What is personal data and personal data processing?
Personal data is all information that directly, or indirectly together with other information, can be connected to an existing individual. This means that information like names, contact information, IP addresses, decisions, behaviours and contest entries constitute personal data. Processing of personal data includes every action that ARNE & CARLOS takes with respect to the personal data. Every action undertaken with personal data constitutes personal data processing, both when the processing is done automatically and manually. Examples of personal data processing are collection, registration, organization, structuring, storing, altering, producing, reading, using, transmitting, other types of distribution, adjusting or combining, limiting, deletion or destruction of data.
ARNE & CARLOS’ responsibility for your personal data:
How we use your personal data:
ARNE & CARLOS processes your personal data for the following objects and purposes: – Payment of purchases through the web shop. – Sending out newsletters that you have voluntarily signed up for. – Analysis of customer groups’ purchase patterns to enable us to provide our customers with marketing campaigns that are relevant to them; – Tests and improvements to our systems and improvements to our web shop to ensure the best customer experience. The personal data is processed only during the time necessary to achieve the purposes of the processing or to fulfil ARNE & CARLOS’ legal obligations.
Legal grounds and legitimate interests for personal data processing:
ARNE & CARLOS always treats your personal data in accordance with applicable legislation. We process your personal data when necessary in order for us to fulfil e.g. the agreement we enter into when you, as a customer, makes a purchase from us. When we process your personal data in the aforementioned situations, the legal ground for personal data processing constitutes a legitimate interest, i.e. our ability to fulfil our obligations pursuant to our agreement. If ARNE & CARLOS would like to process your personal information for purposes that, according to applicable legislation, require your explicit consent, we will obtain such consent in advance. Such processing includes e.g. obtaining and using your e-mail address for marketing purposes. When your explicit consent is requested for data processing you have, at all times, the option to decline such data processing, in which case we will not process your personal data for the purpose requested.
How we store your personal data:
The personal data that we collect is stored within the EU/EEA by us and by engaged data processors, such as our suppliers of IT services, and will not be transferred to or processed in any country outside of the EU/EEA. ARNE & CARLOS is responsible for having technical solutions that ensure that personal data is processed in a secure way.
This is the personal data that we collect:
We collect personal data that you provide to us when you make orders through the web shop or when you voluntarily sign up for the newsletter through our website. When you make an order through our web shop, we collect your: – national identification number – name – address – e-mail address – phone number – bank account information. When signing up for our newsletter, only your e-mail address is collected. We also collect e-mail addresses during events where ARNE & CARLOS participate, and in such case, your e-mail address will be registered via our website. This processing of personal data is voluntary and you always have the right to deny your consent to such processing.
You have, in accordance with applicable legislation, the following rights: 1. Right to access your personal data You have the right to, at any time, access your personal data that is being processed by us. 2 Right to get your personal data corrected You have the right to get personal data that is incorrect, incomplete or misleading corrected without undue delay. 3. Right to be forgotten You have the right to get your personal data that we are processing erased (the right to be forgotten) if: (i) the personal data is processed with your consent as the basis; or (ii) if the personal data is no longer necessary for the fulfillment of our agreement. 4. Right to restriction of processing personal data You have the right to have the processing of your personal data restricted according to your requests if: (i) the personal data is processed with your consent as legal ground; (ii) the restriction can be made without affecting the fulfillment of our agreement; or (iii) the data is incorrect. 5. Right to data portability. You have the right to data portability, which means that you can request that your personal data be transferred to another data controller, when this is technically possible. 6. Right to object to how your personal data is processed You have the right to object to how your personal data is processed if the legal ground for the personal data processing is your consent (e.g. when we have obtained your e-mail address with your consent). Besides these rights you have the right to, at any time, file a complaint to the relevant supervisory authority if you think your personal data is being processed in violation with applicable legislation. You always have the right to withdraw the consent to personal data processing that you have given. Please use the contact information set out below if you wish to withdraw your consent.
How your personal data is protected:
ARNE & CARLOS takes appropriate technical and organizational measures to protect the personal data that is processed and guarantees that your personal data is processed in a secure and correct way. To make purchases through the web shop as secure as possible ARNE & CARLOS cooperates with Stripe for card payments. No card information, such as card numbers or CVC codes, is saved in our systems.
Processing of personal data regarding Children:
ARNE & CARLOS does not target children and thus does not consciously collect personal data regarding children. If you are a guardian to a child under the age of 16 years and become aware that your child has provided us with personal data, we kindly ask you to contact us (see contact information below) to exercise your rights regarding e.g. correction or deletion of personal data.
Third party API services: