Privacy and Cookie Policy

Privacy and Cookie Policy

Information on how we process your personal data, etc.

We are the data controller – how to contact us?
Ismageriet ApS is the data controller for the processing of personal data we have received about you. You can find our contact details below.

Ismageriet ApS
Flæsketorvet 45-55
1711 Copenhagen V.
CVR No.: 33048122
Phone: +4560601040
Email: Ismageriet@ismageriet.dk

General
In our privacy policy, you can read about the purposes for which we process personal data, how we protect the information we receive, and what rights you have concerning that information. We have categorized our processing activities according to the purpose of processing.

This privacy policy describes how Ismageriet ApS ("the Website", "we", "us", or "our") collects, uses, and discloses your personal data when you visit, use our services, or make a purchase at www.ismageriet.dk ("the Website") or otherwise communicate with us (collectively referred to as "the Services"). In this privacy and cookie policy, "you" and "your" refer to you as a user of the services, whether you are a customer, a visitor to the site, or another individual whose information we have collected according to this privacy and cookie policy.

Please read this privacy and cookie policy carefully. By using and accessing any of the services, you agree to the collection, use, and disclosure of your information as described below. If you do not agree to this privacy and cookie policy, you should not use or access any of the services.

Changes to this Privacy Policy
We may update this privacy and cookie policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised policy here on the website, update the "Last Updated" date, and take other steps required by applicable law.

How We Collect and Use Your Personal Information
To provide the services, we collect personal information about you from a variety of sources, as described below. The information we collect and use varies depending on how you interact with us. In addition to the specific uses noted below, we may use information we collect about you to communicate with you, provide the services, comply with applicable legal obligations, enforce applicable terms of service, and protect or defend the services, our rights, and the rights of our users or others.

What Personal Information We Collect
The types of personal information we obtain about you depend on how you interact with our website and use our services. When we use the term "personal information", we mean information that identifies, relates to, describes, or can be linked to you. The following sections describe the categories and specific types of personal information we collect.

Information We Collect Directly from You
Information that you submit directly to us via our services may include:

• Basic contact details including your name, address, phone number, and email.
• Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.
• Account details including your username and password.
• Shopping information including the items you view, place in your cart, or add to your wishlist.
• Customer support information, including data you choose to include in communications with us, such as when you message us.

Some features of the services require you to provide us with certain information about yourself directly. You may choose not to provide this information, but this could prevent you from using or accessing these features.

Information We Collect via Cookies
We also automatically collect certain information about your interaction with the services ("usage data"). To do this, we may use cookies, pixels, and similar technologies ("cookies"). Usage data may include information about how you access and use our website and account, including device information, browser information, information about your network connection, your IP address, and other details about your interaction with the services.

Information We Obtain from Third Parties
Finally, we may obtain information about you from third parties, including vendors and service providers that may collect information on our behalf, such as:

• Companies supporting our website and services, such as Shopify.
• Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process payments for fulfilling your orders and providing you with products or services you requested, to execute our contract with you.
• When you visit our website, open or click on emails sent by us, or interact with our services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

All information we receive from third parties will be treated according to this privacy and cookie policy. We are not responsible for the accuracy of the data provided to us by third parties, nor are we liable for any third-party policies or practices. For more information, see the section below, Third-Party Websites and Links.

Legal Basis: We process this data to: (i) manage and deliver the products/services you order, per Article 6(1)(b) of the EU General Data Protection Regulation (“GDPR”), (ii) comply with applicable laws (e.g., information on financial transactions following applicable tax and accounting regulations), per Article 6(1)(c) of the GDPR and (iii) pursue our legitimate interest in communicating with you, conducting statistical surveys, and improving our products, services, and customer experiences, as per Article 6(1)(f) of the GDPR.

How We Use Your Personal Information
Provision of Products and Services: We use your personal information to provide the services to you to fulfill our contract with you, including processing your payments, fulfilling your orders, sending account-related notifications related to your purchases, returns, exchanges, or other transactions, managing your account, arranging shipment, facilitating any returns or exchanges and enabling you to write reviews.

