Personal data policy
1. General provisions
1.1 This policy, which deals with our processing of personal data, hereafter called “Personal data policy”, describes how happii a/s collects and processes information about you.
1.2 This personal data policy only applies to private customers.
1.3 However, the personal data policy applies to business customers to the extent that we process personal data in this connection.
1.4 This personal data policy applies to all personal data that you submit to us or that we collect via our website, www.happii.dk, hereinafter referred to as the “website”.
1.5 happii a/s is the data controller for the personal data we collect about you. All inquiries to us must be made through the supplementary contact information under section 8.
2. Collection of personal data
2.1 What personal data do we collect?
2.1.1 When you visit our website, we automatically collect information about you, such as which browser you use, which search terms you use on the website, which products you click on, IP address and information about your computer.
2.1.2 When you buy a product on our website, we also register the following personal data: Name, address, e-mail address, telephone number, IP address and information about which products you buy and possibly return.
2.2 What purposes does the personal data serve?
2.2.1 The personal information under section 2.1.1 we use to improve the purchase experience and the website, to optimize conversion and to carry out targeted marketing.
2.2.2 Personal information under section 2.1.2 we use to be able to deliver purchased products to you, to be able to fulfill our complaint obligations and to be able to fulfill our accounting obligations.
2.3 What is the basis for the processing?
2.3.1 The collection of personal data, as mentioned in section 2.1.1, is necessary so that we can look after our interests in improving the website, as well as so that we can offer you relevant offers.
2.3.2 The collection of personal data, as mentioned in section 2.1.2, is necessary for us to fulfill the purchase contract entered into with you. We collect IP addresses to prevent fraud.
2.4 Where is your personal data stored?
2.4.1 Personal information is stored on our secure servers. Some personal data is passed on to third parties. Certain of these third parties are data processors who store and process personal data on happii a/s’ behalf in accordance with this data policy and in accordance with the data processing agreements entered into with the respective data processors. All personal data is stored and processed in accordance with the applicable legislation on the protection of personal data.
2.5 How is your personal data collected?
2.5.1 Personal information is primarily collected when creating customer accounts and making purchases.
2.5.2 In addition, personal data is collected on the website, among other things by means of cookies, see section 7 about this in this personal data policy.
2.5.3 happii a/s does not receive personal data about you from other companies in cases other than where this results from data portability at your request.
3. Use of data processors and data controllers
3.1 We use external companies to, among other things, assist the technical operation of the website and to carry out targeted marketing, including retargeting, evaluation of purchase processes and improvements to the website. Certain of these external companies are independent data controllers for the data that is passed on to them. The basis for this disclosure is a balance of interests between happii a/s’ interests and the user’s interests. This means that personal data will not be passed on if the customer’s interests exceed happii a/s’. In addition, happii a/s has entered into agreements on the transfer of data to external companies for the purpose of fulfilling the contract. It could, for example, be PostNord in relation to delivery and DBK in the case of a dropshipment agreement.
3.2 Other of these external companies are data processors subject to our instructions. They process data on our behalf and happii a/s is therefore responsible for ensuring that the data processors do not use data they receive from us for anything other than fulfilling the agreement concluded with us. All our data processors have entered into written data processing agreements with us, in which guidelines are laid down for what they may and may not use the transferred data for.
3.3 One of these data processors, Google Analytics v/ Google Inc, is established in the USA, and the necessary guarantees for the transfer of information to the USA are secured through the data processor’s certification under the EU-U.S. Privacy Shield. A copy of the certification can be found here.
Facebook Inc. is also located in the US and a copy of their certification can be found here.
3.4 In order to improve the purchase process, the provided e-mail address is used to send a separate e-mail with an invitation to report happii a/s and the used freight company’s purchase and delivery service.
4. Your rights
4.1 To the greatest extent possible, we want to create transparency around our processing of your personal data, and in this connection we, as the data controller, must inform you of your rights.
4.2 Documentation
4.2.1 As part of our efforts to raise the general level of data security, we require documentation before we process an inquiry in which you make use of those in section rights mentioned in 4.3-4.9.
4.2.2 When contacting happii a/s about deleting personal data, you must go through an identification process before the personal data is deleted. This means that a pdf will be sent, which you are asked to sign in person and then return either in physical form or as a scanned document.
The scanned document is sent to info@keepsmart.dk. Alternatively, a physically signed document can be sent to the address below:
KeepSmart Aps
Rye Byvej 15
4281 Gørlev
Denmark
4.2.3 If the inquiry concerns the other rights mentioned below, it will be sufficient if a request is sent from the registered e-mail address. The inquiry should be sent by e-mail to info@keepsmart.dk. If the originally associated e-mail address is no longer kept, refer to the documentation requirement in section 4.2.2.
4.3 The right of inspection
4.3.1 You are entitled at any time to request from us what personal data we have registered about you, what purpose the processing serves and which data processors we use in connection with the processing.
4.3.2 This right can be exercised by generating an automatic report. This is done by contacting happii a/s, which will send you an email with your personal information.
4.4 The right to rectification
4.4.1 You have the right to have incorrect personal data about yourself corrected by us. If you become aware that there are errors in the information we have registered about you, you are encouraged to contact us in writing so that the information can be corrected.
4.4.2 You have the opportunity to correct information we have collected in connection with your creation of a customer account by logging in to your customer account under the item “Log in”.
4.4.3 Regarding documentation, refer to section 4.2.
4.5 The right to deletion
4.5.1 In certain cases, you have the right to have your personal data deleted by us. To the extent that your information is necessary, for example to be able to comply with our accounting obligations, we are not obliged to delete your personal data. The same applies if the information is to be used to assert or defend against a legal claim.
4.5.2 If you wish to exercise your right to deletion, please send an email to info@keepsmart.dk, in which you state your customer number. If required, we may ask you to send additional information or documentation. Regarding documentation, refer to section 4.2.
4.5.3 Regarding automatic deletion, see section 5.
4.6 The right to limit processing to storage
4.6.1 In certain cases, you have the right to restrict the processing of your personal data to storage only, for example if you believe that the information we process about you is incorrect.
4.7 The right to data portability
4.7.1 You have the right to have your personal data provided in a structured, commonly used and machine-readable format and have the right to transfer this information to another data controller when we collect your personal data in connection with you purchasing a product from us .
4.7.2 Regarding documentation, refer to section 4.2.
4.8 The right to object
4.8.1 You can object at any time to our processing of your personal data, which we collect for use in improving functions on the website and its structure, if you have special reasons for doing so.
4.8.2 If we cannot demonstrate legal grounds for continuing the processing, we are no longer entitled to process your personal data.
4.8.3 Regarding documentation, refer to section 4.2.
4.9 The right to withdraw consent
4.9.1 You have the right to withdraw your consent at any time in connection with your registration for our newsletter.
4.9.2 Regarding documentation, refer to section 4.2.
4.10 The right to complain
4.10.1 You have the right to lodge a complaint at any time with the Danish Data Protection Authority, Carl Jacobsens Vej 35, 2500 Valby about our processing of your personal data.
5. Deletion of personal data
5.1 Personal information that we register about you through our website is stored as a starting point for 5 years, if there is no activity on the account. By activity is meant that a purchase is made, information changed or logged in. The customer account will thus only be deleted if the account has been inactive for 5 years.
5.2 All invoices are kept for 5 years from the end of the financial year in accordance with the Accounting Act. After 5 years, all invoices are anonymised.
5.3 All purchase information is deleted automatically
7.4 If you do not wish to allow cookies, there is a guide on how this can be done on the Danish Business Authority’s website. The procedure is different, depending on which browser you use.
1.1 This policy, which deals with our processing of personal data, hereafter called “Personal data policy”, describes how happii a/s collects and processes information about you.
1.2 This personal data policy only applies to private customers.
1.3 However, the personal data policy applies to business customers to the extent that we process personal data in this connection.
