PERSONAL DATA POLICY

1. About privacy policy
This privacy policy is intended to inform you, as a customer, about how Dan Vals A/S processes your personal information and what rights you have in relation to our collection, processing, and storage of your personal information.

2. Purpose of processing your personal information
Our overall purpose for processing your personal information is to manage your purchases with us. In addition, we aim to improve and further develop our products and provide you a better customer experience. Your personal information is thus necessary to carry out specific transactions, and, in addition, it enables us to develop and optimise our products.

3. Collection and types of personal data
When you as a customer make a purchase in our company, we register necessary personal information about you in relation to your customer relationship.

We collect your personal information in the following way and from the following sources:

• You provide your personal information to us in connection with a purchase of our products via. mail correspondence, telephone or other means of communication.
• You use social media such as Facebook and LinkedIN, where you can follow and possibly comment on our posts or use functions such as Like, Share or communicate with us.
• The personal data that we process about you in particular constitutes:
  • Identification information, including name, address, telephone number and e-mail address.
  • Information related to the transaction, including type of product purchase, means of payment, price and purchase history.

4. Legal basis for processing your personal information
Data protection is an integral part of our company, and we are responsible for the protection of your personal information when you trade with us. Our processing of your personal data always takes place in accordance with national and international rules and standards.

The processing of your personal data takes place when at least one of the following conditions applies:

• The processing is necessary for fulfillment of the purchase agreement to which you are a party and included in connection with the purchase of our products.
• You have given your voluntary, specific, informed and unambiguous consent, for example when you consent to the receipt of any newsletters.
• The processing is necessary to comply with a legal obligation for our company, for example storage of accounting material for a given period.
• The processing is necessary for a legal claim to be established, asserted or defended, for example in the event of a dispute over a given product.
• The processing is necessary for us to pursue a legitimate interest that outweighs your interests. Our legitimate interest can e.g. be targeting our offers and ads to you in order to improve your customer experience.

Recipients of your personal information
We only exchange your personal information with the recipients that are necessary in connection with your customer relationship with us. We exchange personal information with the following:

• Banks and banks when you make a purchase with us.
• Our partners and suppliers that we have approved to assist us in connection with our company.

Your personal information is not transferred to third countries, ie. countries outside the EU / EEA.

6. storage and deletion of your personal information
We only store your personal information until it is no longer necessary in relation to the purpose for which the information is processed. Your personal information will therefore be deleted in accordance with the following procedures:

• Accounting information in connection with your purchases will be stored for 5 years from the end of the financial year to which the material relates.

7. Your rights
We have taken a number of measures to protect your personal information and secure your rights. Because your personal information is processed, you can make use of the rights listed below. However, it must be emphasized that some of the rights are not absolute, but only apply in certain circumstances.

7.1 The right of access
You have the right to request access to the personal data that we process about you, and in this connection the right to information about:

• The purpose of the treatment.
• The categories of personal information.
• Recipients or categories of recipients, including recipients in any third countries and in this connection the necessary guarantees for the transfer.
• The storage period or the criteria for determining this.
• The right to rectify, delete, limit and object to the processing of your personal data.
• The right to complain to the Danish Data Protection Agency.
• Where your personal information comes from.
• The existence of automatic decisions, including profiling and in this connection minimum information about the logic here and the significance and the expected consequences thereof.

7.2 The right to rectification
You have the right to request that incorrect personal information about yourself be corrected as well as the right to request incomplete personal information to be completed.

7.3 The right to delete
You have to request that personal information about yourself be deleted, for example if the processing is based on your express consent and you withdraw the consent.

7.4 The right to restriction
You have the right to request a restriction on the processing of your personal data, for example in connection with the accuracy of the personal data being disputed.

7.5 The right to data portability
When our processing is carried out automatically, you have the right to request to receive the personal information that you have provided to us in a structured, commonly used and machine-readable format, as well as the right to request that this personal information be transmitted to another retailer.

7.6 The right to object
You have the right to object to the processing that your personal data is subject to with us, including in particular in relation to direct marketing.

If you have given consent to the processing of your personal data, you also have the right to withdraw your consent at any time. Please note that a withdrawal of your consent will not affect the processing of your personal data that took place prior to your withdrawal of consent.

8. Questions and complaints
If you have any questions regarding this Privacy Policy, or you disagree with the way we process your personal information, you can contact us at:

Dan Vals A / S
Kabdrupvej 2
6100 Haderslev
Tel. 73 57 57 57
Email: info@danvals.com
Website: www.danvals.dk
CVR No .: 33043090

You also have the opportunity to complain to the Danish Data Protection Agency, which is the authority in Denmark that supervises e.g. companies’ processing of personal data. Contact information on the Danish Data Protection Agency is available on their website: www.datatilsynet.dk .

9. Changes to the Privacy Policy
This Privacy Policy will be updated and amended at regular intervals, as well as when necessary as a result of changes in laws and practices in the field of data protection. We therefore recommend that you keep up to date.

Date of last change of privacy policy: 25 May 2018