Privacy
On this page, we have described the various aspects related to the use of data and how we protect it. The reason it can be so complex to understand is that it originates from EU regulations, also known as GDPR. This means, in general, that we are committed to protecting the privacy and personal data of all our members.
-
General 1.1 This policy on the processing of personal data ("Privacy Policy") describes how BullerBox ApS ("BullerBox," "us," "our," "we") collects and processes information about you.
1.2 The Privacy Policy applies to personal data that you provide to us or that we collect through BullerBox's website, BullerBox.dk ("the Website").
1.3 BullerBox is the data controller for your personal data. All inquiries to BullerBox can be made using the contact information provided under section 7.
-
What personal data do we collect, for what purposes, and the legal basis for processing 2.1 When you visit the Website, we automatically collect information about you and your use of the Website, such as the type of browser you use, the search terms you use on the Website, your IP address, including your network location, and information about your computer.
-
2.1.1 The purpose is to optimize the user experience and the Website's functionality, as well as to carry out targeted marketing, including retargeting via Facebook and Google. This processing of information is necessary for us to pursue our interests in improving the Website and showing you relevant offers.
-
2.1.2 The legal basis for processing is Article 6, paragraph 1, letter f of the EU General Data Protection Regulation (GDPR).
2.2 When you purchase a product or communicate with us on the Website, we collect the information you provide, such as name, address, email address, phone number, payment method, information about the products you purchase and may return, delivery preferences, and information about the IP address from which the order is placed.
-
2.2.1 The purpose is to deliver the products you have ordered and fulfill our agreement with you, including managing your rights to return and make claims. Information about your purchases can also be processed to comply with legal requirements, including accounting and bookkeeping. The IP address is collected with the purpose of preventing fraud.
-
2.2.2 The legal basis for processing is Article 6, paragraph 1, letters b, c, and f of the EU General Data Protection Regulation (GDPR).
2.3 When you subscribe to our newsletter, we collect your name, email address, and optionally, your mobile number.
-
2.3.1 The purpose is to pursue our interest in delivering newsletters to you.
-
2.3.1 The legal basis for processing is Article 6, paragraph 1, letter f of the EU General Data Protection Regulation (GDPR).
2.4 When you sign up for our membership, you are asked to provide information such as name, address, email address, phone number, etc. In addition to name, address, and email address, you choose which information to provide. We also collect information during your membership about your use of membership benefits and satisfaction surveys. We match this information with other information we have about you, including information about what you have purchased and may have returned.
-
2.4.1 The purpose is to administer your membership, provide you with the services associated with membership, and offer you the benefits of membership, as well as to pursue our interest in sending service emails and marketing through newsletters and targeted marketing.
-
2.4.2 The legal basis for processing is Article 6, paragraph 1, letters b and f of the EU General Data Protection Regulation (GDPR). You will be asked to give separate consent for electronic marketing during registration.
-
-
Recipients of Personal Data 3.1 Information about your name, address, email address, phone number, order number, and specific delivery preferences is disclosed to Alpi, PostNord, DAO365, or a carrier responsible for delivering the purchased items to you.
3.2 Information may be shared with external partners who process the information on our behalf. We use external partners for technical operation and improvement of the website, sending newsletters, sending surveys, analyzing website traffic, A/B testing website content, and targeted marketing, including retargeting. Your name and email are shared with TrustPilot so that, on our behalf, an invitation can be sent to review us on the TrustPilot website. If you choose to write a review, TrustPilot becomes the data controller for the information provided. These companies are data processors under our instruction and process data for which we are data controllers. Data processors may not use the information for any purpose other than fulfilling the agreement with us and are bound by confidentiality. We have entered into written data processing agreements with all data processors processing personal data on our behalf.
-
Your Rights 4.1 In order to provide transparency regarding the processing of your information, we, as the data controller, inform you of your rights.
4.2 Right of Access
-
4.2.1 You are entitled at any time to request information about, among other things, what information we have registered about you, the purpose of the registration, which categories of personal data and recipients of information there may be, and information about the origin of the information.
-
4.2.2 You have the right to receive a copy of the personal data that we process about you. If you want a copy of your personal data, you must send a written request to happy@bullerbox.dk. You may be asked to provide evidence that you are who you claim to be.
