At Sodasirupshop.dk, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy and GDPR Policy explains how we collect, use, and protect your information when you visit and interact with our Website. This policy is in accordance with the General Data Protection Regulation (GDPR) applicable in Denmark and the European Union.
2. Data Controller
The data controller responsible for your personal data is: Sodasirupshop.dk
3. Information We Collect
a. Personal Information
We collect personal information that you provide to us when you:
- Register or create an account
- Place an order
- Subscribe to our newsletter
- Contact our customer service
This information may include:
- Name
- Email address
- Postal address
- Phone number
- Payment information (processed securely by third-party payment processors)
- Any other information you choose to provide
b. Non-Personal Information
We also collect non-personal information about your interactions with our Website. This information may include:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent on the Website
- Referring website
4. Use of Your Information
We use your information for the following purposes:
- To process and fulfill your orders
- To communicate with you about your orders, account, or other customer service needs
- To send you promotional offers, newsletters, and marketing communications (you may opt-out at any time)
- To improve our Website, products, and services
- To comply with legal obligations
5. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you have given clear consent for us to process your personal data for specific purposes.
- Contract: When the processing is necessary for the performance of a contract with you or to take steps to enter into a contract.
- Legal Obligation: When the processing is necessary for compliance with a legal obligation to which we are subject.
- Legitimate Interests: When the processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by your interests or fundamental rights and freedoms.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. After that period, your personal data will be securely deleted or anonymized.
7. Sharing Your Information
We may share your personal information with:
- Third-party service providers who perform services on our behalf (e.g., payment processors, shipping companies)
- Law enforcement or other governmental authorities if required by law
- Any successor in the event of a merger, acquisition, or other business restructuring
8. Your Rights
You have the following rights regarding your personal data:
- Access: You have the right to request access to the personal data we hold about you.
- Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
- Erasure: You have the right to request deletion of your personal data under certain circumstances.
- Restriction: You have the right to request restriction of processing of your personal data.
- Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
- Objection: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
To exercise these rights, please contact us.
9. Cookies and Tracking Technologies
Our Website uses cookies and similar tracking technologies to enhance your user experience, analyze site traffic, and personalize content.
10. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
11. International Data Transfers
As Sodasirupshop.dk operates within the European Union, your personal data will be processed in accordance with the GDPR. If we transfer your data to countries outside the EU/EEA, we will ensure that appropriate safeguards are in place to protect your personal data.
12. Changes to This Policy
We may update this Privacy and GDPR Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.