1. GENERAL INFORMATION
1.1 On May 25, 2018, the EU General Data Protection Regulation will enter into force. The General Data Protection Regulation concerns the processing and storing of personal data. Below you can read more about how Sorrymomshop.com v/ Sorry Mom Aps. collects and processes data associated with you.
2. THE KIND OF PERSONAL DATA WE COLLECT AND FOR WHAT PURPOSE AND HOW WE PROCESS YOUR PERSONAL DATA IN ACCORDANCE WITH APPLICABLE LEGISLATION
2.1 When visiting Sorrymomshop.com v/ Sorry Mom Aps, our system automatically collects information about you and your use of our website. The data registered by our system includes information about your choice of browser, the words, products and categories you’ve searched for, your IP address, your network location and information about your device, which makes it possible for us to improve your user experience and optimize the functions of Sorrymomshop.com v/ Sorry Mom Aps. This information is also used to conduct relevant marketing. The legal basis for processing your data when visiting the site can be found in the EU General Data Protection Regulation, Article 6, Paragraph. 1, Item F.
2.2 When you sign up for direct marketing from Sorrymomshop.com v/ Sorry Mom Sorry Mom Aps. such as on our Facebook page, newsletters, push notifications or the like, we will record your name, email address, and other voluntary data that you may provide when signing up. The purpose of this is to provide you with relevant marketing. The legal basis for this can be found in the EU General Data Protection Regulation, Article 6, Paragraph. 1, Item B, C and F.
2.3 When you buy a product at Sorrymomshop.com v/ Sorry Mom Aps. or communicate with us on our website, we will record all information provided by you, including your name, address, email address, phone number, method of payment, shipping method, IP address, and what products you've purchased and returned to us. This information is registered in order for us to deliver the products you've ordered and also helps us manage and comply with your rights to return and file a claim about a product. We also collect information about your website purchases in order to comply with all legal requirements regarding accounting and bookkeeping. Registering your IP address is a result of SorryMomshop.com v/ Sorry Mom Aps. wishing to prevent and prohibit fraud. The legal basis for this can be found in the EU General Data Protection Regulation, Article 6, Paragraph. 1, Item B, C and F.
3. RECIPIENTS OF PERSONAL DATA
3.1 Sorrymomshop.com v/ Sorry Mom Aps. pass on personal data such as your name, address, email address, order number, and delivery requests to DAO, PostNord, GLS, Bring or other carriers who ship and deliver the items you’ve purchased from us. If you purchase non-in stock items, your personal data may be passed onto the manufacturer so that they may send you the item. This information is exchanged between SorryMomshop.com v/ Sorry Mom Aps. and the carrier via Webshipper.
3.2 Your name and email address may become available to certain trusted external partners since we use these partners to carry out, for example, technical operations, website improvements, collection of newsletter permissions, competitions, pop ups, relevant marketing, and to review our company and products. When purchasing an items on our website, Trustpilot will send you an email inviting you to review our products and services on behalf of our company. Whether or not you want to write a review is completely optional and you can choose to use a different name. We only use your notified email address to verify that a purchase has been made at Sorrymomshop.com v/ Sorry Mom Aps. If you agree to leave a review, please be aware that the responsibility for your personal data will be transferred to Trustpilot.
We pass on data such as your name and your email address to, among others, the following external partners established within the EU:
The companies mentioned above are data processors who, according to our instructions, process the data for which we are legally responsible. All external partners that process personal data on our behalf have signed a written Data Processing Contract with our company where they are subject to strict confidentiality. Therefore, none of our external partners are allowed to under any circumstances use your personal data for any purpose other than to fulfill the contract between the two parties.
Some of our external data providers, such as Google Analytics v/ Google LLC., Facebook Inc. and Zendesk Inc. are established outside of the EU, specifically in the United States. The security of data transfer between countries within the EU and the United States is guaranteed through the data processor's certification in accordance with the EU-US Privacy Shield, cf. EU General Data Protection Regulation, Article 45.
3.2.1 A copy of Google LLC's certification can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
3.2.2 A copy of Facebook Inc.'s certification can be found here:
3.2.3 A copy of Zendesk Inc.’s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
4. YOUR RIGHTS
4.1 We must inform you about your rights in order to create the utmost openness and transparency regarding our processing of your personal data as the data controller in question.
4.2 Right to Gain Access
4.2.1 You have the right at any time request access to the data we have recorded regarding you, what purposes your data serves, what categories of personal data we have registered about you, who receives and processes this information, and from where the data about you has been collected.
4.2.2 You are entitled to receive an emailed copy of the personal data we have registered and processed about you. If you’d like to receive such a copy, please send a written request to our Customer Service at firstname.lastname@example.org. We only disclose personal data that relates directly to the email address to which the request has been made. In other words, you cannot receive information that relates to a different email address than the one you’ve used to contact us.