4.3 Right to Rectification
-
4.3.1 You have the right to have incorrect personal data about yourself corrected by us. If you become aware of errors in the information we have registered about you, you are encouraged to send a written request to us so that the information can be corrected.
-
4.3.2 Information that we have collected in connection with your membership can be corrected by you through login to your user profile.
4.4 Right to Erasure
-
4.4.1 In certain cases, you have the right to have all or some of your personal data deleted by us, e.g., if you withdraw your consent, and we do not have another legal basis for continuing processing. To the extent that continued processing of your information is necessary, e.g., to establish, assert, or defend legal claims, we are not required to delete your personal information.
4.5 Right to Restriction of Processing for Storage
-
4.5.1 In certain cases, you have the right to have the processing of your personal data restricted to only consist of storage, e.g., if you believe that the information we process about you is not correct.
4.6 Right to Data Portability
-
4.6.1 In certain cases, you have the right to receive personal data that you have provided to us in a structured, commonly used, and machine-readable format and have the right to transfer this information to another data controller.
4.7 Right to Object
-
4.7.1 You have the right at any time to object to our processing of your personal data for direct marketing purposes, including the profiling carried out to be able to target our direct marketing.
-
4.7.2 You also have the right at any time, for reasons related to your personal situation, to object to the processing of your personal data, which we carry out based on our legitimate interests as described in sections 2.1 and 2.3.
4.8 Right to Withdraw Consent
-
4.8.1 You have the right at any time to withdraw consent you have given us for a given processing of personal data, including profiling conducted by you as a subscriber. If you wish to withdraw your consent, please contact us at happy@bullerbox.dk.
-
4.8.2 You can withdraw consent for non-essential cookies by contacting us.
-
4.8.3 You can unsubscribe from newsletters at any time by selecting "unsubscribe" at the bottom of emails or by contacting us at happy@bullerbox.dk.
-
4.8.4 It is not possible to withdraw consent for essential service emails related to your membership with BullerBox. We use service emails to notify you of changes to your membership or inform you about your account status.
4.9 Right to Complain
-
4.9.1 You have the right at any time to lodge a complaint with the Danish Data Protection Agency, Borgergade 28, 5, 1300 Copenhagen K, regarding our processing of your personal data. Complaints can be filed by email to dt@datatilsynet.dk or by phone at +45 33 19 32 00.
-
-
Deletion of Personal Data 5.1 Information collected about your use of the Website in accordance with section 2.1 will be deleted no later than one year after you have not used the Website. 5.2 Information collected in connection with your subscription to our newsletter will be deleted when your consent to the newsletter is withdrawn, unless we have another basis for processing the information. 5.3 Information collected in connection with purchases you have made on the Website, as per section 2.2, will generally be deleted five years after the end of the calendar year in which you made your purchase. Information can be stored for a longer period if we have a legitimate need for longer retention, e.g., if it is necessary to establish, assert, or defend legal claims, or if storage is necessary for us to comply with legal requirements. Accounting material is kept for five years until the end of a financial year to comply with the Bookkeeping Act. 5.4 Information that we have collected in connection with your registration for and during your membership of our subscription as per section 2.4 will be automatically deleted: a) if you have not logged into your user profile in five years, b) if you suspend or cancel your membership of our subscription and do not reactivate it within the next five years, or c) if you unsubscribe from your membership of our subscription.
-
Security 6.1 We have implemented appropriate technical and organizational security measures to prevent personal data from being accidentally or unlawfully destroyed, lost, altered, or damaged and to prevent unauthorized access or misuse of the information. 6.2 Only employees who have a genuine need to access your personal data to perform their work have access to it.
-
Contact Information 7.1 BullerBox ApS is the data controller for the personal data collected through the Website. 7.2 If you have questions or comments about this Privacy Policy or wish to exercise one or more of your rights described in section 4, you can contact us at: BullerBox ApS H. J. Holst Vej 14B 2610 Rødovre Email: happy@bullerbox.dk
-
Changes to the Privacy Policy 8.1 If we make changes to the Privacy Policy, you will be informed of this on your next visit to the Website. 8.2 If you have subscribed to our membership/subscription, you will be informed of changes in the policy by sending information to your registered email address.
-
Versions 9.1 This is version 1.3 of the BullerBox ApS privacy policy dated 28/6/2018.
Please note that this translation may be subject to review by a legal expert to ensure full compliance with US privacy regulations.