1.4 This personal data policy applies to all personal data that you submit to us or that we collect via our website, www.happii.dk, hereinafter referred to as the “website”.
1.5 happii a/s is the data controller for the personal data we collect about you. All inquiries to us must be made through the supplementary contact information under section 8.
2. Collection of personal data
2.1 What personal data do we collect?
2.1.1 When you visit our website, we automatically collect information about you, such as which browser you use, which search terms you use on the website, which products you click on, IP address and information about your computer.
2.1.2 When you buy a product on our website, we also register the following personal data: Name, address, e-mail address, telephone number, IP address and information about which products you buy and possibly return.
2.2 What purposes does the personal data serve?
2.2.1 The personal information under section 2.1.1 we use to improve the purchase experience and the website, to optimize conversion and to carry out targeted marketing.
2.2.2 Personal information under section 2.1.2 we use to be able to deliver purchased products to you, to be able to fulfill our complaint obligations and to be able to fulfill our accounting obligations.
2.3 What is the basis for the processing?
2.3.1 The collection of personal data, as mentioned in section 2.1.1, is necessary so that we can look after our interests in improving the website, as well as so that we can offer you relevant offers.
2.3.2 The collection of personal data, as mentioned in section 2.1.2, is necessary for us to fulfill the purchase contract entered into with you. We collect IP addresses to prevent fraud.
2.4 Where is your personal data stored?
2.4.1 Personal information is stored on our secure servers. Some personal data is passed on to third parties. Certain of these third parties are data processors who store and process personal data on happii a/s’ behalf in accordance with this data policy and in accordance with the data processing agreements entered into with the respective data processors. All personal data is stored and processed in accordance with the applicable legislation on the protection of personal data.
2.5 How is your personal data collected?
2.5.1 Personal information is primarily collected when creating customer accounts and making purchases.
2.5.2 In addition, personal data is collected on the website, among other things by means of cookies, see section 7 about this in this personal data policy.
2.5.3 happii a/s does not receive personal data about you from other companies in cases other than where this results from data portability at your request.
3. Use of data processors and data controllers
3.1 We use external companies to, among other things, assist the technical operation of the website and to carry out targeted marketing, including retargeting, evaluation of purchase processes and improvements to the website. Certain of these external companies are independent data controllers for the data that is passed on to them. The basis for this disclosure is a balance of interests between happii a/s’ interests and the user’s interests. This means that personal data will not be passed on if the customer’s interests exceed happii a/s’. In addition, happii a/s has entered into agreements on the transfer of data to external companies for the purpose of fulfilling the contract. It could, for example, be PostNord in relation to delivery and DBK in the case of a dropshipment agreement.
3.2 Other of these external companies are data processors subject to our instructions. They process data on our behalf and happii a/s is therefore responsible for ensuring that the data processors do not use data they receive from us for anything other than fulfilling the agreement concluded with us. All our data processors have entered into written data processing agreements with us, in which guidelines are laid down for what they may and may not use the transferred data for.
3.3 One of these data processors, Google Analytics v/ Google Inc, is established in the USA, and the necessary guarantees for the transfer of information to the USA are secured through the data processor’s certification under the EU-U.S. Privacy Shield. A copy of the certification can be found here.
Facebook Inc. is also located in the US and a copy of their certification can be found here.
3.4 In order to improve the purchase process, the provided e-mail address is used to send a separate e-mail with an invitation to report happii a/s and the used freight company’s purchase and delivery service.
4. Your rights
4.1 To the greatest extent possible, we want to create transparency around our processing of your personal data, and in this connection we, as the data controller, must inform you of your rights.
4.2 Documentation
4.2.1 As part of our efforts to raise the general level of data security, we require documentation before we process an inquiry in which you make use of those in section rights mentioned in 4.3-4.9.
4.2.2 When contacting happii a/s about deleting personal data, you must go through an identification process before the personal data is deleted. This means that a pdf will be sent, which you are asked to sign in person and then return either in physical form or as a scanned document.
