We take data protection seriously

We have adopted this privacy policy, which forms the basis for our processing of your personal data and tells you how we process your personal data.

We continuously consider how we process your data in the best possible way, with a particular focus on ensuring that your fundamental rights are not negatively affected. Therefore, we pay special attention to the risk of discrimination, ID theft, financial loss, loss of reputation and data privacy in general.

Data Controller

Autismeshoppen.dk is owned by Damsgaard Jensen Web ApS, which is the data processor and data controller.

DJW Autismeshoppen ApS
CVR: 39763338
Email: admin@autismeshoppen.dk
Phone: 52 11 10 77
Address: Samsøgade 27, 2nd, 8000 Aarhus C

Data processing is done on an informed basis

At the latest at the time of submitting your personal data, we will inform you which data we process about you and for what purpose we process it. The information will either be provided by referring to this privacy policy, where a number of common data collections and purposes are described, or in the form of a contract appendix or separate information file/brochure, where data processing takes place in connection with a contract or in person.

When you visit the website, we collect information about you via cookies and via forms on the website when you make a purchase, sign up for a newsletter or fill out a contact form. As soon as you enter the website, you will be informed about the cookies we use and given the option to opt in and out of specific categories of cookies. Upon registration or written contact via the website, you will always receive a link to this privacy policy, which gives you an overview of how your data is processed. Upon purchase, you are invited to read through our terms and conditions, which summarize this privacy policy.

Data we process about you

We collect and process data about you for the purpose of fulfilling an order or providing a service that you have ordered from us. In addition, data may be collected/processed in connection with you contacting us or us contacting you in order to provide good customer service, typically in connection with an active order or questions you have in relation to goods or various matters that have arisen for you.

Last but not least, data collected via cookies (anonymous data that we cannot read or use, but which allows the browsers you use to be “recognized” by bots) can be used to deliver personalized recommendations and advertisements on the browsers you have previously used for similar searches or purchases. We do not collect or process this data ourselves. At the same time, most of them are collected outside of our website. However, in connection with remarketing, situations may arise where you receive off-site advertising and recommendations based on your activity on one of our websites. If so, our cookie notification will explicitly state that the remarketing cookie is in use.

The situations where we collect data about you, personally or anonymously, include

• Using our website without completing a purchase
• Made one or more purchases on the website
• Purchase a subscription to products or services
• Inquiries by email, phone or regular mail
• Customer service inquiries by phone or via our website
• Competitions, events and the like.
• Newsletters
• Entering into a contract or other form of collaboration, including freelance, volunteering, one-off tasks, subscriptions, etc.

Data that may be collected and processed includes:

• Contact information e.g. name, address, phone number, email
• Order data, purchase history, payment information, subscription information
• Consent to marketing, newsletters or competitions
• Personal data, including contact information, in emails to our employees
• User behavior in connection with the use of the website collected via cookies

Purpose of processing your personal data

The collection and processing of your personal data will be based on specific stated purposes or other legitimate business purposes.

Such purposes may include:

• Processing your purchase and providing our service (GDPR Art. 6(1)(b))
• Performance of contract based on your request (GDPR Art. 6(1)(b))
• Managing your relationship with us (GDPR Art. 6(1)(a), (b) or (f))
• Operation and optimization of our websites (GDPR Art. 6(1)(b))
• Compliance with legal requirements (GDPR Art. 6(1)(c))
• Customer service and general communication with us (GDPR Art. 6(1)(a), (b), (c) or (f))
• Sending newsletters and marketing material from us or one of our business partners (GDPR Art. 6(1)(a))

Processing of relevant data only

Your personal data will be processed solely for the purposes stated at the time of collection, including, where applicable, by reference to this privacy policy and the purposes listed above. Only data that is necessary for the fulfillment of these purposes will be relevant and our processing will therefore be limited to such personal data.

Before we process your personal data, we make a concrete assessment of whether it is possible to limit the amount of personal data to be collected and processed. In addition, we also make a concrete assessment of whether it is possible to process your personal data anonymized or pseudonymized.

Klarna

Limiting the use of personal data

Our processing of your personal data will only include data that is necessary to process for the stated purpose(s) and data that is necessary for the fulfillment of legal or contractual obligations.

Continuous checking and updating

Personal data that we process about you will be checked and updated on an ongoing basis to ensure that the data collected is not inaccurate or misleading. If there are relevant changes related to the personal data we have collected about you, you can contact admin@autismeshoppen.dk to have the information changed. To ensure the quality of your data, we have adopted internal rules and established procedures for checking and updating your personal data.

Deletion of unnecessary personal data

Once the purpose of collecting and processing your personal data has been fulfilled, the data will be deleted.