Marketing and Advertising: We use your personal information for marketing and promotional purposes, such as sending marketing communications, advertising, and promotional messages by email, SMS, or post and displaying advertisements for products or services. This may include using your personal information to better tailor the services and advertising on our website and other websites.

Security and Fraud Prevention: We use your personal information to detect, investigate, or take measures concerning potential fraudulent, illegal, or malicious activities. If you choose to use the services and register an account, you are responsible for keeping your account details secure. We strongly recommend you do not share your username, password, or other access details with others. If you believe your account has been compromised, please contact us immediately.

Communication With You: We use your personal information to provide you with customer support and improve our services. This is in our legitimate interest to be responsive to you, deliver efficient services, and maintain our good business relationship with you.

How We Disclose Personal Information
Under certain circumstances, we may disclose your personal information to third parties for legitimate purposes, subject to this privacy and cookie policy. Such situations may include:

• With vendors or other third parties that perform services on our behalf (e.g., IT management, payment processing, data analysis, customer support, cloud storage, fulfillment, and shipment).
• With business and marketing partners, including Shopify, to deliver services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
• When you instruct us, request our disclosure, or otherwise consent to our sharing of certain information with third parties, such as sending you products or using social media widgets or login integrations, of course, with your prior consent.
• With our affiliates or otherwise within our corporate family, in our legitimate interest in running a successful business.
• In connection with a business transaction such as a merger or bankruptcy, to comply with all applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce all applicable terms of service, and to protect or defend the services, our rights, and our users' or others' rights.

In the past 12 months, we have disclosed the following categories of personal information and sensitive personal information (marked with *) about users for the purposes specified above in "How We Collect and Use Your Personal Information" and "How We Disclose Personal Information":
Category:
• Identifiers such as basic contact details and certain order and account information
• Commercial information such as order details, shopping information, and customer support details
• Internet or other similar network activity, such as usage data

Categories of Recipients:
• Vendors and third parties that perform services on our behalf (such as internet service providers, payment processors)
• Business and marketing partners

We do not use or disclose sensitive personal information to infer characteristics about you.

User-Generated Content
The services may allow you to post product reviews and other user-generated content. If you choose to submit user-generated content to a public area of the services, this content will be public and accessible to everyone. We do not control who accesses the information you choose to make available to others and cannot ensure that parties who access such information will respect your privacy or keep it secure. We are not responsible for the confidentiality or security of information you make publicly available, nor for the accuracy, usage, or misuse of information you disclose or receive from third parties.

Third-Party Websites and Links
Our website may contain links to websites or other online platforms operated by third parties. If you follow links to websites not associated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We make no guarantees and are not responsible for the privacy or security on such websites, including the accuracy, completeness, or reliability of information found on these websites. Information you provide in public or semi-public areas, including information you share on third-party social networking platforms, may also be viewed by other users of the services and/or users of these third-party platforms without limitation as to our or a third party’s use of them. Our inclusion of such links does not imply any endorsement of the content on such platforms or their owners or operators, except as described in the services.

Children's Data
The services are not intended for use by children, and we do not knowingly collect personal information from children. If you are a parent or guardian of a child who has provided us with their personal information, you may contact us using the contact information below to request its deletion.

Security and Storage of Your Information
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security". Additionally, any information you submit to us may not be secure in transit. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on various factors, such as whether we need the information to maintain your account, to provide the services, comply with legal obligations, resolve disputes, or enforce applicable contracts and policies.

We may transfer your personal data outside of the EU and the European Economic Area. Wherever your information is transferred, we can guarantee that this is done under appropriate safeguards. We ensure an adequate level of protection in accordance with applicable data protection law. This is done, for example, by using standard contractual clauses on data protection, which are adopted by the EU pursuant to Article 46(2)(c) of the GDPR, or binding corporate rules, according to Article 46(2)(b) of the GDPR. For further information, you may contact us at ismageriet@ismageriet.dk

When you visit our stores, you are recorded by surveillance cameras.
We have surveillance cameras in all our stores that record surveillance videos 24 hours a day in the store area. This is to ensure the safety of our employees, our guests, and our business, as well as to prevent and document criminal activities. The surveillance videos are used solely for discrete checks of suspected criminal activity and will only be disclosed to relevant authorities if required in connection with a specific investigation.

