2 Other of these external companies are data processors subject to our instructions. They process data on our behalf and Virkplan ApS is therefore responsible for ensuring that the data processors do not use the data they receive from us for anything other than fulfilling the agreement concluded with us. All of our data processors have entered into written data processing agreements with us, which set out guidelines on what they may and may not use the transferred data for.
• 3.3 One of these data processors, Google Analytics v/ Google Inc, is established in the United States and the necessary guarantees for the transfer of data to the United States are ensured through the certification of the data processor under the EU-U.S. Privacy Shield. A copy of the certification can be found here. Facebook Inc. is also located in the United States, and a copy of their certification can be found here.
• 3.4 In order to improve the purchasing process, the provided e-mail address is used to send a separate e-mail with a request to notify Virkplan ApS and the shipping company's purchase and delivery service.

• 4.1 We wish to provide as much transparency as possible regarding our processing of your personal data, and in this regard we, as the data controller, must inform you of your rights.
• 4.2 Documentation

  4.2.1 As part of our efforts to increase the general level of data security, we require documentation before we process a request in which you exercise the rights set out in sections 4.3 to 4.9.

  4.2.2 When contacting Virkplan ApS about the erasure of personal data, you must go through an identification process before the personal data is deleted. This implies that a pdf will be sent which you are asked to sign in person and then return either in physical form or as a scanned document.

  The scanned document is sent to kontakt@virkplan.dk. Alternatively, a physically signed document may be forwarded to the address below:

  Virkplan ApS Yrsavej 36, 8230 Åbyhøj

  4.2.3 If the request relates to the other rights mentioned below, it will be sufficient if a request is sent from the registered email address. Enquiries should be sent by email to kontakt@virkplan.dk. If the email address originally associated with it is no longer retained, please refer to the documentation requirement in section 4.2.2.

• 4.3 Right of access

  4.3.1 You are entitled at any time to ask us what personal data we have registered about you, what purpose the processing serves and which data processors we use in connection with the processing.

  4.3.2 This right can be exercised by generating an automatic report. This is done by contacting Virkplan ApS, who will send you an email with your personal information.

• 4.4 Right to rectification

  4.4.1 You have the right to have incorrect personal data about yourself corrected by us. If you become aware that there are errors in the information we have registered about you, you are encouraged to contact us in writing so that the information can be corrected.

  4.4.2 Information that we have collected in connection with your creation of a customer account, you yourself have the opportunity to correct by logging into your customer account under the section “My profile”.

  4.4.3 For documentation, see section 4.2.

• 4.5 The right to erasure

  4.5.1 In certain cases, you have the right to have your personal data deleted by us. To the extent that your information is necessary, for example to comply with our accounting obligations, we are not obliged to delete your personal data. The same applies if the information is to be used to assert or defend against a legal claim.

  4.5.2 For documentation, see section 4.2.

  4.5.3 For automatic deletion, see section 5.

• 4.6 The right to restrict processing to storage

  4.6.1 In certain cases, you have the right to restrict the processing of your personal data to storage only, for example if you believe that the information we process about you is incorrect.

• 4.7 Right to data portability

  4.7.1 You have the right to have your personal data provided in a structured, commonly used and machine-readable format and have the right to transfer this information to another data controller when we collect your personal data in connection with the purchase of a product from us.

  4.7.2 For documentation, please refer to section 4.2.

• 4.8 Right of objection

  4.8.1 You can object at any time to our processing of your personal data, which we collect for the purpose of improving the functions of the website and its construction, if you have specific reasons for doing so.

  4.8.2 If we cannot demonstrate lawful grounds for continuing the processing, we are no longer entitled to process your personal data.

  4.8.3 For documentation, please refer to section 4.2.

• 4.9 The right to withdraw consent

  4.9.1 You have the right to withdraw your consent at any time in connection with your subscription to our newsletter.

  4.9.2 For documentation, please refer to section 4.2.

• 4.10 Right to appeal

  4.10.1 You have the right at any time to lodge a complaint with the Data Inspectorate, Borgergade 28, 5, 1300 Copenhagen K about our processing of your personal data.

• 5.1 Personal data that we record about you through our website will generally be stored for 5 years, provided that there is no activity on the account. Activity means that a purchase has been made, information has been changed or logged in. The customer account will be deleted only if the account has been inactive for 5 years.
• 5.2 All invoices are kept for 5 years from the end of the financial year in accordance with the Accounting Act. After 5 years, all invoices are anonymised.
• 5.3 All purchase information will be automatically deleted after 5 years.
• 5.4 Information that we have collected in connection with your consent for us to send you newsletters will be deleted if you withdraw your consent, see section 4.8.

• 6.1 We have implemented appropriate technical and organisational safeguards against accidental or unlawful destruction, loss, alteration or deterioration of personal data and against its coming to the knowledge or misuse of personal data.
• 6.2 In connection with the implementation of the organizational security measures, we have established guidelines for which employees have access to your data, so that only those employees who are necessarily allowed to access your data have access to it.

• 7.1 Virkplan ApS uses first- and third-party cookies on the website www.verkplan.dk to improve the user experience as well as personalize content and ads. This information is shared with third parties, such as Google and Facebook, and cookies are used for anonymous tracking across websites. By using our site, you agree to the use of cookies. If you want to customize the use of cookies on our website, you can click on the “Manage cookies” button at the bottom of the page in the left corner.
• 7.2 A cookie is a small data file that allows you to store information or access information already stored on your computer from the website you visit. Cookies are used by the vast majority of websites today. Cookies help to ensure that the functions of the website work properly and they are used to be able to recognize your computer on repeat visits. No personal information is stored in our cookies and they cannot spread viruses or other harmful programs.
• 7.3 If you do not wish to allow cookies, a guide on how this can be done can be found on the Danish Business Authority's website. The procedure varies depending on the browser you are using. You can also customize the use of cookies on our website by clicking on the “Manage cookies” button at the bottom of the page in the left corner.

• 8.1 Virkplan ApS is the data controller for the personal data collected through the website
• 8.2 If you have any questions or comments regarding this Privacy Policy, you may contact:

Virkplan ApS
Yrsavej 36 pcs.
8230 Åbyhøj (+45) 24 69 67 69
kontakt@virkplan.dk
CVR No 38513583

• 9.1 We are entitled to make changes to this Privacy Policy at any time. It will always be stated in paragraph 10 when the personal data policy was last updated.
• 9.2 If you do not accept the amended policy, you will not be able to continue using the Website.

• 10.1 This Privacy Policy was last updated on March 31, 2021.