On a business basis, we have determined that the following data retention periods are necessary:

1. The use of the website: When you visit the website without making a purchase or contacting us, data about you is only collected via cookies. Further down you can read more about cookies. However, it is important to emphasize that we do not combine personal data with data from cookies, which effectively means that you are anonymous on the website. We may periodically use remarketing. Remarketing data is based on recognizing your devices by sending cookies to your browsers. Such data is collected both on the website and elsewhere on the web by Google and made available to the company in the form of advertising services. Settings in your browser and add-ons can stop the collection of this type of marketing data. You can also opt out of the collection of marketing data on the website by changing the settings in the cookie notification. All data collected via cookies and stored by the company is deleted after 1 year. The 1-year period is considered reasonable and necessary for the purpose of analyzing the past year and continuously improving our services and websites.
2. Inquiries: If you contact us or our employees or are contacted by us or our employees by phone, email, letter or in person, we will only collect data that is necessary to enable us to provide a service, offer you good customer service, resolve any issues efficiently and protect both the company and you from possible fraud or other damages. Data collected under the described conditions will be divided into two categories: personal data and events. Personal data is anything that relates to your specific enquiry and means that you are associated with the enquiry. Events, on the other hand, are data that denote a specific event, such as defective goods, damage possibly caused by products or services, good reviews, requests for expanded assortment, etc. We delete personal data in this sense as soon as the inquiry has resulted in a satisfactory service, response, reaction or consideration. Events, on the other hand, are stored until the next general meeting takes place. At the general meeting, events are discussed and included in the minutes of the general meeting in the form of recommendations, resolutions or comments.
3. Purchases and subscriptions: For one-off orders, the collected information is stored in unprocessed form on the webshop, at least until the current financial year has ended and the accounts have been approved and for a further 5 years in accordance with the Accounting Act. For subscriptions, order data is continuously deleted as described for one-time orders. In return, your personal information and any payment information will be stored until you have an active subscription with us. When deleting order data and customer accounts (for subscriptions), all personal data stored on the website will be deleted. In addition to the data on the website, we store your order data as attachments and entries in our accounting software. Such data is also deleted after 5 years.
4. Competitions, newsletters, events: We store your personal data collected in connection with competitions, events and the like for as long as there is a purpose for the storage. For example, the retention period for a competition will typically be until the winner is announced and for events until they are completed. However, if, in connection with events, competitions, purchases or visits to the website, you have consented to receive our newsletter or be contacted by us in other ways and for other purposes that you have been fully informed about, we will store your data and use it for the stated purpose for the period of time you have been informed. In the absence of time-limited consent, we will follow the marketing rules and delete your data in the event that:
   1. you have been a passive recipient of the newsletter for six months
   2. you have requested deletion via the link at the bottom of the newsletter
   3. you have contacted us by phone, email, letter or in person and have expressed a wish to be removed from the list or lists on which you appear.

Other lawful basis for data collection

We only process personal data about you for pre-defined purposes. Before processing, we obtain your consent or base the processing on another lawful basis. We inform you about the basis and purpose of the collection and processing of your personal data, including, where applicable, by referring to this privacy policy, where you can find the basis for a number of different processing operations below.

Your consent is voluntary and you can withdraw it at any time by contacting us. If you have any questions or wish to withdraw your consent, please contact admin@autismeshoppen.dk

Please note that if you choose to withdraw your consent in relation to information provided to us, we will not be able to further process your information unless we are legally or contractually obliged to do so.

If you choose to withdraw your consent, it will not affect the lawfulness of our processing of your personal data based on your previously given consent and up to the time of withdrawal. Therefore, if you withdraw your consent, it will only take effect from that point in time.

Required consent

You must always give your consent in, for example, but not exclusively, the following situations:

• When creating subscriptions that require an active profile on the website
• Upon starting a session on the website, you will be asked to read and accept the privacy policy via our cookie notification
• When signing up for the newsletter
• For competitions and other marketing-related activities
• By purchasing, you agree to our terms and conditions, which contain information and rules about the collection and use of your data
• For other lawful bases, you will always be informed of the basis, purpose and data processing and asked to give your consent
• If you contact us outside of this or another website where you can read the privacy policy, you will either be referred to that privacy policy or made aware of the content in another appropriate manner, depending on the need. In the case of telephone contact on your own initiative, we will inform you of our privacy policy by referring to this privacy policy if personal data is exchanged.
• If you contact us by email or letter, you will receive a link to this privacy policy in the footer of the letter or email. If the inquiry concerns the collection of personal data, placing an order, or any other matter that may result in the exchange of personal data, you will be referred to this privacy policy via a separate email. When signing contracts, the privacy policy is included as an appendix.

