1                          Information about the processing of personal data

Your data security is important to us, and we therefore place great emphasis on your personal data being handled in a responsible manner. Below you can read how we process personal data about you when we act as data controller. You can also read about your rights in connection with our processing.

2                          GOZZIP’s role as data controller

In connection with the operation of our business, we process a number of personal data. We do this to provide you with the best possible service. We mainly collect and process ordinary (non-sensitive) personal data.

 

If you have any questions regarding our processing of your personal data, you can contact GOZZIP here:

 

SANDGAARD A/S

CVR: 28859716

Orionvej 2D

 

 

Contact person:

Name: Anne

Phone: 20909143

Email: Anne@Sandgaard.dk

 

3                          What personal data we collect and the purpose

We process personal data about you in a number of different situations. Read more about our processing in the various situations below.

3.1                    Visitors to GOZZIP’s websites and users of GOZZIP’s online services

When you visit GOZZIP’s websites (e.g. https://gozzipwoman.dk/) or use our other online services (on, e.g., Facebook, Instagram, LinkedIn and TikTok), GOZZIP may process information about your IP address as well as information about your computer, device and browser.

 

We also process information about your visit (e.g. information about the way you access our websites, how you navigate around them, which pages you visit, content you view, your searches, advertisements you have seen, etc.). This personal data is obtained through cookies, log files and other technologies (you can read more about our use of cookies here: The cookie policy can be found on our website under privacy policy or here: https://gozzipwoman.dk/privacy-policy/).

 

We also process personal data that you provide to us in connection with your use of the website or our online services, including as well as other information you provide to us.

 

We use your personal data to make relevant products, deliveries, services and support ("Services") available to you and to improve your experience of our websites and online services as well as the Services we offer. We also use the personal data to show you content on our and other sites based on your activities and preferences, and to limit the number of times you see the same content.

 

Our basis for processing is our legitimate interests in making our website (and online services) available to you (General Data Protection Regulation Article 6(1)(f)) or your consent (General Data Protection Regulation Article 6(1)(a) and the Danish Cookie Order § 3).

 

We store personal data collected in connection with your visit to our website. We store personal data about the data subjects for up to 1 year.

3.2                    Customers of GOZZIP

When you are a customer of GOZZIP and purchase via our webshop, GOZZIP processes personal data about your name, your address, e-mail address, your purchases, payment details and other information that you provide to us.

 

We process personal data for the purpose of fulfilling the agreement with our customers, with the aim of delivering the Services, invoicing, compiling statistics, performing quality management, and maintaining our customer records, as well as providing general service, marketing, and sales to our customers.

 

Our basis for processing is the agreement with you (GDPR Article 6(1)(b)) or our legitimate interests in managing your information as a customer of ours (GDPR Article 6(1)(f)).

We store personal data about our customers. We keep purchase history for up to 5 years, in accordance with our accounting records.

3.2.1 Cancellation of order

If you request the cancellation of an order via our cancellation form, we process personal data regarding your name, e-mail address, and order number.

We process this information for the purpose of identifying your order and handling your cancellation request.

Our basis for processing is our legitimate interest in being able to handle customer inquiries and manage orders (GDPR Article 6(1)(f)) as well as, where relevant, the fulfillment of the agreement with you (GDPR Article 6(1)(b)).

The cancellation form is administered via Klaviyo, which acts as a data processor on our behalf. The information is not used for marketing purposes, and you will not be signed up for newsletters or other marketing by using the form.

We store the information until the cancellation request has been processed, after which it is deleted automatically.

3.3                    Recipients of marketing

When you receive marketing, including newsletters from GOZZIP, we process personal data regarding name, e-mail address, product interest, and telephone number. We also process information about your preferences regarding marketing or communication, your use of the marketing we send to you (including, for example, whether you have opened an e-mail from us, whether the e-mail has been read, and which links you have opened), as well as information you otherwise provide to us.

 

We process your personal data for the purpose of marketing our company and its Services, and for creating and managing you as a subscriber to marketing. We use the personal data regarding your preferences and usage to understand how our customers receive our marketing and to improve marketing towards you and our other customers in the future.

 

We only send marketing material to you via e-mail, SMS, or other electronic channels when we have obtained your consent to do so, where required by the rules of the Danish Marketing Practices Act.

 

We also use personal data about you to show you content on our and others' pages based on your activities and preferences, and to limit the number of times you see the same content, as well as to measure the effectiveness of our content and marketing. For this purpose, we may upload your e-mail address to advertising tools such as Google or Facebook with the aim of sending targeted marketing.

