Terms of service

PRIVACY POLICY

1. GENERAL

1.1 The EU General Data Protection Regulation (GDPR) comes into effect on May 25, 2018. The GDPR concerns the processing and storage of personal data. Below, you can read about how secuyou.dk collects and processes information relating to you.

1.2 This privacy policy applies to the information you provide to us, or that we collect, when you use our services—such as our website, newsletters, competitions, automated email flows, push notifications, pop-ups, and the like.

1.3 secuyou.dk ("our", "us", or "we") is the data controller for the personal data you have provided to us. If you have questions regarding our privacy policy, please contact our customer service department in writing or by telephone. You can find our contact details in section 7.

2. WHAT PERSONAL DATA DO WE COLLECT, FOR WHAT PURPOSES, AND HOW DO WE PROCESS YOUR PERSONAL DATA IN ACCORDANCE WITH APPLICABLE LAW?

2.1 When you visit secuyou.dk, our system automatically collects information about you and your use of our website. The data recorded by the system includes information such as the browser you use, the words, products, and categories you search for, your IP address, network location, and details about your computer, mobile phone, or tablet. This enables us to improve your user experience and optimize the functions of secuyou.dk, as well as conduct relevant marketing. The legal basis for our processing of your data in connection with visits to the website can be found in Article 6(1)(f) of the EU General Data Protection Regulation (GDPR).

2.2 When you sign up for secuyou.dk’s direct marketing—such as our Facebook page, newsletter, push notifications, or similar—we record your name, email address, and any other information you voluntarily provide during sign-up. The purpose is to provide you with relevant marketing. The legal basis for this is Article 6(1)(f) of the GDPR.

2.3 When you purchase a product from secuyou.dk or communicate with us via our website, we record the information you provide—such as your name, address, email address, phone number, payment method, delivery method, and IP address, as well as details of the products you have purchased and any you have returned to us. We record this information to enable us to deliver the products you have ordered and to manage and uphold your rights regarding returns and product complaints. Information regarding your purchases via our website is also collected to enable us to comply with statutory bookkeeping and accounting requirements. We record your IP address because secuyou.dk aims to prevent and deter fraud. The legal basis for this is Article 6(1)(b), (c), and (f) of the EU General Data Protection Regulation (GDPR).

3. RECIPIENTS OF PERSONAL DATA

3.1 secuyou.dk transfers information regarding your name, address, email address, order number, and delivery preferences to DAO, GLS, or another carrier responsible for shipping and delivering the goods you have purchased from us. If you purchase products that are not in stock, your information may, in exceptional cases, be passed on to the manufacturer, who will then arrange for the shipment of the item(s) to you. This information is exchanged between secuyou.dk and the carrier via Webshipper.

3.2 As we engage external partners for tasks such as technical operations, website improvements, collecting consent for newsletter subscriptions, contest participation, pop-ups, relevant marketing, and reviews of our company and products, your name and email address may be shared with these partners. In connection with your purchase of goods on our website, Trustpilot sends an email on our company’s behalf inviting you to review our products and services. Leaving a review is entirely optional, and you may choose to use a pseudonym. We use the provided email address solely to verify that a purchase has been made at Pearlwax.dk. If you accept the invitation, please note that responsibility for your personal data in this context transfers to Trustpilot.

We transfer information regarding your name and email address to, among others, the following external partners based within the EU:

Trustpilot

The aforementioned companies act as data processors, processing—under our instructions—data for which we bear legal responsibility. All external partners processing personal data on our behalf have entered into written data processing agreements with our company, under which they are bound by strict confidentiality obligations. Consequently, none of our external partners may use your personal data for purposes other than fulfilling the agreement entered into with us.

Some of our external data processors—such as Google Analytics (Google LLC), Facebook Inc., and Zendesk Inc.—are established outside the EU, specifically in the USA. The secure transfer of data from EU countries to the USA is guaranteed through the data processor's certification under the EU-U.S. Privacy Shield, pursuant to Article 45 of the EU General Data Protection Regulation (GDPR).

3.2.1 A copy of Google LLC's certification can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

3.2.2 A copy of Facebook Inc.’s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

3.2.3 A copy of Zendesk Inc. certification can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

4. YOUR RIGHTS

4.1 To ensure maximum openness and transparency regarding our processing of your personal data, we, as the data controller, must inform you of your rights.

4.2 Right of access

4.2.1 You have the right at any time to request information regarding the data we have registered about you, the purposes for which your data is used, the categories of personal data we have registered about you, the recipients and processors of the data, and the sources from which we have collected data about you.

4.2.2 You have the right to receive, via email, a copy of the personal data we have registered and are processing about you. If you wish to receive such a copy, please send a written request to our customer service at info@secuyou.dk.
We will only send personal data directly linked to the email address used to make the request. In other words, you cannot receive information linked to an email address other than the one you are using to contact us.