Video surveillance is used to protect our employees, guests, and business, as well as to preserve and secure evidence if required, per Article 6(1)(f) of the GDPR. If a video reveals criminal acts, the processing may also occur based on the establishment and exercise of legal claims, per Article 9(2)(f).
In accordance with applicable law, surveillance videos will be stored for a maximum of 30 days, after which they will be deleted.

Cookie Policy
Like many websites, we use cookies on our website. "Cookies" are text files stored on your computer, mobile device, etc., with the purpose of recognizing it, remembering settings, performing statistics, and targeting ads. Cookies cannot contain harmful code such as viruses. No personally identifiable information is stored in a cookie, but rather information about user behavior on a website, for example, a username entered in connection with login to a special section on the website.

You can find specific information about the cookies we use when you visit our online store via Shopify at https://www.shopify.com/legal/cookies. We use cookies to operate and improve our website and our services (including remembering your actions and preferences), to conduct analysis, and better understand user interaction with the services (in our legitimate interest in managing, improving, and optimizing the services). We may also allow third parties and service providers to use cookies on our website to better tailor services, products, and advertising on our website and other websites.

Most browsers automatically accept cookies by default, but you can choose to set your browser to remove or reject cookies via your browser controls. Remove or block cookies can negatively affect your user experience and may cause some of the services, including certain features and general functionality, to malfunction or be unavailable. Additionally, blocking cookies might not entirely prevent how we share information with third parties such as our advertising partners.

Cookies for functionality, statistics, and marketing are optional and used only based on your consent, per Article 6(1)(a) of the GDPR. Necessary cookies are used to pursue our legitimate interest in operating our website and managing our cookie settings, per Article 6(1)(f) of the GDPR.

Since a cookie resides with you as a client, you can always view, modify, or delete these cookies. It is also possible to block cookies. See instructions: http://minecookies.org/cookiehandtering If you do not wish to receive cookies, in most newer browsers you can choose advanced cookie settings under internet options and add this domain to the list of websites you want to block cookies from. If you delete or block cookies, you risk that the website will not function optimally and that there is content you cannot access. We hope you will allow the cookies we set, as they help us improve the website.

Your Rights
According to the General Data Protection Regulation, you have several rights regarding our processing of information about you. If you would like to exercise your rights, please contact us.

Right to Access Information
You have the right to access the information we process about you and a range of additional information.

Right to Rectification
You have the right to have incorrect information about you corrected.

Right to Erasure
In certain circumstances, you have the right to have your data erased before the time of our usual general deletion occurs.

Right to Restrict Processing
In certain cases, you have the right to have the processing of your personal data limited. If you have the right to restrict processing, we may in the future only process the data – aside from storage – with your consent, or for the purpose of legal claims being established, exercised, or defended or for protecting a person or important societal interest.

Right to Object
In certain cases, you have the right to object to our otherwise lawful processing of your personal data.
You can also object to the processing of your data for direct marketing.

Right to Data Portability
In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have these personal data transferred from one data controller to another without hindrance.

You can read more about your rights in the Data Protection Agency's guidance on the rights of data subjects, which you can find at www.datatilsynet.dk.

Complaint to the Data Protection Agency
You have the right to file a complaint with the Data Protection Agency if you are dissatisfied with how we process your personal data. You can find the Data Protection Agency's contact information at www.datatilsynet.dk.

Contact
If you have questions about our privacy practices or this privacy and cookie policy, or if you wish to exercise any of the rights available to you, please call us at +4560601040, email us at ismageriet@ismageriet.dk, or contact us at Flæsketorvet 45-55, Copenhagen V, 1711, Denmark.

Document Information
This is version 2 of Ismageriet's personal data policy last updated 28-08-2023.