 

Our basis for processing is our legitimate interests in complying with your wish to receive marketing from us, which you have consented to in accordance with the Marketing Practices Act (GDPR Article 6(1)(f)).

 

We store personal data about recipients of marketing as long as the contact is active and the data subject has not withdrawn their consent. If the data subject withdraws their consent, documentation of the original consent is stored for 2 years from the date of withdrawal in accordance with the Danish Consumer Ombudsman's guidelines and requirements.

3.4                    Participants in competitions

When you participate in competitions, we process personal data regarding name, address, telephone number, e-mail address, and entry for the relevant competition.

 

We process your personal data for the purpose of administering competitions, selecting winners, etc.

 

Our basis for processing is our legitimate interests in running the competition and contacting the winner (GDPR Article 6(1)(f)).

 

We store the above information collected in connection with holding competitions. We store personal data about the data subjects for up to 20 days after the competition closing date.

3.5                    Collaborators and/or suppliers to GOZZIP

When you are a collaborator or supplier to GOZZIP or a contact person at a collaborator/supplier, we process personal data regarding name, business address, work telephone number, e-mail address, title, as well as publicly available information and other information you provide to us.

 

We process the personal data for the purpose of contract management as well as to receive goods and services from our suppliers and collaborators, and where relevant, to fulfill agreements with our customers.

 

Our basis for processing is the agreement with you (GDPR Article 6(1)(b)) or our legitimate interests in maintaining the relationship with you/the company you represent as a collaborator/supplier (GDPR Article 6(1)(f)).

 

We store the above information about collaborators and/or suppliers. We store personal data about the data subjects for 1 year after the end of the collaboration. Thereafter, the personal data is deleted.

4                          Sharing your personal data with others

GOZZIP may disclose your personal data to other suppliers and/or service providers in connection with the general operation of our business.

 

GOZZIP may furthermore disclose your personal data to a public authority in situations where we are specifically obligated to disclose your personal data in accordance with legislation and notification obligations to which we are subject.

We attempt to limit the disclosure of data in personally identifiable form and thus the disclosure of information that can be attributed to you personally.

 

GOZZIP also entrusts your personal data to data processors. Our data processors only process your personal data for our purposes and according to our instructions.

 

5                          Transfer of personal data to countries outside the EU/EEA

 

In connection with our processing of your personal data, we may transfer the information to countries outside the EU/EEA (third countries).

 

Your personal data may be transferred to countries where the European Commission has assessed that the level of data protection is on par with the protection level within the EU/EEA (safe third countries).

 

 

6                          Storage, data integrity and security

When your personal data is no longer necessary, we will ensure that it is deleted in a secure manner.

 

It is our policy to protect personal data by taking adequate technical and organizational security measures.

 

We have implemented security measures designed to ensure data protection for all the personal data we process. We regularly conduct internal follow-ups regarding the adequacy and compliance of policies and measures.

7                          Your rights

As a data subject, you have a number of rights under the General Data Protection Regulation (GDPR). If you wish to exercise your rights, please contact us.

 

You may – unconditionally and at any time – withdraw any consent. This can be done by sending an e-mail to us (see e-mail above). Withdrawal of your consent will not have any negative impact. It may, however, mean that we cannot fulfill specific requests from you in the future. Withdrawal of your consent will not affect the lawfulness of the processing based on consent before it is withdrawn. Furthermore, it will not affect any processing carried out on another lawful basis.

 

You may also – unconditionally and at any time – object to our processing when it is based on our legitimate interest.

 

Your rights also include the following:

 

·         Right of access: You have the right to gain access to the personal data that we process about you.

 

·         Right to rectification: You have the right to have incorrect personal data about yourself rectified and incomplete personal data completed.

 

·         Right to erasure (right to be forgotten): In certain cases, you have the right to have personal data about you deleted before the time at which we would normally delete your personal data.

 

·         Right to restriction of processing: You have the right to have the processing of your personal data restricted in certain cases. If you have the right to have the processing restricted, we may in the future only process the personal data – apart from storage – with your consent, or for the purpose of establishing, exercising or defending legal claims, or to protect a person or important public interests.

 

·         Right to object: In certain cases, you have the right to object to our processing of your personal data, and always if the processing is for the purpose of direct marketing.

 

·         Right to data portability: In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have these personal data transferred from one controller to another.

 

·         Right to lodge a complaint: You can at any time lodge a complaint with the Danish Data Protection Agency (Datatilsynet) regarding our processing of personal data. See more at www.datatilsynet.dk, where you can also find further information about your rights as a data subject.

8                          Updating our privacy policy