4.3 Right to rectification

4.3.1 You have the right to have incorrect personal data concerning you corrected by us, ensuring that we do not use erroneous information about you when you use the company’s services. If you discover errors in the information we have recorded about you, please notify us by emailing our customer service department so that we can correct the error.

4.4 Right to erasure

4.4.1 In certain cases, you have the right to have all or part of your personal data erased by us. This applies, for example, if you withdraw your consent and we have no legal basis for continuing to process your data. If continued processing of your personal data is necessary—for instance, to comply with legal obligations or to establish, exercise, or defend legal claims in connection with a police investigation—we are not obliged to erase the information we have recorded about you. Erasure of personal data can only take effect prospectively. If you request the erasure of your data, please be aware that information about you will be collected again if you use our company’s services in the future.

4.5 Right to restrict processing to storage

4.5.1 In certain cases, you have the right to restrict the processing of your personal data to storage only, if you believe that the information we process about you is incorrect. 4.6 Right to data portability

4.6.1 In certain cases, you have the right to receive a copy of the personal data you have provided to us in a machine-readable format, and you also have the right to transfer personal data concerning you to another data controller.

4.7 Right to object

4.7.1 You have the right to object to our processing of your personal data for the purpose of direct marketing, including the profiling, segmentation, and analysis we carry out to make our communication and marketing relevant to you.

4.7.2 You have the right, on grounds relating to your particular situation, to object to our processing of your personal data based on our legitimate interests, cf. sections 2.1 and 2.3.

4.8 Right to withdraw consent

4.8.1 You have the right to withdraw your consent to direct marketing, such as newsletters. If you wish to withdraw your consent, please contact us in writing at info@secuyou.dk, cf. section 4.2.2.

4.9 Right to lodge a complaint

4.9.1 You have the right at any time to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Borgergade 28, 5, 1300 Copenhagen K, regarding our company’s processing of your personal data. Such a complaint must be submitted either in writing via email to dt@datatilsynet.dk or by telephone at +45 33 19 32 00.

5. DELETION OF PERSONAL DATA

5.1 Information collected regarding your use of secuyou.dk—including your name, address, email address, telephone number, payment method, delivery method, IP address, products purchased and potentially returned to us, the browser you use, the words, products, and categories you search for, your network location, information about your computer, mobile phone, or tablet, as well as your use of our services (such as our Facebook page, competitions, newsletters, push notifications, pop-ups, or similar, cf. sections 2.1, 2.2, and 2.3)—will, after a total period of 2 years, either be deleted or made available solely in an anonymized form so that the data cannot be traced back to you. However, this is conditional upon you not having interacted with our company’s services during this period—including visiting our website, making purchases via our website, participating in competitions, or reading or clicking on emails, advertisements, pop-ups, etc. 5.2 Personal data collected in connection with your use of secuyou.dk—such as your name, address, email address, phone number, payment method, delivery method, IP address, products purchased and potentially returned, browser used, search terms (words, products, and categories), network location, information about your computer, mobile, or tablet, and your use of our services (e.g., our Facebook page, competitions, newsletters, automated email flows, push notifications, pop-ups, etc.)—will be deleted or anonymized when your consent is withdrawn. However, your data may be retained for a longer period if we determine there is a legitimate need to store it—for instance, where necessary to establish, exercise, or defend legal claims, or if retaining your personal data is required to comply with applicable legal obligations.

5.3 Personal data collected in connection with purchases made on secuyou.dk will, as a general rule, be deleted or anonymized so that it cannot be traced back to you three years after the end of the calendar year in which the purchase was completed. This applies provided that, during this period, you have not interacted with our company’s services—such as visiting our website, making purchases, participating in competitions, or reading or clicking on emails, push notifications, advertisements, pop-ups, etc. However, the information may be retained for a longer period if we determine there is a legitimate need to store it—for instance, where necessary to establish, exercise, or defend legal claims, or if retaining your personal data is required for us to comply with applicable legal obligations. The company’s accounting records are retained for five years following the end of the financial year to ensure compliance with the requirements of the Danish Bookkeeping Act.

6. SECURITY

6.1 Secuyou.dk has implemented all recommended technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, deterioration, misuse, or unauthorized access or disclosure.

6.2 Access to your personal data is restricted to employees who have a legitimate need to access the information in order to perform their duties.

7. CONTACT INFORMATION

7.1 Secuyou.dk is the data controller for the personal data collected via our website.

7.2 If you wish to exercise one or more of your rights as described in section 4, or if you have questions or comments regarding our company’s personal data policy, you may contact:

Secuyou ApS
Diplomvej 381
2800 Lyngby
Phone no. +45 45534553

Email: info@secuyou.dk

8. CHANGES TO THE PERSONAL DATA POLICY

8.1 Should we make changes to our company’s personal data policy, you will be informed of this the next time you visit our website.

9. VERSIONS

9.1 This is version 1 of the secuyou.dk personal data policy, dated 07.02.2019.