The scanned document is sent to info@keepsmart.dk. Alternatively, a physically signed document can be sent to the address below:
KeepSmart Aps
Rye Byvej 15
4281 Gørlev
Denmark
4.2.3 If the inquiry concerns the other rights mentioned below, it will be sufficient if a request is sent from the registered e-mail address. The inquiry should be sent by e-mail to info@keepsmart.dk. If the originally associated e-mail address is no longer kept, refer to the documentation requirement in section 4.2.2.
4.3 The right of inspection
4.3.1 You are entitled at any time to request from us what personal data we have registered about you, what purpose the processing serves and which data processors we use in connection with the processing.
4.3.2 This right can be exercised by generating an automatic report. This is done by contacting happii a/s, which will send you an email with your personal information.
4.4 The right to rectification
4.4.1 You have the right to have incorrect personal data about yourself corrected by us. If you become aware that there are errors in the information we have registered about you, you are encouraged to contact us in writing so that the information can be corrected.
4.4.2 You have the opportunity to correct information we have collected in connection with your creation of a customer account by logging in to your customer account under the item “Log in”.
4.4.3 Regarding documentation, refer to section 4.2.
4.5 The right to deletion
4.5.1 In certain cases, you have the right to have your personal data deleted by us. To the extent that your information is necessary, for example to be able to comply with our accounting obligations, we are not obliged to delete your personal data. The same applies if the information is to be used to assert or defend against a legal claim.
4.5.2 If you wish to exercise your right to deletion, please send an email to info@keepsmart.dk, in which you state your customer number. If required, we may ask you to send additional information or documentation. Regarding documentation, refer to section 4.2.
4.5.3 Regarding automatic deletion, see section 5.
4.6 The right to limit processing to storage
4.6.1 In certain cases, you have the right to restrict the processing of your personal data to storage only, for example if you believe that the information we process about you is incorrect.
4.7 The right to data portability
4.7.1 You have the right to have your personal data provided in a structured, commonly used and machine-readable format and have the right to transfer this information to another data controller when we collect your personal data in connection with you purchasing a product from us .
4.7.2 Regarding documentation, refer to section 4.2.
4.8 The right to object
4.8.1 You can object at any time to our processing of your personal data, which we collect for use in improving functions on the website and its structure, if you have special reasons for doing so.
4.8.2 If we cannot demonstrate legal grounds for continuing the processing, we are no longer entitled to process your personal data.
4.8.3 Regarding documentation, refer to section 4.2.
4.9 The right to withdraw consent
4.9.1 You have the right to withdraw your consent at any time in connection with your registration for our newsletter.
4.9.2 Regarding documentation, refer to section 4.2.
4.10 The right to complain
4.10.1 You have the right to lodge a complaint at any time with the Danish Data Protection Authority, Carl Jacobsens Vej 35, 2500 Valby about our processing of your personal data.
5. Deletion of personal data
5.1 Personal information that we register about you through our website is stored as a starting point for 5 years, if there is no activity on the account. By activity is meant that a purchase is made, information changed or logged in. The customer account will thus only be deleted if the account has been inactive for 5 years.
5.2 All invoices are kept for 5 years from the end of the financial year in accordance with the Accounting Act. After 5 years, all invoices are anonymised.
5.3 All purchase information is deleted automatically
7.4 If you do not wish to allow cookies, there is a guide on how this can be done on the Danish Business Authority’s website. The procedure is different, depending on which browser you use.
8. Contact information
8.1 happii a/s is the data controller for the personal data collected via the website.
8.2 If you have questions or comments about this Personal Data Policy, you can contact:
KeepSmart Aps
Rye Byvej 15
4281 Gørlev
Denmark
info@keepsmart.dk
9. Changes in the personal data policy
9.1 We are entitled to make changes to this personal data policy at any time. It will always appear in point 10 when the personal data policy was last updated.
9.2 If you cannot accept the changed policy, you will not be able to continue using the website.
10. Versions
10.1 This personal data policy was last updated September 2020.