4.3 Right to Correct
4.3.1 You have the right to correct any incorrect personal data about yourself so that we do not use incorrect data while you're using the company services. If you find that there are errors in the information we have registered about you, please let us know by writing to our Customer Service. That way we can correct the information.
4.4 Right to Delete
4.4.1 You may, in certain cases, have the right to have all or part of your personal data deleted by us. This applies to if, for example, you revoke your consent and we have no legal basis to continue processing your data. If continued processing of your personal data is necessary in order for us to, for example, comply with our legal obligations, establish legal requirements, enforce or defend any current police investigations, we are not required to delete information registered about you. Deleting personal data can only be done retroactively. If you request to have your data deleted, please be aware that information regarding you will be re-collected if you use our company's services or services in the future.
4.5 Right to Limit Processing to Storing
4.5.1 In some cases, you have the right to limit processing of your personal data to only consist of storing it, if you think that the data we process about you is incorrect.
4.6 Right to Data Portability
4.6.1 In some cases, you have the right to obtain a copy of the personal data provided by you. This will be given to you in a machine-readable format and you also have the right to transfer personal data about yourself to another data controller.
4.7 Right to Object
4.7.1 You have the right to object to the processing of your personal data for direct marketing purposes, including the profiling, segmentation and analysis that we do to make our communication and marketing relevant to you.
4.7.2 You have the right to object to the processing of your personal data for reasons relating to your personal situation, cf. Item 2.1 and 2.3.
4.8 Right to Revoke Consent
4.8.1 You have the right to revoke your consent for direct marketing purposes, such as newsletters. If you wish to revoke your consent, please write to us at email@example.com, cf. Item 4.2.2.
4.9 Right to File a Complaint
4.9.1 You have the right to at any time file a complaint to the Danish Data Protection Agency, Borgergade 28, 5, 1300 Copenhagen K. in regards to the way our company processes your personal data. Your complaint must be submitted either by writing or by mail at firstname.lastname@example.org, or by telephone at +45 33 19 32 00.
5. DELETION OF PERSONAL DATA
5.1 Information collected about your use of Sorrymomshop.com v/ Sorry Mom Aps., your name, your address, your email address, your phone number, payment method, delivery method, IP address, what products you've purchased and returned to us, which browser you are using, what words, products, and categories you've searched for, your network location, information regarding your device, and your use of our services, such as our Facebook page, contests, newsletters, push notifications, pop ups or similar mentioned in Item 2.1, 2.2 and point 2.3, will, after a total period of 2 years, either be deleted or exclusively available in anonymous form so that the data cannot be traced back to you. However, this requires that you have not used our company's services, including visited our website, purchased on our website, participated in competitions, read or clicked on emails, ads and pop ups, etc.
5.2 The personal data collected in association with your use of SorryMomshop.com v/ Sorry Mom Aps., your name, your address, your email address, your phone number, payment method, delivery method, IP address, what products you've purchased and returned to us, which browser you are using, what words, products, and categories you've searched for, your network location, information regarding your device, and your use of our services, such as our Facebook page, contests, newsletters, push notifications, pop ups, flow mails, etc. will be deleted or anonymized when you revoke your consent. However, your information may be stored for a long time if we consider there to be a legitimate need to store them in order for legal requirements to be established, enforced or defended, or if your personal data is stored so that we may be able to comply with applicable legal requirements.
5.3 The personal data collected in association with purchases you’ve made on SorryMomshop.com v/ Sorry Mom Aps. will in principle be deleted or anonymized so that it cannot be traced back to you 3 years after the end of the calendar year you completed your purchase. However, this requires that you have not used our company's services since, including our website, purchased on our website, participated in competitions, read or clicked on mails, push notifications, ads and pop-ups, etc. However, your information may be stored for a long time if we consider there to be a legitimate need to store them in order for legal requirements to be established, enforced or defended, or if your personal data is stored so that we may be able to comply with applicable legal requirements. The company's bookkeeping records are kept for 5 years until the end of the financial year so that we are able to comply with the requirements set out in the Bookkeeping Act.
6.1 Sorrymomshop.com v/ Sorry Mom Aps. has implemented all the recommended technical and organizational security measures necessary to protect your personal data from being intentionally or unlawfully destroyed, lost, changed, misused, abused or accessed by unauthorized persons.
6.2 Only employees who have a legitimate need to access your information in order to do their jobs can access your personal data.
7. CONTACT INFORMATION
7.1 Sorrymomshop.com v/ Sorry Mom Aps. is the data collector for the personal data collected on our website.
Sorry Mom Aps.
Torvegade 17 E In