Personal data protection

We protect your personal data both through instructions and measures to ensure that your personal data is not lost, altered, leaked, published without authorization, or accessed by unauthorized persons.

We have established procedures for granting access rights to our employees who process sensitive personal data and data that reveals information about personal interests and habits. We control their actual access through access restrictions, logging and auditing. To avoid data loss, we continuously back up our data sets. We also protect the confidentiality and authenticity of your data using encryption.

In the event of a security breach that results in a high risk to you of discrimination, ID theft, financial loss, loss of reputation or other significant disadvantage, we have a duty to notify the Danish Data Protection Agency and you of the security breach as soon as possible. At the same time, we need to inform about our existing security measures, how the breach happened, what we are doing to secure the data, both immediately after the breach is discovered and going forward.

Cookies

Like almost every other website, we use cookies to make the site work and to make it easier for you to use. Cookies help us, among other things, to get an overview of visits so that we can continuously optimize and target the website and our services. This allows us to provide you with a better user experience with more relevant content.

Some cookies collect the following types of information about you that may constitute personal data, depending on the circumstances: A unique ID, technical information about your computer, tablet or mobile phone, your IP number, geographical location, and which pages you click on (interests).

This collection is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR), as the collection is made in order to optimize the website for your benefit.

See also the section below on disclosure of personal data and transfer to recipients in third countries.

Here is a comprehensive list of cookies we use on the website:

Disclosure of personal data

We only disclose your personal data to public authorities where required by law.

In addition, we may disclose your personal data to the following categories of recipients:

Payment and finance software providers

In connection with your purchases, data about you and your payment method will be passed on to the relevant payment solution providers. We work with Bambora, Nets and Klarna to provide secure payment solutions on the website. Your payment card details are handled directly by Bambora and Nets without us having access to them. We do not disclose personal data to them.

In order to offer you Klarna’s payments, we need to pass on your contact and order details to Klarna so that Klarna can assess whether you qualify for their payment methods and tailor these payment methods for you. Your data is processed according to Klarna’s own privacy policy.

External IT suppliers

Our partners who take on part of the process of delivering your goods or services, such as production, quality control, transportation and delivery.

Cookie service providers for the website

We strive to minimize the use of external cookies on the website and only allow their use where it is indispensable for business purposes. You will be informed about our use of own and third-party cookies upon arrival on the site via our cookie notification, which links to this privacy policy.

Accountants, lawyers and other advisors

Disclosure of your data to the above-mentioned business partners only takes place in connection with statutory grounds, such as review of accounts, audit of the company, review or conduct of a legal case arising between you and us, etc.

Transfer to recipients in third countries, including international partners or service providers

We strive not to transfer your personal data to recipients outside the EU/EEA. However, in some cases it can happen.

Examples of this are data collected via cookies. Such data may be shared with e.g. Google and Facebook. Although data from cookies does not contain personalized information, in some cases it can be used to identify you by tech companies compiling data about your online activity.

In addition, we may transfer data to certain suppliers or subcontractors or IT services outside the EU and EEA when you shop through one of our webshops or enter into certain types of contracts with us. If you are affected by such a transfer, you will be informed of this at the latest when you place your order via our terms and conditions or when the contract is presented if the data transfer takes place in connection with the conclusion of a contract.

Your rights

Under the General Data Protection Regulation, you have a number of rights in relation to our processing of information about you.

• Right of access
  You have the right to access the data we have collected about you and to know how and why it is processed and stored.
• Right to rectification
  You have the right to have information about you that has become outdated or incorrectly registered corrected or updated.
• Right to erasure
  In special cases, you have the right to have information about you deleted before the time of our regular general deletion occurs.
• Right to restriction of processing
  In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to restrict processing, we may in future only process the data – with the exception of storage – with your consent, or for the establishment, exercise or defense of legal claims, or to protect a person or important public interests.
• Right to object
  If you believe that your rights are not respected or if you are dissatisfied with the way your data or parts of your data are used or one of the purposes for which your data are used, you have the right to object to our otherwise lawful processing of your personal data. You can also object to the processing of your data for direct marketing purposes. To make an objection, you must contact us by email admin@autismeshoppen.dk or directly one of our business partners who have, for example, used your data for direct marketing.
• Right to transmit data (data portability)
  In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one controller to another without hindrance.

You can read more about your rights in the Danish Data Protection Agency’s guide on the rights of data subjects, which you can find at www.datatilsynet.dk.

If you want to exercise your rights, please contact us here: admin@autismeshoppen.dk

Complaint to the Danish Data Protection Agency

You have the right to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal data. You can find the contact details of the Danish Data Protection Agency at www.datatilsynet.dk

Last updated 19-04-2021